$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3FA213F071F512993E71744BA485B170F0449C83.cer File: 3FA213F071F512993E71744BA485B170F0449C83.cer (raw, json) Hash identifier: S9TFHP0a+AGpYeoVAnIGq0mfVcx2cxumChbZeyAUSuY= Subject key identifier: 3F:A2:13:F0:71:F5:12:99:3E:71:74:4B:A4:85:B1:70:F0:44:9C:83 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 45AD9C8D50702491C23DA83A0C0606E1E859AB52 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/BAFF476963BEEEFBA925E6094AD61F8FE108B5D47F243A7D2C6288E23FA4F667/0/3FA213F071F512993E71744BA485B170F0449C83.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/BAFF476963BEEEFBA925E6094AD61F8FE108B5D47F243A7D2C6288E23FA4F667/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 02:21:38 +0000 Certificate not after: Wed 04 Feb 2026 02:26:38 +0000 Subordinate resources: AS: 267893 IP: 45.65.200.0/24 IP: 2801:1e:3000::/48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 10 Apr 2025 04:49:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:ad:9c:8d:50:70:24:91:c2:3d:a8:3a:0c:06:06:e1:e8:59:ab:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 02:21:38 2025 GMT Not After : Feb 4 02:26:38 2026 GMT Subject: CN=3FA213F071F512993E71744BA485B170F0449C83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:29:b5:6d:85:bc:2f:cd:8b:2e:bb:62:8a:c5: 16:a0:60:3a:ef:b2:d8:31:05:fd:2d:8a:49:01:1f: dc:ee:0e:67:63:fd:4c:98:9f:86:80:c2:1d:81:bd: 3d:00:72:4d:64:c7:e1:73:17:2c:57:f4:44:8c:5a: c7:bc:1f:1f:7a:9e:05:8c:c3:eb:9e:ce:15:c8:6c: 66:57:d6:5c:28:c2:48:f6:d8:fd:fc:d9:74:2b:ee: 20:13:90:56:b1:fa:66:6f:4e:64:d2:2e:0f:ad:20: 36:d6:19:68:5a:56:38:5c:1d:c8:92:23:03:98:e6: d0:ea:9a:cd:68:c0:61:99:3b:08:9f:a3:c6:68:3e: db:c3:f0:6a:d6:76:bc:bf:02:97:67:25:7b:db:8a: 08:37:34:f3:fe:4e:7d:84:fd:33:03:8c:23:43:53: a0:81:ec:71:ed:ea:fc:c1:d1:5b:59:4e:60:0b:87: 6b:a7:c4:7b:c9:b3:08:92:bf:93:b1:a6:cb:dc:a0: 22:d5:5c:ff:56:e8:99:c8:22:9a:08:17:50:96:0b: fa:e1:e0:ea:df:44:ca:60:7c:50:aa:ca:3f:49:84: 3e:ed:f0:85:d1:74:dd:c8:9c:ba:39:cf:b1:c2:e6: d2:11:2b:34:21:77:d1:14:8b:c3:82:97:2d:a4:cf: 06:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3F:A2:13:F0:71:F5:12:99:3E:71:74:4B:A4:85:B1:70:F0:44:9C:83 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/BAFF476963BEEEFBA925E6094AD61F8FE108B5D47F243A7D2C6288E23FA4F667/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/BAFF476963BEEEFBA925E6094AD61F8FE108B5D47F243A7D2C6288E23FA4F667/0/3FA213F071F512993E71744BA485B170F0449C83.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.65.200.0/24 IPv6: 2801:1e:3000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267893 Signature Algorithm: sha256WithRSAEncryption 25:72:4f:20:ee:95:5b:d9:e6:58:ed:f9:1f:72:78:ae:0a:6c: b1:19:71:b9:a3:c8:cf:30:8f:ce:11:c6:fa:f7:5a:8f:b7:2c: f2:94:2d:ae:ff:35:1a:b5:ff:89:0e:17:d0:e5:e0:de:f0:f7: cd:b3:48:4d:44:3e:cb:4f:b0:ab:63:de:ac:02:f6:57:96:b7: 17:70:e4:ae:ac:d1:ef:40:0c:4a:44:62:08:78:cc:75:b8:6e: 4f:30:d7:9a:9d:41:91:90:52:36:42:e7:9c:11:2e:d6:fa:11: 4d:ad:1e:0c:6d:8d:28:da:b4:d8:91:53:8f:9b:56:51:d5:17: 50:b6:d3:3c:1f:96:43:5e:32:4d:de:8f:67:1e:d5:76:60:2f: 84:61:0e:8e:97:c2:a9:73:ee:7e:75:0e:a1:87:ac:01:bd:27: 4f:af:c3:37:b8:e6:49:b5:be:81:07:d3:ba:9d:70:de:83:85: fb:1c:4a:15:ba:83:f8:57:d3:fc:eb:a4:75:6d:8f:99:19:3e: 31:8d:eb:10:da:91:de:82:76:0b:92:7f:ab:8c:5b:48:66:19: d3:a7:e7:90:20:d9:95:4d:a6:2e:1c:72:14:e5:13:d5:7a:b7: 83:f2:f0:db:a6:43:14:73:71:11:91:da:66:8f:de:14:4e:9e: b7:04:86:b4 -----BEGIN CERTIFICATE----- MIIGpzCCBY+gAwIBAgIURa2cjVBwJJHCPag6DAYG4ehZq1IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUwMjIxMzhaFw0yNjAyMDQwMjI2MzhaMDMxMTAvBgNV BAMTKDNGQTIxM0YwNzFGNTEyOTkzRTcxNzQ0QkE0ODVCMTcwRjA0NDlDODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvKbVthbwvzYsuu2KKxRagYDrv stgxBf0tikkBH9zuDmdj/UyYn4aAwh2BvT0Ack1kx+FzFyxX9ESMWse8Hx96ngWM w+uezhXIbGZX1lwowkj22P382XQr7iATkFax+mZvTmTSLg+tIDbWGWhaVjhcHciS IwOY5tDqms1owGGZOwifo8ZoPtvD8GrWdry/ApdnJXvbigg3NPP+Tn2E/TMDjCND U6CB7HHt6vzB0VtZTmALh2unxHvJswiSv5OxpsvcoCLVXP9W6JnIIpoIF1CWC/rh 4OrfRMpgfFCqyj9JhD7t8IXRdN3InLo5z7HC5tIRKzQhd9EUi8OCly2kzwa9AgMB AAGjggOxMIIDrTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ/ohPwcfUSmT5x dEukhbFw8EScgzAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQkFGRjQ3Njk2M0JFRUVGQkE5MjVFNjA5 NEFENjFGOEZFMTA4QjVENDdGMjQzQTdEMkM2Mjg4RTIzRkE0RjY2Ny8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9CQUZGNDc2OTYzQkVFRUZCQTkyNUU2MDk0QUQ2MUY4RkUxMDhCNUQ0N0Yy NDNBN0QyQzYyODhFMjNGQTRGNjY3LzAvM0ZBMjEzRjA3MUY1MTI5OTNFNzE3NDRC QTQ4NUIxNzBGMDQ0OUM4My5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQALUHIMA8EAgAC MAkDBwAoAQAeMAAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBZ1MA0GCSqGSIb3 DQEBCwUAA4IBAQAlck8g7pVb2eZY7fkfcniuCmyxGXG5o8jPMI/OEcb691qPtyzy lC2u/zUatf+JDhfQ5eDe8PfNs0hNRD7LT7CrY96sAvZXlrcXcOSurNHvQAxKRGII eMx1uG5PMNeanUGRkFI2QuecES7W+hFNrR4MbY0o2rTYkVOPm1ZR1RdQttM8H5ZD XjJN3o9nHtV2YC+EYQ6Ol8Kpc+5+dQ6hh6wBvSdPr8M3uOZJtb6BB9O6nXDeg4X7 HEoVuoP4V9P866R1bY+ZGT4xjesQ2pHegnYLkn+rjFtIZhnTp+eQINmVTaYuHHIU 5RPVereD8vDbpkMUc3ERkdpmj94UTp63BIa0 -----END CERTIFICATE-----Generated at Mon Apr 7 01:55:20 2025 by rpki-client