$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/942BABE0B62CFEB8749F1EBA716D62B61F58FE3B.cer File: 942BABE0B62CFEB8749F1EBA716D62B61F58FE3B.cer (raw, json) Hash identifier: l83auK46Ne3trsBNz98M3XTGxoAHv+HkBriiUWy6RlE= Subject key identifier: 94:2B:AB:E0:B6:2C:FE:B8:74:9F:1E:BA:71:6D:62:B6:1F:58:FE:3B Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 2128E24748FD7689F1C662104CDA167CDCBE4F5C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/5D390766D73B05070156976AE1D11FA9DE87C813403538EF88FC4B978E9473C3/0/942BABE0B62CFEB8749F1EBA716D62B61F58FE3B.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/5D390766D73B05070156976AE1D11FA9DE87C813403538EF88FC4B978E9473C3/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 13 May 2025 01:43:59 +0000 Certificate not after: Tue 12 May 2026 01:48:59 +0000 Subordinate resources: IP: 181.114.232.0/21 IP: 2803:7500::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 21 May 2025 23:46:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:28:e2:47:48:fd:76:89:f1:c6:62:10:4c:da:16:7c:dc:be:4f:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: May 13 01:43:59 2025 GMT Not After : May 12 01:48:59 2026 GMT Subject: CN=942BABE0B62CFEB8749F1EBA716D62B61F58FE3B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:77:ce:a0:21:8b:25:76:2c:14:97:0f:10:1e: e6:db:d2:d7:5d:76:b0:98:47:6b:f7:d9:42:a7:42: 07:7f:cf:da:e5:46:c6:d8:c0:7f:07:14:00:87:ce: bd:31:10:6a:12:f5:99:01:93:aa:20:c0:e8:2e:3c: c2:1e:71:a7:78:b2:63:e9:54:9d:e4:43:02:e5:0b: 28:a0:ed:99:c8:d7:c1:ef:a6:cb:54:28:1e:40:72: cd:23:e2:d7:d5:ee:5c:bd:37:3e:10:b3:d7:67:2b: 26:ff:11:12:20:d5:0b:80:70:59:92:38:0c:29:4b: 97:b7:f1:6d:ed:45:ad:79:6d:ee:da:88:fb:f9:15: 58:1b:3c:03:55:de:cd:70:d6:48:67:fd:62:2d:7b: 1b:47:d5:b8:76:80:dc:ad:c3:4c:38:19:33:8d:39: 2e:ec:de:46:11:fd:42:a8:73:9a:66:d7:74:2f:1b: 5c:dc:59:33:27:dc:d1:c7:ae:71:16:18:61:a0:a2: 2d:5f:4a:57:6a:33:e7:be:64:f1:56:b4:cb:13:b0: cd:5c:e6:13:e9:82:40:20:32:13:55:32:a6:6c:dd: 7f:a8:48:58:ae:b8:a9:a9:07:bb:ee:86:ed:ae:4c: c0:6b:57:bc:3d:bb:5e:37:1e:79:85:0b:04:ff:fe: 2b:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 94:2B:AB:E0:B6:2C:FE:B8:74:9F:1E:BA:71:6D:62:B6:1F:58:FE:3B X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/5D390766D73B05070156976AE1D11FA9DE87C813403538EF88FC4B978E9473C3/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/5D390766D73B05070156976AE1D11FA9DE87C813403538EF88FC4B978E9473C3/0/942BABE0B62CFEB8749F1EBA716D62B61F58FE3B.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 181.114.232.0/21 IPv6: 2803:7500::/32 Signature Algorithm: sha256WithRSAEncryption b2:04:61:b4:c4:41:a8:a7:52:18:1d:a7:d3:24:23:e7:c6:32: f8:51:5a:b5:08:d0:af:1e:9d:b7:27:9e:7d:bf:49:f2:f2:fe: 6c:ac:a9:06:85:aa:95:e5:59:4c:35:15:6c:13:37:96:5b:3a: 09:34:d0:84:8b:27:14:c8:0d:92:b0:7a:7d:be:1c:bf:1a:23: 7c:bf:ab:07:19:cd:9d:e8:49:a5:48:81:f3:e1:59:3d:d2:26: e4:90:08:6c:a0:c8:5d:9e:bd:30:5f:93:a1:8e:2a:66:ea:c6: 30:ef:7b:ff:09:17:bc:54:9d:fa:de:b3:85:e3:94:a7:dd:7c: 1c:27:73:6c:bb:09:b9:9f:80:5a:08:25:62:a2:6b:69:0d:a0: fd:63:49:52:97:57:68:7a:4f:80:6c:da:60:39:61:dc:93:06: 85:f4:c1:95:0f:ed:10:d0:ca:a8:5b:10:e0:ed:dd:58:60:e7: e9:a3:b1:ce:79:ae:64:0c:d7:66:df:ef:7a:75:9d:56:44:05: 37:34:c7:01:1c:5e:ed:3c:58:65:aa:41:6e:cd:1e:2f:b6:51: a3:b1:3d:24:c6:41:b3:91:1f:57:4a:1d:33:e2:c5:e4:88:51: 4c:00:32:8b:d2:c4:0e:87:1d:16:8c:21:00:54:dd:49:f3:06: ca:9e:02:0f -----BEGIN CERTIFICATE----- MIIGiTCCBXGgAwIBAgIUISjiR0j9donxxmIQTNoWfNy+T1wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTA1MTMwMTQzNTlaFw0yNjA1MTIwMTQ4NTlaMDMxMTAvBgNV BAMTKDk0MkJBQkUwQjYyQ0ZFQjg3NDlGMUVCQTcxNkQ2MkI2MUY1OEZFM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDId86gIYsldiwUlw8QHubb0tdd drCYR2v32UKnQgd/z9rlRsbYwH8HFACHzr0xEGoS9ZkBk6ogwOguPMIecad4smPp VJ3kQwLlCyig7ZnI18HvpstUKB5Acs0j4tfV7ly9Nz4Qs9dnKyb/ERIg1QuAcFmS OAwpS5e38W3tRa15be7aiPv5FVgbPANV3s1w1khn/WItextH1bh2gNytw0w4GTON OS7s3kYR/UKoc5pm13QvG1zcWTMn3NHHrnEWGGGgoi1fSldqM+e+ZPFWtMsTsM1c 5hPpgkAgMhNVMqZs3X+oSFiuuKmpB7vuhu2uTMBrV7w9u143HnmFCwT//ivrAgMB AAGjggOTMIIDjzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSUK6vgtiz+uHSf HrpxbWK2H1j+OzAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNUQzOTA3NjZENzNCMDUwNzAxNTY5NzZB RTFEMTFGQTlERTg3QzgxMzQwMzUzOEVGODhGQzRCOTc4RTk0NzNDMy8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy81RDM5MDc2NkQ3M0IwNTA3MDE1Njk3NkFFMUQxMUZBOURFODdDODEzNDAz NTM4RUY4OEZDNEI5NzhFOTQ3M0MzLzAvOTQyQkFCRTBCNjJDRkVCODc0OUYxRUJB NzE2RDYyQjYxRjU4RkUzQi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDtXLoMA0EAgAC MAcDBQAoA3UAMA0GCSqGSIb3DQEBCwUAA4IBAQCyBGG0xEGop1IYHafTJCPnxjL4 UVq1CNCvHp23J559v0ny8v5srKkGhaqV5VlMNRVsEzeWWzoJNNCEiycUyA2SsHp9 vhy/GiN8v6sHGc2d6EmlSIHz4Vk90ibkkAhsoMhdnr0wX5Ohjipm6sYw73v/CRe8 VJ363rOF45Sn3XwcJ3Nsuwm5n4BaCCViomtpDaD9Y0lSl1doek+AbNpgOWHckwaF 9MGVD+0Q0MqoWxDg7d1YYOfpo7HOea5kDNdm3+96dZ1WRAU3NMcBHF7tPFhlqkFu zR4vtlGjsT0kxkGzkR9XSh0z4sXkiFFMADKL0sQOhx0WjCEAVN1J8wbKngIP -----END CERTIFICATE-----Generated at Sun May 18 07:25:05 2025 by rpki-client