$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C7B69A1EF4CA7800FEB038E1DD0633839F3995F.cer File: 3C7B69A1EF4CA7800FEB038E1DD0633839F3995F.cer (raw, json) Hash identifier: dHutrVFx0hf2Qj11ERhl1xLJerme9txMcHUhjBmf/ec= Subject key identifier: 3C:7B:69:A1:EF:4C:A7:80:0F:EB:03:8E:1D:D0:63:38:39:F3:99:5F Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 73FCD28F5822EA04FC0A3E7EFD3B3429F1E4F4F1 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/84591308665CBDC145A209F10CB5F5D6B0D1E18FB8FCA648E2C6A15B57CD6D5B/0/3C7B69A1EF4CA7800FEB038E1DD0633839F3995F.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/84591308665CBDC145A209F10CB5F5D6B0D1E18FB8FCA648E2C6A15B57CD6D5B/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 22:17:47 +0000 Certificate not after: Wed 04 Feb 2026 22:22:47 +0000 Subordinate resources: AS: 272950 IP: 2803:2990::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 10 Apr 2025 04:49:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:fc:d2:8f:58:22:ea:04:fc:0a:3e:7e:fd:3b:34:29:f1:e4:f4:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 22:17:47 2025 GMT Not After : Feb 4 22:22:47 2026 GMT Subject: CN=3C7B69A1EF4CA7800FEB038E1DD0633839F3995F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:b1:45:e4:a9:74:08:f7:f1:6f:89:de:db:fb: 45:83:e6:7a:e3:69:01:5b:d8:96:0e:7a:51:e5:45: 9d:4b:d1:f9:48:19:51:1e:65:90:81:5d:f5:77:c9: 8c:7a:de:10:81:3e:80:22:d5:2b:0e:f0:b8:ab:db: 18:73:c8:f4:63:e1:c5:25:7f:3b:e9:6b:dc:fb:f6: ea:bf:63:1c:48:f6:9d:e7:2c:37:91:10:80:69:5e: 22:20:ae:f7:f6:cb:a3:30:a8:e5:83:8a:88:11:3e: 5c:54:12:8c:a2:72:8c:a8:80:33:00:e9:0e:38:bb: 44:44:89:a0:76:5b:66:eb:cf:ee:98:cb:92:68:dc: 86:81:c0:f1:67:99:4a:5c:cd:e9:9f:37:e8:6b:59: 8f:21:25:d1:26:1c:be:1d:10:4f:8e:f8:5f:cd:3c: ec:bd:0e:ed:48:ff:16:7a:a9:7f:6a:40:3b:ab:bf: 74:04:35:c9:d0:e0:21:ea:35:8c:9e:f9:db:6c:de: 2c:11:d2:a0:7d:9f:9f:eb:3d:e1:55:1c:89:a7:a2: 6f:8d:b3:24:74:8d:74:cb:62:1a:54:10:7c:a4:9a: e1:e3:4a:ee:85:f7:9b:cb:d1:33:aa:28:39:5f:8a: f1:b7:d0:43:a1:c3:c2:9d:55:6e:ca:12:a7:b3:38: 0e:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3C:7B:69:A1:EF:4C:A7:80:0F:EB:03:8E:1D:D0:63:38:39:F3:99:5F X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/84591308665CBDC145A209F10CB5F5D6B0D1E18FB8FCA648E2C6A15B57CD6D5B/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/84591308665CBDC145A209F10CB5F5D6B0D1E18FB8FCA648E2C6A15B57CD6D5B/0/3C7B69A1EF4CA7800FEB038E1DD0633839F3995F.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:2990::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 272950 Signature Algorithm: sha256WithRSAEncryption 69:03:e6:f9:0d:d8:47:f8:ce:83:29:02:bc:7a:6c:04:2d:9c: 76:f5:b7:69:54:f1:c4:10:19:5a:78:6f:07:df:60:5c:03:18: 92:96:8b:4d:ab:89:1c:73:b3:8e:8e:3f:05:40:59:54:77:ff: 02:01:12:36:61:e4:5c:b1:16:f5:0d:7e:93:23:9a:9f:37:85: 1b:91:7d:6f:62:13:a0:ba:39:67:3e:cf:5a:0e:6d:f3:68:50: 9c:23:69:4a:47:fe:cd:d8:94:2a:06:b3:2f:86:46:04:5a:48: 40:58:40:9d:57:c5:50:5b:8f:0a:95:c3:9d:f7:1d:ad:15:fb: ae:4c:75:d1:40:38:60:3e:e1:19:97:0e:2f:9e:89:6f:ba:51: 60:93:7d:f0:ed:4c:fb:72:81:44:9c:4c:63:d6:42:c8:00:f1: 26:24:f6:a5:5f:68:16:1e:20:3c:cc:b9:5a:4a:72:9c:97:2a: a8:1e:08:cd:7f:1e:8b:a3:87:81:e3:b1:da:46:cd:bb:83:d4: 00:b0:5e:97:85:f2:7d:55:9d:0d:00:12:e3:68:c4:9a:55:21: b1:92:dc:bb:ac:94:2a:95:51:00:ac:f9:c8:ca:65:4b:98:2a: 94:41:42:8f:70:a7:50:4a:5e:56:56:e9:6a:18:e5:3e:91:bd: 79:ab:31:e5 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUc/zSj1gi6gT8Cj5+/Ts0KfHk9PEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUyMjE3NDdaFw0yNjAyMDQyMjIyNDdaMDMxMTAvBgNV BAMTKDNDN0I2OUExRUY0Q0E3ODAwRkVCMDM4RTFERDA2MzM4MzlGMzk5NUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcsUXkqXQI9/Fvid7b+0WD5nrj aQFb2JYOelHlRZ1L0flIGVEeZZCBXfV3yYx63hCBPoAi1SsO8Lir2xhzyPRj4cUl fzvpa9z79uq/YxxI9p3nLDeREIBpXiIgrvf2y6MwqOWDiogRPlxUEoyicoyogDMA 6Q44u0REiaB2W2brz+6Yy5Jo3IaBwPFnmUpczemfN+hrWY8hJdEmHL4dEE+O+F/N POy9Du1I/xZ6qX9qQDurv3QENcnQ4CHqNYye+dts3iwR0qB9n5/rPeFVHImnom+N syR0jXTLYhpUEHykmuHjSu6F95vL0TOqKDlfivG30EOhw8KdVW7KEqezOA4TAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ8e2mh70yngA/r A44d0GM4OfOZXzAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvODQ1OTEzMDg2NjVDQkRDMTQ1QTIwOUYx MENCNUY1RDZCMEQxRTE4RkI4RkNBNjQ4RTJDNkExNUI1N0NENkQ1Qi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy84NDU5MTMwODY2NUNCREMxNDVBMjA5RjEwQ0I1RjVENkIwRDFFMThGQjhG Q0E2NDhFMkM2QTE1QjU3Q0Q2RDVCLzAvM0M3QjY5QTFFRjRDQTc4MDBGRUIwMzhF MUREMDYzMzgzOUYzOTk1Ri5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAMpkDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEKjYwDQYJKoZIhvcNAQELBQADggEBAGkD5vkN 2Ef4zoMpArx6bAQtnHb1t2lU8cQQGVp4bwffYFwDGJKWi02riRxzs46OPwVAWVR3 /wIBEjZh5FyxFvUNfpMjmp83hRuRfW9iE6C6OWc+z1oObfNoUJwjaUpH/s3YlCoG sy+GRgRaSEBYQJ1XxVBbjwqVw533Ha0V+65MddFAOGA+4RmXDi+eiW+6UWCTffDt TPtygUScTGPWQsgA8SYk9qVfaBYeIDzMuVpKcpyXKqgeCM1/Houjh4HjsdpGzbuD 1ACwXpeF8n1VnQ0AEuNoxJpVIbGS3LuslCqVUQCs+cjKZUuYKpRBQo9wp1BKXlZW 6WoY5T6RvXmrMeU= -----END CERTIFICATE-----Generated at Mon Apr 7 01:57:43 2025 by rpki-client