$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36F64BA5D8EC2E96AE8712C843DEB279EAB1DC7.cer File: B36F64BA5D8EC2E96AE8712C843DEB279EAB1DC7.cer (raw, json) Hash identifier: sej18khmGolXbbGpn8F7l1Qgjbf2Sp99beEFRsyehOE= Subject key identifier: B3:6F:64:BA:5D:8E:C2:E9:6A:E8:71:2C:84:3D:EB:27:9E:AB:1D:C7 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 67C084B5C51C31718F05767A82B38CE3D24D4D8F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/D71199B0D46FAD9B2376D7EF9E84F1AD6B97129C5F406CE4D61131D65645E5E8/0/B36F64BA5D8EC2E96AE8712C843DEB279EAB1DC7.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/D71199B0D46FAD9B2376D7EF9E84F1AD6B97129C5F406CE4D61131D65645E5E8/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Fri 25 Apr 2025 02:40:01 +0000 Certificate not after: Fri 24 Apr 2026 02:45:01 +0000 Subordinate resources: IP: 2801:1ad::/40 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 10 May 2025 01:54:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:c0:84:b5:c5:1c:31:71:8f:05:76:7a:82:b3:8c:e3:d2:4d:4d:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Apr 25 02:40:01 2025 GMT Not After : Apr 24 02:45:01 2026 GMT Subject: CN=B36F64BA5D8EC2E96AE8712C843DEB279EAB1DC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:e7:3a:9b:25:23:61:cd:c6:d6:e4:97:5e:63: 58:8a:b6:9f:0f:fc:96:05:60:c3:94:af:14:cf:6d: 10:25:4d:d3:ba:c1:ec:64:a2:6c:86:0e:35:07:f7: a8:17:77:cd:ec:1b:ba:79:d3:14:49:8e:43:50:68: 1b:4d:25:77:28:cd:e5:3c:ea:0f:d6:70:7f:08:64: a4:7b:aa:a8:fe:bb:4a:15:40:ca:29:74:cd:b4:0b: 0c:9c:8c:4f:a0:ef:cf:dc:2d:65:58:d2:45:d9:11: 3a:0c:f8:f9:0c:ef:69:64:9e:0d:88:3d:9f:3d:85: 3b:d5:be:16:c0:77:9d:67:52:9a:d0:8c:70:da:89: 2b:b9:5a:d1:ce:85:0e:38:9a:f0:75:b3:4b:91:7f: f6:b7:14:61:86:10:b8:2c:cb:59:d4:1f:36:50:07: 5d:31:4d:79:90:8b:8e:f2:7f:c5:7d:be:24:9e:9d: c5:0b:7a:7c:fe:88:a6:76:11:04:b6:82:4d:39:a4: 9e:e4:8b:79:44:0f:38:b8:7f:c8:1f:5c:db:48:22: 8e:cf:f7:8b:a2:9b:c4:83:21:a5:ea:da:fd:f5:d9: 58:a4:64:89:9d:17:f6:ec:69:a4:96:35:ef:82:89: 60:f3:a6:14:7e:3f:25:28:cc:6d:fc:80:c9:a3:63: c4:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B3:6F:64:BA:5D:8E:C2:E9:6A:E8:71:2C:84:3D:EB:27:9E:AB:1D:C7 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/D71199B0D46FAD9B2376D7EF9E84F1AD6B97129C5F406CE4D61131D65645E5E8/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/D71199B0D46FAD9B2376D7EF9E84F1AD6B97129C5F406CE4D61131D65645E5E8/0/B36F64BA5D8EC2E96AE8712C843DEB279EAB1DC7.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2801:1ad::/40 Signature Algorithm: sha256WithRSAEncryption 08:39:e0:d8:d0:5c:87:97:34:c5:8b:a1:fd:2b:32:1d:b4:38: 3a:09:b4:05:14:b0:36:7a:11:31:ce:db:1d:50:79:0b:48:f6: a6:44:fd:79:5d:66:85:5d:b2:76:be:04:8d:27:fe:5f:a5:6d: e1:c3:72:a4:f4:d6:de:66:0e:50:1b:03:66:f6:59:96:ca:66: 11:a6:be:0f:2f:c5:71:c5:9d:85:03:bf:ee:39:18:a6:d2:77: dd:2e:a8:eb:c1:5a:9f:e0:65:4d:aa:20:1f:d8:fb:18:0b:53: 58:20:a3:5d:b5:c3:c7:a1:a3:81:2e:70:b8:c3:14:88:ed:55: 46:54:55:9d:32:c4:31:63:df:ce:55:fa:2f:14:00:cc:72:e0: 98:a3:c9:9d:61:1b:6c:b1:7e:bc:de:1e:14:4a:c4:34:a1:68: 5b:7c:11:01:fe:a5:7b:fe:c2:9c:bf:23:c0:b2:93:f8:4b:a6: 01:9b:25:ad:36:73:0e:5e:26:cc:60:b0:e0:55:71:d3:19:75: d4:f5:74:8f:00:16:d7:4e:24:03:09:dd:14:83:56:d5:15:07: dd:89:81:30:5d:62:5f:22:d9:be:c3:be:23:68:5c:52:5e:e0: 7d:09:39:90:26:8d:05:a5:4f:44:50:30:26:1a:8a:90:74:7c: 6f:4d:b8:e3 -----BEGIN CERTIFICATE----- MIIGfDCCBWSgAwIBAgIUZ8CEtcUcMXGPBXZ6grOM49JNTY8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTA0MjUwMjQwMDFaFw0yNjA0MjQwMjQ1MDFaMDMxMTAvBgNV BAMTKEIzNkY2NEJBNUQ4RUMyRTk2QUU4NzEyQzg0M0RFQjI3OUVBQjFEQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCV5zqbJSNhzcbW5JdeY1iKtp8P /JYFYMOUrxTPbRAlTdO6wexkomyGDjUH96gXd83sG7p50xRJjkNQaBtNJXcozeU8 6g/WcH8IZKR7qqj+u0oVQMopdM20CwycjE+g78/cLWVY0kXZEToM+PkM72lkng2I PZ89hTvVvhbAd51nUprQjHDaiSu5WtHOhQ44mvB1s0uRf/a3FGGGELgsy1nUHzZQ B10xTXmQi47yf8V9viSencULenz+iKZ2EQS2gk05pJ7ki3lEDzi4f8gfXNtIIo7P 94uim8SDIaXq2v312VikZImdF/bsaaSWNe+CiWDzphR+PyUozG38gMmjY8ShAgMB AAGjggOGMIIDgjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSzb2S6XY7C6Wro cSyEPesnnqsdxzAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRDcxMTk5QjBENDZGQUQ5QjIzNzZEN0VG OUU4NEYxQUQ2Qjk3MTI5QzVGNDA2Q0U0RDYxMTMxRDY1NjQ1RTVFOC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9ENzExOTlCMEQ0NkZBRDlCMjM3NkQ3RUY5RTg0RjFBRDZCOTcxMjlDNUY0 MDZDRTRENjExMzFENjU2NDVFNUU4LzAvQjM2RjY0QkE1RDhFQzJFOTZBRTg3MTJD ODQzREVCMjc5RUFCMURDNy5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKAEBrQAwDQYJ KoZIhvcNAQELBQADggEBAAg54NjQXIeXNMWLof0rMh20ODoJtAUUsDZ6ETHO2x1Q eQtI9qZE/XldZoVdsna+BI0n/l+lbeHDcqT01t5mDlAbA2b2WZbKZhGmvg8vxXHF nYUDv+45GKbSd90uqOvBWp/gZU2qIB/Y+xgLU1ggo121w8eho4EucLjDFIjtVUZU VZ0yxDFj385V+i8UAMxy4JijyZ1hG2yxfrzeHhRKxDShaFt8EQH+pXv+wpy/I8Cy k/hLpgGbJa02cw5eJsxgsOBVcdMZddT1dI8AFtdOJAMJ3RSDVtUVB92JgTBdYl8i 2b7DviNoXFJe4H0JOZAmjQWlT0RQMCYaipB0fG9NuOM= -----END CERTIFICATE-----Generated at Tue May 6 11:32:25 2025 by rpki-client