$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/189FF1E70A373D6E162F9C90BC4D9BEB84AA7DA1.cer File: 189FF1E70A373D6E162F9C90BC4D9BEB84AA7DA1.cer (raw, json) Hash identifier: fgbvqAZSyqk8THiuYtNfhOdL2bGsceHyxKN2VpunewA= Subject key identifier: 18:9F:F1:E7:0A:37:3D:6E:16:2F:9C:90:BC:4D:9B:EB:84:AA:7D:A1 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 6B096365DDE0D4B54804AF1850D790FE20F10BA6 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/3FB7A388427A0A2269AF9E0B4C573CBEF1D046BDF34D7B5F3846790510F66E13/0/189FF1E70A373D6E162F9C90BC4D9BEB84AA7DA1.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/3FB7A388427A0A2269AF9E0B4C573CBEF1D046BDF34D7B5F3846790510F66E13/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 17:08:55 +0000 Certificate not after: Wed 04 Feb 2026 17:13:55 +0000 Subordinate resources: AS: 263710 IP: 200.10.154.0/24 IP: 2801:0:210::/48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 02 May 2025 06:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:09:63:65:dd:e0:d4:b5:48:04:af:18:50:d7:90:fe:20:f1:0b:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 17:08:55 2025 GMT Not After : Feb 4 17:13:55 2026 GMT Subject: CN=189FF1E70A373D6E162F9C90BC4D9BEB84AA7DA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:99:03:63:c8:c0:64:65:65:aa:dd:7b:12:d3: 9d:ad:f1:bb:df:ca:1e:89:0d:82:31:06:3b:60:de: ee:d4:c0:d8:7b:08:63:d9:38:a8:e3:a0:02:94:02: 27:9c:e2:79:51:77:48:fe:fc:6a:d9:9f:1f:c5:1f: d8:2c:c8:28:ad:34:94:40:18:58:4e:73:fa:d7:17: b0:fb:c1:65:96:79:68:93:be:ad:1a:75:de:11:c0: 77:96:c8:81:34:ff:90:4d:41:60:cc:da:bd:3a:2e: ba:c6:2c:d1:0e:d1:c8:5d:f6:2f:2b:79:97:02:56: ce:63:57:7a:2f:74:ca:93:45:62:e2:45:24:45:3b: a7:a0:b9:15:be:11:7b:8b:82:b5:48:a5:a2:ff:f4: d2:f5:d9:ef:a5:68:99:79:f9:6f:23:92:7a:6f:ea: c9:88:5c:12:64:dc:7a:0f:88:bc:4f:87:5d:48:e3: 8f:0c:57:41:db:ba:8b:ce:c8:51:8f:a4:03:c8:cc: e9:82:f6:3c:ce:fe:1a:c5:62:8c:8a:dd:1f:61:7c: 21:9c:72:35:04:ee:b9:13:09:16:ab:51:04:48:ee: 9a:20:2c:11:66:98:39:d6:32:d9:c1:bd:6f:b4:c7: a4:6e:b0:7f:88:ae:30:6b:14:6a:d4:eb:9e:c1:20: 2b:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 18:9F:F1:E7:0A:37:3D:6E:16:2F:9C:90:BC:4D:9B:EB:84:AA:7D:A1 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/3FB7A388427A0A2269AF9E0B4C573CBEF1D046BDF34D7B5F3846790510F66E13/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/3FB7A388427A0A2269AF9E0B4C573CBEF1D046BDF34D7B5F3846790510F66E13/0/189FF1E70A373D6E162F9C90BC4D9BEB84AA7DA1.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.10.154.0/24 IPv6: 2801:0:210::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263710 Signature Algorithm: sha256WithRSAEncryption 01:e3:12:45:31:e9:af:7c:c6:cf:a3:25:4d:2c:f5:e4:b8:32: e7:e7:5e:09:0f:8c:27:dd:ad:12:a1:ef:34:f0:a5:cf:d5:48: 82:72:a3:7c:a6:81:96:b9:e0:22:80:de:4c:83:4c:b0:ba:f7: f3:ec:58:cb:0d:67:5e:ff:cd:1d:c0:ec:d9:a9:2e:38:d0:08: 96:20:74:01:59:25:cd:51:41:4e:e4:2e:a7:be:28:ff:81:29: 33:5c:d3:66:d9:76:7b:43:c2:6f:89:dc:e6:51:a3:1a:13:ef: 91:b1:bf:28:82:34:bb:d2:82:2f:9d:22:48:99:2c:f3:8f:23: ef:fe:c5:68:80:90:34:d6:9d:d3:a0:59:32:2d:05:46:8b:57: 83:94:cd:d0:12:05:3c:62:49:25:bb:1b:f2:cc:d5:2d:84:57: 73:70:bb:ff:b5:39:1b:7c:0d:3d:15:9b:81:64:82:a6:a3:ac: fb:af:44:7e:c0:95:98:b2:b2:8e:3d:ac:53:fd:bb:54:14:99: 61:15:ed:5b:89:ac:e9:7f:36:ba:94:7d:33:c3:32:7c:c8:27: fa:31:17:d7:fc:ac:7e:ed:3a:d5:e0:03:b6:3a:f3:65:e5:1e: 7e:61:e5:93:a1:74:4e:b9:8f:9d:ec:f1:95:85:1e:19:2d:e1: c0:88:ae:94 -----BEGIN CERTIFICATE----- MIIGpzCCBY+gAwIBAgIUawljZd3g1LVIBK8YUNeQ/iDxC6YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUxNzA4NTVaFw0yNjAyMDQxNzEzNTVaMDMxMTAvBgNV BAMTKDE4OUZGMUU3MEEzNzNENkUxNjJGOUM5MEJDNEQ5QkVCODRBQTdEQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAmQNjyMBkZWWq3XsS052t8bvf yh6JDYIxBjtg3u7UwNh7CGPZOKjjoAKUAiec4nlRd0j+/GrZnx/FH9gsyCitNJRA GFhOc/rXF7D7wWWWeWiTvq0add4RwHeWyIE0/5BNQWDM2r06LrrGLNEO0chd9i8r eZcCVs5jV3ovdMqTRWLiRSRFO6eguRW+EXuLgrVIpaL/9NL12e+laJl5+W8jknpv 6smIXBJk3HoPiLxPh11I448MV0HbuovOyFGPpAPIzOmC9jzO/hrFYoyK3R9hfCGc cjUE7rkTCRarUQRI7pogLBFmmDnWMtnBvW+0x6RusH+IrjBrFGrU657BICv1AgMB AAGjggOxMIIDrTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQYn/HnCjc9bhYv nJC8TZvrhKp9oTAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvM0ZCN0EzODg0MjdBMEEyMjY5QUY5RTBC NEM1NzNDQkVGMUQwNDZCREYzNEQ3QjVGMzg0Njc5MDUxMEY2NkUxMy8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8zRkI3QTM4ODQyN0EwQTIyNjlBRjlFMEI0QzU3M0NCRUYxRDA0NkJERjM0 RDdCNUYzODQ2NzkwNTEwRjY2RTEzLzAvMTg5RkYxRTcwQTM3M0Q2RTE2MkY5Qzkw QkM0RDlCRUI4NEFBN0RBMS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAyAqaMA8EAgAC MAkDBwAoAQAAAhAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAYeMA0GCSqGSIb3 DQEBCwUAA4IBAQAB4xJFMemvfMbPoyVNLPXkuDLn514JD4wn3a0Soe808KXP1UiC cqN8poGWueAigN5Mg0ywuvfz7FjLDWde/80dwOzZqS440AiWIHQBWSXNUUFO5C6n vij/gSkzXNNm2XZ7Q8JvidzmUaMaE++Rsb8ogjS70oIvnSJImSzzjyPv/sVogJA0 1p3ToFkyLQVGi1eDlM3QEgU8YkkluxvyzNUthFdzcLv/tTkbfA09FZuBZIKmo6z7 r0R+wJWYsrKOPaxT/btUFJlhFe1biazpfza6lH0zwzJ8yCf6MRfX/Kx+7TrV4AO2 OvNl5R5+YeWToXROuY+d7PGVhR4ZLeHAiK6U -----END CERTIFICATE-----Generated at Mon Apr 28 05:59:30 2025 by rpki-client on console.sobornost.net