$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC3731A45F327EDCD8C0847227CDEEEAE8376B9A.cer File: DC3731A45F327EDCD8C0847227CDEEEAE8376B9A.cer (raw, json) Hash identifier: Oq5eW1FomZaW2CbvTorSAEd3ES6THLX6aBQpOjWH9D4= Subject key identifier: DC:37:31:A4:5F:32:7E:DC:D8:C0:84:72:27:CD:EE:EA:E8:37:6B:9A Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 7CBF9CF309EBC8234CC2DB8EE7CB5E3A0787911C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/ED05366333B154292E3D3D23E5072D9E3BF1081A4A465559BCADF710443AFC4D/0/DC3731A45F327EDCD8C0847227CDEEEAE8376B9A.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/ED05366333B154292E3D3D23E5072D9E3BF1081A4A465559BCADF710443AFC4D/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 07:42:46 +0000 Certificate not after: Wed 04 Feb 2026 07:47:46 +0000 Subordinate resources: AS: 27729 IP: 201.220.128.0/20 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 10 Apr 2025 04:49:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:bf:9c:f3:09:eb:c8:23:4c:c2:db:8e:e7:cb:5e:3a:07:87:91:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 07:42:46 2025 GMT Not After : Feb 4 07:47:46 2026 GMT Subject: CN=DC3731A45F327EDCD8C0847227CDEEEAE8376B9A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c1:a9:70:b7:06:a6:4a:0e:67:ef:9c:da:03: 40:a6:de:9d:78:cc:07:4d:40:c4:f9:d6:33:a7:80: 0a:b1:fa:f3:49:61:f9:15:8d:e7:34:d5:f7:88:4c: 78:d0:ac:52:94:53:0c:a5:77:ad:58:f2:ac:a1:a6: 14:3b:b0:17:11:96:f7:9a:95:29:25:34:b2:58:a6: 17:24:cf:19:bf:93:55:4b:8d:85:3c:c2:96:94:c0: c1:28:c9:c4:61:f9:22:b3:af:11:2d:3d:5e:a4:d7: 37:8d:4f:75:28:66:db:f6:84:30:c3:26:f0:1a:02: 4d:b9:07:9c:4f:7b:40:6d:40:31:3a:6c:df:36:b6: b0:e0:de:4d:61:ee:a8:0c:81:d8:28:db:a4:88:b0: 57:39:87:9d:d0:b7:18:56:3f:d6:d8:ee:6d:5f:9f: 82:4c:4d:7c:9a:54:76:72:1e:eb:a2:15:09:49:c3: 10:08:03:05:8f:05:5f:ab:43:d7:ad:54:fa:82:ba: 88:98:ff:68:31:a9:bf:2b:32:ce:26:b9:3e:4a:9e: 00:55:93:df:7a:f2:63:8e:5e:92:ea:7b:69:ce:9b: ff:d3:7f:95:ca:a5:68:57:7e:df:69:b7:26:51:36: 5c:b1:95:72:da:80:e7:d0:e3:77:d8:dd:a3:e5:3a: b0:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DC:37:31:A4:5F:32:7E:DC:D8:C0:84:72:27:CD:EE:EA:E8:37:6B:9A X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/ED05366333B154292E3D3D23E5072D9E3BF1081A4A465559BCADF710443AFC4D/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/ED05366333B154292E3D3D23E5072D9E3BF1081A4A465559BCADF710443AFC4D/0/DC3731A45F327EDCD8C0847227CDEEEAE8376B9A.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 201.220.128.0/20 sbgp-autonomousSysNum: critical Autonomous System Numbers: 27729 Signature Algorithm: sha256WithRSAEncryption be:95:5a:01:6d:a4:90:d7:4d:bc:71:d4:71:ae:21:d2:8c:09: aa:69:39:23:52:93:e0:dc:ed:b4:05:b9:d1:45:1d:8c:9e:cf: f4:ed:f3:75:4a:c6:09:bd:86:0a:e8:e0:25:3a:d9:43:0a:ce: 26:d0:84:85:75:81:15:1f:bb:53:9a:35:b4:e1:fa:2f:26:e8: 30:33:e9:00:56:ef:49:25:33:fd:03:e7:b1:39:3e:46:17:bf: 7d:d7:ed:ba:ed:d0:57:4d:1e:4c:66:a5:1b:5c:39:86:9a:35: d9:28:74:40:73:60:da:e1:f6:aa:13:17:39:de:9d:d5:7d:b8: a5:4e:e2:2b:30:8c:39:e5:15:e6:44:00:84:28:59:19:36:8a: 7a:58:46:6b:33:bf:a5:c7:83:b8:34:27:ef:b7:09:d2:31:d0: ae:0b:4c:ba:26:6c:1b:89:cc:38:d4:07:6d:b5:f8:df:a5:15: c8:21:df:aa:6d:ae:26:52:60:01:45:ee:ce:e7:fb:b1:02:c8: 5d:e7:5e:4a:ba:f8:a6:69:f3:95:3f:98:48:2c:6f:59:ea:d8: 9c:bf:b5:d4:2b:ac:04:e2:9f:3b:6b:df:99:f1:72:e1:4d:9b: 8f:99:a3:3e:31:05:80:13:0f:91:18:d3:75:42:dd:d8:6f:4b: c6:50:3a:ac -----BEGIN CERTIFICATE----- MIIGlTCCBX2gAwIBAgIUfL+c8wnryCNMwtuO58teOgeHkRwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUwNzQyNDZaFw0yNjAyMDQwNzQ3NDZaMDMxMTAvBgNV BAMTKERDMzczMUE0NUYzMjdFRENEOEMwODQ3MjI3Q0RFRUVBRTgzNzZCOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAwalwtwamSg5n75zaA0Cm3p14 zAdNQMT51jOngAqx+vNJYfkVjec01feITHjQrFKUUwyld61Y8qyhphQ7sBcRlvea lSklNLJYphckzxm/k1VLjYU8wpaUwMEoycRh+SKzrxEtPV6k1zeNT3UoZtv2hDDD JvAaAk25B5xPe0BtQDE6bN82trDg3k1h7qgMgdgo26SIsFc5h53QtxhWP9bY7m1f n4JMTXyaVHZyHuuiFQlJwxAIAwWPBV+rQ9etVPqCuoiY/2gxqb8rMs4muT5KngBV k9968mOOXpLqe2nOm//Tf5XKpWhXft9ptyZRNlyxlXLagOfQ43fY3aPlOrCJAgMB AAGjggOfMIIDmzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTcNzGkXzJ+3NjA hHInze7q6DdrmjAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRUQwNTM2NjMzM0IxNTQyOTJFM0QzRDIz RTUwNzJEOUUzQkYxMDgxQTRBNDY1NTU5QkNBREY3MTA0NDNBRkM0RC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9FRDA1MzY2MzMzQjE1NDI5MkUzRDNEMjNFNTA3MkQ5RTNCRjEwODFBNEE0 NjU1NTlCQ0FERjcxMDQ0M0FGQzRELzAvREMzNzMxQTQ1RjMyN0VEQ0Q4QzA4NDcy MjdDREVFRUFFODM3NkI5QS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEydyAMBkGCCsG AQUFBwEIAQH/BAowCKAGMAQCAmxRMA0GCSqGSIb3DQEBCwUAA4IBAQC+lVoBbaSQ 1028cdRxriHSjAmqaTkjUpPg3O20BbnRRR2Mns/07fN1SsYJvYYK6OAlOtlDCs4m 0ISFdYEVH7tTmjW04fovJugwM+kAVu9JJTP9A+exOT5GF7991+267dBXTR5MZqUb XDmGmjXZKHRAc2Da4faqExc53p3VfbilTuIrMIw55RXmRACEKFkZNop6WEZrM7+l x4O4NCfvtwnSMdCuC0y6Jmwbicw41AdttfjfpRXIId+qba4mUmABRe7O5/uxAshd 515KuvimafOVP5hILG9Z6ticv7XUK6wE4p87a9+Z8XLhTZuPmaM+MQWAEw+RGNN1 Qt3Yb0vGUDqs -----END CERTIFICATE-----Generated at Sun Apr 6 09:16:20 2025 by rpki-client