$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12072E6C1A48AEC19505180D145D1D56D72980F3.cer File: 12072E6C1A48AEC19505180D145D1D56D72980F3.cer (raw, json) Hash identifier: oVrPAwAeCJcU3ej6FHci7d1Q5vxy5XxIfqATpKo6I64= Subject key identifier: 12:07:2E:6C:1A:48:AE:C1:95:05:18:0D:14:5D:1D:56:D7:29:80:F3 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 445B6946DBF2C4F147197B219E73C2D03419B0FF Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/084B3E1616B843A5943E3E9082A0D26AFAEBC8EF9EF20E26AAD49531C3DC9494/0/12072E6C1A48AEC19505180D145D1D56D72980F3.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/084B3E1616B843A5943E3E9082A0D26AFAEBC8EF9EF20E26AAD49531C3DC9494/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 06 May 2025 21:58:42 +0000 Certificate not after: Tue 05 May 2026 22:03:42 +0000 Subordinate resources: AS: 16701 IP: 200.1.116.0/24 IP: 201.131.79.0/24 IP: 2801:0:1b0::/44 IP: 2801:1a4::/44 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 14 May 2025 00:40:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:5b:69:46:db:f2:c4:f1:47:19:7b:21:9e:73:c2:d0:34:19:b0:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: May 6 21:58:42 2025 GMT Not After : May 5 22:03:42 2026 GMT Subject: CN=12072E6C1A48AEC19505180D145D1D56D72980F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f3:51:79:c5:25:60:dc:05:9c:96:b7:1c:da: e5:6d:ae:5a:5b:d3:dc:eb:e5:e5:0d:59:65:6b:c2: 6c:a6:a2:b7:6a:0c:46:91:fc:fd:5a:3f:bf:8f:f7: f9:df:bd:5c:52:3e:58:fe:06:47:f5:5c:57:4e:6f: 57:7e:4f:a8:cc:55:6f:ce:1e:2d:5b:19:d6:29:4b: 25:b8:da:ee:f7:e7:70:53:3c:dc:cd:03:bb:35:46: b1:30:eb:51:48:c3:00:89:3a:02:8a:73:a0:ae:65: 3d:85:9e:96:3b:c7:2a:f6:d8:d5:9f:37:3f:6f:05: f1:8c:92:a2:a3:2c:ec:d6:a6:1c:6f:62:92:70:b9: 15:79:90:2d:b7:37:a8:54:01:93:3e:ad:a7:dd:b1: 9b:38:9e:67:2b:b9:48:76:c2:8d:3b:e4:5f:7c:49: b6:fd:31:68:11:f3:d3:82:ef:5a:b1:c5:cb:d7:a7: 33:d8:c2:53:36:4f:9c:b7:eb:24:b9:b3:61:0f:fc: b1:a4:78:4f:f1:65:3a:b4:ee:5e:78:82:21:3f:16: b8:12:de:98:54:7d:33:ff:f9:98:9d:65:64:84:06: 48:50:6b:45:76:d6:c2:57:fb:38:85:b2:77:a6:16: 15:3b:f4:26:71:9b:d9:78:a8:ea:53:08:e3:2b:85: 09:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 12:07:2E:6C:1A:48:AE:C1:95:05:18:0D:14:5D:1D:56:D7:29:80:F3 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/084B3E1616B843A5943E3E9082A0D26AFAEBC8EF9EF20E26AAD49531C3DC9494/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/084B3E1616B843A5943E3E9082A0D26AFAEBC8EF9EF20E26AAD49531C3DC9494/0/12072E6C1A48AEC19505180D145D1D56D72980F3.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.1.116.0/24 201.131.79.0/24 IPv6: 2801:0:1b0::/44 2801:1a4::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 16701 Signature Algorithm: sha256WithRSAEncryption 86:28:14:9e:68:94:87:2f:99:c6:84:f1:be:0e:b0:f2:7a:8f: 25:b7:3e:0a:cf:2c:f5:99:9f:11:cd:5a:8c:94:d6:99:19:99: da:f9:2e:ff:73:24:12:2c:56:99:ab:37:be:24:66:49:aa:bd: b3:26:70:72:81:62:f7:b7:a2:95:eb:f1:d0:b6:b4:df:2b:24: 01:8b:76:b2:48:24:bc:9f:6d:64:3f:05:a7:30:80:0c:0c:8e: 3f:18:6f:f0:37:9e:0f:62:79:e4:0d:9f:67:80:8a:dd:8e:4c: 08:a5:78:97:65:e9:a0:c3:81:e8:ec:52:9c:c9:82:c1:48:08: e7:1b:54:fa:30:19:9d:e6:63:cc:63:f6:f4:15:65:9c:1c:07: 2b:85:8d:a6:bd:36:a0:33:c8:54:60:19:70:e0:4a:f4:77:69: 3f:25:e5:d5:61:37:e4:8b:f2:72:d6:65:f1:73:9e:81:73:07: e0:0e:51:30:c0:67:0c:c6:b8:57:50:92:de:4a:ea:dc:13:fd: 0d:ea:e3:f4:5d:09:18:5c:07:b7:72:87:e0:ed:62:1b:92:33: 19:9a:6d:ee:7d:03:cf:cb:39:ff:8c:10:37:fd:bc:2a:45:b8: d8:16:b3:99:2a:49:01:1c:6e:93:7a:99:16:59:86:32:b0:28: 1a:e5:7b:01 -----BEGIN CERTIFICATE----- MIIGtTCCBZ2gAwIBAgIURFtpRtvyxPFHGXshnnPC0DQZsP8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTA1MDYyMTU4NDJaFw0yNjA1MDUyMjAzNDJaMDMxMTAvBgNV BAMTKDEyMDcyRTZDMUE0OEFFQzE5NTA1MTgwRDE0NUQxRDU2RDcyOTgwRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo81F5xSVg3AWclrcc2uVtrlpb 09zr5eUNWWVrwmymordqDEaR/P1aP7+P9/nfvVxSPlj+Bkf1XFdOb1d+T6jMVW/O Hi1bGdYpSyW42u7353BTPNzNA7s1RrEw61FIwwCJOgKKc6CuZT2FnpY7xyr22NWf Nz9vBfGMkqKjLOzWphxvYpJwuRV5kC23N6hUAZM+rafdsZs4nmcruUh2wo075F98 Sbb9MWgR89OC71qxxcvXpzPYwlM2T5y36yS5s2EP/LGkeE/xZTq07l54giE/FrgS 3phUfTP/+ZidZWSEBkhQa0V21sJX+ziFsnemFhU79CZxm9l4qOpTCOMrhQnlAgMB AAGjggO/MIIDuzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQSBy5sGkiuwZUF GA0UXR1W1ymA8zAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMDg0QjNFMTYxNkI4NDNBNTk0M0UzRTkw ODJBMEQyNkFGQUVCQzhFRjlFRjIwRTI2QUFENDk1MzFDM0RDOTQ5NC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8wODRCM0UxNjE2Qjg0M0E1OTQzRTNFOTA4MkEwRDI2QUZBRUJDOEVGOUVG MjBFMjZBQUQ0OTUzMUMzREM5NDk0LzAvMTIwNzJFNkMxQTQ4QUVDMTk1MDUxODBE MTQ1RDFENTZENzI5ODBGMy5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjASBAIAATAMAwQAyAF0AwQAyYNP MBgEAgACMBIDBwQoAQAAAbADBwQoAQGkAAAwGQYIKwYBBQUHAQgBAf8ECjAIoAYw BAICQT0wDQYJKoZIhvcNAQELBQADggEBAIYoFJ5olIcvmcaE8b4OsPJ6jyW3PgrP LPWZnxHNWoyU1pkZmdr5Lv9zJBIsVpmrN74kZkmqvbMmcHKBYve3opXr8dC2tN8r JAGLdrJIJLyfbWQ/BacwgAwMjj8Yb/A3ng9ieeQNn2eAit2OTAileJdl6aDDgejs UpzJgsFICOcbVPowGZ3mY8xj9vQVZZwcByuFjaa9NqAzyFRgGXDgSvR3aT8l5dVh N+SL8nLWZfFznoFzB+AOUTDAZwzGuFdQkt5K6twT/Q3q4/RdCRhcB7dyh+DtYhuS Mxmabe59A8/LOf+MEDf9vCpFuNgWs5kqSQEcbpN6mRZZhjKwKBrlewE= -----END CERTIFICATE-----Generated at Sat May 10 03:49:34 2025 by rpki-client