$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43329E371650BF65E90EB0576A6F24E54A8D8258.cer File: 43329E371650BF65E90EB0576A6F24E54A8D8258.cer (raw, json) Hash identifier: ja6D7Xi63+ZsZd38mVky+Hj9A0gOZR4YF/Fp6XcdjPw= Subject key identifier: 43:32:9E:37:16:50:BF:65:E9:0E:B0:57:6A:6F:24:E5:4A:8D:82:58 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 583930559E9829450A74B9E69E777EDF77DEC548 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/FCC4DA3217817CFA2ED7CA058A228334C24B3C38DCB0208E3261106C3BB14818/0/43329E371650BF65E90EB0576A6F24E54A8D8258.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/FCC4DA3217817CFA2ED7CA058A228334C24B3C38DCB0208E3261106C3BB14818/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 02:25:02 +0000 Certificate not after: Wed 04 Feb 2026 02:30:02 +0000 Subordinate resources: AS: 270080 IP: 186.195.247.0/24 IP: 191.241.62.0/23 IP: 2803:be0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 02 May 2025 06:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:39:30:55:9e:98:29:45:0a:74:b9:e6:9e:77:7e:df:77:de:c5:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 02:25:02 2025 GMT Not After : Feb 4 02:30:02 2026 GMT Subject: CN=43329E371650BF65E90EB0576A6F24E54A8D8258 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:86:15:66:aa:fe:2b:f4:33:80:89:a2:84:49: 78:e1:d2:76:ee:1f:5a:25:58:c9:5c:f5:49:76:45: b5:7f:09:29:28:e6:a2:73:7e:1f:95:2a:a5:f8:4b: d1:8c:3e:64:e9:de:10:86:7e:77:f5:23:f4:5b:7e: 46:c4:e2:3e:aa:b1:0f:fd:c2:37:fe:e4:a3:14:4e: f9:3a:01:ee:44:a6:a2:f7:98:de:80:98:8a:15:27: 22:2f:07:e4:68:ed:cb:6a:eb:e0:fe:f7:2b:ff:18: fb:c5:2d:de:04:89:84:88:6d:32:1d:d3:f4:62:c0: a3:39:18:18:b4:d7:4a:1e:c8:8a:d6:e6:a0:c9:b5: f4:ba:b9:52:e8:d2:2a:d7:94:f5:69:0b:d0:23:de: 5b:4a:be:83:69:70:46:62:d5:9f:14:cc:5a:d6:0f: bb:d7:22:c6:44:c1:f4:35:ea:55:6b:50:29:aa:16: 85:f5:71:09:bf:d0:af:25:0e:fa:2e:c9:db:6b:52: 29:80:25:68:6b:d3:f6:2a:07:a9:f1:e8:42:e4:7b: 7d:ed:61:87:72:ea:c8:b5:62:f8:ed:5b:58:63:ff: 0e:9f:2b:39:4d:61:b9:6b:72:ae:66:54:43:a5:bb: 07:91:fa:7e:98:95:5f:7d:c0:9e:32:67:aa:33:1f: 37:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 43:32:9E:37:16:50:BF:65:E9:0E:B0:57:6A:6F:24:E5:4A:8D:82:58 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/FCC4DA3217817CFA2ED7CA058A228334C24B3C38DCB0208E3261106C3BB14818/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/FCC4DA3217817CFA2ED7CA058A228334C24B3C38DCB0208E3261106C3BB14818/0/43329E371650BF65E90EB0576A6F24E54A8D8258.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 186.195.247.0/24 191.241.62.0/23 IPv6: 2803:be0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 270080 Signature Algorithm: sha256WithRSAEncryption 43:46:94:99:0d:01:0b:68:80:66:93:10:56:e4:a5:d9:7f:94: 96:32:ae:a3:7f:ab:6e:c1:c6:20:35:ae:3a:03:74:60:4c:7f: b0:b8:81:5b:7a:40:2c:4c:b3:95:e0:91:5f:ea:12:aa:ec:87: 38:7d:c0:75:27:80:91:b0:18:2c:24:02:04:b5:53:93:e2:37: ac:5f:db:0c:b3:7a:17:f2:ee:8d:6d:0e:f6:55:8f:ac:04:17: 31:f2:9f:b2:26:41:2d:b9:ef:b9:cd:cc:9d:ea:a7:ee:f6:d9: 29:e1:a8:50:61:38:9b:f0:ca:d5:b4:fd:21:3e:48:27:4e:39: 1d:69:93:07:ea:7b:19:64:31:1a:bf:c0:ff:d0:c1:42:6a:77: ae:6a:b8:5d:31:86:75:33:c1:0c:3d:76:6e:80:6c:84:35:bf: e9:16:c7:cb:5a:5f:5e:1c:8a:ba:38:84:f0:db:e4:e8:4d:d3: 04:5e:75:97:e1:bb:f4:e4:bd:bb:a5:83:30:59:ce:9c:58:3e: 10:b9:fb:56:46:d5:ec:6e:58:60:1d:44:30:eb:80:a5:71:06: d7:f6:bb:69:aa:1e:5e:61:4c:52:b0:0d:95:45:e3:cb:1a:57: 7b:fb:05:dc:96:77:bf:30:a7:5e:09:69:59:da:5f:a2:5d:0d: 84:82:01:17 -----BEGIN CERTIFICATE----- MIIGqzCCBZOgAwIBAgIUWDkwVZ6YKUUKdLnmnnd+33fexUgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUwMjI1MDJaFw0yNjAyMDQwMjMwMDJaMDMxMTAvBgNV BAMTKDQzMzI5RTM3MTY1MEJGNjVFOTBFQjA1NzZBNkYyNEU1NEE4RDgyNTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzhhVmqv4r9DOAiaKESXjh0nbu H1olWMlc9Ul2RbV/CSko5qJzfh+VKqX4S9GMPmTp3hCGfnf1I/RbfkbE4j6qsQ/9 wjf+5KMUTvk6Ae5EpqL3mN6AmIoVJyIvB+Ro7ctq6+D+9yv/GPvFLd4EiYSIbTId 0/RiwKM5GBi010oeyIrW5qDJtfS6uVLo0irXlPVpC9Aj3ltKvoNpcEZi1Z8UzFrW D7vXIsZEwfQ16lVrUCmqFoX1cQm/0K8lDvouydtrUimAJWhr0/YqB6nx6ELke33t YYdy6si1YvjtW1hj/w6fKzlNYblrcq5mVEOluweR+n6YlV99wJ4yZ6ozHzdXAgMB AAGjggO1MIIDsTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRDMp43FlC/ZekO sFdqbyTlSo2CWDAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRkNDNERBMzIxNzgxN0NGQTJFRDdDQTA1 OEEyMjgzMzRDMjRCM0MzOERDQjAyMDhFMzI2MTEwNkMzQkIxNDgxOC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9GQ0M0REEzMjE3ODE3Q0ZBMkVEN0NBMDU4QTIyODMzNEMyNEIzQzM4RENC MDIwOEUzMjYxMTA2QzNCQjE0ODE4LzAvNDMzMjlFMzcxNjUwQkY2NUU5MEVCMDU3 NkE2RjI0RTU0QThEODI1OC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAusP3AwQBv/E+ MA0EAgACMAcDBQAoAwvgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQfADANBgkq hkiG9w0BAQsFAAOCAQEAQ0aUmQ0BC2iAZpMQVuSl2X+UljKuo3+rbsHGIDWuOgN0 YEx/sLiBW3pALEyzleCRX+oSquyHOH3AdSeAkbAYLCQCBLVTk+I3rF/bDLN6F/Lu jW0O9lWPrAQXMfKfsiZBLbnvuc3Mneqn7vbZKeGoUGE4m/DK1bT9IT5IJ045HWmT B+p7GWQxGr/A/9DBQmp3rmq4XTGGdTPBDD12boBshDW/6RbHy1pfXhyKujiE8Nvk 6E3TBF51l+G79OS9u6WDMFnOnFg+ELn7VkbV7G5YYB1EMOuApXEG1/a7aaoeXmFM UrANlUXjyxpXe/sF3JZ3vzCnXglpWdpfol0NhIIBFw== -----END CERTIFICATE-----Generated at Mon Apr 28 05:59:32 2025 by rpki-client on console.sobornost.net