$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer File: 1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer (raw, json) Hash identifier: Zr7zNIAgqpcOl1iHQBH+JpHWcPR95rJYBKuCk6xj3os= Subject key identifier: 12:83:B5:F5:AD:DE:24:61:E0:07:DD:CF:79:A4:53:4A:FC:7A:57:7F Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 02CF6D64A0BAE80078E4D75E4B91268C23541F14 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 04:11:00 +0000 Certificate not after: Wed 04 Feb 2026 04:16:00 +0000 Subordinate resources: AS: 52275 IP: 179.0.14.0/24 IP: 200.13.42.0/23 IP: 200.33.82.0/24 IP: 2801:0:440::/48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 02 May 2025 06:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:cf:6d:64:a0:ba:e8:00:78:e4:d7:5e:4b:91:26:8c:23:54:1f:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 04:11:00 2025 GMT Not After : Feb 4 04:16:00 2026 GMT Subject: CN=1283B5F5ADDE2461E007DDCF79A4534AFC7A577F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ea:16:46:db:3b:fa:65:3e:83:8f:de:cd:cc: 6e:cb:76:7d:e4:9d:9b:88:76:07:1e:eb:2f:d4:0c: 18:ae:8d:c1:35:a6:a8:c6:23:ca:66:1c:58:3e:c6: e1:69:10:60:f8:42:9b:67:24:0d:d8:44:e2:ac:45: db:ac:95:26:f0:32:6b:58:f2:be:07:fc:f0:37:31: 93:e6:bf:9e:62:0d:a8:83:ff:f4:dc:6a:de:63:51: 0e:99:7d:e1:7f:b2:67:d9:c0:62:57:23:f9:42:c8: da:06:0a:01:47:c5:e1:e8:e7:e4:be:fb:a9:86:10: db:33:db:0c:92:6b:16:88:70:b6:aa:3f:01:e7:71: a1:42:27:47:b8:e4:8d:89:1a:5b:29:91:4e:1f:4d: d1:42:8c:53:98:f0:99:41:0a:c3:1d:19:93:10:4b: 5a:01:2e:47:c9:e5:48:d2:20:92:07:61:89:88:7a: c0:da:2b:63:81:83:6c:1f:26:c2:ae:9f:1d:5c:f8: 6d:82:5c:7b:4a:5e:34:8a:8a:f2:38:83:82:29:3b: 75:01:81:c6:54:b1:49:f0:93:06:ff:f3:ad:32:48: fd:44:4c:96:0d:86:e3:b9:d1:46:9e:6b:45:ff:d2: b5:de:e2:3f:bc:21:38:56:27:7b:85:8e:ea:62:ec: 41:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 12:83:B5:F5:AD:DE:24:61:E0:07:DD:CF:79:A4:53:4A:FC:7A:57:7F X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 179.0.14.0/24 200.13.42.0/23 200.33.82.0/24 IPv6: 2801:0:440::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52275 Signature Algorithm: sha256WithRSAEncryption 98:35:71:e8:ea:35:93:4f:54:f5:bc:7a:8b:4d:52:ba:c0:67: bd:3c:4f:28:ad:32:a4:c2:fc:9a:a2:cb:84:29:8b:a6:dc:29: b7:2a:0c:1f:a5:01:4b:21:e2:38:e3:35:bb:25:57:7c:b2:48: 73:c8:9f:cc:64:c7:16:f2:83:a7:c7:0d:37:18:f0:b6:d4:12: 61:f5:cc:80:47:1f:32:e4:35:89:56:39:e7:62:b2:ad:13:0d: 96:6d:bf:8c:d4:b4:5c:65:bd:65:3d:9c:e6:33:4b:08:10:5d: f7:3f:6d:f2:2d:1d:24:c7:87:a8:36:a3:e9:a4:f7:f8:b8:df: 80:c8:6e:5c:c0:e7:4b:fa:cc:c1:c1:79:9b:25:4a:4c:1a:c6: 99:9d:6a:8e:b6:d1:69:a7:e0:9a:44:62:f5:1d:44:ac:9d:ea: 5d:92:e6:36:8d:ef:69:d6:14:0b:d1:38:89:e0:28:f8:af:ec: 57:66:a4:92:9e:df:4a:7e:6c:05:6d:d9:89:f9:b0:96:b5:cc: 36:71:42:81:f3:a3:6c:22:a8:9b:a0:72:e8:c4:92:eb:80:92: 65:ab:92:c2:b3:32:25:76:27:24:b7:20:d3:66:e5:a2:79:05: 88:54:d6:20:21:6b:c7:bd:f6:a4:0f:bf:29:ae:20:9c:69:2e: f3:c5:b4:cc -----BEGIN CERTIFICATE----- MIIGszCCBZugAwIBAgIUAs9tZKC66AB45NdeS5EmjCNUHxQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUwNDExMDBaFw0yNjAyMDQwNDE2MDBaMDMxMTAvBgNV BAMTKDEyODNCNUY1QURERTI0NjFFMDA3RERDRjc5QTQ1MzRBRkM3QTU3N0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB6hZG2zv6ZT6Dj97NzG7Ldn3k nZuIdgce6y/UDBiujcE1pqjGI8pmHFg+xuFpEGD4QptnJA3YROKsRduslSbwMmtY 8r4H/PA3MZPmv55iDaiD//Tcat5jUQ6ZfeF/smfZwGJXI/lCyNoGCgFHxeHo5+S+ +6mGENsz2wySaxaIcLaqPwHncaFCJ0e45I2JGlspkU4fTdFCjFOY8JlBCsMdGZMQ S1oBLkfJ5UjSIJIHYYmIesDaK2OBg2wfJsKunx1c+G2CXHtKXjSKivI4g4IpO3UB gcZUsUnwkwb/860ySP1ETJYNhuO50Uaea0X/0rXe4j+8IThWJ3uFjupi7EF3AgMB AAGjggO9MIIDuTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQSg7X1rd4kYeAH 3c95pFNK/HpXfzAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvM0QwQTJFMUZDNDRCNTNGNEQwMzA5MDFD RENDRUY2MUU0OUE4NEY5OTU0N0Y2NkYwOTM0Mjc5MEJBRTAzM0I1RC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8zRDBBMkUxRkM0NEI1M0Y0RDAzMDkwMUNEQ0NFRjYxRTQ5QTg0Rjk5NTQ3 RjY2RjA5MzQyNzkwQkFFMDMzQjVELzAvMTI4M0I1RjVBRERFMjQ2MUUwMDdERENG NzlBNDUzNEFGQzdBNTc3Ri5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAYBAIAATASAwQAswAOAwQByA0q AwQAyCFSMA8EAgACMAkDBwAoAQAABEAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID AMwzMA0GCSqGSIb3DQEBCwUAA4IBAQCYNXHo6jWTT1T1vHqLTVK6wGe9PE8orTKk wvyaosuEKYum3Cm3KgwfpQFLIeI44zW7JVd8skhzyJ/MZMcW8oOnxw03GPC21BJh 9cyARx8y5DWJVjnnYrKtEw2Wbb+M1LRcZb1lPZzmM0sIEF33P23yLR0kx4eoNqPp pPf4uN+AyG5cwOdL+szBwXmbJUpMGsaZnWqOttFpp+CaRGL1HUSsnepdkuY2je9p 1hQL0TiJ4Cj4r+xXZqSSnt9KfmwFbdmJ+bCWtcw2cUKB86NsIqiboHLoxJLrgJJl q5LCszIldicktyDTZuWieQWIVNYgIWvHvfakD78priCcaS7zxbTM -----END CERTIFICATE-----Generated at Mon Apr 28 05:59:30 2025 by rpki-client on console.sobornost.net