$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C1C868DAE462CF1EFAC4EF35B251505AC4C7F982.cer File: C1C868DAE462CF1EFAC4EF35B251505AC4C7F982.cer (raw, json) Hash identifier: CLdkx2dNML5hZ9FVAFsBE0fht+CnIx6P+0CnRga1pQE= Subject key identifier: C1:C8:68:DA:E4:62:CF:1E:FA:C4:EF:35:B2:51:50:5A:C4:C7:F9:82 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 56B074BFB9048CE0B5436AAD75EE663FB29A81 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/CFA05B91C0B6502F383C73BCCE72873D13422A0C22B0BC4A30AE1FF53B4B2833/0/C1C868DAE462CF1EFAC4EF35B251505AC4C7F982.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/CFA05B91C0B6502F383C73BCCE72873D13422A0C22B0BC4A30AE1FF53B4B2833/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 01:09:07 +0000 Certificate not after: Wed 04 Feb 2026 01:14:07 +0000 Subordinate resources: AS: 269983 IP: 177.200.238.0/23 IP: 2803:2ee0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 08 May 2025 10:53:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:b0:74:bf:b9:04:8c:e0:b5:43:6a:ad:75:ee:66:3f:b2:9a:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 01:09:07 2025 GMT Not After : Feb 4 01:14:07 2026 GMT Subject: CN=C1C868DAE462CF1EFAC4EF35B251505AC4C7F982 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:35:da:bd:ea:eb:3e:a6:12:e1:d3:15:de:b6: f5:b7:dd:f8:da:dd:72:56:f7:06:c4:71:f3:3f:ad: d3:f5:8d:19:8c:97:77:dd:f3:93:e9:58:6f:26:5e: 73:a9:56:5d:bc:af:2e:39:09:42:2b:fc:ae:3e:6f: 90:5f:32:9e:b1:3a:0b:dd:1a:a7:9c:28:de:80:d7: 90:ff:11:98:c6:9d:5c:75:d3:d8:45:18:3b:6b:c4: 31:3b:ba:a0:a9:87:7c:56:18:71:66:2d:dc:5d:05: da:f0:45:90:22:ad:9b:59:36:16:1c:f2:b2:8e:ad: 1c:3c:74:fd:aa:be:31:36:6b:c9:14:7f:e9:94:db: 30:08:bb:85:7c:1b:2e:a3:13:5a:3e:90:f9:4f:f0: 57:87:39:53:ce:e6:24:92:ef:41:ac:85:43:24:21: d9:fc:d5:bc:0a:01:39:29:c6:8e:41:1e:ab:63:73: 1c:99:25:66:b6:39:d0:4d:9e:db:0d:dc:59:a4:7c: 4e:9e:6d:17:66:26:0e:93:10:39:43:9a:59:b6:09: a8:bb:c8:56:a1:b0:73:33:ad:2d:cb:37:64:44:d2: 7c:41:64:a5:4b:3e:83:f2:d1:b0:6f:b4:87:3f:04: 84:77:b4:08:ff:5f:b9:87:1d:de:bc:3f:70:44:c2: a0:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C1:C8:68:DA:E4:62:CF:1E:FA:C4:EF:35:B2:51:50:5A:C4:C7:F9:82 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/CFA05B91C0B6502F383C73BCCE72873D13422A0C22B0BC4A30AE1FF53B4B2833/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/CFA05B91C0B6502F383C73BCCE72873D13422A0C22B0BC4A30AE1FF53B4B2833/0/C1C868DAE462CF1EFAC4EF35B251505AC4C7F982.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.200.238.0/23 IPv6: 2803:2ee0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 269983 Signature Algorithm: sha256WithRSAEncryption 1a:e1:32:7b:e1:7d:d6:74:de:5c:d1:4c:06:a5:3f:4c:f8:9d: 5a:da:57:9e:94:16:7d:b8:e3:c7:c3:a9:fd:e5:60:f6:77:5f: d5:32:71:4d:f5:98:a6:e3:fc:78:9d:08:35:d6:61:96:8e:c8: 0a:f6:07:f7:9f:12:81:dd:21:82:79:01:84:16:91:29:a5:39: 63:35:88:b0:09:4a:5c:a9:fb:83:00:23:16:3c:6b:10:06:89: 46:bf:0a:9f:67:44:93:85:e0:32:c8:bc:55:11:a4:09:42:ae: 99:36:7b:f8:38:2a:bc:90:43:7c:45:ab:06:8a:ce:93:8f:52: ff:1c:66:0d:a8:5e:30:45:6f:2e:01:92:ea:44:6f:88:9d:aa: 50:67:6e:c4:c0:ad:e4:f8:e0:0e:23:d5:57:0b:93:b3:cc:94: a2:fd:9a:8b:1f:86:ce:22:20:d2:8d:d0:6e:cb:26:35:59:94: 7e:95:33:d4:ca:19:66:84:d2:d4:89:5d:52:d6:93:1d:35:51: 4c:07:07:41:1a:51:12:4e:2e:2e:b7:26:ae:f5:b3:7d:26:50: a9:89:dd:9c:c5:26:16:c1:83:fb:88:b6:e3:53:54:2d:89:4f: 47:6d:bc:2b:28:db:81:a1:54:c6:ea:ea:ea:38:76:ca:5b:3d: 89:dc:ff:b4 -----BEGIN CERTIFICATE----- MIIGpDCCBYygAwIBAgITVrB0v7kEjOC1Q2qtde5mP7KagTANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyhCQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFF NjYxODE2MB4XDTI1MDIwNTAxMDkwN1oXDTI2MDIwNDAxMTQwN1owMzExMC8GA1UE AxMoQzFDODY4REFFNDYyQ0YxRUZBQzRFRjM1QjI1MTUwNUFDNEM3Rjk4MjCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKs12r3q6z6mEuHTFd629bfd+Nrd clb3BsRx8z+t0/WNGYyXd93zk+lYbyZec6lWXbyvLjkJQiv8rj5vkF8ynrE6C90a p5wo3oDXkP8RmMadXHXT2EUYO2vEMTu6oKmHfFYYcWYt3F0F2vBFkCKtm1k2Fhzy so6tHDx0/aq+MTZryRR/6ZTbMAi7hXwbLqMTWj6Q+U/wV4c5U87mJJLvQayFQyQh 2fzVvAoBOSnGjkEeq2NzHJklZrY50E2e2w3cWaR8Tp5tF2YmDpMQOUOaWbYJqLvI VqGwczOtLcs3ZETSfEFkpUs+g/LRsG+0hz8EhHe0CP9fuYcd3rw/cETCoP8CAwEA AaOCA68wggOrMA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYEFMHIaNrkYs8e+sTv NbJRUFrEx/mCMB8GA1UdIwQYMBaAFLzAZl7Pipe4PjmCaNkqJVuuZhgWMA4GA1Ud DwEB/wQEAwIBBjCBsAYDVR0fBIGoMIGlMIGioIGfoIGchoGZcnN5bmM6Ly9yZXBv c2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRkRDMzU5NERENEU1NEJBREU3 MDlBQzBEMjU1Q0YyNzlDNDc3MTZEMkU4QjNGNEQ0NURDNDYzNTU4OTlCMzZENC8w L0JDQzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY3JsMIG5 BggrBgEFBQcBAQSBrDCBqTCBpgYIKwYBBQUHMAKGgZlyc3luYzovL3JlcG9zaXRv cnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9FNUFBMUIyQzY5MEQzNEREM0E0MkUw QzAyNjhDMzIxOEVEMTU4RTE1RDI5RkNCRDBCQUI2NkI0Nzg2RDYzMkU2LzAvQkND MDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJBRTY2MTgxNi5jZXIwggFxBggr BgEFBQcBCwSCAWMwggFfMHkGCCsGAQUFBzAFhm1yc3luYzovL3JlcG9zaXRvcnku bGFjbmljLm5ldC9ycGtpL2xhY25pYy9DRkEwNUI5MUMwQjY1MDJGMzgzQzczQkND RTcyODczRDEzNDIyQTBDMjJCMEJDNEEzMEFFMUZGNTNCNEIyODMzLzAvMIGmBggr BgEFBQcwCoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj bmljL0NGQTA1QjkxQzBCNjUwMkYzODNDNzNCQ0NFNzI4NzNEMTM0MjJBMEMyMkIw QkM0QTMwQUUxRkY1M0I0QjI4MzMvMC9DMUM4NjhEQUU0NjJDRjFFRkFDNEVGMzVC MjUxNTA1QUM0QzdGOTgyLm1mdDA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxh Y25pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAGxyO4wDQQCAAIw BwMFACgDLuAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBB6fMA0GCSqGSIb3DQEB CwUAA4IBAQAa4TJ74X3WdN5c0UwGpT9M+J1a2leelBZ9uOPHw6n95WD2d1/VMnFN 9Zim4/x4nQg11mGWjsgK9gf3nxKB3SGCeQGEFpEppTljNYiwCUpcqfuDACMWPGsQ BolGvwqfZ0STheAyyLxVEaQJQq6ZNnv4OCq8kEN8RasGis6Tj1L/HGYNqF4wRW8u AZLqRG+InapQZ27EwK3k+OAOI9VXC5OzzJSi/ZqLH4bOIiDSjdBuyyY1WZR+lTPU yhlmhNLUiV1S1pMdNVFMBwdBGlESTi4utyau9bN9JlCpid2cxSYWwYP7iLbjU1Qt iU9HbbwrKNuBoVTG6urqOHbKWz2J3P+0 -----END CERTIFICATE-----Generated at Sun May 4 13:13:44 2025 by rpki-client