$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/03C012BF937B42653C39221C7A9AA7F87567EC7A.cer File: 03C012BF937B42653C39221C7A9AA7F87567EC7A.cer (raw, json) Hash identifier: HHkDrnRbyQHVFLX3XLhAE1ENosqPzLteq38C0s19/14= Subject key identifier: 03:C0:12:BF:93:7B:42:65:3C:39:22:1C:7A:9A:A7:F8:75:67:EC:7A Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 609786AE761C05A6D56C4097557C81EFE83B952B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/086D08F080C910C63925836D1D583A1AA9DD8338C378A0CB1EC151E9CBE67607/0/03C012BF937B42653C39221C7A9AA7F87567EC7A.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/086D08F080C910C63925836D1D583A1AA9DD8338C378A0CB1EC151E9CBE67607/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 22:18:09 +0000 Certificate not after: Wed 04 Feb 2026 22:23:09 +0000 Subordinate resources: AS: 270159 IP: 2806:3e6::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 09 Apr 2025 06:41:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:97:86:ae:76:1c:05:a6:d5:6c:40:97:55:7c:81:ef:e8:3b:95:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 22:18:09 2025 GMT Not After : Feb 4 22:23:09 2026 GMT Subject: CN=03C012BF937B42653C39221C7A9AA7F87567EC7A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a9:80:64:e3:95:8f:1b:bf:61:a5:c9:5d:2b: ae:2c:96:47:c3:19:18:99:3f:97:3b:5d:db:4d:b3: c1:5b:63:9e:a5:de:ec:a4:8b:bd:64:f9:b9:5a:0c: 15:3e:63:62:5a:ad:07:60:b8:0a:66:6e:82:c8:b3: 33:23:0c:83:08:e1:6d:66:83:8b:f7:26:3c:92:93: 0e:ec:27:c5:c1:65:49:39:bf:da:46:b5:e6:a2:c4: a7:92:2c:ca:53:44:f0:e8:57:a8:d5:e8:63:e6:f4: 2b:b1:11:e9:48:40:a2:84:5e:93:de:e1:15:73:ba: 18:57:9c:a9:2a:84:31:be:7c:84:34:7d:a4:ff:53: 4f:13:48:f8:5f:17:d9:2c:37:e1:dd:52:3a:d3:87: 30:37:67:e2:62:be:ab:eb:32:32:fd:ac:40:a7:b3: e6:b1:c7:19:82:cb:40:ec:cb:ba:01:b8:90:dc:6f: 3f:86:ba:43:f1:e2:c8:62:ff:5c:0a:f7:bd:a0:14: c4:f0:ef:1b:c9:e4:dd:5e:0b:45:79:9e:64:84:4b: 6a:24:53:3a:b3:fd:60:18:40:44:bf:24:69:5b:97: 01:ca:2a:6f:21:f8:ec:26:6b:4a:52:c8:64:2c:23: ca:75:2e:5e:04:4e:c3:2e:a1:13:38:79:90:4e:dc: a3:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 03:C0:12:BF:93:7B:42:65:3C:39:22:1C:7A:9A:A7:F8:75:67:EC:7A X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/086D08F080C910C63925836D1D583A1AA9DD8338C378A0CB1EC151E9CBE67607/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/086D08F080C910C63925836D1D583A1AA9DD8338C378A0CB1EC151E9CBE67607/0/03C012BF937B42653C39221C7A9AA7F87567EC7A.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2806:3e6::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 270159 Signature Algorithm: sha256WithRSAEncryption 82:28:ea:6b:3e:4d:46:77:71:3f:62:61:3a:0f:24:b8:2f:56: 81:cc:57:3e:c9:2f:b1:80:14:87:74:95:82:27:cf:7a:24:d7: 42:f9:1c:15:4b:c0:7a:d4:fe:64:a1:00:31:d0:4c:67:cb:ed: 02:fd:8c:b6:13:ca:3a:b0:df:53:15:25:f0:5b:49:e0:0a:e8: 89:11:e1:02:e7:e1:6f:d6:6b:82:d7:51:92:31:1c:7d:6f:8d: 9b:b6:77:d8:5b:40:0e:ae:67:a7:d5:bf:af:da:0d:22:49:22: 32:1c:39:43:17:cf:f9:f9:c4:89:74:89:4c:91:86:64:cb:56: a8:65:91:49:55:02:d6:41:47:a4:e2:e5:2f:3a:4f:b3:16:24: ef:76:76:1c:fa:49:11:2c:6e:20:be:f8:a9:cf:f1:79:25:0b: c9:9f:8c:46:d6:c0:3b:0c:52:f2:d7:a8:41:e9:0d:56:a3:cc: a8:1c:b2:58:39:cc:a7:d8:7a:2a:3b:6a:b2:70:56:3d:c4:fc: e4:f8:60:58:ac:bb:da:24:20:bf:7a:03:85:c6:ec:fc:c2:90: 6d:54:f4:f9:3d:90:b0:84:4d:c6:d4:d6:d0:5b:e4:35:a9:e3: dd:8c:dc:24:08:68:25:4c:55:c6:88:21:e0:61:0a:38:ef:9c: a5:01:df:69 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUYJeGrnYcBabVbECXVXyB7+g7lSswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUyMjE4MDlaFw0yNjAyMDQyMjIzMDlaMDMxMTAvBgNV BAMTKDAzQzAxMkJGOTM3QjQyNjUzQzM5MjIxQzdBOUFBN0Y4NzU2N0VDN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeqYBk45WPG79hpcldK64slkfD GRiZP5c7XdtNs8FbY56l3uyki71k+blaDBU+Y2JarQdguApmboLIszMjDIMI4W1m g4v3JjySkw7sJ8XBZUk5v9pGteaixKeSLMpTRPDoV6jV6GPm9CuxEelIQKKEXpPe 4RVzuhhXnKkqhDG+fIQ0faT/U08TSPhfF9ksN+HdUjrThzA3Z+JivqvrMjL9rECn s+axxxmCy0Dsy7oBuJDcbz+GukPx4shi/1wK972gFMTw7xvJ5N1eC0V5nmSES2ok Uzqz/WAYQES/JGlblwHKKm8h+Owma0pSyGQsI8p1Ll4ETsMuoRM4eZBO3KNDAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQDwBK/k3tCZTw5 Ihx6mqf4dWfsejAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMDg2RDA4RjA4MEM5MTBDNjM5MjU4MzZE MUQ1ODNBMUFBOUREODMzOEMzNzhBMENCMUVDMTUxRTlDQkU2NzYwNy8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8wODZEMDhGMDgwQzkxMEM2MzkyNTgzNkQxRDU4M0ExQUE5REQ4MzM4QzM3 OEEwQ0IxRUMxNTFFOUNCRTY3NjA3LzAvMDNDMDEyQkY5MzdCNDI2NTNDMzkyMjFD N0E5QUE3Rjg3NTY3RUM3QS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAYD5jAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEH08wDQYJKoZIhvcNAQELBQADggEBAIIo6ms+ TUZ3cT9iYToPJLgvVoHMVz7JL7GAFId0lYInz3ok10L5HBVLwHrU/mShADHQTGfL 7QL9jLYTyjqw31MVJfBbSeAK6IkR4QLn4W/Wa4LXUZIxHH1vjZu2d9hbQA6uZ6fV v6/aDSJJIjIcOUMXz/n5xIl0iUyRhmTLVqhlkUlVAtZBR6Ti5S86T7MWJO92dhz6 SREsbiC++KnP8XklC8mfjEbWwDsMUvLXqEHpDVajzKgcslg5zKfYeio7arJwVj3E /OT4YFisu9okIL96A4XG7PzCkG1U9Pk9kLCETcbU1tBb5DWp492M3CQIaCVMVcaI IeBhCjjvnKUB32k= -----END CERTIFICATE-----Generated at Sun Apr 6 08:01:57 2025 by rpki-client