$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3ADE8F28C8077395C8518736031DE38C090CDF1B.cer File: 3ADE8F28C8077395C8518736031DE38C090CDF1B.cer (raw, json) Hash identifier: 6ZrVuie+h9ojchsZPFC+6zeh5xlz7K/zntl3op+0nl0= Subject key identifier: 3A:DE:8F:28:C8:07:73:95:C8:51:87:36:03:1D:E3:8C:09:0C:DF:1B Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 5C1F0C9A2E562B9D287ABC0996BB278F6BFC8048 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/FD0FA28DC00E9D600C500A451E10177FF7018414612F5B3BD1131221D32F45E0/0/3ADE8F28C8077395C8518736031DE38C090CDF1B.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/FD0FA28DC00E9D600C500A451E10177FF7018414612F5B3BD1131221D32F45E0/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 09:25:39 +0000 Certificate not after: Wed 04 Feb 2026 09:30:39 +0000 Subordinate resources: AS: 266677 IP: 45.228.60.0/22 IP: 2803:b920::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 02 May 2025 06:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:1f:0c:9a:2e:56:2b:9d:28:7a:bc:09:96:bb:27:8f:6b:fc:80:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 09:25:39 2025 GMT Not After : Feb 4 09:30:39 2026 GMT Subject: CN=3ADE8F28C8077395C8518736031DE38C090CDF1B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:80:d5:34:87:cf:37:fe:3e:6f:c4:3b:f7:2b: 6a:fd:74:f1:5a:45:f7:fa:f2:eb:27:d2:33:72:ea: c0:0c:0e:26:33:a3:ff:24:56:1f:58:40:3b:70:f7: 5f:84:aa:f2:b7:23:6b:52:32:c3:2b:12:82:08:41: bc:33:39:8b:86:88:5c:37:aa:af:4f:14:59:23:6f: 13:1b:db:a9:9b:86:a8:2d:c2:f1:02:1c:80:9a:48: c5:38:c1:ac:b9:2b:d2:02:7a:2a:eb:eb:58:85:e3: e8:eb:af:c8:8e:7e:6e:3e:6d:71:92:9b:47:e9:fd: 25:27:a6:54:8f:58:87:aa:85:18:fd:ce:12:70:33: 71:f0:87:e5:39:db:a0:db:bd:9f:e0:d3:14:56:3d: f2:17:0e:0a:d6:49:bd:22:8c:52:d6:9d:dc:0d:10: eb:ad:17:3f:95:49:af:50:10:e8:d3:34:05:ec:2e: ff:74:ef:d9:ac:ac:e7:9f:c2:a1:e4:34:ec:b6:27: d5:cf:f8:aa:6f:a0:0d:2f:7c:b6:39:fa:81:54:9e: 97:20:c4:33:67:41:8e:6e:74:15:af:3a:a3:7b:a8: 8c:8a:0b:82:c8:22:51:53:e7:7e:5d:18:ec:3b:4a: b7:87:a9:7c:8a:61:06:e3:62:04:a5:88:ff:58:d9: b4:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3A:DE:8F:28:C8:07:73:95:C8:51:87:36:03:1D:E3:8C:09:0C:DF:1B X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/FD0FA28DC00E9D600C500A451E10177FF7018414612F5B3BD1131221D32F45E0/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/FD0FA28DC00E9D600C500A451E10177FF7018414612F5B3BD1131221D32F45E0/0/3ADE8F28C8077395C8518736031DE38C090CDF1B.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.228.60.0/22 IPv6: 2803:b920::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266677 Signature Algorithm: sha256WithRSAEncryption 9d:cc:27:07:45:30:8d:65:9d:9e:54:57:cc:68:34:63:eb:c3: 47:47:3f:f9:16:24:13:77:9a:f9:d0:bb:15:35:03:b8:9c:96: 3e:57:87:87:a7:31:ed:57:05:05:0b:36:45:e7:b6:ff:ab:af: c6:dd:a0:ef:d4:9d:9a:ef:f9:7b:a6:c1:a4:03:2d:ce:1a:ff: 84:00:51:7a:8b:40:88:df:54:93:0e:fd:5f:49:03:14:0a:7f: 59:3a:4d:7f:16:1b:18:ed:4e:cf:a8:24:8c:f1:3c:b1:19:06: 24:74:9d:22:7e:12:60:5c:6a:d6:5b:51:c2:1c:c4:50:c2:fe: 54:ff:54:d2:06:31:f1:7e:d4:37:47:d5:3e:a4:d0:84:5c:32: a5:8f:9b:af:31:65:ed:c6:e6:79:29:16:28:5b:6d:6b:2d:c4: 28:dc:c9:87:1b:7d:5e:19:f2:10:80:4b:b9:c1:57:fc:f2:a1: 5f:b3:3b:65:32:0b:ca:e2:21:60:55:b8:4e:9e:7b:9e:ed:19: 8f:be:95:7d:01:4f:8f:0c:10:39:11:08:1c:55:51:65:4b:59: ea:a1:c3:87:0a:0e:a6:98:0f:65:61:c0:31:11:1b:12:c9:33: fa:59:3d:1c:51:7e:20:2e:e4:09:91:e9:51:59:c3:f6:92:ba: 67:4e:3d:8a -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUXB8Mmi5WK50oerwJlrsnj2v8gEgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUwOTI1MzlaFw0yNjAyMDQwOTMwMzlaMDMxMTAvBgNV BAMTKDNBREU4RjI4QzgwNzczOTVDODUxODczNjAzMURFMzhDMDkwQ0RGMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/gNU0h883/j5vxDv3K2r9dPFa Rff68usn0jNy6sAMDiYzo/8kVh9YQDtw91+EqvK3I2tSMsMrEoIIQbwzOYuGiFw3 qq9PFFkjbxMb26mbhqgtwvECHICaSMU4way5K9ICeirr61iF4+jrr8iOfm4+bXGS m0fp/SUnplSPWIeqhRj9zhJwM3Hwh+U526DbvZ/g0xRWPfIXDgrWSb0ijFLWndwN EOutFz+VSa9QEOjTNAXsLv9079msrOefwqHkNOy2J9XP+KpvoA0vfLY5+oFUnpcg xDNnQY5udBWvOqN7qIyKC4LIIlFT535dGOw7SreHqXyKYQbjYgSliP9Y2bTBAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ63o8oyAdzlchR hzYDHeOMCQzfGzAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRkQwRkEyOERDMDBFOUQ2MDBDNTAwQTQ1 MUUxMDE3N0ZGNzAxODQxNDYxMkY1QjNCRDExMzEyMjFEMzJGNDVFMC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9GRDBGQTI4REMwMEU5RDYwMEM1MDBBNDUxRTEwMTc3RkY3MDE4NDE0NjEy RjVCM0JEMTEzMTIyMUQzMkY0NUUwLzAvM0FERThGMjhDODA3NzM5NUM4NTE4NzM2 MDMxREUzOEMwOTBDREYxQi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLeQ8MA0EAgAC MAcDBQAoA7kgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQRtTANBgkqhkiG9w0B AQsFAAOCAQEAncwnB0UwjWWdnlRXzGg0Y+vDR0c/+RYkE3ea+dC7FTUDuJyWPleH h6cx7VcFBQs2Ree2/6uvxt2g79Sdmu/5e6bBpAMtzhr/hABReotAiN9Ukw79X0kD FAp/WTpNfxYbGO1Oz6gkjPE8sRkGJHSdIn4SYFxq1ltRwhzEUML+VP9U0gYx8X7U N0fVPqTQhFwypY+brzFl7cbmeSkWKFttay3EKNzJhxt9XhnyEIBLucFX/PKhX7M7 ZTILyuIhYFW4Tp57nu0Zj76VfQFPjwwQOREIHFVRZUtZ6qHDhwoOppgPZWHAMREb Eskz+lk9HFF+IC7kCZHpUVnD9pK6Z049ig== -----END CERTIFICATE-----Generated at Mon Apr 28 05:59:32 2025 by rpki-client on console.sobornost.net