$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F426F657C9D6BF6728B5D80B4D03FE245BCD97E.cer File: 3F426F657C9D6BF6728B5D80B4D03FE245BCD97E.cer (raw, json) Hash identifier: zgqJW8J1zlOgMfcDyi9Z6oOEd+sGPA0b5ftCrL2rbWQ= Subject key identifier: 3F:42:6F:65:7C:9D:6B:F6:72:8B:5D:80:B4:D0:3F:E2:45:BC:D9:7E Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 53766F4A36B06F6CE9B4B5E1628762C0775EC5A8 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/1CBEE792A2D9789F26940C4FA5AD02A2EF19EDCA696828A818B05D2EFE80B65F/0/3F426F657C9D6BF6728B5D80B4D03FE245BCD97E.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/1CBEE792A2D9789F26940C4FA5AD02A2EF19EDCA696828A818B05D2EFE80B65F/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 17:26:22 +0000 Certificate not after: Wed 04 Feb 2026 17:31:22 +0000 Subordinate resources: AS: 27831 IP: 177.252.0.0/14 IP: 179.12.0.0/14 IP: 181.68.0.0/14 IP: 181.204.0.0/14 IP: 186.97.0.0/16 IP: 186.180.0.0/15 IP: 190.102.192.0/19 IP: 190.120.128.0/20 IP: 191.88.0.0/13 IP: 2803:1800::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 10 May 2025 01:54:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:76:6f:4a:36:b0:6f:6c:e9:b4:b5:e1:62:87:62:c0:77:5e:c5:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 17:26:22 2025 GMT Not After : Feb 4 17:31:22 2026 GMT Subject: CN=3F426F657C9D6BF6728B5D80B4D03FE245BCD97E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:0b:b3:1d:40:41:24:43:67:af:e9:49:d0:7c: 28:af:17:db:7d:a5:fc:e1:2a:a5:63:ed:57:c3:87: 53:32:18:f1:ca:cd:4b:6e:d2:71:04:dd:20:b7:84: 39:9f:82:9d:6c:45:c1:ee:ed:5f:33:af:b8:17:af: 60:9e:ac:4a:1e:5e:78:b7:29:ae:ff:04:05:c1:aa: 1d:12:db:cd:8b:42:d8:4f:1c:ca:f8:e2:75:d5:81: 07:4f:16:b8:08:1e:21:50:dd:b2:2c:f4:43:4f:4a: c9:a3:3e:47:40:5e:79:b5:20:03:71:d0:2f:7a:77: 74:e8:95:8b:d0:81:19:dd:d5:79:5f:5b:15:36:d3: a1:e3:5b:00:15:6f:5d:87:0e:de:d7:1e:fc:21:9a: be:0a:6b:97:e5:29:8f:dd:b6:cf:42:88:56:10:3a: 8a:b8:f6:4d:f6:5b:9b:71:d4:b3:0f:34:54:26:b2: 5e:df:39:a8:77:c5:33:50:cc:52:98:d5:e6:97:69: fb:ac:18:0e:e9:96:89:d4:8a:fb:6b:a3:85:00:c5: b6:d1:11:f9:d2:22:63:f7:db:d8:aa:ac:33:89:83: 04:9a:e3:bb:92:89:cc:88:c2:1c:11:17:16:31:b2: 20:dc:10:79:c6:86:d0:c7:47:9a:15:84:7c:6c:4c: af:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3F:42:6F:65:7C:9D:6B:F6:72:8B:5D:80:B4:D0:3F:E2:45:BC:D9:7E X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1CBEE792A2D9789F26940C4FA5AD02A2EF19EDCA696828A818B05D2EFE80B65F/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1CBEE792A2D9789F26940C4FA5AD02A2EF19EDCA696828A818B05D2EFE80B65F/0/3F426F657C9D6BF6728B5D80B4D03FE245BCD97E.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.252.0.0/14 179.12.0.0/14 181.68.0.0/14 181.204.0.0/14 186.97.0.0/16 186.180.0.0/15 190.102.192.0/19 190.120.128.0/20 191.88.0.0/13 IPv6: 2803:1800::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 27831 Signature Algorithm: sha256WithRSAEncryption 77:78:b6:31:31:2c:1e:d7:dd:ca:0d:db:1e:15:87:30:e0:46: 32:dd:c1:0e:a6:57:f1:c2:6d:9e:48:37:28:4a:8d:20:9e:b4: aa:08:a8:1a:53:5e:48:d1:94:38:f2:72:fb:ee:06:b3:12:59: 5c:fd:35:39:75:51:3b:28:b5:81:fd:85:2f:b3:f8:cf:2d:38: 71:49:59:13:a6:d1:17:73:c7:2d:a3:8e:7c:52:ef:d2:e9:fc: 64:26:14:e0:35:52:60:d8:49:f9:bf:c2:ce:11:88:f4:72:fa: 46:f9:cf:55:4b:2e:ec:50:fc:54:cc:e5:38:87:98:0b:57:5d: ad:22:14:da:96:b9:9e:0c:d7:3d:19:d5:4a:54:11:c1:06:a6: a0:8d:77:6f:87:70:3f:87:7e:1b:44:a4:0c:ce:18:d1:65:0e: 1c:ae:3d:d0:3a:4b:5e:bd:b3:78:db:0e:be:57:c6:e4:19:bb: 7c:fd:bf:60:c1:15:b4:24:fe:ca:be:72:c4:89:0a:ba:da:cf: 97:6f:43:8a:f6:44:d0:2e:79:be:da:06:c6:9b:9c:4c:6c:4e: b1:af:97:07:d6:f9:6d:17:06:c1:aa:b6:f8:49:9c:ca:42:61: d4:ad:bd:7d:f6:fc:03:68:c3:00:70:c1:72:e9:96:99:da:99: a5:f5:d1:32 -----BEGIN CERTIFICATE----- MIIGzTCCBbWgAwIBAgIUU3ZvSjawb2zptLXhYodiwHdexagwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUxNzI2MjJaFw0yNjAyMDQxNzMxMjJaMDMxMTAvBgNV BAMTKDNGNDI2RjY1N0M5RDZCRjY3MjhCNUQ4MEI0RDAzRkUyNDVCQ0Q5N0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlC7MdQEEkQ2ev6UnQfCivF9t9 pfzhKqVj7VfDh1MyGPHKzUtu0nEE3SC3hDmfgp1sRcHu7V8zr7gXr2CerEoeXni3 Ka7/BAXBqh0S282LQthPHMr44nXVgQdPFrgIHiFQ3bIs9ENPSsmjPkdAXnm1IANx 0C96d3TolYvQgRnd1XlfWxU206HjWwAVb12HDt7XHvwhmr4Ka5flKY/dts9CiFYQ Ooq49k32W5tx1LMPNFQmsl7fOah3xTNQzFKY1eaXafusGA7plonUivtro4UAxbbR EfnSImP329iqrDOJgwSa47uSicyIwhwRFxYxsiDcEHnGhtDHR5oVhHxsTK8NAgMB AAGjggPXMIID0zAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ/Qm9lfJ1r9nKL XYC00D/iRbzZfjAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMUNCRUU3OTJBMkQ5Nzg5RjI2OTQwQzRG QTVBRDAyQTJFRjE5RURDQTY5NjgyOEE4MThCMDVEMkVGRTgwQjY1Ri8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8xQ0JFRTc5MkEyRDk3ODlGMjY5NDBDNEZBNUFEMDJBMkVGMTlFRENBNjk2 ODI4QTgxOEIwNUQyRUZFODBCNjVGLzAvM0Y0MjZGNjU3QzlENkJGNjcyOEI1RDgw QjREMDNGRTI0NUJDRDk3RS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFcGCCsGAQUFBwEHAQH/BEgwRjA1BAIAATAvAwMCsfwDAwKzDAMD ArVEAwMCtcwDAwC6YQMDAbq0AwQFvmbAAwQEvniAAwMDv1gwDQQCAAIwBwMFACgD GAAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICbLcwDQYJKoZIhvcNAQELBQADggEB AHd4tjExLB7X3coN2x4VhzDgRjLdwQ6mV/HCbZ5INyhKjSCetKoIqBpTXkjRlDjy cvvuBrMSWVz9NTl1UTsotYH9hS+z+M8tOHFJWROm0Rdzxy2jjnxS79Lp/GQmFOA1 UmDYSfm/ws4RiPRy+kb5z1VLLuxQ/FTM5TiHmAtXXa0iFNqWuZ4M1z0Z1UpUEcEG pqCNd2+HcD+HfhtEpAzOGNFlDhyuPdA6S169s3jbDr5XxuQZu3z9v2DBFbQk/sq+ csSJCrraz5dvQ4r2RNAueb7aBsabnExsTrGvlwfW+W0XBsGqtvhJnMpCYdStvX32 /ANowwBwwXLplpnamaX10TI= -----END CERTIFICATE-----Generated at Tue May 6 07:54:13 2025 by rpki-client