$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24AB4EF0CDE5CBC52E125E634C68237C46D0F8CF.cer File: 24AB4EF0CDE5CBC52E125E634C68237C46D0F8CF.cer (raw, json) Hash identifier: pgii0n3qdcdNfpDhVarCxpbhoRsU3eHuugEXc2M97fA= Subject key identifier: 24:AB:4E:F0:CD:E5:CB:C5:2E:12:5E:63:4C:68:23:7C:46:D0:F8:CF Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 7EA5786DEF81580BB94474B44C11B43BCBDCC19A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/09B45A3528B8E3BED9BE7F79CAB495A61B7314573DBD9F9CD33DE489791ECCB9/0/24AB4EF0CDE5CBC52E125E634C68237C46D0F8CF.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/09B45A3528B8E3BED9BE7F79CAB495A61B7314573DBD9F9CD33DE489791ECCB9/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 04 Feb 2025 23:10:39 +0000 Certificate not after: Tue 03 Feb 2026 23:15:39 +0000 Subordinate resources: IP: 2801:1c:5800::/48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 11 May 2025 08:46:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:a5:78:6d:ef:81:58:0b:b9:44:74:b4:4c:11:b4:3b:cb:dc:c1:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 4 23:10:39 2025 GMT Not After : Feb 3 23:15:39 2026 GMT Subject: CN=24AB4EF0CDE5CBC52E125E634C68237C46D0F8CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:68:f7:bf:ed:31:a4:07:cd:b3:80:0c:6d:5b: 69:ef:5d:8a:82:b5:e2:dd:f6:b7:6d:ef:5f:c6:72: 00:e2:46:e1:61:13:22:0a:49:0b:df:50:f9:19:ca: 45:57:c4:dd:74:6b:46:b8:c5:9c:9c:91:51:e9:a4: 5d:69:a6:cd:32:74:3e:23:58:aa:d0:1f:3c:28:e5: f9:39:f9:02:2f:d4:d6:70:7e:a4:dc:b0:f0:23:c2: 27:bb:cf:78:a2:6c:cd:79:0f:f4:1e:d4:21:91:31: d9:45:23:5b:ac:72:27:3f:84:01:5d:92:61:14:c7: 59:be:7a:0c:84:f5:09:ec:61:97:5c:e2:4a:ff:1c: 63:ea:0f:ce:8c:44:db:cb:f7:98:29:02:c8:5c:9c: b1:20:5c:8b:b8:0a:01:d9:05:a4:9d:19:8b:3c:d1: 53:c7:4d:18:f9:3c:39:b4:1e:e6:2c:d4:e7:0d:13: 8a:94:3c:b5:f3:fb:54:96:d9:43:86:1a:27:2f:b9: 76:ee:70:3e:bf:43:a4:85:5f:20:bb:d3:cc:b9:c3: da:b1:d2:b5:8c:0d:b3:8e:9d:d6:17:8d:f4:f6:1e: 25:66:c3:90:c1:a8:18:01:2e:5b:8c:83:82:0d:36: a7:e2:14:21:f7:7a:11:55:bc:b2:86:5d:05:49:71: 1e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 24:AB:4E:F0:CD:E5:CB:C5:2E:12:5E:63:4C:68:23:7C:46:D0:F8:CF X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/09B45A3528B8E3BED9BE7F79CAB495A61B7314573DBD9F9CD33DE489791ECCB9/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/09B45A3528B8E3BED9BE7F79CAB495A61B7314573DBD9F9CD33DE489791ECCB9/0/24AB4EF0CDE5CBC52E125E634C68237C46D0F8CF.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2801:1c:5800::/48 Signature Algorithm: sha256WithRSAEncryption 62:06:8b:c2:9a:a2:ca:84:67:d1:2d:43:d1:b1:45:99:31:9f: e3:59:63:46:e7:5f:66:6d:54:4a:28:ef:16:74:81:e0:c5:17: 22:80:04:7f:97:15:4c:39:f4:b0:d9:8d:85:26:fd:da:48:a8: cb:c7:de:7b:69:1b:b3:fb:67:54:41:86:6b:d7:22:d4:cf:ff: b4:f5:3c:b8:05:6b:93:e4:7d:69:9e:e5:b5:48:72:52:3c:f3: 32:1b:e1:c1:24:a6:f3:7e:ab:14:3a:c9:07:3b:a2:86:44:c0: 8d:f7:e5:ab:b0:03:dc:a8:0a:6d:06:8b:78:7d:45:70:c8:11: 05:9f:b8:7f:f0:df:cd:a3:ee:30:83:b8:91:3d:fe:ab:75:09: 51:d4:63:16:88:ea:0c:6f:3f:90:22:62:e8:bd:75:d0:4e:05: 2c:49:7a:8d:03:8e:eb:63:46:43:82:59:59:e9:ec:32:7a:c0: f1:11:61:86:30:a2:c0:e6:8e:5e:e4:44:8f:d2:07:73:47:86: 8b:25:76:f8:26:f0:8b:f6:2f:16:63:a3:a8:0f:62:07:96:40: c0:b4:1e:bf:1c:12:48:42:bd:c5:33:ff:7c:02:4a:14:1a:4c: 58:b3:a9:7c:b9:32:22:b7:f3:e0:5a:61:fa:25:8d:26:9f:e1: 5e:21:e1:a8 -----BEGIN CERTIFICATE----- MIIGfTCCBWWgAwIBAgIUfqV4be+BWAu5RHS0TBG0O8vcwZowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDQyMzEwMzlaFw0yNjAyMDMyMzE1MzlaMDMxMTAvBgNV BAMTKDI0QUI0RUYwQ0RFNUNCQzUyRTEyNUU2MzRDNjgyMzdDNDZEMEY4Q0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClaPe/7TGkB82zgAxtW2nvXYqC teLd9rdt71/GcgDiRuFhEyIKSQvfUPkZykVXxN10a0a4xZyckVHppF1pps0ydD4j WKrQHzwo5fk5+QIv1NZwfqTcsPAjwie7z3iibM15D/Qe1CGRMdlFI1uscic/hAFd kmEUx1m+egyE9QnsYZdc4kr/HGPqD86MRNvL95gpAshcnLEgXIu4CgHZBaSdGYs8 0VPHTRj5PDm0HuYs1OcNE4qUPLXz+1SW2UOGGicvuXbucD6/Q6SFXyC708y5w9qx 0rWMDbOOndYXjfT2HiVmw5DBqBgBLluMg4INNqfiFCH3ehFVvLKGXQVJcR4HAgMB AAGjggOHMIIDgzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQkq07wzeXLxS4S XmNMaCN8RtD4zzAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMDlCNDVBMzUyOEI4RTNCRUQ5QkU3Rjc5 Q0FCNDk1QTYxQjczMTQ1NzNEQkQ5RjlDRDMzREU0ODk3OTFFQ0NCOS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8wOUI0NUEzNTI4QjhFM0JFRDlCRTdGNzlDQUI0OTVBNjFCNzMxNDU3M0RC RDlGOUNEMzNERTQ4OTc5MUVDQ0I5LzAvMjRBQjRFRjBDREU1Q0JDNTJFMTI1RTYz NEM2ODIzN0M0NkQwRjhDRi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKAEAHFgAMA0G CSqGSIb3DQEBCwUAA4IBAQBiBovCmqLKhGfRLUPRsUWZMZ/jWWNG519mbVRKKO8W dIHgxRcigAR/lxVMOfSw2Y2FJv3aSKjLx957aRuz+2dUQYZr1yLUz/+09Ty4BWuT 5H1pnuW1SHJSPPMyG+HBJKbzfqsUOskHO6KGRMCN9+WrsAPcqAptBot4fUVwyBEF n7h/8N/No+4wg7iRPf6rdQlR1GMWiOoMbz+QImLovXXQTgUsSXqNA47rY0ZDgllZ 6ewyesDxEWGGMKLA5o5e5ESP0gdzR4aLJXb4JvCL9i8WY6OoD2IHlkDAtB6/HBJI Qr3FM/98AkoUGkxYs6l8uTIit/PgWmH6JY0mn+FeIeGo -----END CERTIFICATE-----Generated at Thu May 8 03:35:25 2025 by rpki-client