$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/26FA1591CFDAFAF9C609CF8DD030E416B35481AA.cer File: 26FA1591CFDAFAF9C609CF8DD030E416B35481AA.cer (raw, json) Hash identifier: QRuY//tjemE4JARvwcO70sI8hLpSLziM9D9xJkDROXk= Subject key identifier: 26:FA:15:91:CF:DA:FA:F9:C6:09:CF:8D:D0:30:E4:16:B3:54:81:AA Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 5A947470C2D6FE94A57DB8ACB1E94FC986C31ED7 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/F8AC841374262C322E9380B3AC13319366EC4D93C7B09D76E826E79C7A222D67/0/26FA1591CFDAFAF9C609CF8DD030E416B35481AA.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/F8AC841374262C322E9380B3AC13319366EC4D93C7B09D76E826E79C7A222D67/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 13:56:08 +0000 Certificate not after: Wed 04 Feb 2026 14:01:08 +0000 Subordinate resources: AS: 264666 IP: 179.0.203.0/24 IP: 2801:10:2000::/48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 02 May 2025 06:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:94:74:70:c2:d6:fe:94:a5:7d:b8:ac:b1:e9:4f:c9:86:c3:1e:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 13:56:08 2025 GMT Not After : Feb 4 14:01:08 2026 GMT Subject: CN=26FA1591CFDAFAF9C609CF8DD030E416B35481AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:9c:e9:8f:46:01:4c:19:8d:62:a3:d5:df:9d: d1:81:8c:2e:76:e0:8e:fb:e9:63:57:da:29:30:28: 0d:12:01:e7:25:1b:63:d5:ed:7e:ae:4e:8e:c5:a0: ee:3c:b0:db:2a:33:47:5c:ae:cd:d7:44:ae:32:b1: 2b:d8:10:00:3e:64:ef:e6:12:77:6a:75:30:37:ff: d6:a9:01:1b:98:bc:36:ac:93:89:66:45:44:09:e3: f3:cb:f8:bc:fa:eb:a7:e6:54:d8:01:e9:a0:fc:b9: 14:1c:73:a4:60:2f:1a:79:4e:33:a4:88:fd:50:e0: df:de:47:39:2f:ec:93:77:31:36:f3:a8:22:0c:2b: fb:17:83:ed:68:dc:c0:46:9f:43:f4:19:3c:ce:2e: 2d:e7:44:67:ad:ea:f8:87:95:05:ae:90:01:d5:bc: e6:50:d7:b6:4d:dc:fa:05:c5:e6:9d:1f:ee:4e:e7: be:e5:1e:8d:2b:9e:4c:61:f6:da:eb:ee:39:32:82: 0f:27:a5:86:10:96:c3:41:7c:08:c3:0e:3a:21:ab: 99:2c:6d:b7:05:cc:f6:8e:f6:16:63:19:c8:ff:e7: ab:90:f5:38:31:04:0e:3f:5b:ac:d4:d8:9b:94:2e: c1:ec:09:4e:c6:d6:ef:c2:e8:32:67:3c:b6:c3:55: 4c:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 26:FA:15:91:CF:DA:FA:F9:C6:09:CF:8D:D0:30:E4:16:B3:54:81:AA X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/F8AC841374262C322E9380B3AC13319366EC4D93C7B09D76E826E79C7A222D67/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/F8AC841374262C322E9380B3AC13319366EC4D93C7B09D76E826E79C7A222D67/0/26FA1591CFDAFAF9C609CF8DD030E416B35481AA.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 179.0.203.0/24 IPv6: 2801:10:2000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264666 Signature Algorithm: sha256WithRSAEncryption 06:70:be:8b:ee:8c:95:0e:72:ae:f1:db:9d:32:77:87:45:1a: 0d:30:21:eb:fa:22:7c:af:96:aa:15:05:20:e5:db:e6:f4:2f: c5:b1:84:80:b6:5b:50:81:96:b8:e2:f6:93:87:4c:ef:7d:38: a8:e8:5d:52:7e:47:21:3f:79:34:5c:fe:64:6a:83:53:48:8f: 12:b6:56:f8:45:ef:f2:74:d3:ba:d2:f5:23:0c:d1:c0:3b:8c: 2c:96:30:97:12:c0:95:43:f4:e8:cb:78:ac:e3:67:95:92:a1: cc:16:d6:86:69:e9:62:64:98:41:d8:c2:85:a6:04:a8:ad:e1: 97:77:96:8f:b1:ff:2e:8f:e6:ee:30:cc:c7:ad:64:04:3d:b8: 65:60:f3:ba:a3:24:b9:1e:5f:a2:51:22:7e:a9:ac:9f:88:85: aa:ec:9f:67:1d:dd:6d:2d:d6:a3:14:24:5d:3e:d9:8c:38:a4: 46:8e:43:7a:f2:b9:47:02:fd:a1:87:86:df:11:19:12:e2:f1: e6:e2:97:39:4a:8d:f7:85:22:bb:67:1e:8a:52:d5:b9:61:6a: 0e:4e:e6:45:60:07:11:aa:64:48:b2:5a:18:4a:74:a2:38:54: 3d:f6:a4:78:6d:38:7a:f6:9f:21:b2:99:39:14:93:c8:1c:05: 85:82:8f:43 -----BEGIN CERTIFICATE----- MIIGpzCCBY+gAwIBAgIUWpR0cMLW/pSlfbisselPyYbDHtcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUxMzU2MDhaFw0yNjAyMDQxNDAxMDhaMDMxMTAvBgNV BAMTKDI2RkExNTkxQ0ZEQUZBRjlDNjA5Q0Y4REQwMzBFNDE2QjM1NDgxQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDznOmPRgFMGY1io9XfndGBjC52 4I776WNX2ikwKA0SAeclG2PV7X6uTo7FoO48sNsqM0dcrs3XRK4ysSvYEAA+ZO/m EndqdTA3/9apARuYvDask4lmRUQJ4/PL+Lz666fmVNgB6aD8uRQcc6RgLxp5TjOk iP1Q4N/eRzkv7JN3MTbzqCIMK/sXg+1o3MBGn0P0GTzOLi3nRGet6viHlQWukAHV vOZQ17ZN3PoFxeadH+5O577lHo0rnkxh9trr7jkygg8npYYQlsNBfAjDDjohq5ks bbcFzPaO9hZjGcj/56uQ9TgxBA4/W6zU2JuULsHsCU7G1u/C6DJnPLbDVUw1AgMB AAGjggOxMIIDrTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQm+hWRz9r6+cYJ z43QMOQWs1SBqjAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRjhBQzg0MTM3NDI2MkMzMjJFOTM4MEIz QUMxMzMxOTM2NkVDNEQ5M0M3QjA5RDc2RTgyNkU3OUM3QTIyMkQ2Ny8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9GOEFDODQxMzc0MjYyQzMyMkU5MzgwQjNBQzEzMzE5MzY2RUM0RDkzQzdC MDlENzZFODI2RTc5QzdBMjIyRDY3LzAvMjZGQTE1OTFDRkRBRkFGOUM2MDlDRjhE RDAzMEU0MTZCMzU0ODFBQS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAswDLMA8EAgAC MAkDBwAoAQAQIAAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAnaMA0GCSqGSIb3 DQEBCwUAA4IBAQAGcL6L7oyVDnKu8dudMneHRRoNMCHr+iJ8r5aqFQUg5dvm9C/F sYSAtltQgZa44vaTh0zvfTio6F1SfkchP3k0XP5kaoNTSI8Stlb4Re/ydNO60vUj DNHAO4wsljCXEsCVQ/Toy3is42eVkqHMFtaGaeliZJhB2MKFpgSoreGXd5aPsf8u j+buMMzHrWQEPbhlYPO6oyS5Hl+iUSJ+qayfiIWq7J9nHd1tLdajFCRdPtmMOKRG jkN68rlHAv2hh4bfERkS4vHm4pc5So33hSK7Zx6KUtW5YWoOTuZFYAcRqmRIsloY SnSiOFQ99qR4bTh69p8hspk5FJPIHAWFgo9D -----END CERTIFICATE-----Generated at Mon Apr 28 05:59:31 2025 by rpki-client on console.sobornost.net