$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7DF110C11FBAD69F038D8A73C7DC58153536B585.cer File: 7DF110C11FBAD69F038D8A73C7DC58153536B585.cer (raw, json) Hash identifier: HS2pjMxz31tXH90CsoG1VTmLm0tQZsUZuYiPC3T+mSE= Subject key identifier: 7D:F1:10:C1:1F:BA:D6:9F:03:8D:8A:73:C7:DC:58:15:35:36:B5:85 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 1858E9EF5B0E40B4B06094DA50D556C563FF773F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/1FDFF044E00A423A4F704C48AB5686EDD7C3DE1E17832E609EB40228890BFF8C/0/7DF110C11FBAD69F038D8A73C7DC58153536B585.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/1FDFF044E00A423A4F704C48AB5686EDD7C3DE1E17832E609EB40228890BFF8C/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 29 Apr 2025 00:20:01 +0000 Certificate not after: Tue 28 Apr 2026 00:25:01 +0000 Subordinate resources: AS: 274085 IP: 2803:6d0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 21 May 2025 01:23:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:58:e9:ef:5b:0e:40:b4:b0:60:94:da:50:d5:56:c5:63:ff:77:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Apr 29 00:20:01 2025 GMT Not After : Apr 28 00:25:01 2026 GMT Subject: CN=7DF110C11FBAD69F038D8A73C7DC58153536B585 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:22:58:56:bb:e2:c1:38:e7:38:a6:ec:05:b0: d6:25:8e:41:a6:37:5d:1e:69:d6:c4:c3:e5:70:20: e4:0a:11:ad:df:03:11:b8:e7:96:5b:b6:fa:26:3e: 14:35:d7:5f:5c:47:1c:b1:a1:d1:fa:d7:e9:7d:2b: 84:18:1f:45:bd:f7:cf:d1:98:67:0e:b0:04:21:13: fb:54:0c:2b:c4:b2:28:f2:a5:53:15:16:1e:b8:d9: f5:26:12:f5:c3:90:1b:66:df:13:1f:31:c8:0c:05: 05:88:eb:f1:85:30:3b:9f:31:9c:72:e4:5e:ce:54: c7:b6:57:86:51:33:08:06:44:8e:a4:1f:1e:f3:4d: e5:86:65:ac:8f:4e:fd:79:de:d7:7c:2c:45:55:d6: 10:8d:43:3d:3a:0d:8a:76:c3:8d:10:ed:2e:43:5a: 4b:d7:ac:87:7c:06:84:d6:b2:a8:82:61:2b:83:3d: 61:08:3f:fa:8f:c5:e0:dc:18:84:72:74:0a:a2:ee: d7:3f:2d:04:79:41:04:7f:77:63:07:c4:30:6d:16: 0f:c8:fb:ed:fa:35:fe:bc:20:2d:25:23:7c:1b:cb: 68:0d:44:49:86:e8:1f:c3:87:19:3f:d4:3d:96:70: b7:67:7c:17:05:3e:d9:6b:95:9a:d5:ae:14:68:14: c6:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7D:F1:10:C1:1F:BA:D6:9F:03:8D:8A:73:C7:DC:58:15:35:36:B5:85 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1FDFF044E00A423A4F704C48AB5686EDD7C3DE1E17832E609EB40228890BFF8C/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1FDFF044E00A423A4F704C48AB5686EDD7C3DE1E17832E609EB40228890BFF8C/0/7DF110C11FBAD69F038D8A73C7DC58153536B585.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:6d0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 274085 Signature Algorithm: sha256WithRSAEncryption c9:36:df:2f:56:01:de:4a:73:08:d8:0f:76:5b:ee:66:36:dc: 8f:e9:05:aa:82:40:a9:6c:c8:2f:15:fb:08:c5:a4:a4:b2:1b: 11:48:84:65:5e:ad:2a:5f:18:80:0e:20:aa:2b:23:05:d9:a5: ff:2f:14:2c:1b:b1:c6:89:5c:0d:e5:a9:5e:9b:44:2c:fa:c8: 63:63:84:95:0d:f9:c3:fe:01:1e:91:90:7d:7c:7f:1a:be:e4: 7d:12:72:b3:a3:a1:65:21:aa:16:63:7a:67:97:e6:61:a5:f7: 2a:7b:44:0e:aa:e6:a7:3a:fb:61:32:c1:e8:2d:c6:11:21:83: a1:49:28:26:43:e0:df:a9:53:a6:f1:99:ba:27:bc:2b:24:41: f3:21:43:67:9a:1c:2f:ba:8b:47:8d:82:5f:36:c4:d7:e2:99: 23:46:25:0a:54:2c:37:d8:b6:75:30:d0:5f:ea:19:00:75:83: 04:4a:5d:99:60:ff:74:d1:6e:0a:55:4c:7e:9f:21:ea:7f:3a: 1b:37:c3:aa:82:46:8d:b5:1d:72:49:9e:5e:9a:c5:bc:c4:09: 0e:8b:8c:b4:de:13:86:e5:28:b4:78:2e:5c:37:02:5e:ca:b4: 9f:2b:2b:85:0b:e2:cb:bb:49:4c:90:d9:56:97:ed:c3:2a:d8: f7:b0:97:e2 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUGFjp71sOQLSwYJTaUNVWxWP/dz8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTA0MjkwMDIwMDFaFw0yNjA0MjgwMDI1MDFaMDMxMTAvBgNV BAMTKDdERjExMEMxMUZCQUQ2OUYwMzhEOEE3M0M3REM1ODE1MzUzNkI1ODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOIlhWu+LBOOc4puwFsNYljkGm N10eadbEw+VwIOQKEa3fAxG455ZbtvomPhQ1119cRxyxodH61+l9K4QYH0W998/R mGcOsAQhE/tUDCvEsijypVMVFh642fUmEvXDkBtm3xMfMcgMBQWI6/GFMDufMZxy 5F7OVMe2V4ZRMwgGRI6kHx7zTeWGZayPTv153td8LEVV1hCNQz06DYp2w40Q7S5D WkvXrId8BoTWsqiCYSuDPWEIP/qPxeDcGIRydAqi7tc/LQR5QQR/d2MHxDBtFg/I ++36Nf68IC0lI3wby2gNREmG6B/Dhxk/1D2WcLdnfBcFPtlrlZrVrhRoFMYjAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR98RDBH7rWnwON inPH3FgVNTa1hTAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMUZERkYwNDRFMDBBNDIzQTRGNzA0QzQ4 QUI1Njg2RUREN0MzREUxRTE3ODMyRTYwOUVCNDAyMjg4OTBCRkY4Qy8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8xRkRGRjA0NEUwMEE0MjNBNEY3MDRDNDhBQjU2ODZFREQ3QzNERTFFMTc4 MzJFNjA5RUI0MDIyODg5MEJGRjhDLzAvN0RGMTEwQzExRkJBRDY5RjAzOEQ4QTcz QzdEQzU4MTUzNTM2QjU4NS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAMG0DAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMELqUwDQYJKoZIhvcNAQELBQADggEBAMk23y9W Ad5KcwjYD3Zb7mY23I/pBaqCQKlsyC8V+wjFpKSyGxFIhGVerSpfGIAOIKorIwXZ pf8vFCwbscaJXA3lqV6bRCz6yGNjhJUN+cP+AR6RkH18fxq+5H0ScrOjoWUhqhZj emeX5mGl9yp7RA6q5qc6+2EywegtxhEhg6FJKCZD4N+pU6bxmbonvCskQfMhQ2ea HC+6i0eNgl82xNfimSNGJQpULDfYtnUw0F/qGQB1gwRKXZlg/3TRbgpVTH6fIep/ Ohs3w6qCRo21HXJJnl6axbzECQ6LjLTeE4blKLR4Llw3Al7KtJ8rK4UL4su7SUyQ 2VaX7cMq2Pewl+I= -----END CERTIFICATE-----Generated at Sat May 17 19:11:06 2025 by rpki-client