$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3AB0F2A50E26DE0A547253EF9F232658AEDD5CE.cer File: D3AB0F2A50E26DE0A547253EF9F232658AEDD5CE.cer (raw, json) Hash identifier: RtFtFQIMLlGgr6Tp6LWfWrG///v2sUTQ4AHypOMSVK4= Subject key identifier: D3:AB:0F:2A:50:E2:6D:E0:A5:47:25:3E:F9:F2:32:65:8A:ED:D5:CE Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 75D89439F205848BAED659AAE4465B9D543A3BC6 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/005B17CC95ED5E2E232FBCBCBB1FC9995E0A70F38A41F822AC699D00E6C3D063/0/D3AB0F2A50E26DE0A547253EF9F232658AEDD5CE.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/005B17CC95ED5E2E232FBCBCBB1FC9995E0A70F38A41F822AC699D00E6C3D063/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 06 May 2025 12:15:00 +0000 Certificate not after: Tue 05 May 2026 12:20:00 +0000 Subordinate resources: AS: 273859 IP: 2803:b550::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 21 May 2025 23:46:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:d8:94:39:f2:05:84:8b:ae:d6:59:aa:e4:46:5b:9d:54:3a:3b:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: May 6 12:15:00 2025 GMT Not After : May 5 12:20:00 2026 GMT Subject: CN=D3AB0F2A50E26DE0A547253EF9F232658AEDD5CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:bd:b2:37:2c:97:ea:76:da:82:d6:4d:ac:c9: ae:fe:e7:70:c2:1b:30:57:3e:71:35:de:d3:a2:72: d4:25:64:a5:0c:09:7b:e4:5d:f7:42:a9:6a:05:e9: 43:f3:c5:63:3b:17:5a:57:28:1f:2f:67:82:97:78: 13:ec:c0:3c:2e:a8:00:93:bf:20:bf:5a:2c:36:cd: 37:4e:c1:21:d4:a9:44:44:0c:8b:b4:f3:2b:35:e6: 04:72:75:f2:0d:fc:06:cf:0e:fa:2b:8e:01:07:23: 0d:2f:9f:68:19:e1:f6:fe:96:a8:09:db:b8:58:62: 30:99:8c:c3:5b:4f:a9:63:04:e7:79:8e:09:43:a7: f5:6c:59:0a:b2:8c:64:6f:3a:81:30:af:18:01:37: 2c:59:17:87:42:49:a8:2b:59:b7:59:3b:bc:1b:dd: 57:52:19:cb:c8:fd:80:0c:e4:bc:24:e8:9d:3c:f7: c4:f2:31:ea:97:25:96:98:49:26:97:a6:37:10:ea: b5:e3:e3:10:12:ee:f9:f9:a8:32:a1:74:32:2f:ec: a4:7b:b9:d2:88:9d:d2:a4:11:4a:87:0b:f4:5f:9e: aa:07:ec:5c:af:f2:fe:c3:77:a0:39:73:fe:a9:cb: 00:2a:18:ea:fa:af:40:64:40:9a:13:44:74:da:aa: 0a:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D3:AB:0F:2A:50:E2:6D:E0:A5:47:25:3E:F9:F2:32:65:8A:ED:D5:CE X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/005B17CC95ED5E2E232FBCBCBB1FC9995E0A70F38A41F822AC699D00E6C3D063/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/005B17CC95ED5E2E232FBCBCBB1FC9995E0A70F38A41F822AC699D00E6C3D063/0/D3AB0F2A50E26DE0A547253EF9F232658AEDD5CE.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:b550::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273859 Signature Algorithm: sha256WithRSAEncryption b1:16:1b:00:21:d7:3e:c3:76:e5:54:c4:56:8c:93:cb:95:6d: e8:20:8d:03:57:8f:e2:84:2f:ae:3e:cb:c7:c6:95:84:6e:c9: b2:19:55:29:76:92:b3:3d:e7:f5:a0:13:ba:e6:14:78:f7:86: 9e:9d:ef:20:ec:e0:2b:a3:e2:67:fd:60:b2:f3:d7:cc:28:6d: e8:0a:ae:af:47:92:65:e0:16:48:ea:eb:21:3f:97:b6:39:c5: 30:23:dd:8c:e4:a2:96:b7:fa:fe:f0:57:56:05:f0:e0:25:f2: 21:50:42:6d:28:8c:ce:80:1e:40:4f:89:64:f4:41:12:bd:7f: bd:6a:e3:ff:84:49:bb:46:42:e5:42:b6:a9:bb:3d:5e:a5:a3: 16:1c:d1:4f:26:36:f0:8d:d5:65:4a:33:62:cb:3a:c6:61:d1: 5f:49:7b:68:c8:8e:1e:cf:8f:6d:13:02:75:bb:48:a6:25:9c: 46:29:ab:c8:00:f1:fd:70:43:99:f6:dd:32:33:b4:45:86:29: af:ba:76:9b:92:ab:be:f2:4b:bf:5c:19:47:62:ad:94:52:b5: d9:1c:d8:06:fa:48:33:ef:e9:dd:ea:c7:30:bb:fc:f7:02:2c: 4f:fc:4f:28:be:cd:3b:37:e4:c0:77:a9:67:87:ff:dc:1f:24: df:01:3d:c6 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUddiUOfIFhIuu1lmq5EZbnVQ6O8YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTA1MDYxMjE1MDBaFw0yNjA1MDUxMjIwMDBaMDMxMTAvBgNV BAMTKEQzQUIwRjJBNTBFMjZERTBBNTQ3MjUzRUY5RjIzMjY1OEFFREQ1Q0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChvbI3LJfqdtqC1k2sya7+53DC GzBXPnE13tOictQlZKUMCXvkXfdCqWoF6UPzxWM7F1pXKB8vZ4KXeBPswDwuqACT vyC/Wiw2zTdOwSHUqUREDIu08ys15gRydfIN/AbPDvorjgEHIw0vn2gZ4fb+lqgJ 27hYYjCZjMNbT6ljBOd5jglDp/VsWQqyjGRvOoEwrxgBNyxZF4dCSagrWbdZO7wb 3VdSGcvI/YAM5Lwk6J0898TyMeqXJZaYSSaXpjcQ6rXj4xAS7vn5qDKhdDIv7KR7 udKIndKkEUqHC/RfnqoH7Fyv8v7Dd6A5c/6pywAqGOr6r0BkQJoTRHTaqgr7AgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTTqw8qUOJt4KVH JT758jJliu3VzjAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMDA1QjE3Q0M5NUVENUUyRTIzMkZCQ0JD QkIxRkM5OTk1RTBBNzBGMzhBNDFGODIyQUM2OTlEMDBFNkMzRDA2My8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8wMDVCMTdDQzk1RUQ1RTJFMjMyRkJDQkNCQjFGQzk5OTVFMEE3MEYzOEE0 MUY4MjJBQzY5OUQwMEU2QzNEMDYzLzAvRDNBQjBGMkE1MEUyNkRFMEE1NDcyNTNF RjlGMjMyNjU4QUVERDVDRS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAO1UDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMELcMwDQYJKoZIhvcNAQELBQADggEBALEWGwAh 1z7DduVUxFaMk8uVbeggjQNXj+KEL64+y8fGlYRuybIZVSl2krM95/WgE7rmFHj3 hp6d7yDs4Cuj4mf9YLLz18wobegKrq9HkmXgFkjq6yE/l7Y5xTAj3Yzkopa3+v7w V1YF8OAl8iFQQm0ojM6AHkBPiWT0QRK9f71q4/+ESbtGQuVCtqm7PV6loxYc0U8m NvCN1WVKM2LLOsZh0V9Je2jIjh7Pj20TAnW7SKYlnEYpq8gA8f1wQ5n23TIztEWG Ka+6dpuSq77yS79cGUdirZRStdkc2Ab6SDPv6d3qxzC7/PcCLE/8Tyi+zTs35MB3 qWeH/9wfJN8BPcY= -----END CERTIFICATE-----Generated at Sun May 18 15:33:41 2025 by rpki-client