$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6E578CA8449954DBBC23584F2AFE7DA2B7676FB.cer File: B6E578CA8449954DBBC23584F2AFE7DA2B7676FB.cer (raw, json) Hash identifier: kwpnXmHtDYxGKY8f1f3FrCdBdvjbN72SibFOd+WIq1s= Subject key identifier: B6:E5:78:CA:84:49:95:4D:BB:C2:35:84:F2:AF:E7:DA:2B:76:76:FB Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 2818F2521F20CFAD0CAF6B3F2E9E0F2202589E86 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/E295F19CE929CCC1C33E5CE3CB8DD17BCB6FB795965DA37AB89BF27F163EC5D4/0/B6E578CA8449954DBBC23584F2AFE7DA2B7676FB.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/E295F19CE929CCC1C33E5CE3CB8DD17BCB6FB795965DA37AB89BF27F163EC5D4/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 08:15:39 +0000 Certificate not after: Wed 04 Feb 2026 08:20:39 +0000 Subordinate resources: AS: 263836 IP: 143.0.92.0/22 IP: 2803:5640::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 21 May 2025 23:46:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:18:f2:52:1f:20:cf:ad:0c:af:6b:3f:2e:9e:0f:22:02:58:9e:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 08:15:39 2025 GMT Not After : Feb 4 08:20:39 2026 GMT Subject: CN=B6E578CA8449954DBBC23584F2AFE7DA2B7676FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:5b:82:55:95:13:ca:fa:9b:ac:9f:cb:e0:36: 10:21:f3:b8:4a:0b:40:55:2a:d0:ba:84:2b:aa:12: 39:3c:12:56:01:98:f5:cd:ac:09:81:5b:b8:f4:0a: 1f:2a:18:3f:c1:f4:54:bc:20:21:c3:bd:99:65:41: 32:66:de:0a:23:06:4d:9e:6a:ce:20:69:27:f1:40: fe:b9:e7:fe:41:67:4a:e9:5c:ab:96:01:13:3d:73: 27:7e:11:44:0a:c0:0b:f8:9c:45:7e:c5:1b:6c:3d: 9a:bd:3f:90:76:8f:90:a6:94:3b:d0:e6:e1:16:d0: 75:21:99:30:64:03:2e:de:d2:82:1e:00:89:c2:1a: 04:4d:6e:52:97:99:d4:a4:ee:e1:85:3f:c2:b6:3a: 7c:20:a9:59:9d:cb:d7:63:f0:ba:d6:dc:2a:be:b5: 84:98:27:0a:86:46:d0:b8:33:e7:ff:e9:95:d5:5d: ca:65:36:59:32:06:c9:ea:21:f9:a2:7c:e9:17:ab: 67:d0:ce:d1:3e:18:cc:08:c0:f8:69:8d:89:51:34: 3e:f6:f6:f5:be:e3:fd:3a:da:5b:10:8a:d2:44:3e: 60:83:1f:ed:0c:19:28:54:f9:c4:4e:31:3d:29:4a: 41:6e:03:b2:65:1c:60:20:97:46:40:0e:1d:ff:6a: 7d:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B6:E5:78:CA:84:49:95:4D:BB:C2:35:84:F2:AF:E7:DA:2B:76:76:FB X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/E295F19CE929CCC1C33E5CE3CB8DD17BCB6FB795965DA37AB89BF27F163EC5D4/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/E295F19CE929CCC1C33E5CE3CB8DD17BCB6FB795965DA37AB89BF27F163EC5D4/0/B6E578CA8449954DBBC23584F2AFE7DA2B7676FB.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.0.92.0/22 IPv6: 2803:5640::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263836 Signature Algorithm: sha256WithRSAEncryption e2:2a:1f:5c:09:72:0e:53:61:64:ae:89:54:c2:ce:10:cc:70: 51:cf:00:58:39:f1:86:7a:09:cf:90:70:fc:52:20:a4:36:f2: 83:de:62:03:ab:c1:97:81:e5:ed:68:b6:32:3e:77:cc:01:20: 1b:94:90:15:e5:5e:f3:74:dd:ef:3f:6f:39:a0:66:9b:8c:ad: 2a:4e:a8:17:bc:a0:e9:9c:bf:84:98:01:30:4f:cc:e3:ef:96: 2b:0c:c3:71:2e:ac:56:11:c8:d7:dd:60:72:4b:6c:2d:5b:67: 43:47:48:ab:a7:e1:dd:31:b3:61:53:15:91:8f:9f:3d:46:1b: a5:35:c8:40:29:13:fc:66:ac:80:6c:df:bb:f8:11:18:88:6c: 68:71:cc:ce:0a:8e:5c:f8:ae:ce:91:ce:18:e3:28:39:ec:d9: fa:7a:4e:11:4a:06:2a:ae:79:4d:8d:c8:d9:04:09:d5:c4:fd: c9:4f:5c:c8:69:42:20:e9:48:7a:04:73:b5:cd:ee:89:34:54: 45:63:3c:fa:ae:28:41:c5:0f:18:cb:a1:e0:3d:9c:5d:19:39: 2c:97:ae:9d:21:83:53:ce:ab:7b:f6:73:bd:38:e5:58:03:01: 00:81:90:d1:37:85:11:30:31:54:9f:c0:7d:ee:5e:8b:ac:88: 92:1a:72:8f -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUKBjyUh8gz60Mr2s/Lp4PIgJYnoYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUwODE1MzlaFw0yNjAyMDQwODIwMzlaMDMxMTAvBgNV BAMTKEI2RTU3OENBODQ0OTk1NERCQkMyMzU4NEYyQUZFN0RBMkI3Njc2RkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeW4JVlRPK+pusn8vgNhAh87hK C0BVKtC6hCuqEjk8ElYBmPXNrAmBW7j0Ch8qGD/B9FS8ICHDvZllQTJm3gojBk2e as4gaSfxQP655/5BZ0rpXKuWARM9cyd+EUQKwAv4nEV+xRtsPZq9P5B2j5CmlDvQ 5uEW0HUhmTBkAy7e0oIeAInCGgRNblKXmdSk7uGFP8K2OnwgqVmdy9dj8LrW3Cq+ tYSYJwqGRtC4M+f/6ZXVXcplNlkyBsnqIfmifOkXq2fQztE+GMwIwPhpjYlRND72 9vW+4/062lsQitJEPmCDH+0MGShU+cROMT0pSkFuA7JlHGAgl0ZADh3/an33AgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS25XjKhEmVTbvC NYTyr+faK3Z2+zAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTI5NUYxOUNFOTI5Q0NDMUMzM0U1Q0Uz Q0I4REQxN0JDQjZGQjc5NTk2NURBMzdBQjg5QkYyN0YxNjNFQzVENC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9FMjk1RjE5Q0U5MjlDQ0MxQzMzRTVDRTNDQjhERDE3QkNCNkZCNzk1OTY1 REEzN0FCODlCRjI3RjE2M0VDNUQ0LzAvQjZFNTc4Q0E4NDQ5OTU0REJCQzIzNTg0 RjJBRkU3REEyQjc2NzZGQi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCjwBcMA0EAgAC MAcDBQAoA1ZAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQGnDANBgkqhkiG9w0B AQsFAAOCAQEA4iofXAlyDlNhZK6JVMLOEMxwUc8AWDnxhnoJz5Bw/FIgpDbyg95i A6vBl4Hl7Wi2Mj53zAEgG5SQFeVe83Td7z9vOaBmm4ytKk6oF7yg6Zy/hJgBME/M 4++WKwzDcS6sVhHI191gcktsLVtnQ0dIq6fh3TGzYVMVkY+fPUYbpTXIQCkT/Gas gGzfu/gRGIhsaHHMzgqOXPiuzpHOGOMoOezZ+npOEUoGKq55TY3I2QQJ1cT9yU9c yGlCIOlIegRztc3uiTRURWM8+q4oQcUPGMuh4D2cXRk5LJeunSGDU86re/ZzvTjl WAMBAIGQ0TeFETAxVJ/Afe5ei6yIkhpyjw== -----END CERTIFICATE-----Generated at Sun May 18 08:07:21 2025 by rpki-client