$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/391C80297A8923C97C067A3FD078178E6934E57D.cer File: 391C80297A8923C97C067A3FD078178E6934E57D.cer (raw, json) Hash identifier: sJwy59jFpeHfqmZShSMfwgkvSB0Jz0JEOQaRI8ouyOw= Subject key identifier: 39:1C:80:29:7A:89:23:C9:7C:06:7A:3F:D0:78:17:8E:69:34:E5:7D Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 64202A831B0CD4A46FF3EE45FEAE5171EFA73EA0 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/C6B91C4903251447B36B81CA9DFAE126A172975433B5129E34CA5BDD69AA4769/0/391C80297A8923C97C067A3FD078178E6934E57D.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/C6B91C4903251447B36B81CA9DFAE126A172975433B5129E34CA5BDD69AA4769/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 04 Feb 2025 20:34:06 +0000 Certificate not after: Tue 03 Feb 2026 20:39:06 +0000 Subordinate resources: AS: 273058 IP: 2803:c790::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 10 Apr 2025 04:49:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:20:2a:83:1b:0c:d4:a4:6f:f3:ee:45:fe:ae:51:71:ef:a7:3e:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 4 20:34:06 2025 GMT Not After : Feb 3 20:39:06 2026 GMT Subject: CN=391C80297A8923C97C067A3FD078178E6934E57D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:d5:74:81:bf:e3:80:e1:a0:30:f6:ac:d6:17: c9:dc:9a:9e:f1:c3:ff:ea:f0:97:4c:cc:c3:3d:05: bf:46:b7:b4:53:1b:fc:b1:fb:2b:b3:5c:ef:ec:da: 79:80:e9:60:27:20:7b:b9:0f:a6:a0:e5:5b:aa:c8: ab:bc:1e:f5:ec:ae:d2:f5:35:2b:86:d6:5a:0e:af: 46:52:b6:78:9f:7b:92:be:84:a1:8d:a5:10:bf:85: 00:e8:83:c0:3f:72:37:70:a9:6b:f1:a8:55:f7:ee: 85:df:0a:73:c8:76:7e:26:4a:c8:99:46:e1:51:dc: b9:7f:d0:0f:7e:42:8e:f1:0e:09:87:29:c6:ff:64: cf:1b:81:db:2e:7a:2c:d4:80:cc:61:64:a1:d4:6d: 53:f0:66:5e:b1:16:49:a9:92:93:64:dd:bb:2a:e4: b6:a3:90:52:56:3e:89:25:3c:b5:1e:4e:31:97:a9: a3:1a:22:22:a2:ff:d8:15:45:44:7c:e2:26:82:4d: e1:74:6d:79:41:f0:6f:c2:17:22:34:12:8c:ca:5b: 4f:40:b8:3a:dc:cf:5d:2a:97:0c:40:d4:85:3e:d4: a6:49:c7:4b:88:66:c5:da:8b:7d:7d:9c:38:a6:0d: a6:fb:f7:8c:36:4d:ec:13:7d:31:c6:21:61:63:52: eb:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 39:1C:80:29:7A:89:23:C9:7C:06:7A:3F:D0:78:17:8E:69:34:E5:7D X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/C6B91C4903251447B36B81CA9DFAE126A172975433B5129E34CA5BDD69AA4769/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/C6B91C4903251447B36B81CA9DFAE126A172975433B5129E34CA5BDD69AA4769/0/391C80297A8923C97C067A3FD078178E6934E57D.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:c790::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273058 Signature Algorithm: sha256WithRSAEncryption 7d:65:c4:49:6e:56:9d:03:55:59:c2:ff:0e:f1:65:da:57:62: 3b:e8:c6:0c:7a:21:1a:15:a7:d1:f0:5b:b1:9f:a0:b3:d5:b2: 35:8e:af:bd:ef:c0:7e:e5:76:9b:10:83:8f:7d:4e:49:df:25: 15:34:96:37:7f:47:22:43:ea:e0:ea:52:a7:ed:3c:ba:f5:9a: c7:58:e1:4f:97:cf:81:75:3e:1f:d6:c8:f8:4d:7b:48:4b:98: 42:ab:f5:79:4a:6f:bf:b0:cf:2d:ac:f9:b0:1d:ef:41:e4:00: 50:d7:14:f9:50:01:ef:f2:a1:fb:65:7c:c1:44:1e:65:64:76: 56:22:dd:a7:1a:87:b9:5f:e2:68:c7:8a:6b:35:43:ca:1e:40: 04:b4:9e:13:b0:bd:95:3a:b5:8e:b4:b5:2a:30:9d:27:28:e3: 7a:e7:39:4d:70:6a:bd:f9:57:b0:08:35:74:41:02:4e:34:b3: 58:d5:b4:07:02:82:91:59:ab:fb:f1:09:8a:7a:14:27:2b:1b: 7b:b5:05:8e:61:48:f7:a8:cf:88:a3:1f:ab:e6:73:5b:28:c2: 5f:1e:63:7c:57:c5:d1:93:1c:44:30:a3:32:38:c8:5d:ca:34: 6d:11:e2:18:b1:67:40:e7:c8:a3:96:f7:88:2d:e7:99:e5:3b: 59:e9:32:53 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUZCAqgxsM1KRv8+5F/q5Rce+nPqAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDQyMDM0MDZaFw0yNjAyMDMyMDM5MDZaMDMxMTAvBgNV BAMTKDM5MUM4MDI5N0E4OTIzQzk3QzA2N0EzRkQwNzgxNzhFNjkzNEU1N0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDt1XSBv+OA4aAw9qzWF8ncmp7x w//q8JdMzMM9Bb9Gt7RTG/yx+yuzXO/s2nmA6WAnIHu5D6ag5VuqyKu8HvXsrtL1 NSuG1loOr0ZStnife5K+hKGNpRC/hQDog8A/cjdwqWvxqFX37oXfCnPIdn4mSsiZ RuFR3Ll/0A9+Qo7xDgmHKcb/ZM8bgdsueizUgMxhZKHUbVPwZl6xFkmpkpNk3bsq 5LajkFJWPoklPLUeTjGXqaMaIiKi/9gVRUR84iaCTeF0bXlB8G/CFyI0EozKW09A uDrcz10qlwxA1IU+1KZJx0uIZsXai319nDimDab794w2TewTfTHGIWFjUuvVAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ5HIApeokjyXwG ej/QeBeOaTTlfTAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQzZCOTFDNDkwMzI1MTQ0N0IzNkI4MUNB OURGQUUxMjZBMTcyOTc1NDMzQjUxMjlFMzRDQTVCREQ2OUFBNDc2OS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9DNkI5MUM0OTAzMjUxNDQ3QjM2QjgxQ0E5REZBRTEyNkExNzI5NzU0MzNC NTEyOUUzNENBNUJERDY5QUE0NzY5LzAvMzkxQzgwMjk3QTg5MjNDOTdDMDY3QTNG RDA3ODE3OEU2OTM0RTU3RC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAPHkDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEKqIwDQYJKoZIhvcNAQELBQADggEBAH1lxElu Vp0DVVnC/w7xZdpXYjvoxgx6IRoVp9HwW7GfoLPVsjWOr73vwH7ldpsQg499Tknf JRU0ljd/RyJD6uDqUqftPLr1msdY4U+Xz4F1Ph/WyPhNe0hLmEKr9XlKb7+wzy2s +bAd70HkAFDXFPlQAe/yoftlfMFEHmVkdlYi3acah7lf4mjHims1Q8oeQAS0nhOw vZU6tY60tSownSco43rnOU1war35V7AINXRBAk40s1jVtAcCgpFZq/vxCYp6FCcr G3u1BY5hSPeoz4ijH6vmc1sowl8eY3xXxdGTHEQwozI4yF3KNG0R4hixZ0DnyKOW 94gt55nlO1npMlM= -----END CERTIFICATE-----Generated at Mon Apr 7 00:52:58 2025 by rpki-client