$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC6522E3C11015B5E5613800EF79B4EAC428C2BA.cer File: BC6522E3C11015B5E5613800EF79B4EAC428C2BA.cer (raw, json) Hash identifier: T/J1oPs6Sw9LkvfLGdTv0pbplhRTWa2yb/qW2bm1ZKA= Subject key identifier: BC:65:22:E3:C1:10:15:B5:E5:61:38:00:EF:79:B4:EA:C4:28:C2:BA Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 735805B236D03CD9EC04C0B43BFDF5004C6DB5D3 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/114524E86CBEDB1BBBA6B5568E97599EC02601B8263BBE3C6132E9D787321E00/0/BC6522E3C11015B5E5613800EF79B4EAC428C2BA.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/114524E86CBEDB1BBBA6B5568E97599EC02601B8263BBE3C6132E9D787321E00/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 04 Feb 2025 21:58:52 +0000 Certificate not after: Tue 03 Feb 2026 22:03:52 +0000 Subordinate resources: IP: 45.71.112.0/22 IP: 2803:1c20::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 30 Apr 2025 05:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:58:05:b2:36:d0:3c:d9:ec:04:c0:b4:3b:fd:f5:00:4c:6d:b5:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 4 21:58:52 2025 GMT Not After : Feb 3 22:03:52 2026 GMT Subject: CN=BC6522E3C11015B5E5613800EF79B4EAC428C2BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:da:e6:7a:d1:8d:23:5a:db:4a:f5:66:04:35: 9f:9b:00:7f:d0:f3:ab:bd:5a:c4:97:46:fb:9f:a8: f3:3f:24:e1:20:5a:4d:ad:c3:42:a5:dd:35:59:86: 23:69:98:d7:e2:07:b4:88:fa:5e:ef:27:1a:c1:35: 08:67:c4:3c:53:d9:62:32:fa:92:57:b8:0b:61:a3: fc:7d:ca:b8:d0:24:74:f5:5d:24:a2:ac:d4:3e:38: cb:62:a7:13:65:ac:ec:59:a0:51:25:35:d1:b7:d5: 49:44:b6:35:b6:61:16:40:08:59:93:34:e7:fc:13: 7b:54:96:a3:b3:17:20:70:70:af:bc:52:23:57:37: 03:aa:67:27:41:6b:66:95:0e:f9:62:b5:59:0e:db: d5:af:58:fb:ac:93:6a:56:92:4b:80:d0:83:a6:6c: 8f:6c:14:92:24:a6:b3:11:81:f1:bb:ea:a2:f7:31: 3b:e8:41:42:3d:59:8a:e6:17:1e:4a:93:d6:9b:ef: 14:e5:30:23:ab:47:2a:db:0a:89:cd:9f:2a:28:bb: b5:77:5c:a0:c7:d6:47:5c:66:60:ae:80:80:f1:d3: 94:09:7a:1e:25:f6:d4:1c:f6:d0:b3:ce:97:13:d5: 9e:67:2c:ec:1c:a2:15:b2:88:d5:42:0b:c5:40:92: 50:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BC:65:22:E3:C1:10:15:B5:E5:61:38:00:EF:79:B4:EA:C4:28:C2:BA X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/114524E86CBEDB1BBBA6B5568E97599EC02601B8263BBE3C6132E9D787321E00/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/114524E86CBEDB1BBBA6B5568E97599EC02601B8263BBE3C6132E9D787321E00/0/BC6522E3C11015B5E5613800EF79B4EAC428C2BA.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.71.112.0/22 IPv6: 2803:1c20::/32 Signature Algorithm: sha256WithRSAEncryption 19:e4:83:fd:be:6e:0c:9a:1d:55:92:3e:d4:fe:d9:70:a5:93: 97:1a:bc:43:63:9f:86:6b:99:ae:90:92:4e:45:70:92:59:c6: 66:a3:b9:1a:d5:6d:da:c9:bb:86:a6:18:5c:04:3c:c1:1e:09: 83:41:4f:4d:8d:e2:22:ce:6e:4a:1e:76:cf:c5:eb:c9:2f:62: 98:f6:97:92:cb:4a:df:24:ed:a9:07:d2:7a:41:fa:7e:bd:70: 79:74:4b:17:31:bc:47:af:28:a2:7c:36:a8:8d:f1:b6:91:26: 51:cb:23:59:a2:9a:92:02:00:ed:05:44:a6:4e:3f:f2:3f:73: ca:d4:d8:a9:85:14:63:1c:a0:5c:03:29:58:a2:4e:61:bb:1c: 96:e1:d2:06:24:06:89:2d:57:c7:27:42:05:52:be:9d:d0:05: 5a:01:cb:d2:e4:5d:6c:62:eb:c5:18:8b:f2:e0:c4:00:11:c8: ea:d7:4a:80:3a:26:35:9d:45:41:ef:0d:f6:9f:b8:e9:36:da: 45:50:19:2e:6d:f5:ab:77:e0:43:00:0c:02:31:9a:3c:5e:31: 0d:a8:75:2c:89:17:17:ce:dd:34:12:a4:af:d4:a7:8e:12:73: dc:64:76:1c:a8:a7:d2:8b:66:ea:07:df:20:fb:86:ef:5e:40: 7f:a5:1c:7e -----BEGIN CERTIFICATE----- MIIGiTCCBXGgAwIBAgIUc1gFsjbQPNnsBMC0O/31AExttdMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDQyMTU4NTJaFw0yNjAyMDMyMjAzNTJaMDMxMTAvBgNV BAMTKEJDNjUyMkUzQzExMDE1QjVFNTYxMzgwMEVGNzlCNEVBQzQyOEMyQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV2uZ60Y0jWttK9WYENZ+bAH/Q 86u9WsSXRvufqPM/JOEgWk2tw0Kl3TVZhiNpmNfiB7SI+l7vJxrBNQhnxDxT2WIy +pJXuAtho/x9yrjQJHT1XSSirNQ+OMtipxNlrOxZoFElNdG31UlEtjW2YRZACFmT NOf8E3tUlqOzFyBwcK+8UiNXNwOqZydBa2aVDvlitVkO29WvWPusk2pWkkuA0IOm bI9sFJIkprMRgfG76qL3MTvoQUI9WYrmFx5Kk9ab7xTlMCOrRyrbConNnyoou7V3 XKDH1kdcZmCugIDx05QJeh4l9tQc9tCzzpcT1Z5nLOwcohWyiNVCC8VAklD3AgMB AAGjggOTMIIDjzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS8ZSLjwRAVteVh OADvebTqxCjCujAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMTE0NTI0RTg2Q0JFREIxQkJCQTZCNTU2 OEU5NzU5OUVDMDI2MDFCODI2M0JCRTNDNjEzMkU5RDc4NzMyMUUwMC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8xMTQ1MjRFODZDQkVEQjFCQkJBNkI1NTY4RTk3NTk5RUMwMjYwMUI4MjYz QkJFM0M2MTMyRTlENzg3MzIxRTAwLzAvQkM2NTIyRTNDMTEwMTVCNUU1NjEzODAw RUY3OUI0RUFDNDI4QzJCQS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLUdwMA0EAgAC MAcDBQAoAxwgMA0GCSqGSIb3DQEBCwUAA4IBAQAZ5IP9vm4Mmh1Vkj7U/tlwpZOX GrxDY5+Ga5mukJJORXCSWcZmo7ka1W3aybuGphhcBDzBHgmDQU9NjeIizm5KHnbP xevJL2KY9peSy0rfJO2pB9J6Qfp+vXB5dEsXMbxHryiifDaojfG2kSZRyyNZopqS AgDtBUSmTj/yP3PK1NiphRRjHKBcAylYok5huxyW4dIGJAaJLVfHJ0IFUr6d0AVa AcvS5F1sYuvFGIvy4MQAEcjq10qAOiY1nUVB7w32n7jpNtpFUBkubfWrd+BDAAwC MZo8XjENqHUsiRcXzt00EqSv1KeOEnPcZHYcqKfSi2bqB98g+4bvXkB/pRx+ -----END CERTIFICATE-----Generated at Sun Apr 27 05:22:15 2025 by rpki-client