$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6BF9255E35CF2851ECFDFAC161E95CCC7E5C22F.cer File: C6BF9255E35CF2851ECFDFAC161E95CCC7E5C22F.cer (raw, json) Hash identifier: zutgiA5wdowtSYoqOu5lxjZx7pjjlNETV8FRn94COKI= Subject key identifier: C6:BF:92:55:E3:5C:F2:85:1E:CF:DF:AC:16:1E:95:CC:C7:E5:C2:2F Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 281A33B4C805084F6B0F6E90FF7EE11703E44F96 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/DAFE3A1457ABBD6D75176B3D24D7025C8312489FF4C52CAE83B8A0D2D1D1BC7A/0/C6BF9255E35CF2851ECFDFAC161E95CCC7E5C22F.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/DAFE3A1457ABBD6D75176B3D24D7025C8312489FF4C52CAE83B8A0D2D1D1BC7A/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 04 Feb 2025 18:54:32 +0000 Certificate not after: Tue 03 Feb 2026 18:59:32 +0000 Subordinate resources: AS: 52405 IP: 181.118.192.0/20 IP: 190.8.48.0/20 IP: 2803:f300::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 08 May 2025 10:53:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:1a:33:b4:c8:05:08:4f:6b:0f:6e:90:ff:7e:e1:17:03:e4:4f:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 4 18:54:32 2025 GMT Not After : Feb 3 18:59:32 2026 GMT Subject: CN=C6BF9255E35CF2851ECFDFAC161E95CCC7E5C22F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:54:23:b8:d1:80:13:e4:d5:33:19:0f:c0:18: f6:43:eb:3c:35:e1:17:19:a3:ab:12:ff:66:c6:aa: 55:dd:3a:6e:5d:21:03:45:cc:58:15:4b:6b:e0:a4: 47:aa:0b:1f:4b:e0:ea:9f:89:a0:d8:3d:b8:b7:3c: 02:e6:69:ee:ba:2c:9d:af:63:db:f5:36:5d:cc:48: 30:d2:84:2c:6c:d5:7c:24:97:96:ff:70:f4:6f:f1: df:ce:96:89:fb:94:ff:a5:b4:0f:44:67:10:b0:5e: 6c:d8:c3:8c:17:19:14:0b:09:39:15:e6:46:a0:73: 79:13:aa:2f:1b:39:84:59:39:49:b9:bf:01:6e:c4: dc:d3:3f:af:21:61:fa:28:d0:89:ee:14:d0:92:ab: 3f:5e:b3:95:24:2c:7e:f1:41:93:21:e1:d7:46:87: a0:c0:5f:1f:22:0e:ba:fd:cf:22:38:75:e3:81:fa: 1c:a7:97:fd:a7:89:82:ea:91:4b:57:e3:51:53:db: 23:0a:2f:d4:1c:a7:b9:f9:47:c2:30:80:5f:55:d4: 70:09:b6:fb:72:af:56:33:04:9b:ea:9f:37:99:b7: ea:39:5e:c4:bd:75:84:47:c4:b8:e7:d3:e5:3e:1f: ab:0e:dd:5e:c6:3a:cd:0e:4c:75:61:b2:81:cc:cc: 86:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C6:BF:92:55:E3:5C:F2:85:1E:CF:DF:AC:16:1E:95:CC:C7:E5:C2:2F X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/DAFE3A1457ABBD6D75176B3D24D7025C8312489FF4C52CAE83B8A0D2D1D1BC7A/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/DAFE3A1457ABBD6D75176B3D24D7025C8312489FF4C52CAE83B8A0D2D1D1BC7A/0/C6BF9255E35CF2851ECFDFAC161E95CCC7E5C22F.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 181.118.192.0/20 190.8.48.0/20 IPv6: 2803:f300::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52405 Signature Algorithm: sha256WithRSAEncryption 92:59:d1:e4:a1:92:6d:9e:4c:5c:90:66:92:39:60:70:75:2a: e5:e8:d6:e8:25:d8:f5:5e:4c:10:47:54:da:da:31:c3:03:5d: 08:4f:1d:2a:b4:db:91:6e:7c:e8:93:c4:99:d1:2b:1d:33:df: fc:1e:86:c7:84:e6:e0:50:e6:4b:41:95:18:10:63:7b:16:06: d3:c6:dd:2a:62:b9:e8:b7:0c:f9:6d:34:7c:80:30:6c:0e:39: b8:8b:ee:f9:c5:3b:84:4b:2f:38:0b:41:b8:d2:ed:d7:0e:bc: be:7c:23:73:e2:8e:85:a8:d6:de:73:ec:dc:34:45:42:43:e8: e0:6f:f5:66:40:34:cf:88:5e:c6:2b:41:94:32:f1:de:39:24: f0:35:f2:1e:dd:15:46:45:36:b4:8c:61:70:c4:18:45:35:84: b4:7d:8d:df:a7:aa:3b:70:fc:ac:14:3a:58:51:2f:39:77:03: 43:20:be:29:35:b9:00:90:bd:60:e0:5b:34:60:a1:d5:34:02: 7c:30:26:da:98:b8:50:88:ea:8c:b5:df:48:56:5c:b3:f4:fd: 12:fb:16:3f:51:0b:95:37:4d:03:4d:63:7f:53:88:3c:e2:7d: 28:75:f9:64:21:5d:2a:35:57:b7:6b:f8:bb:db:82:25:3f:a2: 6c:0f:6d:f8 -----BEGIN CERTIFICATE----- MIIGqzCCBZOgAwIBAgIUKBoztMgFCE9rD26Q/37hFwPkT5YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDQxODU0MzJaFw0yNjAyMDMxODU5MzJaMDMxMTAvBgNV BAMTKEM2QkY5MjU1RTM1Q0YyODUxRUNGREZBQzE2MUU5NUNDQzdFNUMyMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCVCO40YAT5NUzGQ/AGPZD6zw1 4RcZo6sS/2bGqlXdOm5dIQNFzFgVS2vgpEeqCx9L4OqfiaDYPbi3PALmae66LJ2v Y9v1Nl3MSDDShCxs1Xwkl5b/cPRv8d/Olon7lP+ltA9EZxCwXmzYw4wXGRQLCTkV 5kagc3kTqi8bOYRZOUm5vwFuxNzTP68hYfoo0InuFNCSqz9es5UkLH7xQZMh4ddG h6DAXx8iDrr9zyI4deOB+hynl/2niYLqkUtX41FT2yMKL9Qcp7n5R8IwgF9V1HAJ tvtyr1YzBJvqnzeZt+o5XsS9dYRHxLjn0+U+H6sO3V7GOs0OTHVhsoHMzIYVAgMB AAGjggO1MIIDsTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTGv5JV41zyhR7P 36wWHpXMx+XCLzAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvREFGRTNBMTQ1N0FCQkQ2RDc1MTc2QjNE MjRENzAyNUM4MzEyNDg5RkY0QzUyQ0FFODNCOEEwRDJEMUQxQkM3QS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9EQUZFM0ExNDU3QUJCRDZENzUxNzZCM0QyNEQ3MDI1QzgzMTI0ODlGRjRD NTJDQUU4M0I4QTBEMkQxRDFCQzdBLzAvQzZCRjkyNTVFMzVDRjI4NTFFQ0ZERkFD MTYxRTk1Q0NDN0U1QzIyRi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQEtXbAAwQEvggw MA0EAgACMAcDBQAoA/MAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDMtTANBgkq hkiG9w0BAQsFAAOCAQEAklnR5KGSbZ5MXJBmkjlgcHUq5ejW6CXY9V5MEEdU2tox wwNdCE8dKrTbkW586JPEmdErHTPf/B6Gx4Tm4FDmS0GVGBBjexYG08bdKmK56LcM +W00fIAwbA45uIvu+cU7hEsvOAtBuNLt1w68vnwjc+KOhajW3nPs3DRFQkPo4G/1 ZkA0z4hexitBlDLx3jkk8DXyHt0VRkU2tIxhcMQYRTWEtH2N36eqO3D8rBQ6WFEv OXcDQyC+KTW5AJC9YOBbNGCh1TQCfDAm2pi4UIjqjLXfSFZcs/T9EvsWP1ELlTdN A01jf1OIPOJ9KHX5ZCFdKjVXt2v4u9uCJT+ibA9t+A== -----END CERTIFICATE-----Generated at Sun May 4 07:53:26 2025 by rpki-client