$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C3B7B469CAC485C79640430F65FB7E54F99A890.cer File: 3C3B7B469CAC485C79640430F65FB7E54F99A890.cer (raw, json) Hash identifier: G7XpTjM8rNSio4y6g4AmkRzlwKo6gEsXJ29HbKWZ38A= Subject key identifier: 3C:3B:7B:46:9C:AC:48:5C:79:64:04:30:F6:5F:B7:E5:4F:99:A8:90 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 69CC0B81DE831E362DC9497621E9A794B125F683 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/EB5091115C1DA031B792EADFF54498AA3ACA566EAFC77F650EEB9BF8C6770728/0/3C3B7B469CAC485C79640430F65FB7E54F99A890.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/EB5091115C1DA031B792EADFF54498AA3ACA566EAFC77F650EEB9BF8C6770728/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 15:29:25 +0000 Certificate not after: Wed 04 Feb 2026 15:34:25 +0000 Subordinate resources: AS: 272026 IP: 167.250.236.0/23 IP: 177.11.254.0/23 IP: 2803:6510::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 02 May 2025 06:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:cc:0b:81:de:83:1e:36:2d:c9:49:76:21:e9:a7:94:b1:25:f6:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 15:29:25 2025 GMT Not After : Feb 4 15:34:25 2026 GMT Subject: CN=3C3B7B469CAC485C79640430F65FB7E54F99A890 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d1:d9:02:1e:35:b7:9d:a4:2d:91:56:ff:9c: 39:e7:17:d0:22:d1:8e:fa:18:3d:bc:d8:a1:05:67: 27:50:2a:eb:cc:96:ee:41:8a:f3:99:de:93:b4:55: 13:05:7f:87:6f:73:0c:aa:d6:f7:17:30:8e:3f:ba: 44:74:52:41:fc:3f:28:16:6b:5f:61:23:15:13:5e: f7:df:6e:09:22:cd:a9:8f:a9:ca:42:81:e0:c2:cd: 0c:86:e2:ff:3d:6e:38:42:23:d3:d7:b7:c1:c8:c7: 55:b3:ed:2f:55:2e:b0:df:70:e5:ae:ad:89:83:ae: 3e:12:32:2c:95:c8:a8:76:d1:7b:b9:61:04:c7:79: d3:2e:42:b2:93:e1:b9:95:7e:65:40:a5:ff:8e:3b: 25:77:99:70:65:e9:d0:8d:f2:d4:9a:49:cb:fa:e5: 1c:c8:ad:4d:76:2f:22:18:fd:26:f9:51:b2:20:6b: c0:61:34:4e:7d:40:0a:dd:6c:f8:ae:46:59:57:d9: f6:7b:11:6b:aa:4c:97:9a:77:d0:4a:2c:7c:91:d0: 1e:ae:4a:4e:40:db:d1:ce:25:3d:3e:ed:2e:61:db: 5e:68:4e:40:23:31:fd:fd:d0:65:6b:5b:4c:a2:67: 12:9e:9e:73:7c:ea:8e:81:ed:96:25:d7:ff:84:12: f7:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3C:3B:7B:46:9C:AC:48:5C:79:64:04:30:F6:5F:B7:E5:4F:99:A8:90 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/EB5091115C1DA031B792EADFF54498AA3ACA566EAFC77F650EEB9BF8C6770728/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/EB5091115C1DA031B792EADFF54498AA3ACA566EAFC77F650EEB9BF8C6770728/0/3C3B7B469CAC485C79640430F65FB7E54F99A890.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 167.250.236.0/23 177.11.254.0/23 IPv6: 2803:6510::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 272026 Signature Algorithm: sha256WithRSAEncryption 18:39:c4:5a:35:e3:be:04:33:e6:db:e1:d7:47:ef:92:a4:f9: da:42:83:b4:d2:80:ee:23:f9:ad:a2:ad:eb:ad:45:a1:f1:90: 37:dd:64:10:22:b7:cd:af:4d:14:9c:f8:94:69:a3:3e:c4:1a: c4:49:79:b2:da:45:94:70:b6:2f:cf:fa:1c:82:91:57:fa:88: be:6f:1f:15:1f:0f:8e:22:68:91:a7:85:ee:e4:e5:09:81:75: 4a:5b:f7:c3:85:33:89:74:1d:f2:08:8d:e4:50:99:22:49:f6: 41:ef:2f:6f:c8:c8:e0:d7:66:96:19:ee:a4:a7:97:c7:b2:a6: 33:c6:c4:45:bb:fb:79:ec:a1:c7:72:d1:ae:65:af:b0:d3:4d: 2c:47:31:9a:c7:3f:ef:22:50:35:85:0d:53:d0:02:92:cf:a4: c8:cf:ea:92:58:be:2c:87:eb:7f:ed:c9:1d:00:4a:27:88:e7: 49:e9:9e:ff:71:96:59:a3:8f:70:13:13:f8:90:8e:22:10:fb: 82:e8:67:80:69:c2:f4:9e:49:21:a3:e4:f8:ca:93:c6:5c:8b: 12:be:28:c2:ec:c5:5f:38:5b:84:ef:d6:7b:15:e6:68:4e:2b: 14:7b:0b:af:52:60:1f:26:dc:f6:00:01:d8:47:87:0e:1c:be: 71:9b:fb:2c -----BEGIN CERTIFICATE----- MIIGqzCCBZOgAwIBAgIUacwLgd6DHjYtyUl2IemnlLEl9oMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUxNTI5MjVaFw0yNjAyMDQxNTM0MjVaMDMxMTAvBgNV BAMTKDNDM0I3QjQ2OUNBQzQ4NUM3OTY0MDQzMEY2NUZCN0U1NEY5OUE4OTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM0dkCHjW3naQtkVb/nDnnF9Ai 0Y76GD282KEFZydQKuvMlu5BivOZ3pO0VRMFf4dvcwyq1vcXMI4/ukR0UkH8PygW a19hIxUTXvffbgkizamPqcpCgeDCzQyG4v89bjhCI9PXt8HIx1Wz7S9VLrDfcOWu rYmDrj4SMiyVyKh20Xu5YQTHedMuQrKT4bmVfmVApf+OOyV3mXBl6dCN8tSaScv6 5RzIrU12LyIY/Sb5UbIga8BhNE59QArdbPiuRllX2fZ7EWuqTJead9BKLHyR0B6u Sk5A29HOJT0+7S5h215oTkAjMf390GVrW0yiZxKennN86o6B7ZYl1/+EEvc7AgMB AAGjggO1MIIDsTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ8O3tGnKxIXHlk BDD2X7flT5mokDAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRUI1MDkxMTE1QzFEQTAzMUI3OTJFQURG RjU0NDk4QUEzQUNBNTY2RUFGQzc3RjY1MEVFQjlCRjhDNjc3MDcyOC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9FQjUwOTExMTVDMURBMDMxQjc5MkVBREZGNTQ0OThBQTNBQ0E1NjZFQUZD NzdGNjUwRUVCOUJGOEM2NzcwNzI4LzAvM0MzQjdCNDY5Q0FDNDg1Qzc5NjQwNDMw RjY1RkI3RTU0Rjk5QTg5MC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBp/rsAwQBsQv+ MA0EAgACMAcDBQAoA2UQMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQmmjANBgkq hkiG9w0BAQsFAAOCAQEAGDnEWjXjvgQz5tvh10fvkqT52kKDtNKA7iP5raKt661F ofGQN91kECK3za9NFJz4lGmjPsQaxEl5stpFlHC2L8/6HIKRV/qIvm8fFR8PjiJo kaeF7uTlCYF1Slv3w4UziXQd8giN5FCZIkn2Qe8vb8jI4NdmlhnupKeXx7KmM8bE Rbv7eeyhx3LRrmWvsNNNLEcxmsc/7yJQNYUNU9ACks+kyM/qkli+LIfrf+3JHQBK J4jnSeme/3GWWaOPcBMT+JCOIhD7guhngGnC9J5JIaPk+MqTxlyLEr4owuzFXzhb hO/WexXmaE4rFHsLr1JgHybc9gAB2EeHDhy+cZv7LA== -----END CERTIFICATE-----Generated at Mon Apr 28 05:59:32 2025 by rpki-client on console.sobornost.net