$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979EB6F46297D1850B9D5762A6C41CE6DCD9773E.cer File: 979EB6F46297D1850B9D5762A6C41CE6DCD9773E.cer (raw, json) Hash identifier: dEWqEKR7f+GtjHmW0LTZEUwTm5tGtAhDqTg7I8qWKwI= Subject key identifier: 97:9E:B6:F4:62:97:D1:85:0B:9D:57:62:A6:C4:1C:E6:DC:D9:77:3E Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 0BC562717086F81B7182DC1C8BFE967755AE0C6C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/BF5D727D5C283FFE4055BBDF2A0F15CE07FFE8BE211386EEE2AC29811B57757B/0/979EB6F46297D1850B9D5762A6C41CE6DCD9773E.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/BF5D727D5C283FFE4055BBDF2A0F15CE07FFE8BE211386EEE2AC29811B57757B/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Fri 09 May 2025 12:21:03 +0000 Certificate not after: Fri 08 May 2026 12:26:03 +0000 Subordinate resources: AS: 27853 IP: 200.10.0.0/22 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 21 May 2025 01:23:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:c5:62:71:70:86:f8:1b:71:82:dc:1c:8b:fe:96:77:55:ae:0c:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: May 9 12:21:03 2025 GMT Not After : May 8 12:26:03 2026 GMT Subject: CN=979EB6F46297D1850B9D5762A6C41CE6DCD9773E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:8c:f7:38:8f:0f:c5:0f:71:fb:7e:8f:ef:98: 0a:2d:d4:4e:09:3e:ac:bf:9a:5a:7f:3e:24:8e:25: e5:d8:f7:20:48:5e:95:ec:95:0f:b9:64:d1:8c:1d: 4f:2c:e9:d6:37:97:98:eb:ea:c9:4a:d9:af:64:df: bd:d2:7d:35:08:37:94:07:33:a2:3a:e7:27:ee:f5: db:c6:e3:59:89:77:72:50:c2:f0:52:c4:20:c4:46: 76:63:7a:de:69:4a:f6:23:8d:0a:a8:60:78:52:92: 8f:9a:06:89:d1:1b:7e:22:11:87:fc:bd:6f:dc:ca: 3d:5d:aa:a1:6f:79:ca:33:f0:3e:e3:fa:41:1c:18: 25:67:38:2e:6b:6f:98:a8:4f:bf:00:04:3a:08:93: 42:ec:66:07:19:e3:d5:c1:22:79:cb:d0:b1:ee:0d: 07:bd:bc:f1:28:99:dd:a7:0a:87:8b:11:01:9c:3a: aa:7c:6c:72:c8:02:69:c2:12:32:98:27:fd:29:d5: 6f:f9:bc:ed:3c:3d:d4:86:5c:a3:84:82:b1:1c:77: f9:80:54:51:9e:76:7e:4a:f5:1d:fc:cf:27:79:23: f0:c1:aa:ad:17:68:5a:3e:63:e8:30:ee:32:4b:6c: 53:ee:3f:b2:57:1c:59:60:50:de:59:21:f6:85:a9: 9f:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 97:9E:B6:F4:62:97:D1:85:0B:9D:57:62:A6:C4:1C:E6:DC:D9:77:3E X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/BF5D727D5C283FFE4055BBDF2A0F15CE07FFE8BE211386EEE2AC29811B57757B/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/BF5D727D5C283FFE4055BBDF2A0F15CE07FFE8BE211386EEE2AC29811B57757B/0/979EB6F46297D1850B9D5762A6C41CE6DCD9773E.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.10.0.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 27853 Signature Algorithm: sha256WithRSAEncryption c1:35:aa:ff:9d:74:55:19:87:50:e5:27:94:48:be:e1:59:16: 81:d0:86:08:74:c4:9e:06:f2:3d:24:4d:b7:12:a3:5f:e1:c4: ca:ab:d1:1d:2e:6c:3f:0a:a7:8e:be:2f:c9:c3:05:07:b7:6e: e6:af:fe:4b:80:8e:47:9d:89:bd:20:a2:24:75:8e:3a:ea:1f: 95:64:ee:31:62:23:29:87:ab:f8:b9:40:be:7d:e5:59:4a:c4: af:0a:1d:af:d8:29:57:a5:33:85:b3:86:9c:44:13:54:4e:fa: 6b:10:0a:1a:b1:44:f1:b6:a8:71:e8:0b:ed:97:f2:cd:e4:82: 36:d8:f0:f5:18:33:e5:42:9c:80:8a:96:7f:76:59:cc:be:c3: d4:ad:69:ed:56:ba:67:4a:f2:c6:de:b0:1a:88:60:ae:af:b6: ec:59:5c:3a:67:4f:38:82:a2:fa:a4:8f:7b:bb:04:d4:54:ce: e8:23:48:7f:ca:43:65:de:29:1d:5a:bf:17:67:e4:07:3c:f8: d3:44:cc:81:9c:1b:4e:e4:25:e7:43:8b:b1:09:0b:60:ab:86: b0:41:19:42:3e:96:82:43:3d:8c:3f:42:96:c0:48:22:f9:57: e3:70:50:7b:90:4c:0c:ee:28:f1:a7:92:8e:a3:de:74:30:7d: 7c:98:d2:2b -----BEGIN CERTIFICATE----- MIIGlTCCBX2gAwIBAgIUC8VicXCG+Btxgtwci/6Wd1WuDGwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTA1MDkxMjIxMDNaFw0yNjA1MDgxMjI2MDNaMDMxMTAvBgNV BAMTKDk3OUVCNkY0NjI5N0QxODUwQjlENTc2MkE2QzQxQ0U2RENEOTc3M0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCejPc4jw/FD3H7fo/vmAot1E4J Pqy/mlp/PiSOJeXY9yBIXpXslQ+5ZNGMHU8s6dY3l5jr6slK2a9k373SfTUIN5QH M6I65yfu9dvG41mJd3JQwvBSxCDERnZjet5pSvYjjQqoYHhSko+aBonRG34iEYf8 vW/cyj1dqqFvecoz8D7j+kEcGCVnOC5rb5ioT78ABDoIk0LsZgcZ49XBInnL0LHu DQe9vPEomd2nCoeLEQGcOqp8bHLIAmnCEjKYJ/0p1W/5vO08PdSGXKOEgrEcd/mA VFGedn5K9R38zyd5I/DBqq0XaFo+Y+gw7jJLbFPuP7JXHFlgUN5ZIfaFqZ8xAgMB AAGjggOfMIIDmzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSXnrb0YpfRhQud V2KmxBzm3Nl3PjAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQkY1RDcyN0Q1QzI4M0ZGRTQwNTVCQkRG MkEwRjE1Q0UwN0ZGRThCRTIxMTM4NkVFRTJBQzI5ODExQjU3NzU3Qi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9CRjVENzI3RDVDMjgzRkZFNDA1NUJCREYyQTBGMTVDRTA3RkZFOEJFMjEx Mzg2RUVFMkFDMjk4MTFCNTc3NTdCLzAvOTc5RUI2RjQ2Mjk3RDE4NTBCOUQ1NzYy QTZDNDFDRTZEQ0Q5NzczRS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCyAoAMBkGCCsG AQUFBwEIAQH/BAowCKAGMAQCAmzNMA0GCSqGSIb3DQEBCwUAA4IBAQDBNar/nXRV GYdQ5SeUSL7hWRaB0IYIdMSeBvI9JE23EqNf4cTKq9EdLmw/CqeOvi/JwwUHt27m r/5LgI5HnYm9IKIkdY466h+VZO4xYiMph6v4uUC+feVZSsSvCh2v2ClXpTOFs4ac RBNUTvprEAoasUTxtqhx6Avtl/LN5II22PD1GDPlQpyAipZ/dlnMvsPUrWntVrpn SvLG3rAaiGCur7bsWVw6Z084gqL6pI97uwTUVM7oI0h/ykNl3ikdWr8XZ+QHPPjT RMyBnBtO5CXnQ4uxCQtgq4awQRlCPpaCQz2MP0KWwEgi+VfjcFB7kEwM7ijxp5KO o950MH18mNIr -----END CERTIFICATE-----Generated at Sat May 17 15:53:36 2025 by rpki-client