$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9AAD2F02A801741992977CEB681E0BF3863AF511.cer File: 9AAD2F02A801741992977CEB681E0BF3863AF511.cer (raw, json) Hash identifier: QOayM71ESFtGeUJSjcB8eVQxn1fcLTNQYAsEiqqxO1Q= Subject key identifier: 9A:AD:2F:02:A8:01:74:19:92:97:7C:EB:68:1E:0B:F3:86:3A:F5:11 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 28AC45A4D1FB93DBAF47344F19DAF902D1E60F0A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/9F0414A690C6398D5C5675D5BB60F39D1588A13F003881671E58745965475F75/0/9AAD2F02A801741992977CEB681E0BF3863AF511.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/9F0414A690C6398D5C5675D5BB60F39D1588A13F003881671E58745965475F75/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Thu 01 May 2025 02:23:28 +0000 Certificate not after: Thu 30 Apr 2026 02:28:28 +0000 Subordinate resources: AS: 272921 IP: 2803:9e90::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 21 May 2025 01:23:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:ac:45:a4:d1:fb:93:db:af:47:34:4f:19:da:f9:02:d1:e6:0f:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: May 1 02:23:28 2025 GMT Not After : Apr 30 02:28:28 2026 GMT Subject: CN=9AAD2F02A801741992977CEB681E0BF3863AF511 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:1c:51:72:6b:a0:0a:f7:65:8a:a3:8e:64:fd: 06:2c:69:30:0e:c4:34:ab:dd:e6:10:31:51:ed:2c: ff:bd:8e:2c:d6:8c:74:24:9f:38:66:a8:a4:fe:4b: a2:6c:bd:2b:25:69:8e:3f:e5:cb:55:90:b7:b0:84: 11:93:4c:ee:c8:0c:7f:66:57:1c:a4:64:bc:8e:36: 2b:7d:37:7c:7a:af:f5:04:fe:f9:e1:4b:84:42:14: 5f:f9:e6:93:e1:9f:e5:98:1b:7a:c6:b9:52:73:a2: 9a:41:a5:fd:a8:b7:d2:0a:b5:fb:04:00:31:7e:51: 65:09:8a:69:e2:ee:95:a1:6d:17:b7:cf:94:79:bf: 6f:1a:97:b2:0d:f2:06:f1:15:f5:d8:57:b1:0d:47: df:f5:3d:13:d4:8d:33:f8:37:91:a1:53:bd:30:1d: 9d:b1:74:aa:51:d0:89:6a:58:6d:1b:60:f7:e8:8d: a6:f0:fb:e1:04:46:48:e8:85:f8:98:4f:10:72:0b: 51:0f:d8:89:f1:89:2f:ae:a0:a5:86:da:95:c9:06: 28:87:3f:32:11:84:aa:b0:7d:5c:eb:b7:a5:7e:c0: 1e:1c:3b:f8:f6:d2:de:03:3e:4c:88:5f:57:02:bc: bd:9a:3c:c5:bd:0d:19:1b:81:e9:7c:93:c9:e8:a4: 92:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9A:AD:2F:02:A8:01:74:19:92:97:7C:EB:68:1E:0B:F3:86:3A:F5:11 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/9F0414A690C6398D5C5675D5BB60F39D1588A13F003881671E58745965475F75/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/9F0414A690C6398D5C5675D5BB60F39D1588A13F003881671E58745965475F75/0/9AAD2F02A801741992977CEB681E0BF3863AF511.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:9e90::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 272921 Signature Algorithm: sha256WithRSAEncryption cc:35:e8:2c:a7:d7:3a:42:9b:d2:7c:f5:03:97:31:f1:7a:85: d4:ee:79:d4:51:de:dc:f0:b9:04:e8:00:e3:6b:b2:3e:f8:08: 62:37:0a:a0:21:de:c0:7c:44:46:e0:69:02:f4:61:52:bb:a7: 5d:bf:44:3b:95:9c:eb:a3:da:39:a9:7a:82:33:3f:4e:1d:f0: f5:ec:26:0a:50:fb:0a:3e:58:25:f7:06:e8:a6:d4:04:35:10: 0e:6c:3a:59:d8:0a:f7:8f:f3:71:f2:68:e3:91:0e:69:8b:79: a7:86:b3:a5:9d:5e:0a:9e:60:7a:c3:85:69:ad:52:a1:5c:86: 57:6e:ef:7d:cd:14:a9:84:8b:19:6e:b9:02:86:db:7f:f1:f5: 64:f2:52:76:a7:a6:c3:df:a9:7a:74:d8:0a:27:e7:79:37:6a: c6:4a:a4:a5:53:b3:78:be:6b:20:3b:94:05:09:18:df:e9:02: de:f2:7a:03:4d:31:cd:1b:bb:1b:e1:6f:93:4b:f7:39:85:ff: 16:73:a8:ef:d1:74:9f:02:47:ee:c0:29:23:86:b2:a9:e5:31: c7:78:0b:a8:bd:c9:31:90:d9:ca:a0:c7:ba:05:5d:85:6b:4c: 51:8c:13:91:c8:e9:a4:ff:5d:a3:5e:73:6f:bc:09:d9:32:fa: 58:e4:a4:3c -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUKKxFpNH7k9uvRzRPGdr5AtHmDwowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTA1MDEwMjIzMjhaFw0yNjA0MzAwMjI4MjhaMDMxMTAvBgNV BAMTKDlBQUQyRjAyQTgwMTc0MTk5Mjk3N0NFQjY4MUUwQkYzODYzQUY1MTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRHFFya6AK92WKo45k/QYsaTAO xDSr3eYQMVHtLP+9jizWjHQknzhmqKT+S6JsvSslaY4/5ctVkLewhBGTTO7IDH9m VxykZLyONit9N3x6r/UE/vnhS4RCFF/55pPhn+WYG3rGuVJzoppBpf2ot9IKtfsE ADF+UWUJimni7pWhbRe3z5R5v28al7IN8gbxFfXYV7ENR9/1PRPUjTP4N5GhU70w HZ2xdKpR0IlqWG0bYPfojabw++EERkjohfiYTxByC1EP2InxiS+uoKWG2pXJBiiH PzIRhKqwfVzrt6V+wB4cO/j20t4DPkyIX1cCvL2aPMW9DRkbgel8k8nopJJLAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSarS8CqAF0GZKX fOtoHgvzhjr1ETAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvOUYwNDE0QTY5MEM2Mzk4RDVDNTY3NUQ1 QkI2MEYzOUQxNTg4QTEzRjAwMzg4MTY3MUU1ODc0NTk2NTQ3NUY3NS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy85RjA0MTRBNjkwQzYzOThENUM1Njc1RDVCQjYwRjM5RDE1ODhBMTNGMDAz ODgxNjcxRTU4NzQ1OTY1NDc1Rjc1LzAvOUFBRDJGMDJBODAxNzQxOTkyOTc3Q0VC NjgxRTBCRjM4NjNBRjUxMS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAOekDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEKhkwDQYJKoZIhvcNAQELBQADggEBAMw16Cyn 1zpCm9J89QOXMfF6hdTuedRR3tzwuQToAONrsj74CGI3CqAh3sB8REbgaQL0YVK7 p12/RDuVnOuj2jmpeoIzP04d8PXsJgpQ+wo+WCX3Buim1AQ1EA5sOlnYCveP83Hy aOORDmmLeaeGs6WdXgqeYHrDhWmtUqFchldu733NFKmEixluuQKG23/x9WTyUnan psPfqXp02Aon53k3asZKpKVTs3i+ayA7lAUJGN/pAt7yegNNMc0buxvhb5NL9zmF /xZzqO/RdJ8CR+7AKSOGsqnlMcd4C6i9yTGQ2cqgx7oFXYVrTFGME5HI6aT/XaNe c2+8Cdky+ljkpDw= -----END CERTIFICATE-----Generated at Fri May 16 19:13:36 2025 by rpki-client