$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D74784D7E5E292D48F736FFEB50979227E438E3.cer File: 0D74784D7E5E292D48F736FFEB50979227E438E3.cer (raw, json) Hash identifier: ay+qzLlf8uwumGaGK51cuo33u/5RfVs1ry6l5gN3YmA= Subject key identifier: 0D:74:78:4D:7E:5E:29:2D:48:F7:36:FF:EB:50:97:92:27:E4:38:E3 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 6DC6EB92A99AD675EE570AFE45282B4CE42A3F13 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/0E3AF633EDE6ED1731C003BE4AC6267D0EB7EC77881E31078EB548EB170DBC4A/0/0D74784D7E5E292D48F736FFEB50979227E438E3.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/0E3AF633EDE6ED1731C003BE4AC6267D0EB7EC77881E31078EB548EB170DBC4A/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 05:09:27 +0000 Certificate not after: Wed 04 Feb 2026 05:14:27 +0000 Subordinate resources: AS: 64139 IP: 2803:7090::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 02 May 2025 06:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:c6:eb:92:a9:9a:d6:75:ee:57:0a:fe:45:28:2b:4c:e4:2a:3f:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 05:09:27 2025 GMT Not After : Feb 4 05:14:27 2026 GMT Subject: CN=0D74784D7E5E292D48F736FFEB50979227E438E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:75:e2:8f:e1:69:dd:6a:7a:ef:2f:1a:f7:f9: 5c:c2:5a:14:b1:7b:25:d8:fe:dd:5f:83:79:a8:a6: c2:0b:e5:2f:2f:b5:bc:3a:c9:3e:d4:1f:a5:b7:aa: 3b:90:07:49:dc:ec:f2:37:f5:04:c0:63:9e:1d:0b: e2:f6:a9:2d:2a:a5:25:31:68:7d:1f:d2:80:c5:be: 05:98:b6:e0:7c:41:05:46:ce:10:ae:6e:15:d6:ea: 3a:66:bc:02:10:f8:e7:59:02:67:cd:43:ad:c1:15: 5a:32:9d:b0:1a:d9:e9:68:27:5d:6b:b9:d9:c6:55: 0b:e5:c2:ef:f7:c9:1b:83:65:9b:ad:41:25:40:42: 52:15:e1:ce:f4:6c:cc:b7:0f:85:49:21:fb:0a:db: 80:60:c2:22:2d:71:55:13:eb:21:ae:3f:d1:b6:1d: 82:09:f7:e1:23:cd:39:b3:5d:cb:23:c2:a2:8c:a6: 18:f8:30:50:19:ef:fa:89:c9:8e:7d:23:bf:05:3f: 34:d3:10:c9:cb:ce:d8:47:6c:8c:ec:f1:eb:2e:31: 45:f2:36:2d:7b:56:df:ce:66:af:e8:eb:c3:3d:8a: 9f:e0:85:15:bd:e3:e3:96:73:52:79:b3:e1:72:de: 05:ef:ac:68:d0:00:16:9f:b7:22:2e:d7:d9:3d:9f: ea:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 0D:74:78:4D:7E:5E:29:2D:48:F7:36:FF:EB:50:97:92:27:E4:38:E3 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0E3AF633EDE6ED1731C003BE4AC6267D0EB7EC77881E31078EB548EB170DBC4A/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0E3AF633EDE6ED1731C003BE4AC6267D0EB7EC77881E31078EB548EB170DBC4A/0/0D74784D7E5E292D48F736FFEB50979227E438E3.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:7090::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 64139 Signature Algorithm: sha256WithRSAEncryption be:3c:02:56:27:35:8f:f9:13:4f:e7:f5:da:61:7e:4c:b9:85: af:f1:9b:04:8c:22:17:a2:ea:c5:56:7b:8a:a1:5b:e1:28:ae: 5c:29:70:29:7a:1b:0c:cc:95:36:63:8f:1c:3b:e7:04:e1:5b: 1f:46:85:b3:6a:27:b5:2b:97:9e:8a:08:19:33:4a:b6:95:66: 23:1e:88:b1:b1:14:87:7d:17:8b:84:e8:59:21:af:e1:8e:d8: c6:fe:4b:d5:59:89:fc:51:a4:3e:e3:19:d8:95:4e:74:a7:fe: 12:82:80:2d:02:0e:14:59:e0:36:fb:17:36:5e:cf:bd:95:bb: bc:50:86:fb:d7:c3:27:b2:7b:13:1f:a3:5a:62:59:67:71:1c: 31:e1:2f:8e:95:f4:e0:79:44:fe:8e:12:d3:75:8b:2d:aa:90: c2:2b:9b:33:82:9b:1f:2b:63:df:30:1e:c3:2d:ed:a8:d5:42: b7:34:7d:8a:98:c7:ac:8a:99:bc:b5:08:85:6b:e7:08:dd:e0: e0:f1:b9:ae:0b:75:55:a4:b2:17:a4:c8:0c:ec:3c:0d:d2:05: dd:93:15:1e:e0:98:d3:cd:c5:48:0f:41:55:3b:ec:fd:4b:1b: 4c:a1:4d:2d:d7:94:7e:0f:1e:b2:a9:d6:06:9a:2e:5b:3e:df: 5f:6c:01:0d -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUbcbrkqma1nXuVwr+RSgrTOQqPxMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUwNTA5MjdaFw0yNjAyMDQwNTE0MjdaMDMxMTAvBgNV BAMTKDBENzQ3ODREN0U1RTI5MkQ0OEY3MzZGRkVCNTA5NzkyMjdFNDM4RTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6deKP4WndanrvLxr3+VzCWhSx eyXY/t1fg3mopsIL5S8vtbw6yT7UH6W3qjuQB0nc7PI39QTAY54dC+L2qS0qpSUx aH0f0oDFvgWYtuB8QQVGzhCubhXW6jpmvAIQ+OdZAmfNQ63BFVoynbAa2eloJ11r udnGVQvlwu/3yRuDZZutQSVAQlIV4c70bMy3D4VJIfsK24BgwiItcVUT6yGuP9G2 HYIJ9+EjzTmzXcsjwqKMphj4MFAZ7/qJyY59I78FPzTTEMnLzthHbIzs8esuMUXy Ni17Vt/OZq/o68M9ip/ghRW94+OWc1J5s+Fy3gXvrGjQABaftyIu19k9n+rFAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQNdHhNfl4pLUj3 Nv/rUJeSJ+Q44zAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMEUzQUY2MzNFREU2RUQxNzMxQzAwM0JF NEFDNjI2N0QwRUI3RUM3Nzg4MUUzMTA3OEVCNTQ4RUIxNzBEQkM0QS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8wRTNBRjYzM0VERTZFRDE3MzFDMDAzQkU0QUM2MjY3RDBFQjdFQzc3ODgx RTMxMDc4RUI1NDhFQjE3MERCQzRBLzAvMEQ3NDc4NEQ3RTVFMjkyRDQ4RjczNkZG RUI1MDk3OTIyN0U0MzhFMy5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKANwkDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMA+oswDQYJKoZIhvcNAQELBQADggEBAL48AlYn NY/5E0/n9dphfky5ha/xmwSMIhei6sVWe4qhW+EorlwpcCl6GwzMlTZjjxw75wTh Wx9GhbNqJ7Url56KCBkzSraVZiMeiLGxFId9F4uE6Fkhr+GO2Mb+S9VZifxRpD7j GdiVTnSn/hKCgC0CDhRZ4Db7FzZez72Vu7xQhvvXwyeyexMfo1piWWdxHDHhL46V 9OB5RP6OEtN1iy2qkMIrmzOCmx8rY98wHsMt7ajVQrc0fYqYx6yKmby1CIVr5wjd 4ODxua4LdVWkshekyAzsPA3SBd2TFR7gmNPNxUgPQVU77P1LG0yhTS3XlH4PHrKp 1gaaLls+319sAQ0= -----END CERTIFICATE-----Generated at Mon Apr 28 05:59:29 2025 by rpki-client on console.sobornost.net