$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/070C285AD49C797D254C40E4B4BA366789930A97.cer File: 070C285AD49C797D254C40E4B4BA366789930A97.cer (raw, json) Hash identifier: YKQcTlNluEliKeIGBiKXqfIL7MYohONwGCkkFTIHoxI= Subject key identifier: 07:0C:28:5A:D4:9C:79:7D:25:4C:40:E4:B4:BA:36:67:89:93:0A:97 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 1F899D96B23FA3DE0AB6138DC198C66D2D96BD03 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/CC01A0BEEEFD401595E946418CF1478037DF424D623ABA47ED743F29D2AD8D4F/0/070C285AD49C797D254C40E4B4BA366789930A97.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/CC01A0BEEEFD401595E946418CF1478037DF424D623ABA47ED743F29D2AD8D4F/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 21 Jan 2025 21:30:01 +0000 Certificate not after: Tue 20 Jan 2026 21:35:01 +0000 Subordinate resources: AS: 274017 IP: 2803:b4d0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 02 May 2025 06:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:89:9d:96:b2:3f:a3:de:0a:b6:13:8d:c1:98:c6:6d:2d:96:bd:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Jan 21 21:30:01 2025 GMT Not After : Jan 20 21:35:01 2026 GMT Subject: CN=070C285AD49C797D254C40E4B4BA366789930A97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:f3:0f:b9:51:39:8d:eb:5e:50:d3:7f:c5:0e: bf:18:c0:88:6e:b7:ea:4e:61:47:e2:ad:25:fc:a7: d6:33:85:29:52:e0:a0:65:49:8d:4f:d6:4f:e6:35: 47:aa:50:53:5f:54:ad:23:3f:eb:2e:b6:09:db:7e: 87:b9:e5:1b:b6:4c:52:31:3d:30:33:8f:20:e7:7e: c8:b3:1d:69:92:78:69:72:96:57:ad:7b:50:c6:2c: c3:31:89:03:ba:f9:be:b6:fd:5b:8b:dd:fe:ce:7d: 80:2d:bc:ea:68:a2:b0:b5:89:2d:2c:c2:3f:26:ef: 6c:2f:e0:6b:b6:6d:5a:e4:6b:d6:8f:bb:e6:ed:30: db:19:fb:81:3b:7a:a9:7d:57:2c:68:42:67:c7:07: ed:5c:0e:b3:3f:f4:a9:ac:0d:9e:b3:0d:90:a8:57: 28:60:a0:bb:48:39:c0:67:a7:72:aa:95:82:7a:f0: 01:4b:59:bf:97:16:eb:8c:55:15:cd:24:ad:de:c5: fa:7e:95:5a:6e:e1:49:a0:f6:96:c6:47:d0:35:75: 61:4c:6b:9f:ff:f1:22:75:33:3d:1c:a0:6b:ac:ff: aa:cf:da:19:d4:83:e7:26:53:4d:42:8e:df:ed:e6: 11:14:10:00:3c:f2:59:01:cf:49:9a:e9:98:69:e9: 38:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 07:0C:28:5A:D4:9C:79:7D:25:4C:40:E4:B4:BA:36:67:89:93:0A:97 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/CC01A0BEEEFD401595E946418CF1478037DF424D623ABA47ED743F29D2AD8D4F/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/CC01A0BEEEFD401595E946418CF1478037DF424D623ABA47ED743F29D2AD8D4F/0/070C285AD49C797D254C40E4B4BA366789930A97.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:b4d0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 274017 Signature Algorithm: sha256WithRSAEncryption b7:f7:27:f6:9d:41:99:06:6e:44:3f:09:df:b3:8e:a1:88:a6: 34:fa:09:a0:36:f7:77:fb:71:c6:42:f9:84:c5:16:e6:ab:31: 87:a8:a0:54:37:90:7b:c7:d2:f4:91:15:4a:af:1e:bb:b2:26: 17:59:4c:39:b5:b2:d6:13:7d:d4:34:06:32:54:0d:6c:fb:fa: e7:a1:97:29:5c:2b:55:13:8c:6c:56:cb:c4:3b:63:79:99:6f: 0b:46:2f:7e:11:32:a8:e7:df:a7:7e:33:1b:50:41:56:f5:67: 3a:90:6e:5b:e6:60:6f:e9:54:0b:62:43:a2:5a:81:59:bf:77: ec:65:13:15:4d:61:8a:d4:da:29:3e:26:d5:3e:ca:28:68:d7: 26:b2:58:e8:13:5f:98:c6:51:aa:8b:b6:05:46:4e:18:a3:c8: 71:47:6b:46:cf:eb:2e:20:33:ac:42:1b:8c:64:2e:a6:00:38: 9e:eb:cc:94:c8:61:a3:10:ee:32:f5:54:f8:e9:85:bf:73:ee: d7:28:1b:55:5e:42:36:a6:9f:86:d3:8c:5c:88:54:50:56:ca: 42:32:82:58:17:21:87:4d:d5:a9:1c:ab:0d:a8:9f:4f:83:f8: 4a:ba:a0:79:24:a3:59:f5:5c:b3:4a:cf:fa:7f:fc:c5:ed:ee: b8:60:9b:68 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUH4mdlrI/o94KthONwZjGbS2WvQMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAxMjEyMTMwMDFaFw0yNjAxMjAyMTM1MDFaMDMxMTAvBgNV BAMTKDA3MEMyODVBRDQ5Qzc5N0QyNTRDNDBFNEI0QkEzNjY3ODk5MzBBOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX8w+5UTmN615Q03/FDr8YwIhu t+pOYUfirSX8p9YzhSlS4KBlSY1P1k/mNUeqUFNfVK0jP+sutgnbfoe55Ru2TFIx PTAzjyDnfsizHWmSeGlyllete1DGLMMxiQO6+b62/VuL3f7OfYAtvOpoorC1iS0s wj8m72wv4Gu2bVrka9aPu+btMNsZ+4E7eql9VyxoQmfHB+1cDrM/9KmsDZ6zDZCo VyhgoLtIOcBnp3KqlYJ68AFLWb+XFuuMVRXNJK3exfp+lVpu4Umg9pbGR9A1dWFM a5//8SJ1Mz0coGus/6rP2hnUg+cmU01Cjt/t5hEUEAA88lkBz0ma6Zhp6Tj/AgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQHDCha1Jx5fSVM QOS0ujZniZMKlzAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQ0MwMUEwQkVFRUZENDAxNTk1RTk0NjQx OENGMTQ3ODAzN0RGNDI0RDYyM0FCQTQ3RUQ3NDNGMjlEMkFEOEQ0Ri8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9DQzAxQTBCRUVFRkQ0MDE1OTVFOTQ2NDE4Q0YxNDc4MDM3REY0MjRENjIz QUJBNDdFRDc0M0YyOUQyQUQ4RDRGLzAvMDcwQzI4NUFENDlDNzk3RDI1NEM0MEU0 QjRCQTM2Njc4OTkzMEE5Ny5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAO00DAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMELmEwDQYJKoZIhvcNAQELBQADggEBALf3J/ad QZkGbkQ/Cd+zjqGIpjT6CaA293f7ccZC+YTFFuarMYeooFQ3kHvH0vSRFUqvHruy JhdZTDm1stYTfdQ0BjJUDWz7+uehlylcK1UTjGxWy8Q7Y3mZbwtGL34RMqjn36d+ MxtQQVb1ZzqQblvmYG/pVAtiQ6JagVm/d+xlExVNYYrU2ik+JtU+yiho1yayWOgT X5jGUaqLtgVGThijyHFHa0bP6y4gM6xCG4xkLqYAOJ7rzJTIYaMQ7jL1VPjphb9z 7tcoG1VeQjamn4bTjFyIVFBWykIyglgXIYdN1akcqw2on0+D+Eq6oHkko1n1XLNK z/p//MXt7rhgm2g= -----END CERTIFICATE-----Generated at Mon Apr 28 05:59:29 2025 by rpki-client on console.sobornost.net