$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5359D5652EB8B1C42FF1914CA8586A67AE35A163.cer File: 5359D5652EB8B1C42FF1914CA8586A67AE35A163.cer (raw, json) Hash identifier: +/v4rWfpz4XEviJO1b6/9TyIqp9vk3M1cGV8x/C7NuI= Subject key identifier: 53:59:D5:65:2E:B8:B1:C4:2F:F1:91:4C:A8:58:6A:67:AE:35:A1:63 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 0625162EA8F90F839915C5E04EEED32700BC7114 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/2BE879972F4E90E8FDCB6500D36E6A4A9FF77B0274706A399C0923D38FFEF25B/0/5359D5652EB8B1C42FF1914CA8586A67AE35A163.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/2BE879972F4E90E8FDCB6500D36E6A4A9FF77B0274706A399C0923D38FFEF25B/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Thu 08 May 2025 23:51:51 +0000 Certificate not after: Thu 07 May 2026 23:56:51 +0000 Subordinate resources: AS: 273143 IP: 2803:ac50::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 23 May 2025 00:26:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:25:16:2e:a8:f9:0f:83:99:15:c5:e0:4e:ee:d3:27:00:bc:71:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: May 8 23:51:51 2025 GMT Not After : May 7 23:56:51 2026 GMT Subject: CN=5359D5652EB8B1C42FF1914CA8586A67AE35A163 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a8:d4:fc:9e:44:6d:92:8a:01:e9:5d:6c:cc: 48:6e:6a:71:7d:0e:c1:83:0d:33:ca:53:34:c9:97: e4:e5:8b:56:bc:80:25:a1:bc:f3:82:7a:3c:18:ee: 40:8d:e5:6b:97:e1:8e:9a:43:f4:71:2f:2e:e7:76: 63:eb:be:c0:b2:78:66:a6:85:f9:61:5f:d6:ff:90: a4:1b:d8:0b:40:8e:48:f0:f8:64:5c:e7:07:ce:0a: 6d:ba:8e:31:16:10:f1:89:9f:70:22:21:3c:91:89: 15:b9:06:14:b3:ef:5d:30:d1:74:1d:18:23:10:1b: 8a:6d:10:fc:37:76:d2:54:0c:d1:0c:2d:12:e8:93: 6b:f7:1d:23:8a:05:cd:91:1c:f2:05:2c:e5:1c:4f: 90:41:f7:f6:bc:e4:f8:3d:e4:5f:83:f3:72:dc:c1: 81:b2:8b:62:f3:03:69:b8:e1:38:a2:9e:83:0a:83: 05:2c:80:59:da:5a:f6:e4:bb:53:5e:42:7e:11:f8: 83:bb:db:69:0b:2e:fa:5a:67:98:0b:30:c8:a8:51: 6b:6e:cf:7b:06:29:7b:d9:fd:9f:6a:ba:45:30:63: 06:0e:28:60:5f:3e:3d:c7:dd:cf:47:b5:57:09:a6: 1a:d2:a5:d2:39:00:49:cb:04:d5:15:3d:a1:fb:22: e2:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 53:59:D5:65:2E:B8:B1:C4:2F:F1:91:4C:A8:58:6A:67:AE:35:A1:63 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/2BE879972F4E90E8FDCB6500D36E6A4A9FF77B0274706A399C0923D38FFEF25B/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/2BE879972F4E90E8FDCB6500D36E6A4A9FF77B0274706A399C0923D38FFEF25B/0/5359D5652EB8B1C42FF1914CA8586A67AE35A163.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:ac50::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273143 Signature Algorithm: sha256WithRSAEncryption 52:52:70:a9:2b:4e:bc:94:fd:c1:09:b5:d2:70:b2:02:28:58: 1f:42:af:70:ce:44:f2:d4:ee:49:dc:d5:4b:65:89:0c:2a:36: 2d:6a:3a:b9:a2:f5:5a:6b:50:e0:8b:1e:42:d4:41:f3:e3:a1: 53:bb:94:67:91:87:a0:71:ca:7a:1e:85:3e:07:1d:c1:20:51: c6:85:0b:0a:f3:b7:62:4c:ef:43:52:cd:eb:0b:17:96:b9:b6: aa:08:13:f5:a3:40:a7:1a:3d:4c:49:3e:c6:24:ba:3a:2b:21: 08:69:53:6b:34:da:8a:bb:d4:58:16:60:ad:ac:29:dd:7c:1c: 2d:7c:b4:c5:ba:b8:02:0a:e3:09:e3:19:fc:3b:e5:6f:8f:1d: 8e:88:90:b0:8f:b0:2d:d9:1b:86:e8:f2:d3:d2:bd:3d:3b:41: 46:7c:36:0c:70:a3:44:f2:eb:47:f1:1d:4c:13:c7:a1:ec:37: 83:18:63:2d:3b:f9:83:74:dd:9a:c0:07:4e:fc:35:9c:10:cd: 5b:00:c3:36:f4:6d:b1:d9:30:da:60:03:ee:42:fc:51:e0:fd: 75:96:ea:f6:60:83:b6:53:1a:f3:e9:46:1d:1c:b4:2f:22:c0: 81:2c:4c:45:d6:6f:87:d8:ea:0f:e1:e9:51:88:8e:f1:39:09: 5e:ff:64:af -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUBiUWLqj5D4OZFcXgTu7TJwC8cRQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTA1MDgyMzUxNTFaFw0yNjA1MDcyMzU2NTFaMDMxMTAvBgNV BAMTKDUzNTlENTY1MkVCOEIxQzQyRkYxOTE0Q0E4NTg2QTY3QUUzNUExNjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1qNT8nkRtkooB6V1szEhuanF9 DsGDDTPKUzTJl+Tli1a8gCWhvPOCejwY7kCN5WuX4Y6aQ/RxLy7ndmPrvsCyeGam hflhX9b/kKQb2AtAjkjw+GRc5wfOCm26jjEWEPGJn3AiITyRiRW5BhSz710w0XQd GCMQG4ptEPw3dtJUDNEMLRLok2v3HSOKBc2RHPIFLOUcT5BB9/a85Pg95F+D83Lc wYGyi2LzA2m44TiinoMKgwUsgFnaWvbku1NeQn4R+IO722kLLvpaZ5gLMMioUWtu z3sGKXvZ/Z9qukUwYwYOKGBfPj3H3c9HtVcJphrSpdI5AEnLBNUVPaH7IuLJAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRTWdVlLrixxC/x kUyoWGpnrjWhYzAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMkJFODc5OTcyRjRFOTBFOEZEQ0I2NTAw RDM2RTZBNEE5RkY3N0IwMjc0NzA2QTM5OUMwOTIzRDM4RkZFRjI1Qi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8yQkU4Nzk5NzJGNEU5MEU4RkRDQjY1MDBEMzZFNkE0QTlGRjc3QjAyNzQ3 MDZBMzk5QzA5MjNEMzhGRkVGMjVCLzAvNTM1OUQ1NjUyRUI4QjFDNDJGRjE5MTRD QTg1ODZBNjdBRTM1QTE2My5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAOsUDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEKvcwDQYJKoZIhvcNAQELBQADggEBAFJScKkr TryU/cEJtdJwsgIoWB9Cr3DORPLU7knc1UtliQwqNi1qOrmi9VprUOCLHkLUQfPj oVO7lGeRh6BxynoehT4HHcEgUcaFCwrzt2JM70NSzesLF5a5tqoIE/WjQKcaPUxJ PsYkujorIQhpU2s02oq71FgWYK2sKd18HC18tMW6uAIK4wnjGfw75W+PHY6IkLCP sC3ZG4bo8tPSvT07QUZ8Ngxwo0Ty60fxHUwTx6HsN4MYYy07+YN03ZrAB078NZwQ zVsAwzb0bbHZMNpgA+5C/FHg/XWW6vZgg7ZTGvPpRh0ctC8iwIEsTEXWb4fY6g/h 6VGIjvE5CV7/ZK8= -----END CERTIFICATE-----Generated at Mon May 19 08:07:23 2025 by rpki-client