$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C94ACDC438659F20D2AC8CD39934A1CC0EFE3A0.cer File: 3C94ACDC438659F20D2AC8CD39934A1CC0EFE3A0.cer (raw, json) Hash identifier: VQnAignCkRN/QR04Lh8ZOmkm0tEm/3p7vccTg1aSxNk= Subject key identifier: 3C:94:AC:DC:43:86:59:F2:0D:2A:C8:CD:39:93:4A:1C:C0:EF:E3:A0 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 1EDC52FEC2D9245EB546DBE4019A489CCFA4A611 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/A8231A47A2F082BC76BB9CEE9E3F5EAB852FCE65C4F7447C24819BC0408E6B76/0/3C94ACDC438659F20D2AC8CD39934A1CC0EFE3A0.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/A8231A47A2F082BC76BB9CEE9E3F5EAB852FCE65C4F7447C24819BC0408E6B76/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 04:07:22 +0000 Certificate not after: Wed 04 Feb 2026 04:12:22 +0000 Subordinate resources: IP: 201.130.16.0/22 IP: 2801:1c4::/44 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 10 Apr 2025 04:49:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:dc:52:fe:c2:d9:24:5e:b5:46:db:e4:01:9a:48:9c:cf:a4:a6:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 04:07:22 2025 GMT Not After : Feb 4 04:12:22 2026 GMT Subject: CN=3C94ACDC438659F20D2AC8CD39934A1CC0EFE3A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:bb:95:5a:0b:4e:ee:22:93:9b:76:05:95:69: 51:74:13:28:3f:8a:57:c0:73:90:80:83:39:28:0b: 34:c9:34:de:78:e8:40:6c:7b:60:f7:34:ea:89:72: ab:00:7c:1f:b4:f3:7f:55:3c:36:74:95:c2:d5:28: d9:77:35:80:e9:5f:f1:89:03:f5:2c:52:38:95:10: fb:3e:5a:cb:d6:f4:4e:a8:ed:8a:36:63:7f:b0:d4: 51:8b:f8:b5:05:98:85:02:78:f9:b7:c4:8c:60:ed: 3e:f7:2d:19:fe:0b:52:20:b0:f4:84:3c:b7:6b:d3: e3:19:0f:55:18:ee:54:fa:2d:e6:d1:30:2b:76:a6: f5:0a:3b:a8:9f:42:a8:39:66:4b:65:13:c9:b2:86: 14:8c:c7:c3:42:46:94:1d:57:90:da:88:9b:7d:45: d8:db:db:13:4a:35:99:96:50:36:4f:ee:36:85:97: e3:b0:1b:af:03:bf:92:ac:c1:69:f7:26:eb:22:99: 11:90:4e:b4:c6:b2:77:54:31:fe:4c:46:8e:99:01: 74:97:29:c4:75:ce:ff:b9:37:f7:9b:31:b0:b2:40: c8:27:71:a1:b0:1f:48:9d:8e:87:6e:8b:ca:19:99: ad:c3:0a:d9:bc:8b:d5:77:bb:54:b6:c9:26:a9:89: 00:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3C:94:AC:DC:43:86:59:F2:0D:2A:C8:CD:39:93:4A:1C:C0:EF:E3:A0 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/A8231A47A2F082BC76BB9CEE9E3F5EAB852FCE65C4F7447C24819BC0408E6B76/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/A8231A47A2F082BC76BB9CEE9E3F5EAB852FCE65C4F7447C24819BC0408E6B76/0/3C94ACDC438659F20D2AC8CD39934A1CC0EFE3A0.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 201.130.16.0/22 IPv6: 2801:1c4::/44 Signature Algorithm: sha256WithRSAEncryption 34:78:d7:ce:f4:28:2c:f8:01:5c:5b:c0:ec:c4:08:75:e5:2f: bb:fa:f6:d1:ba:c0:62:f9:55:44:7f:08:11:fa:cd:a4:f4:28: d4:26:a1:de:76:d7:3c:83:d6:31:20:02:41:57:c4:a2:1f:fb: 78:df:ce:18:c8:d1:77:ff:41:bb:b8:9f:c1:fc:48:4a:2b:9e: e4:6d:12:dd:03:46:11:92:3c:44:28:19:52:8e:39:3b:80:ef: c9:fa:a3:8f:83:33:b7:1b:d6:56:ce:2a:21:b1:0d:e1:e9:6d: 69:ef:8e:63:14:5b:35:63:b7:00:c3:26:e5:08:a3:e0:b4:e2: 09:ff:65:fb:c9:57:96:fc:72:bc:c0:2c:23:67:9e:9b:c6:e0: 11:c0:ba:7a:e8:62:d5:ed:73:c3:b5:1e:0a:e9:49:7f:b9:89: 8e:d5:90:eb:c8:cc:9c:3d:da:68:bc:3d:3a:5a:13:d4:e3:14: 5b:a2:70:54:17:ee:fc:73:a6:ab:f4:a2:cf:48:6a:62:3b:96: 0a:5c:ec:78:a1:41:2d:79:12:fd:aa:0c:91:73:17:21:a7:50: 00:35:48:dd:b2:6a:c3:42:14:bd:db:21:33:91:e5:bf:6d:ab: b2:c8:44:8d:3b:c4:f8:65:47:6c:9b:fd:64:9f:55:be:63:f1: 94:9e:3c:0e -----BEGIN CERTIFICATE----- MIIGizCCBXOgAwIBAgIUHtxS/sLZJF61RtvkAZpInM+kphEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUwNDA3MjJaFw0yNjAyMDQwNDEyMjJaMDMxMTAvBgNV BAMTKDNDOTRBQ0RDNDM4NjU5RjIwRDJBQzhDRDM5OTM0QTFDQzBFRkUzQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxu5VaC07uIpObdgWVaVF0Eyg/ ilfAc5CAgzkoCzTJNN546EBse2D3NOqJcqsAfB+0839VPDZ0lcLVKNl3NYDpX/GJ A/UsUjiVEPs+WsvW9E6o7Yo2Y3+w1FGL+LUFmIUCePm3xIxg7T73LRn+C1IgsPSE PLdr0+MZD1UY7lT6LebRMCt2pvUKO6ifQqg5ZktlE8myhhSMx8NCRpQdV5DaiJt9 Rdjb2xNKNZmWUDZP7jaFl+OwG68Dv5KswWn3JusimRGQTrTGsndUMf5MRo6ZAXSX KcR1zv+5N/ebMbCyQMgncaGwH0idjodui8oZma3DCtm8i9V3u1S2ySapiQDBAgMB AAGjggOVMIIDkTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ8lKzcQ4ZZ8g0q yM05k0ocwO/joDAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQTgyMzFBNDdBMkYwODJCQzc2QkI5Q0VF OUUzRjVFQUI4NTJGQ0U2NUM0Rjc0NDdDMjQ4MTlCQzA0MDhFNkI3Ni8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9BODIzMUE0N0EyRjA4MkJDNzZCQjlDRUU5RTNGNUVBQjg1MkZDRTY1QzRG NzQ0N0MyNDgxOUJDMDQwOEU2Qjc2LzAvM0M5NEFDREM0Mzg2NTlGMjBEMkFDOENE Mzk5MzRBMUNDMEVGRTNBMC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCyYIQMA8EAgAC MAkDBwQoAQHEAAAwDQYJKoZIhvcNAQELBQADggEBADR41870KCz4AVxbwOzECHXl L7v69tG6wGL5VUR/CBH6zaT0KNQmod521zyD1jEgAkFXxKIf+3jfzhjI0Xf/Qbu4 n8H8SEornuRtEt0DRhGSPEQoGVKOOTuA78n6o4+DM7cb1lbOKiGxDeHpbWnvjmMU WzVjtwDDJuUIo+C04gn/ZfvJV5b8crzALCNnnpvG4BHAunroYtXtc8O1HgrpSX+5 iY7VkOvIzJw92mi8PTpaE9TjFFuicFQX7vxzpqv0os9IamI7lgpc7HihQS15Ev2q DJFzFyGnUAA1SN2yasNCFL3bITOR5b9tq7LIRI07xPhlR2yb/WSfVb5j8ZSePA4= -----END CERTIFICATE-----Generated at Sun Apr 6 19:54:43 2025 by rpki-client