$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BAAC1952282A23543D0C7E9EFFAAB7C6B7E0E6D9.cer File: BAAC1952282A23543D0C7E9EFFAAB7C6B7E0E6D9.cer (raw, json) Hash identifier: BubHxEpHfC5shgL9DhfyktxrEPBh3/bniT19PsE7ub8= Subject key identifier: BA:AC:19:52:28:2A:23:54:3D:0C:7E:9E:FF:AA:B7:C6:B7:E0:E6:D9 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 5FF456BD4B27CBF3642E0A04961B1E882F6CED0F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/2613E994596DBA6A9AC0FE5E47941368EDF821B9680E06BA2C896008349C1176/0/BAAC1952282A23543D0C7E9EFFAAB7C6B7E0E6D9.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/2613E994596DBA6A9AC0FE5E47941368EDF821B9680E06BA2C896008349C1176/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Thu 15 May 2025 14:45:01 +0000 Certificate not after: Thu 14 May 2026 14:50:01 +0000 Subordinate resources: IP: 2801:1d:c800::/48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 21 May 2025 23:46:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:f4:56:bd:4b:27:cb:f3:64:2e:0a:04:96:1b:1e:88:2f:6c:ed:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: May 15 14:45:01 2025 GMT Not After : May 14 14:50:01 2026 GMT Subject: CN=BAAC1952282A23543D0C7E9EFFAAB7C6B7E0E6D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d7:2d:1b:69:12:87:57:7c:a7:40:9c:9e:ae: 6e:c0:5e:74:b9:2a:9f:2f:90:e2:e5:ce:90:19:98: 1c:47:0e:09:ed:85:d3:ff:5e:25:95:7b:6c:fb:66: 37:ac:e2:52:9a:8a:18:80:ab:bd:23:f3:f1:61:f5: a1:9c:21:7c:59:89:52:0f:74:bd:c1:77:10:a9:1f: 28:94:45:f7:c5:8e:22:1a:08:b2:a1:fa:1e:f2:05: 10:b9:c0:81:11:39:04:0d:07:c2:33:7a:ae:31:11: 75:c8:e7:2c:d4:f3:5f:01:41:6c:7a:9a:9a:4d:68: dd:2b:b7:96:ba:0d:cf:54:e4:4d:bd:b8:26:42:cb: 25:a1:0b:e5:df:78:64:f0:2e:f4:40:0a:28:24:de: 00:f8:3f:aa:4e:cc:49:c9:81:39:d9:3e:5e:ec:4c: 4b:93:16:cd:10:09:43:55:15:6c:6b:26:4c:5a:79: ea:10:9d:60:3c:15:49:29:7a:57:72:06:c1:c2:7c: 46:de:0c:ac:58:d8:b9:92:ec:f7:b8:1b:06:a8:b2: c8:bc:37:6e:40:9d:6b:7d:6d:c7:34:89:90:c8:ac: 5c:31:7c:20:f8:6c:99:1e:40:a7:1d:99:1d:2d:da: e0:24:d9:11:ff:d5:df:49:b7:63:8a:d8:eb:9e:c3: eb:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BA:AC:19:52:28:2A:23:54:3D:0C:7E:9E:FF:AA:B7:C6:B7:E0:E6:D9 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/2613E994596DBA6A9AC0FE5E47941368EDF821B9680E06BA2C896008349C1176/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/2613E994596DBA6A9AC0FE5E47941368EDF821B9680E06BA2C896008349C1176/0/BAAC1952282A23543D0C7E9EFFAAB7C6B7E0E6D9.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2801:1d:c800::/48 Signature Algorithm: sha256WithRSAEncryption d4:3d:c5:55:23:2a:97:15:82:e6:bc:01:43:bc:69:e8:d2:29: 38:80:f4:64:82:f5:f2:9b:c4:a3:8c:d0:0e:55:ff:9e:3f:fa: 5e:6c:88:9c:16:d8:52:d1:9c:43:ab:c7:81:6d:fe:68:b2:13: df:34:41:ee:44:2b:05:4b:83:06:43:cc:69:c1:79:41:ce:cf: 16:bb:11:d9:56:26:d8:f1:db:12:06:8d:0a:13:9a:78:ac:8e: 83:ed:a2:28:46:4f:25:64:ed:a9:45:75:05:24:ed:ca:ef:7c: 9f:f6:85:6f:6b:05:22:77:09:ec:c9:ee:e7:3a:f3:ff:37:80: 75:3a:b9:b5:21:a6:c0:d7:fc:e8:37:91:2b:0b:f6:ea:60:e5: bd:cf:d4:9b:21:28:a8:0e:fe:bc:1a:52:d1:bc:c7:97:0d:22: 53:b2:52:c9:5c:09:b3:ea:99:7e:ea:e8:1e:53:f4:51:14:e9: 64:ac:e2:80:a3:63:8d:20:12:ae:9a:17:4c:8a:df:d5:b0:bc: 90:1a:d7:de:4a:da:60:07:ee:c1:86:5d:60:15:1e:78:48:32: 48:58:ad:93:34:2c:ca:aa:7e:03:8b:c8:e9:22:49:63:1c:37: 7e:1f:68:4e:36:f2:da:64:93:89:72:26:5b:0f:56:aa:cb:f8: c1:13:06:33 -----BEGIN CERTIFICATE----- MIIGfTCCBWWgAwIBAgIUX/RWvUsny/NkLgoElhseiC9s7Q8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTA1MTUxNDQ1MDFaFw0yNjA1MTQxNDUwMDFaMDMxMTAvBgNV BAMTKEJBQUMxOTUyMjgyQTIzNTQzRDBDN0U5RUZGQUFCN0M2QjdFMEU2RDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx1y0baRKHV3ynQJyerm7AXnS5 Kp8vkOLlzpAZmBxHDgnthdP/XiWVe2z7Zjes4lKaihiAq70j8/Fh9aGcIXxZiVIP dL3BdxCpHyiURffFjiIaCLKh+h7yBRC5wIEROQQNB8Izeq4xEXXI5yzU818BQWx6 mppNaN0rt5a6Dc9U5E29uCZCyyWhC+XfeGTwLvRACigk3gD4P6pOzEnJgTnZPl7s TEuTFs0QCUNVFWxrJkxaeeoQnWA8FUkpeldyBsHCfEbeDKxY2LmS7Pe4Gwaossi8 N25AnWt9bcc0iZDIrFwxfCD4bJkeQKcdmR0t2uAk2RH/1d9Jt2OK2Ouew+snAgMB AAGjggOHMIIDgzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS6rBlSKCojVD0M fp7/qrfGt+Dm2TAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMjYxM0U5OTQ1OTZEQkE2QTlBQzBGRTVF NDc5NDEzNjhFREY4MjFCOTY4MEUwNkJBMkM4OTYwMDgzNDlDMTE3Ni8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8yNjEzRTk5NDU5NkRCQTZBOUFDMEZFNUU0Nzk0MTM2OEVERjgyMUI5Njgw RTA2QkEyQzg5NjAwODM0OUMxMTc2LzAvQkFBQzE5NTIyODJBMjM1NDNEMEM3RTlF RkZBQUI3QzZCN0UwRTZEOS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKAEAHcgAMA0G CSqGSIb3DQEBCwUAA4IBAQDUPcVVIyqXFYLmvAFDvGno0ik4gPRkgvXym8SjjNAO Vf+eP/pebIicFthS0ZxDq8eBbf5oshPfNEHuRCsFS4MGQ8xpwXlBzs8WuxHZVibY 8dsSBo0KE5p4rI6D7aIoRk8lZO2pRXUFJO3K73yf9oVvawUidwnsye7nOvP/N4B1 Orm1IabA1/zoN5ErC/bqYOW9z9SbISioDv68GlLRvMeXDSJTslLJXAmz6pl+6uge U/RRFOlkrOKAo2ONIBKumhdMit/VsLyQGtfeStpgB+7Bhl1gFR54SDJIWK2TNCzK qn4Di8jpIkljHDd+H2hONvLaZJOJciZbD1aqy/jBEwYz -----END CERTIFICATE-----Generated at Sun May 18 04:54:05 2025 by rpki-client