$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.cer File: 0F225EF900A741ED0067293A5D9297AE3DA8CE60.cer (raw, json) Hash identifier: QkoQNK/YXoKrjnmxz1kmPynwiypororJ0pNh9DX3a6k= Subject key identifier: 0F:22:5E:F9:00:A7:41:ED:00:67:29:3A:5D:92:97:AE:3D:A8:CE:60 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 1B7EB1C565DEF001CF1F8200CD0C4A230AFF9747 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Thu 27 Feb 2025 19:32:58 +0000 Certificate not after: Thu 26 Feb 2026 19:37:58 +0000 Subordinate resources: AS: 269822 AS: 273204 IP: 45.65.232.0/22 IP: 103.212.83.0/24 IP: 103.219.234.0/23 IP: 190.102.120.0/21 IP: 223.27.115.0/24 IP: 2803:15c0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 02 May 2025 06:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:7e:b1:c5:65:de:f0:01:cf:1f:82:00:cd:0c:4a:23:0a:ff:97:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 27 19:32:58 2025 GMT Not After : Feb 26 19:37:58 2026 GMT Subject: CN=0F225EF900A741ED0067293A5D9297AE3DA8CE60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ac:32:a8:82:33:24:b2:d5:6f:7c:b0:d1:bb: 50:e0:c2:c0:ed:54:5c:5d:f2:03:a0:9d:e2:4e:05: ab:aa:8f:7b:e4:11:31:3c:74:7a:43:40:87:58:78: 8a:a7:ad:c6:b4:ce:5c:24:5e:d6:a3:ab:f0:7e:6a: b7:fc:05:b3:e9:8d:9d:e7:00:60:8e:47:df:7c:39: d9:c2:4b:3c:5d:87:4b:c3:ea:7c:4d:bb:4c:34:ee: 1a:4c:6a:b9:98:c9:c4:b9:3d:eb:71:18:b6:08:40: ca:bc:ad:87:67:68:b9:6d:63:55:5e:11:97:05:a4: c9:7b:52:4d:f5:58:c3:9f:bb:cf:12:69:96:a2:0d: 8d:fd:21:df:c4:f6:03:0c:62:29:8e:0c:a4:e6:09: 14:d7:2c:a9:c2:1a:99:f1:a1:70:87:f4:8f:36:fa: 01:8b:1f:61:39:c9:00:d1:7b:09:64:21:c3:7a:3b: 96:1f:b1:4c:f7:43:fa:b0:71:75:a1:e4:97:b0:f5: 78:50:33:3f:12:e0:90:49:03:a7:cd:30:ff:09:1a: f6:76:6f:3a:90:00:37:af:47:f0:4a:44:e5:6c:1a: 6b:8d:1f:de:80:d9:5e:ef:37:ae:a0:b0:48:e5:20: e7:8e:3e:54:6c:24:08:49:dd:42:f4:92:13:01:03: f2:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 0F:22:5E:F9:00:A7:41:ED:00:67:29:3A:5D:92:97:AE:3D:A8:CE:60 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.65.232.0/22 103.212.83.0/24 103.219.234.0/23 190.102.120.0/21 223.27.115.0/24 IPv6: 2803:15c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 269822 273204 Signature Algorithm: sha256WithRSAEncryption 1c:0f:3f:bb:47:23:68:df:7c:86:5b:e9:67:64:17:9c:4f:48: 9f:63:b0:c1:c6:d1:c8:0a:8d:80:3e:49:4e:b6:06:ba:4a:86: 13:91:44:c3:7a:a0:fe:bb:a5:4d:84:a6:15:95:48:2c:3d:98: 9a:93:80:60:d1:1e:29:bf:5b:60:54:41:e1:36:da:9c:14:97: c9:1d:50:cb:6b:7e:8e:1d:78:9f:28:1e:2e:f3:19:7d:80:57: dc:5e:f9:7a:34:0f:70:17:27:2e:67:28:61:cb:76:3f:34:9b: f5:13:16:22:5f:df:4e:15:7f:19:fd:df:ca:23:58:4f:01:5f: 02:de:99:1c:75:44:37:a9:6e:49:bb:ba:44:46:f6:3b:ee:22: b6:fb:c1:4b:f2:a0:11:50:2a:87:ee:5d:4b:d0:a8:a3:49:1d: 09:8d:4f:9f:69:6b:1c:6c:59:13:13:fe:bb:bd:8f:ed:62:99: 13:7f:f9:ca:0f:47:bc:d8:f2:5c:61:a2:58:52:62:b9:28:4c: d0:78:39:c4:ad:cb:4d:47:8c:46:e4:b6:ea:2b:87:f9:8b:dc: bc:5b:3d:23:49:bb:94:08:14:23:96:aa:df:6b:05:da:d6:4b: 9c:f4:61:dd:7c:80:2e:97:19:b0:8c:a9:eb:78:ab:17:36:a7: 52:1b:e0:70 -----BEGIN CERTIFICATE----- MIIGwjCCBaqgAwIBAgIUG36xxWXe8AHPH4IAzQxKIwr/l0cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMjcxOTMyNThaFw0yNjAyMjYxOTM3NThaMDMxMTAvBgNV BAMTKDBGMjI1RUY5MDBBNzQxRUQwMDY3MjkzQTVEOTI5N0FFM0RBOENFNjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2rDKogjMkstVvfLDRu1DgwsDt VFxd8gOgneJOBauqj3vkETE8dHpDQIdYeIqnrca0zlwkXtajq/B+arf8BbPpjZ3n AGCOR998OdnCSzxdh0vD6nxNu0w07hpMarmYycS5PetxGLYIQMq8rYdnaLltY1Ve EZcFpMl7Uk31WMOfu88SaZaiDY39Id/E9gMMYimODKTmCRTXLKnCGpnxoXCH9I82 +gGLH2E5yQDRewlkIcN6O5YfsUz3Q/qwcXWh5Jew9XhQMz8S4JBJA6fNMP8JGvZ2 bzqQADevR/BKROVsGmuNH96A2V7vN66gsEjlIOeOPlRsJAhJ3UL0khMBA/JNAgMB AAGjggPMMIIDyDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQPIl75AKdB7QBn KTpdkpeuPajOYDAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRUI1MDg4NkI4RUYzNjAwQkU2Q0Q5OTlD NUVGRTVDNjY5OTZBNUIwRTgwMkRDMzM2RjNFRjQ1MTM4NDgxM0U1NC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9FQjUwODg2QjhFRjM2MDBCRTZDRDk5OUM1RUZFNUM2Njk5NkE1QjBFODAy REMzMzZGM0VGNDUxMzg0ODEzRTU0LzAvMEYyMjVFRjkwMEE3NDFFRDAwNjcyOTNB NUQ5Mjk3QUUzREE4Q0U2MC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQCLUHoAwQAZ9RT AwQBZ9vqAwQDvmZ4AwQA3xtzMA0EAgACMAcDBQAoAxXAMB8GCCsGAQUFBwEIAQH/ BBAwDqAMMAoCAwQd/gIDBCs0MA0GCSqGSIb3DQEBCwUAA4IBAQAcDz+7RyNo33yG W+lnZBecT0ifY7DBxtHICo2APklOtga6SoYTkUTDeqD+u6VNhKYVlUgsPZiak4Bg 0R4pv1tgVEHhNtqcFJfJHVDLa36OHXifKB4u8xl9gFfcXvl6NA9wFycuZyhhy3Y/ NJv1ExYiX99OFX8Z/d/KI1hPAV8C3pkcdUQ3qW5Ju7pERvY77iK2+8FL8qARUCqH 7l1L0KijSR0JjU+faWscbFkTE/67vY/tYpkTf/nKD0e82PJcYaJYUmK5KEzQeDnE rctNR4xG5LbqK4f5i9y8Wz0jSbuUCBQjlqrfawXa1kuc9GHdfIAulxmwjKnreKsX NqdSG+Bw -----END CERTIFICATE-----Generated at Mon Apr 28 05:59:29 2025 by rpki-client on console.sobornost.net