$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E0F8FA3C520E6A89C4C5B4A8958A9813FAA513C.cer File: 0E0F8FA3C520E6A89C4C5B4A8958A9813FAA513C.cer (raw, json) Hash identifier: /J7msraxhb6LInS8Xs5A0uVIdi37oirlaGxKCjw0d2s= Subject key identifier: 0E:0F:8F:A3:C5:20:E6:A8:9C:4C:5B:4A:89:58:A9:81:3F:AA:51:3C Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 2BF61038D83B1F31A8A2323E6CC7BE4EA6B4D0B5 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/1BEE77A9905E208CB13813A923CD22A56021449CF8C671FBAD47C4989783A418/0/0E0F8FA3C520E6A89C4C5B4A8958A9813FAA513C.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/1BEE77A9905E208CB13813A923CD22A56021449CF8C671FBAD47C4989783A418/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 15:11:09 +0000 Certificate not after: Wed 04 Feb 2026 15:16:09 +0000 Subordinate resources: AS: 52413 IP: 201.220.16.0/21 IP: 2803:8900::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 02 May 2025 06:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:f6:10:38:d8:3b:1f:31:a8:a2:32:3e:6c:c7:be:4e:a6:b4:d0:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 15:11:09 2025 GMT Not After : Feb 4 15:16:09 2026 GMT Subject: CN=0E0F8FA3C520E6A89C4C5B4A8958A9813FAA513C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:bd:54:3d:7a:1f:e5:ba:83:a4:d1:26:82:25: 9d:f3:df:b8:db:f2:b1:fb:49:9f:ff:d7:66:99:b4: 6a:8d:96:ae:66:75:4a:b2:c8:e8:5a:23:85:ca:19: 51:7f:24:21:80:47:b0:76:0d:c6:33:30:c8:a8:7a: 3a:db:9e:3f:e9:da:7e:7e:0f:f2:b6:46:43:e2:80: e4:83:80:51:91:2e:f8:a8:d4:69:23:e3:21:84:64: 4e:af:55:58:39:b8:fa:fc:c2:82:84:49:6f:e1:47: f5:6f:c5:56:8e:5e:ef:0a:29:db:41:32:9a:c0:8e: f7:ca:cb:5d:cb:b7:6e:ec:14:4c:c6:8c:4a:4a:a3: 12:ec:1d:5b:7d:e2:77:c0:d4:03:69:9f:b3:b4:5b: 2b:2d:29:0b:b5:92:10:47:45:5d:74:ad:da:60:85: a9:14:f1:5f:1c:68:2b:24:8b:c8:f0:3a:ef:13:58: 8c:7d:d4:07:72:2a:62:5a:c8:06:1c:51:5d:a0:06: 74:42:1d:c6:5d:ec:34:b2:77:c9:94:9c:7d:e7:7d: d9:fd:97:17:6d:9d:71:5f:03:83:cf:e7:58:35:8f: 8d:c9:d9:8a:0d:51:e8:45:a9:01:0d:84:84:4a:fa: f9:cd:58:96:88:56:3f:3b:5f:75:6c:67:ae:2e:1d: 93:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 0E:0F:8F:A3:C5:20:E6:A8:9C:4C:5B:4A:89:58:A9:81:3F:AA:51:3C X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1BEE77A9905E208CB13813A923CD22A56021449CF8C671FBAD47C4989783A418/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1BEE77A9905E208CB13813A923CD22A56021449CF8C671FBAD47C4989783A418/0/0E0F8FA3C520E6A89C4C5B4A8958A9813FAA513C.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 201.220.16.0/21 IPv6: 2803:8900::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52413 Signature Algorithm: sha256WithRSAEncryption bc:f7:75:e9:9d:3b:45:28:68:03:be:f9:75:71:a1:71:0d:e2: d6:be:39:ce:cc:89:b2:f0:ae:7c:e9:cc:de:a9:6a:e1:b0:32: 1b:fa:3d:58:ce:d1:10:b4:84:66:7c:93:96:3d:7c:a8:f8:b5: 4c:c5:c5:f9:04:92:fe:95:84:f7:46:b7:ac:f9:7a:9b:db:70: fb:58:b8:8c:c3:64:cd:a1:66:30:bc:b7:75:2d:38:d4:7b:fa: 30:0d:a3:18:5e:b8:b3:9d:5d:50:e1:56:a7:7a:bb:fa:70:7d: b8:27:e4:5f:75:cd:2c:07:29:2b:d9:54:37:78:ee:d8:87:8f: 1d:d0:9b:49:77:22:cc:6c:db:6d:6b:62:d6:32:97:2c:1d:28: fa:41:fe:84:52:fa:1f:83:69:05:61:f3:6c:85:ab:70:b2:53: a6:5c:33:1a:f1:0b:b1:72:63:5e:f0:9e:9f:aa:63:a6:41:0c: fa:81:a8:cd:41:19:70:3d:c9:25:09:49:78:1b:59:2f:6d:d7: e2:4c:e6:79:22:6a:8d:2a:d9:b4:d2:31:ed:6a:1a:a8:a6:25: 20:59:28:dd:0a:16:ff:f0:9b:81:7a:4d:47:85:03:b9:90:49: 86:3b:1c:d0:e3:1e:51:c1:dc:fc:53:90:f6:7b:bf:22:58:20: 71:1d:2c:99 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUK/YQONg7HzGoojI+bMe+Tqa00LUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUxNTExMDlaFw0yNjAyMDQxNTE2MDlaMDMxMTAvBgNV BAMTKDBFMEY4RkEzQzUyMEU2QTg5QzRDNUI0QTg5NThBOTgxM0ZBQTUxM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZvVQ9eh/luoOk0SaCJZ3z37jb 8rH7SZ//12aZtGqNlq5mdUqyyOhaI4XKGVF/JCGAR7B2DcYzMMioejrbnj/p2n5+ D/K2RkPigOSDgFGRLvio1Gkj4yGEZE6vVVg5uPr8woKESW/hR/VvxVaOXu8KKdtB MprAjvfKy13Lt27sFEzGjEpKoxLsHVt94nfA1ANpn7O0WystKQu1khBHRV10rdpg hakU8V8caCski8jwOu8TWIx91AdyKmJayAYcUV2gBnRCHcZd7DSyd8mUnH3nfdn9 lxdtnXFfA4PP51g1j43J2YoNUehFqQENhIRK+vnNWJaIVj87X3VsZ64uHZOFAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQOD4+jxSDmqJxM W0qJWKmBP6pRPDAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMUJFRTc3QTk5MDVFMjA4Q0IxMzgxM0E5 MjNDRDIyQTU2MDIxNDQ5Q0Y4QzY3MUZCQUQ0N0M0OTg5NzgzQTQxOC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8xQkVFNzdBOTkwNUUyMDhDQjEzODEzQTkyM0NEMjJBNTYwMjE0NDlDRjhD NjcxRkJBRDQ3QzQ5ODk3ODNBNDE4LzAvMEUwRjhGQTNDNTIwRTZBODlDNEM1QjRB ODk1OEE5ODEzRkFBNTEzQy5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDydwQMA0EAgAC MAcDBQAoA4kAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDMvTANBgkqhkiG9w0B AQsFAAOCAQEAvPd16Z07RShoA775dXGhcQ3i1r45zsyJsvCufOnM3qlq4bAyG/o9 WM7RELSEZnyTlj18qPi1TMXF+QSS/pWE90a3rPl6m9tw+1i4jMNkzaFmMLy3dS04 1Hv6MA2jGF64s51dUOFWp3q7+nB9uCfkX3XNLAcpK9lUN3ju2IePHdCbSXcizGzb bWti1jKXLB0o+kH+hFL6H4NpBWHzbIWrcLJTplwzGvELsXJjXvCen6pjpkEM+oGo zUEZcD3JJQlJeBtZL23X4kzmeSJqjSrZtNIx7WoaqKYlIFko3QoW//CbgXpNR4UD uZBJhjsc0OMeUcHc/FOQ9nu/IlggcR0smQ== -----END CERTIFICATE-----Generated at Mon Apr 28 05:59:29 2025 by rpki-client on console.sobornost.net