$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C7C1D3BD7C277D2286AF6B4461F6A2764876A5F.cer File: 2C7C1D3BD7C277D2286AF6B4461F6A2764876A5F.cer (raw, json) Hash identifier: lxT3jWVesuzWM9dBE8xO+zNsjcxHYiwQK5/mOisMyqM= Subject key identifier: 2C:7C:1D:3B:D7:C2:77:D2:28:6A:F6:B4:46:1F:6A:27:64:87:6A:5F Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 64406C20431260F39964D973DE4CCDFCC76AD4B3 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/20222FE3707FC0E83510EEE1F8B46CB6100B787B45D0B209B61F835E021E5BE5/0/2C7C1D3BD7C277D2286AF6B4461F6A2764876A5F.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/20222FE3707FC0E83510EEE1F8B46CB6100B787B45D0B209B61F835E021E5BE5/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 04 Feb 2025 23:49:21 +0000 Certificate not after: Tue 03 Feb 2026 23:54:21 +0000 Subordinate resources: AS: 269884 IP: 45.188.216.0/23 IP: 2803:f8e0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 02 May 2025 06:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:40:6c:20:43:12:60:f3:99:64:d9:73:de:4c:cd:fc:c7:6a:d4:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 4 23:49:21 2025 GMT Not After : Feb 3 23:54:21 2026 GMT Subject: CN=2C7C1D3BD7C277D2286AF6B4461F6A2764876A5F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:78:95:b2:46:37:1c:43:a8:b4:70:ce:c2:29: e6:87:03:5c:42:07:59:18:14:a0:7b:66:1b:d1:3f: a8:8b:54:52:24:1f:e7:d9:40:18:be:26:3c:50:b3: 09:c3:42:df:40:c6:12:64:df:8a:e3:ea:24:98:85: 5b:a5:76:c1:5a:6e:5a:68:25:ce:0a:9a:7f:51:ae: ec:3c:1d:db:9d:19:09:cf:f8:e0:40:28:47:9b:67: d2:35:c3:84:19:6d:c2:6d:e2:1d:27:f6:28:80:25: 1e:7c:9f:c7:a9:27:d3:25:72:95:87:f3:7e:8f:a1: 2a:c9:87:0c:e1:c9:1a:93:bf:b0:c8:28:11:d8:f0: c8:91:66:8a:fd:e6:07:95:61:7c:cd:4e:4a:6e:d1: b5:09:eb:ca:ca:4a:04:b5:11:53:a0:63:d1:0c:81: c9:b1:e5:a7:69:bc:42:44:0c:af:a9:e0:b9:ce:d0: 96:cb:4b:88:09:c2:a8:cc:55:3e:fa:b3:45:ac:61: e5:ff:90:57:55:a6:08:a9:ad:b0:09:0a:be:e8:ff: ea:19:68:c3:04:20:47:ea:fd:0b:2c:31:62:2c:8c: 42:1e:f6:f3:d0:da:9a:81:8e:d5:c0:cc:6b:00:fc: 68:7b:3d:5f:ae:5d:10:75:f6:d7:4d:8a:16:29:1d: dd:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2C:7C:1D:3B:D7:C2:77:D2:28:6A:F6:B4:46:1F:6A:27:64:87:6A:5F X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/20222FE3707FC0E83510EEE1F8B46CB6100B787B45D0B209B61F835E021E5BE5/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/20222FE3707FC0E83510EEE1F8B46CB6100B787B45D0B209B61F835E021E5BE5/0/2C7C1D3BD7C277D2286AF6B4461F6A2764876A5F.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.188.216.0/23 IPv6: 2803:f8e0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 269884 Signature Algorithm: sha256WithRSAEncryption 51:02:c2:f5:7f:38:6b:99:18:c9:d5:e9:e9:c1:22:db:c2:fb: 97:6f:46:05:ef:a9:9e:13:b2:01:f6:03:9e:52:87:02:67:04: 24:ad:63:b7:37:28:b4:fa:9c:17:91:fb:f0:43:90:86:8c:b3: 86:71:c2:8d:59:34:be:70:a6:a2:7d:7c:e3:f2:0f:f8:aa:ce: 74:73:d5:17:c8:cd:4f:9b:1c:3a:bf:19:b7:93:a7:5f:7c:cb: cb:61:96:42:d6:94:bb:77:eb:61:e4:e7:5e:64:a5:7d:5c:ae: b2:e2:d7:78:7f:07:64:28:24:14:40:ef:23:a8:da:e3:c3:3e: 0a:05:26:b4:ff:14:d2:89:82:db:be:b9:5c:70:e4:45:37:4a: 1b:04:30:e8:d5:d7:ca:d9:a4:bf:31:f2:0b:a6:ed:29:88:3d: 64:bd:b7:67:29:94:ca:09:25:8c:06:4d:d1:b2:a8:e9:27:bb: 97:60:5b:23:05:c0:bf:b8:c4:76:c3:b5:bb:9d:d5:3f:98:4a: ae:b9:47:12:80:e3:4c:bd:d3:b2:8d:e0:b8:42:7b:6a:70:0e: 4d:20:0b:ab:e0:57:63:43:9b:ef:c9:1d:15:30:e8:8e:06:b9: 40:4d:ea:51:93:97:e5:31:87:57:e0:3d:bd:95:ab:41:f0:91: eb:b6:60:c3 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUZEBsIEMSYPOZZNlz3kzN/Mdq1LMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDQyMzQ5MjFaFw0yNjAyMDMyMzU0MjFaMDMxMTAvBgNV BAMTKDJDN0MxRDNCRDdDMjc3RDIyODZBRjZCNDQ2MUY2QTI3NjQ4NzZBNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLeJWyRjccQ6i0cM7CKeaHA1xC B1kYFKB7ZhvRP6iLVFIkH+fZQBi+JjxQswnDQt9AxhJk34rj6iSYhVuldsFablpo Jc4Kmn9Rruw8HdudGQnP+OBAKEebZ9I1w4QZbcJt4h0n9iiAJR58n8epJ9MlcpWH 836PoSrJhwzhyRqTv7DIKBHY8MiRZor95geVYXzNTkpu0bUJ68rKSgS1EVOgY9EM gcmx5adpvEJEDK+p4LnO0JbLS4gJwqjMVT76s0WsYeX/kFdVpgiprbAJCr7o/+oZ aMMEIEfq/QssMWIsjEIe9vPQ2pqBjtXAzGsA/Gh7PV+uXRB19tdNihYpHd1lAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQsfB0718J30ihq 9rRGH2onZIdqXzAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMjAyMjJGRTM3MDdGQzBFODM1MTBFRUUx RjhCNDZDQjYxMDBCNzg3QjQ1RDBCMjA5QjYxRjgzNUUwMjFFNUJFNS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8yMDIyMkZFMzcwN0ZDMEU4MzUxMEVFRTFGOEI0NkNCNjEwMEI3ODdCNDVE MEIyMDlCNjFGODM1RTAyMUU1QkU1LzAvMkM3QzFEM0JEN0MyNzdEMjI4NkFGNkI0 NDYxRjZBMjc2NDg3NkE1Ri5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBLbzYMA0EAgAC MAcDBQAoA/jgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQePDANBgkqhkiG9w0B AQsFAAOCAQEAUQLC9X84a5kYydXp6cEi28L7l29GBe+pnhOyAfYDnlKHAmcEJK1j tzcotPqcF5H78EOQhoyzhnHCjVk0vnCmon184/IP+KrOdHPVF8jNT5scOr8Zt5On X3zLy2GWQtaUu3frYeTnXmSlfVyusuLXeH8HZCgkFEDvI6ja48M+CgUmtP8U0omC 2765XHDkRTdKGwQw6NXXytmkvzHyC6btKYg9ZL23ZymUygkljAZN0bKo6Se7l2Bb IwXAv7jEdsO1u53VP5hKrrlHEoDjTL3Tso3guEJ7anAOTSALq+BXY0Ob78kdFTDo jga5QE3qUZOX5TGHV+A9vZWrQfCR67Zgww== -----END CERTIFICATE-----Generated at Mon Apr 28 05:59:31 2025 by rpki-client on console.sobornost.net