$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C73F4086487CA38B0D5EEE670B20804A270AA478.cer File: C73F4086487CA38B0D5EEE670B20804A270AA478.cer (raw, json) Hash identifier: iNnpKChBzeP4W5wz8+WukWYhz6JpE95GrwL5liuUXjc= Subject key identifier: C7:3F:40:86:48:7C:A3:8B:0D:5E:EE:67:0B:20:80:4A:27:0A:A4:78 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 6CF88DDD62C04B67FB138C05BDC4B7B3F5F149D6 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/A760A3AB69A749E51AB2EFAF557A26794E4FFF699374C0DD69E2E3DB115A30B9/0/C73F4086487CA38B0D5EEE670B20804A270AA478.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/A760A3AB69A749E51AB2EFAF557A26794E4FFF699374C0DD69E2E3DB115A30B9/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 09:59:08 +0000 Certificate not after: Wed 04 Feb 2026 10:04:08 +0000 Subordinate resources: AS: 269785 IP: 45.182.112.0/22 IP: 2803:1d60::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 12 May 2025 13:13:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:f8:8d:dd:62:c0:4b:67:fb:13:8c:05:bd:c4:b7:b3:f5:f1:49:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 09:59:08 2025 GMT Not After : Feb 4 10:04:08 2026 GMT Subject: CN=C73F4086487CA38B0D5EEE670B20804A270AA478 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c3:ee:ce:3f:53:4d:86:b1:ac:11:97:ce:15: 9d:53:11:63:24:d6:7d:21:f8:29:77:9e:51:19:64: 15:9c:06:34:65:8d:4a:40:f5:cd:0b:92:7e:6b:1f: 55:c7:51:dc:cf:51:50:e9:0f:a2:a2:c7:e7:c0:c1: ee:0f:d8:da:14:16:c8:de:55:48:84:0a:67:d2:b2: af:2b:cf:08:e5:03:a2:0f:5c:47:d7:dd:8a:83:3e: 26:6f:9e:54:a9:77:31:59:15:66:9f:6d:cc:da:1c: 80:96:74:e6:e5:e7:7c:bb:ff:37:e5:d3:9e:84:e4: 96:95:3c:76:cf:ea:e9:4a:af:f2:20:0b:7a:9d:82: 4d:02:a4:ce:b1:eb:a9:4e:a9:74:8f:df:a2:8b:9e: 5b:4c:e4:26:bd:be:14:5a:b3:0f:66:e7:8e:2a:b4: 08:f5:ef:2d:e7:ee:e1:21:8b:3b:35:5e:32:6e:83: 00:f2:36:6b:c7:25:bb:32:b6:98:1c:bb:65:23:ef: 4e:9b:52:ec:7c:95:5e:98:f4:20:6e:19:ae:15:78: 08:f6:c4:fc:85:cf:0b:d9:cd:8a:42:eb:43:84:9c: ec:65:a3:3d:1e:6e:04:b7:9b:5b:b3:47:50:db:ec: 91:7a:a9:d4:06:63:95:99:9a:b3:d5:24:46:6a:3f: 75:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C7:3F:40:86:48:7C:A3:8B:0D:5E:EE:67:0B:20:80:4A:27:0A:A4:78 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/A760A3AB69A749E51AB2EFAF557A26794E4FFF699374C0DD69E2E3DB115A30B9/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/A760A3AB69A749E51AB2EFAF557A26794E4FFF699374C0DD69E2E3DB115A30B9/0/C73F4086487CA38B0D5EEE670B20804A270AA478.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.182.112.0/22 IPv6: 2803:1d60::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 269785 Signature Algorithm: sha256WithRSAEncryption 1f:67:fe:d1:22:6f:1b:46:19:1d:e4:9e:c4:a0:db:ff:fe:9a: 61:aa:05:13:ac:9f:c2:f0:2e:ec:3d:cd:42:df:d3:74:8c:17: a5:d3:d9:5f:cc:cd:95:42:e5:da:9a:dc:75:17:39:cc:92:ce: 31:8c:1b:90:bb:af:57:dc:7a:52:d0:b3:6f:03:91:23:b1:76: b1:85:52:68:b4:a6:59:b1:7f:a2:07:19:24:5f:76:ee:8e:44: d6:6b:5e:70:80:72:6f:0d:41:80:4f:77:fc:56:da:7f:8c:59: 3e:fd:2c:7a:fc:fe:e4:ca:97:d0:c8:97:a6:fa:07:e1:94:5c: 27:7d:1e:9a:f4:1d:b4:f6:6c:67:45:2d:b3:1c:7e:bc:04:06: 3d:ef:29:fa:16:88:6b:2c:7d:46:cd:8e:2b:13:51:fa:75:4f: bb:b0:63:4e:c6:4c:70:c0:18:15:be:8b:a9:49:30:60:c7:e1: 82:c6:5d:8c:6a:a4:f6:85:61:c7:c3:01:3f:fe:f2:c5:90:98: 84:5e:c7:49:26:95:3a:55:35:2b:1d:e5:8c:29:8f:af:f4:59: 77:d2:ac:a9:15:58:08:bd:69:81:ac:1e:90:3e:2b:79:72:7d: 0c:47:fe:61:e1:ff:39:31:2c:87:42:b4:0c:5b:02:e9:38:18: 95:85:c3:41 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUbPiN3WLAS2f7E4wFvcS3s/XxSdYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUwOTU5MDhaFw0yNjAyMDQxMDA0MDhaMDMxMTAvBgNV BAMTKEM3M0Y0MDg2NDg3Q0EzOEIwRDVFRUU2NzBCMjA4MDRBMjcwQUE0NzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmw+7OP1NNhrGsEZfOFZ1TEWMk 1n0h+Cl3nlEZZBWcBjRljUpA9c0Lkn5rH1XHUdzPUVDpD6Kix+fAwe4P2NoUFsje VUiECmfSsq8rzwjlA6IPXEfX3YqDPiZvnlSpdzFZFWafbczaHICWdObl53y7/zfl 056E5JaVPHbP6ulKr/IgC3qdgk0CpM6x66lOqXSP36KLnltM5Ca9vhRasw9m544q tAj17y3n7uEhizs1XjJugwDyNmvHJbsytpgcu2Uj706bUux8lV6Y9CBuGa4VeAj2 xPyFzwvZzYpC60OEnOxloz0ebgS3m1uzR1Db7JF6qdQGY5WZmrPVJEZqP3UPAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTHP0CGSHyjiw1e 7mcLIIBKJwqkeDAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQTc2MEEzQUI2OUE3NDlFNTFBQjJFRkFG NTU3QTI2Nzk0RTRGRkY2OTkzNzRDMERENjlFMkUzREIxMTVBMzBCOS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9BNzYwQTNBQjY5QTc0OUU1MUFCMkVGQUY1NTdBMjY3OTRFNEZGRjY5OTM3 NEMwREQ2OUUyRTNEQjExNUEzMEI5LzAvQzczRjQwODY0ODdDQTM4QjBENUVFRTY3 MEIyMDgwNEEyNzBBQTQ3OC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLbZwMA0EAgAC MAcDBQAoAx1gMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQd2TANBgkqhkiG9w0B AQsFAAOCAQEAH2f+0SJvG0YZHeSexKDb//6aYaoFE6yfwvAu7D3NQt/TdIwXpdPZ X8zNlULl2prcdRc5zJLOMYwbkLuvV9x6UtCzbwORI7F2sYVSaLSmWbF/ogcZJF92 7o5E1mtecIBybw1BgE93/Fbaf4xZPv0sevz+5MqX0MiXpvoH4ZRcJ30emvQdtPZs Z0Utsxx+vAQGPe8p+haIayx9Rs2OKxNR+nVPu7BjTsZMcMAYFb6LqUkwYMfhgsZd jGqk9oVhx8MBP/7yxZCYhF7HSSaVOlU1Kx3ljCmPr/RZd9KsqRVYCL1pgawekD4r eXJ9DEf+YeH/OTEsh0K0DFsC6TgYlYXDQQ== -----END CERTIFICATE-----Generated at Thu May 8 21:07:29 2025 by rpki-client