$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3472E1FF1818962AFB9DAD448DEB6B4F02BDFBC7.cer File: 3472E1FF1818962AFB9DAD448DEB6B4F02BDFBC7.cer (raw, json) Hash identifier: zwwI5B84e74WncHVwK0G+sTTBSZrB0KQk0XCwWXHPd0= Subject key identifier: 34:72:E1:FF:18:18:96:2A:FB:9D:AD:44:8D:EB:6B:4F:02:BD:FB:C7 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 78B16964B34AC4622B78EAB9CD7C60D5410D168A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/87D59CE00172146B0C116A84500F63FE7511ADA650DC16D57EBBFBDF799200BB/0/3472E1FF1818962AFB9DAD448DEB6B4F02BDFBC7.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/87D59CE00172146B0C116A84500F63FE7511ADA650DC16D57EBBFBDF799200BB/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 16:09:28 +0000 Certificate not after: Wed 04 Feb 2026 16:14:28 +0000 Subordinate resources: IP: 45.170.128.0/22 IP: 2803:8ba0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 10 Apr 2025 04:49:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:b1:69:64:b3:4a:c4:62:2b:78:ea:b9:cd:7c:60:d5:41:0d:16:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 16:09:28 2025 GMT Not After : Feb 4 16:14:28 2026 GMT Subject: CN=3472E1FF1818962AFB9DAD448DEB6B4F02BDFBC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:3c:cd:32:59:85:a4:fe:22:a0:63:65:cf:e9: 38:95:bf:f3:01:a9:37:3c:60:d2:2d:66:63:a4:4e: 14:cc:1f:ff:fc:01:2f:81:1e:9d:76:d6:b3:16:63: 19:77:6b:3a:52:4f:dc:3d:7f:4a:94:41:5b:67:c4: 3e:20:87:e2:94:54:27:a0:2d:d7:11:5b:5a:75:80: d1:16:51:0d:54:11:fd:13:3c:79:1d:44:b5:5c:4b: cd:05:99:f0:75:2d:95:b2:5d:f2:db:0d:29:94:3a: d1:55:0f:b8:0e:fa:fd:42:17:c4:40:7c:ae:b8:d6: 6a:44:b5:71:86:cd:3b:ff:7c:e1:01:72:f9:c2:3b: 20:06:70:54:c9:3a:cb:f7:78:55:3a:93:0d:0d:05: 6e:14:c9:b7:4f:f0:6c:4b:43:3c:b7:7e:67:a0:17: 29:55:08:e9:55:9c:bb:6f:03:4e:5d:06:03:e7:d4: 44:7b:ac:a0:73:42:5e:91:5d:75:15:48:0d:09:ab: d1:7a:56:cd:66:f5:93:cd:82:36:2c:3f:41:2c:9d: 8d:fd:6f:7a:d7:09:8e:7e:88:62:26:ee:0d:08:e6: cb:8c:f9:03:0b:52:6b:96:b3:1a:02:4c:fa:03:00: ab:21:69:a8:a0:4e:be:40:72:48:22:0a:d4:10:35: 80:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 34:72:E1:FF:18:18:96:2A:FB:9D:AD:44:8D:EB:6B:4F:02:BD:FB:C7 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/87D59CE00172146B0C116A84500F63FE7511ADA650DC16D57EBBFBDF799200BB/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/87D59CE00172146B0C116A84500F63FE7511ADA650DC16D57EBBFBDF799200BB/0/3472E1FF1818962AFB9DAD448DEB6B4F02BDFBC7.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.170.128.0/22 IPv6: 2803:8ba0::/32 Signature Algorithm: sha256WithRSAEncryption 6d:46:4b:9e:64:04:e7:a5:47:db:2f:c8:c4:e3:96:de:f1:8b: 91:65:2c:5b:c3:9e:f5:09:ea:6f:b9:ad:2f:38:e9:b9:3d:a2: 3d:32:bb:06:4e:dc:2a:89:e3:f9:86:d4:58:05:7a:d1:21:b2: 27:8d:27:f1:ad:ff:4b:36:b1:85:fd:00:30:fe:80:bd:3a:f2: c5:63:dd:61:bd:35:ad:d7:4c:12:03:7e:6a:cd:1c:54:fe:a9: 2f:90:da:36:47:e2:7a:16:36:06:04:32:fd:ea:14:c4:27:c5: d4:60:69:46:b8:73:9f:5c:c1:82:9c:b1:7d:e2:cb:07:f5:9d: dd:1e:54:f8:b6:b1:57:db:71:b4:10:99:86:e7:22:dd:5c:d8: b2:e8:24:d4:db:f6:1f:01:07:24:16:cd:c1:5d:7e:f8:e0:e9: bc:83:d9:54:ca:38:3f:99:83:6d:d0:3c:d2:88:4a:bb:30:df: 28:03:89:5c:e0:d8:db:f2:f5:0e:ce:c9:07:09:68:c2:f6:95: 0d:d4:c9:6b:43:94:5b:2f:07:99:73:0d:62:c1:2d:9d:16:d6: 16:66:1f:36:1d:c8:94:b1:6c:1d:9b:56:10:d7:0a:1d:e6:e7: a9:06:d7:cf:c5:c8:18:69:b2:33:2a:36:ff:b2:3d:fa:df:40: b0:05:34:18 -----BEGIN CERTIFICATE----- MIIGiTCCBXGgAwIBAgIUeLFpZLNKxGIreOq5zXxg1UENFoowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUxNjA5MjhaFw0yNjAyMDQxNjE0MjhaMDMxMTAvBgNV BAMTKDM0NzJFMUZGMTgxODk2MkFGQjlEQUQ0NDhERUI2QjRGMDJCREZCQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVPM0yWYWk/iKgY2XP6TiVv/MB qTc8YNItZmOkThTMH//8AS+BHp121rMWYxl3azpST9w9f0qUQVtnxD4gh+KUVCeg LdcRW1p1gNEWUQ1UEf0TPHkdRLVcS80FmfB1LZWyXfLbDSmUOtFVD7gO+v1CF8RA fK641mpEtXGGzTv/fOEBcvnCOyAGcFTJOsv3eFU6kw0NBW4UybdP8GxLQzy3fmeg FylVCOlVnLtvA05dBgPn1ER7rKBzQl6RXXUVSA0Jq9F6Vs1m9ZPNgjYsP0EsnY39 b3rXCY5+iGIm7g0I5suM+QMLUmuWsxoCTPoDAKshaaigTr5AckgiCtQQNYDRAgMB AAGjggOTMIIDjzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ0cuH/GBiWKvud rUSN62tPAr37xzAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvODdENTlDRTAwMTcyMTQ2QjBDMTE2QTg0 NTAwRjYzRkU3NTExQURBNjUwREMxNkQ1N0VCQkZCREY3OTkyMDBCQi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy84N0Q1OUNFMDAxNzIxNDZCMEMxMTZBODQ1MDBGNjNGRTc1MTFBREE2NTBE QzE2RDU3RUJCRkJERjc5OTIwMEJCLzAvMzQ3MkUxRkYxODE4OTYyQUZCOURBRDQ0 OERFQjZCNEYwMkJERkJDNy5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLaqAMA0EAgAC MAcDBQAoA4ugMA0GCSqGSIb3DQEBCwUAA4IBAQBtRkueZATnpUfbL8jE45be8YuR ZSxbw571Cepvua0vOOm5PaI9MrsGTtwqieP5htRYBXrRIbInjSfxrf9LNrGF/QAw /oC9OvLFY91hvTWt10wSA35qzRxU/qkvkNo2R+J6FjYGBDL96hTEJ8XUYGlGuHOf XMGCnLF94ssH9Z3dHlT4trFX23G0EJmG5yLdXNiy6CTU2/YfAQckFs3BXX744Om8 g9lUyjg/mYNt0DzSiEq7MN8oA4lc4Njb8vUOzskHCWjC9pUN1MlrQ5RbLweZcw1i wS2dFtYWZh82HciUsWwdm1YQ1wod5uepBtfPxcgYabIzKjb/sj3630CwBTQY -----END CERTIFICATE-----Generated at Sun Apr 6 15:33:32 2025 by rpki-client