$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5995D747478C5DCDC0151DBD69361708C3663EEC.cer File: 5995D747478C5DCDC0151DBD69361708C3663EEC.cer (raw, json) Hash identifier: kR5lktr9bkey+J300ihbdPWvQULxdQiac/DAX2TR8YM= Subject key identifier: 59:95:D7:47:47:8C:5D:CD:C0:15:1D:BD:69:36:17:08:C3:66:3E:EC Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 66BE349CA60538106A39B77608832BE1DB8F8BE8 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/D4D647836B8E6046983C7C7DFF49F0F288D6BE2CC2EBEA5DBD736C3EE7B74B12/0/5995D747478C5DCDC0151DBD69361708C3663EEC.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/D4D647836B8E6046983C7C7DFF49F0F288D6BE2CC2EBEA5DBD736C3EE7B74B12/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 13 May 2025 09:39:57 +0000 Certificate not after: Tue 12 May 2026 09:44:57 +0000 Subordinate resources: AS: 269973 IP: 187.49.188.0/22 IP: 2803:b6e0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 21 May 2025 01:23:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:be:34:9c:a6:05:38:10:6a:39:b7:76:08:83:2b:e1:db:8f:8b:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: May 13 09:39:57 2025 GMT Not After : May 12 09:44:57 2026 GMT Subject: CN=5995D747478C5DCDC0151DBD69361708C3663EEC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:69:c7:6b:e7:6b:e9:ea:ef:4f:12:8f:39:5c: 82:47:6d:40:61:70:a9:83:fd:8c:53:30:97:b2:c4: 46:ff:3b:d8:90:75:5f:75:a9:2e:f4:fd:d7:07:f6: 58:0f:7e:9f:30:1d:f5:04:5b:1e:5c:9a:48:f7:e9: 86:6b:4c:3e:44:e9:ed:9d:b5:c0:df:48:d5:11:a4: ec:15:91:a8:28:1f:c5:5b:e6:53:e5:02:be:40:86: 11:0a:1c:fe:e8:62:10:79:b4:61:62:fa:dd:ae:6d: 76:1e:a2:bf:e6:46:2d:88:1f:5a:d9:e7:6a:31:29: 25:39:53:a1:ad:d6:a1:9d:08:74:86:f2:f7:47:1c: bb:3e:79:5d:7e:00:71:5e:b7:0a:50:1c:11:7d:e4: 87:20:ce:61:a5:2a:9e:9e:b8:91:bf:37:46:6c:09: e5:76:cf:df:24:3c:e1:28:87:1f:4f:63:af:8a:67: 7f:fd:8f:c8:57:70:a2:4f:e6:a2:6c:ac:26:d8:ac: 0d:c3:d1:25:e9:cf:f7:44:72:41:5d:7f:30:84:79: 5d:66:0b:bb:c7:b0:78:90:8f:c6:49:f4:79:1a:2d: ca:4e:96:dc:38:cd:15:9b:e1:3c:ff:26:ca:81:47: 53:e4:6d:2e:c4:a4:5d:60:ff:aa:5e:31:c7:a9:53: 6d:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 59:95:D7:47:47:8C:5D:CD:C0:15:1D:BD:69:36:17:08:C3:66:3E:EC X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/D4D647836B8E6046983C7C7DFF49F0F288D6BE2CC2EBEA5DBD736C3EE7B74B12/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/D4D647836B8E6046983C7C7DFF49F0F288D6BE2CC2EBEA5DBD736C3EE7B74B12/0/5995D747478C5DCDC0151DBD69361708C3663EEC.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 187.49.188.0/22 IPv6: 2803:b6e0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 269973 Signature Algorithm: sha256WithRSAEncryption e1:79:d8:e7:d8:1c:4b:c9:e9:1c:d3:bb:43:f6:ae:79:28:70: 17:cf:7d:a3:6a:60:bd:cf:68:06:de:f2:32:35:82:23:d6:06: 99:57:2a:7b:da:36:11:34:25:76:21:e4:27:57:e3:1b:e4:bf: b8:0c:48:be:46:5e:86:ed:03:1f:63:42:b4:0d:0d:35:da:67: 98:14:43:6c:58:65:77:f5:ff:7d:cb:26:f1:47:56:b6:68:7b: 54:27:ad:26:4a:de:67:b1:9b:ba:47:c5:1c:f5:05:48:1e:e1: da:76:b3:01:e3:de:08:63:1c:44:07:39:21:09:25:6d:9c:4e: 60:d6:6f:9e:ba:ba:0a:a9:41:bf:a9:25:10:73:6c:29:38:78: c9:82:db:59:0f:d0:cc:13:09:54:fb:6a:f3:51:a5:e4:6c:7b: 31:67:c5:a8:7a:da:2d:15:f3:e7:ec:78:8d:75:17:cf:2c:00: de:15:5f:65:7d:e3:fc:96:b5:4f:e0:a6:c2:2e:45:e6:ed:b0: b2:58:a7:f4:0c:b5:d8:26:1e:66:14:85:a4:35:5a:a4:a3:b1: 11:4a:ed:f5:d8:24:3b:a9:30:95:8a:49:7c:e1:cb:15:d5:ca: 05:73:0b:0e:50:8f:3a:b8:24:1e:88:be:5c:57:20:45:b3:5c: 53:c2:b3:29 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUZr40nKYFOBBqObd2CIMr4duPi+gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTA1MTMwOTM5NTdaFw0yNjA1MTIwOTQ0NTdaMDMxMTAvBgNV BAMTKDU5OTVENzQ3NDc4QzVEQ0RDMDE1MURCRDY5MzYxNzA4QzM2NjNFRUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzacdr52vp6u9PEo85XIJHbUBh cKmD/YxTMJeyxEb/O9iQdV91qS70/dcH9lgPfp8wHfUEWx5cmkj36YZrTD5E6e2d tcDfSNURpOwVkagoH8Vb5lPlAr5AhhEKHP7oYhB5tGFi+t2ubXYeor/mRi2IH1rZ 52oxKSU5U6Gt1qGdCHSG8vdHHLs+eV1+AHFetwpQHBF95IcgzmGlKp6euJG/N0Zs CeV2z98kPOEohx9PY6+KZ3/9j8hXcKJP5qJsrCbYrA3D0SXpz/dEckFdfzCEeV1m C7vHsHiQj8ZJ9HkaLcpOltw4zRWb4Tz/JsqBR1PkbS7EpF1g/6peMcepU21pAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRZlddHR4xdzcAV Hb1pNhcIw2Y+7DAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRDRENjQ3ODM2QjhFNjA0Njk4M0M3QzdE RkY0OUYwRjI4OEQ2QkUyQ0MyRUJFQTVEQkQ3MzZDM0VFN0I3NEIxMi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9ENEQ2NDc4MzZCOEU2MDQ2OTgzQzdDN0RGRjQ5RjBGMjg4RDZCRTJDQzJF QkVBNURCRDczNkMzRUU3Qjc0QjEyLzAvNTk5NUQ3NDc0NzhDNURDREMwMTUxREJE NjkzNjE3MDhDMzY2M0VFQy5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuzG8MA0EAgAC MAcDBQAoA7bgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQelTANBgkqhkiG9w0B AQsFAAOCAQEA4XnY59gcS8npHNO7Q/aueShwF899o2pgvc9oBt7yMjWCI9YGmVcq e9o2ETQldiHkJ1fjG+S/uAxIvkZehu0DH2NCtA0NNdpnmBRDbFhld/X/fcsm8UdW tmh7VCetJkreZ7GbukfFHPUFSB7h2nazAePeCGMcRAc5IQklbZxOYNZvnrq6CqlB v6klEHNsKTh4yYLbWQ/QzBMJVPtq81Gl5Gx7MWfFqHraLRXz5+x4jXUXzywA3hVf ZX3j/Ja1T+Cmwi5F5u2wslin9Ay12CYeZhSFpDVapKOxEUrt9dgkO6kwlYpJfOHL FdXKBXMLDlCPOrgkHoi+XFcgRbNcU8KzKQ== -----END CERTIFICATE-----Generated at Sat May 17 10:33:47 2025 by rpki-client