$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/342CE218F6DBE708D87221F8FFFD2B182B5A6F8C.cer File: 342CE218F6DBE708D87221F8FFFD2B182B5A6F8C.cer (raw, json) Hash identifier: 266guYeoZcVQqLnmrWD0Yq19bpC0y/JDuNcKnQP9/5k= Subject key identifier: 34:2C:E2:18:F6:DB:E7:08:D8:72:21:F8:FF:FD:2B:18:2B:5A:6F:8C Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 65F366520BFBBFE9114BC7E259F185C39B9B3A8A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/B1141BE89A8EF7C3F494BBEDE567BDA8AC82618B809B5072167B3C36A05D8AD9/0/342CE218F6DBE708D87221F8FFFD2B182B5A6F8C.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/B1141BE89A8EF7C3F494BBEDE567BDA8AC82618B809B5072167B3C36A05D8AD9/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 10:56:34 +0000 Certificate not after: Wed 04 Feb 2026 11:01:34 +0000 Subordinate resources: AS: 61503 IP: 138.36.252.0/22 IP: 2803:2f80::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 09 Apr 2025 06:41:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:f3:66:52:0b:fb:bf:e9:11:4b:c7:e2:59:f1:85:c3:9b:9b:3a:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 10:56:34 2025 GMT Not After : Feb 4 11:01:34 2026 GMT Subject: CN=342CE218F6DBE708D87221F8FFFD2B182B5A6F8C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:50:dd:03:b7:9e:7e:67:67:92:87:f0:f6:30: c6:0f:3c:c0:ee:ce:1d:55:56:cc:bf:f3:48:a9:66: 83:9b:a0:c5:63:15:6b:16:20:e4:73:19:5f:f3:ac: eb:8f:57:00:44:45:00:9e:cb:a8:c8:50:30:78:1d: 92:66:5a:f7:c2:4b:10:3a:fd:ab:bd:4c:22:45:70: 37:3b:c4:d8:21:49:ea:04:bd:d9:c6:46:ec:95:0e: 6f:79:ec:34:f6:3d:07:b5:7b:43:11:c6:94:87:a7: 2e:e2:20:53:08:29:a0:c6:37:d8:d7:4f:60:ea:0d: b0:d1:61:77:65:12:8d:ef:2c:ec:84:d0:9b:b6:d1: e6:05:91:61:32:af:58:1f:e0:ec:e8:96:64:be:3b: 3e:68:f6:70:de:0b:45:f7:97:1f:e7:72:79:26:c0: dc:2f:de:ea:a2:51:8f:69:04:be:ac:69:4e:cf:c5: 07:47:31:06:f5:a9:f0:84:01:a4:f9:ec:87:95:d8: e7:28:6a:39:54:62:39:c7:5e:a9:c1:8a:42:0b:10: 61:6b:c0:19:9e:55:e3:72:c3:40:5c:1f:43:e2:c7: 5e:70:f1:50:19:ce:16:17:3a:8a:72:27:d8:d1:5f: a6:84:b2:d1:58:c0:74:4a:a8:3f:b6:da:f6:c9:41: 9b:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 34:2C:E2:18:F6:DB:E7:08:D8:72:21:F8:FF:FD:2B:18:2B:5A:6F:8C X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/B1141BE89A8EF7C3F494BBEDE567BDA8AC82618B809B5072167B3C36A05D8AD9/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/B1141BE89A8EF7C3F494BBEDE567BDA8AC82618B809B5072167B3C36A05D8AD9/0/342CE218F6DBE708D87221F8FFFD2B182B5A6F8C.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.36.252.0/22 IPv6: 2803:2f80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 61503 Signature Algorithm: sha256WithRSAEncryption 28:7e:2b:c8:07:4a:98:83:43:3c:f0:7c:37:26:c6:54:db:ff: 39:7e:65:9b:33:e0:fa:11:fe:c4:75:46:a3:2b:c4:76:f9:40: 7a:8e:9c:3f:42:08:43:e9:8b:a0:29:86:96:c4:71:14:d6:9c: 7f:c6:6d:5d:44:4a:1d:80:d3:56:dc:13:33:ed:34:6b:ac:38: 12:f5:9a:d7:15:33:d1:5d:29:cb:60:b9:6f:49:8c:36:ca:97: fc:2d:00:3c:60:6c:00:17:0c:c7:d3:98:55:ac:6e:a1:4e:2c: e9:ee:71:bb:8f:33:6a:b7:42:53:62:9b:01:da:64:c6:48:c5: 80:d8:ca:2e:da:c1:8f:83:c1:37:bd:8d:59:86:90:64:c8:2b: b6:a3:68:1f:88:74:56:36:ff:29:c0:e5:2b:23:0d:61:42:ad: 05:05:f2:0a:16:ca:7c:18:1e:8c:1e:cf:6c:43:7d:89:91:b6: d3:bb:64:e2:41:97:b7:d5:5d:b9:ce:11:01:fb:26:68:f8:83: 3d:32:be:12:7c:ce:40:46:73:7b:46:c6:06:92:de:58:1b:a6: 9c:8e:7e:60:65:e9:8d:ba:e8:78:ab:00:33:d1:8b:6f:eb:1a: 99:fa:94:b7:7e:e7:e6:e6:19:85:a5:c7:d7:ca:71:d7:24:86: cc:da:9a:03 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUZfNmUgv7v+kRS8fiWfGFw5ubOoowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUxMDU2MzRaFw0yNjAyMDQxMTAxMzRaMDMxMTAvBgNV BAMTKDM0MkNFMjE4RjZEQkU3MDhEODcyMjFGOEZGRkQyQjE4MkI1QTZGOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEUN0Dt55+Z2eSh/D2MMYPPMDu zh1VVsy/80ipZoOboMVjFWsWIORzGV/zrOuPVwBERQCey6jIUDB4HZJmWvfCSxA6 /au9TCJFcDc7xNghSeoEvdnGRuyVDm957DT2PQe1e0MRxpSHpy7iIFMIKaDGN9jX T2DqDbDRYXdlEo3vLOyE0Ju20eYFkWEyr1gf4OzolmS+Oz5o9nDeC0X3lx/ncnkm wNwv3uqiUY9pBL6saU7PxQdHMQb1qfCEAaT57IeV2OcoajlUYjnHXqnBikILEGFr wBmeVeNyw0BcH0Pix15w8VAZzhYXOopyJ9jRX6aEstFYwHRKqD+22vbJQZtpAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ0LOIY9tvnCNhy Ifj//SsYK1pvjDAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQjExNDFCRTg5QThFRjdDM0Y0OTRCQkVE RTU2N0JEQThBQzgyNjE4QjgwOUI1MDcyMTY3QjNDMzZBMDVEOEFEOS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9CMTE0MUJFODlBOEVGN0MzRjQ5NEJCRURFNTY3QkRBOEFDODI2MThCODA5 QjUwNzIxNjdCM0MzNkEwNUQ4QUQ5LzAvMzQyQ0UyMThGNkRCRTcwOEQ4NzIyMUY4 RkZGRDJCMTgyQjVBNkY4Qy5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCiiT8MA0EAgAC MAcDBQAoAy+AMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDwPzANBgkqhkiG9w0B AQsFAAOCAQEAKH4ryAdKmINDPPB8NybGVNv/OX5lmzPg+hH+xHVGoyvEdvlAeo6c P0IIQ+mLoCmGlsRxFNacf8ZtXURKHYDTVtwTM+00a6w4EvWa1xUz0V0py2C5b0mM NsqX/C0APGBsABcMx9OYVaxuoU4s6e5xu48zardCU2KbAdpkxkjFgNjKLtrBj4PB N72NWYaQZMgrtqNoH4h0Vjb/KcDlKyMNYUKtBQXyChbKfBgejB7PbEN9iZG207tk 4kGXt9Vduc4RAfsmaPiDPTK+EnzOQEZze0bGBpLeWBumnI5+YGXpjbroeKsAM9GL b+samfqUt37n5uYZhaXH18px1ySGzNqaAw== -----END CERTIFICATE-----Generated at Sun Apr 6 03:57:50 2025 by rpki-client