$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/473AFB9A5D0AE9E193C986190D5540C7B4716B22.cer File: 473AFB9A5D0AE9E193C986190D5540C7B4716B22.cer (raw, json) Hash identifier: H5u1tOH/4BlrAX8XFJQHD31A2OysRZ8YCi6C7llvDes= Subject key identifier: 47:3A:FB:9A:5D:0A:E9:E1:93:C9:86:19:0D:55:40:C7:B4:71:6B:22 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 4193CF4CC7E57DC614D9CE1FCBD1EAD1F5CAE7A8 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/E56EF07B9DE48B22647778538410214249B5A5520FA1B71CDEBC8CF2180C5B13/0/473AFB9A5D0AE9E193C986190D5540C7B4716B22.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/E56EF07B9DE48B22647778538410214249B5A5520FA1B71CDEBC8CF2180C5B13/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 04 Feb 2025 23:27:56 +0000 Certificate not after: Tue 03 Feb 2026 23:32:56 +0000 Subordinate resources: AS: 269938 IP: 190.83.60.0/23 IP: 2803:6ae0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 02 May 2025 06:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:93:cf:4c:c7:e5:7d:c6:14:d9:ce:1f:cb:d1:ea:d1:f5:ca:e7:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 4 23:27:56 2025 GMT Not After : Feb 3 23:32:56 2026 GMT Subject: CN=473AFB9A5D0AE9E193C986190D5540C7B4716B22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d2:b2:26:41:48:55:cd:c4:6c:d9:a6:ee:00: cb:e0:d2:bf:3b:a9:83:d9:88:d5:81:17:77:1d:76: 55:bf:cd:13:4f:05:41:c6:dd:d0:d6:5a:06:d1:12: 22:d7:c4:15:62:27:76:af:39:c3:a9:7f:e3:36:94: 62:ed:58:4c:7b:8d:ca:78:dc:b4:86:5a:c9:70:f3: 47:f8:aa:55:49:3e:35:29:6c:db:f7:cf:a6:12:1d: 24:1c:68:59:ba:00:c1:58:cb:8d:56:ff:64:59:a8: 85:bd:c7:f4:86:ae:fa:d6:b0:df:32:4e:38:ca:db: 57:19:34:54:3c:9d:17:83:aa:a5:c2:b7:84:46:85: 1b:96:00:7f:43:f1:d4:f0:ee:7f:19:3c:85:56:dc: d2:45:56:61:7e:0e:48:64:75:56:e1:c6:5d:8a:9d: c8:ea:b1:22:e6:03:b3:ae:fe:34:7a:51:a8:f9:50: 0f:43:7f:44:6a:ce:cf:0a:70:b6:77:6d:17:c6:0e: ba:14:76:dd:d6:74:b6:9b:93:bf:e0:c1:93:b8:9c: 99:0a:6d:02:68:c1:2a:18:77:43:45:53:96:d3:bc: 84:98:06:7f:16:5a:a9:22:2d:21:e3:5e:ce:d6:82: 01:8e:de:f1:d9:3c:20:53:be:7e:ad:41:58:22:9c: 3a:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 47:3A:FB:9A:5D:0A:E9:E1:93:C9:86:19:0D:55:40:C7:B4:71:6B:22 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/E56EF07B9DE48B22647778538410214249B5A5520FA1B71CDEBC8CF2180C5B13/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/E56EF07B9DE48B22647778538410214249B5A5520FA1B71CDEBC8CF2180C5B13/0/473AFB9A5D0AE9E193C986190D5540C7B4716B22.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 190.83.60.0/23 IPv6: 2803:6ae0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 269938 Signature Algorithm: sha256WithRSAEncryption 15:43:46:63:89:cc:1c:e8:9e:78:12:b5:ce:f4:6d:1a:8d:6c: c0:9b:63:e3:e0:eb:84:26:d8:89:fb:44:79:6b:a3:61:cd:43: b1:1f:b8:ad:72:53:ab:cf:ba:8f:24:38:73:5c:85:44:60:25: b1:26:03:9c:ed:24:b1:05:09:e1:ee:15:a0:9d:23:a8:2b:b4: c8:36:08:04:4a:11:ec:9e:08:29:ca:bd:69:b2:b5:0b:a4:d2: df:2f:d9:27:10:c3:7d:43:a9:6c:32:88:69:8a:68:87:39:ea: 9d:82:db:10:bd:03:d9:4c:25:84:b0:5a:13:e2:b2:53:7f:a8: 2b:5a:a7:39:ed:f8:f9:b1:d4:77:50:1e:d7:32:17:a9:c0:ec: 50:ba:8b:d1:68:f4:45:ed:03:eb:19:52:ac:f8:67:c5:29:64: ea:47:f1:f3:7c:65:16:e1:09:ae:fd:b6:44:e7:9b:59:90:d7: d6:e5:b9:25:16:dd:50:0f:c1:77:50:b8:9b:f0:dd:b9:42:5b: 8b:9f:e7:82:6f:b0:9b:cd:ab:32:5f:94:d9:fc:cb:a9:f1:28: ac:87:d7:4f:ed:7d:2e:2a:ba:8c:25:d3:45:87:b4:43:e2:d6: 82:e7:24:1e:b1:06:f1:5d:65:53:bd:23:00:cc:1b:6c:f2:61: d6:50:77:92 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUQZPPTMflfcYU2c4fy9Hq0fXK56gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDQyMzI3NTZaFw0yNjAyMDMyMzMyNTZaMDMxMTAvBgNV BAMTKDQ3M0FGQjlBNUQwQUU5RTE5M0M5ODYxOTBENTU0MEM3QjQ3MTZCMjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB0rImQUhVzcRs2abuAMvg0r87 qYPZiNWBF3cddlW/zRNPBUHG3dDWWgbREiLXxBViJ3avOcOpf+M2lGLtWEx7jcp4 3LSGWslw80f4qlVJPjUpbNv3z6YSHSQcaFm6AMFYy41W/2RZqIW9x/SGrvrWsN8y TjjK21cZNFQ8nReDqqXCt4RGhRuWAH9D8dTw7n8ZPIVW3NJFVmF+DkhkdVbhxl2K ncjqsSLmA7Ou/jR6Uaj5UA9Df0Rqzs8KcLZ3bRfGDroUdt3WdLabk7/gwZO4nJkK bQJowSoYd0NFU5bTvISYBn8WWqkiLSHjXs7WggGO3vHZPCBTvn6tQVginDovAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRHOvuaXQrp4ZPJ hhkNVUDHtHFrIjAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTU2RUYwN0I5REU0OEIyMjY0Nzc3ODUz ODQxMDIxNDI0OUI1QTU1MjBGQTFCNzFDREVCQzhDRjIxODBDNUIxMy8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9FNTZFRjA3QjlERTQ4QjIyNjQ3Nzc4NTM4NDEwMjE0MjQ5QjVBNTUyMEZB MUI3MUNERUJDOENGMjE4MEM1QjEzLzAvNDczQUZCOUE1RDBBRTlFMTkzQzk4NjE5 MEQ1NTQwQzdCNDcxNkIyMi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBvlM8MA0EAgAC MAcDBQAoA2rgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQecjANBgkqhkiG9w0B AQsFAAOCAQEAFUNGY4nMHOieeBK1zvRtGo1swJtj4+DrhCbYiftEeWujYc1DsR+4 rXJTq8+6jyQ4c1yFRGAlsSYDnO0ksQUJ4e4VoJ0jqCu0yDYIBEoR7J4IKcq9abK1 C6TS3y/ZJxDDfUOpbDKIaYpohznqnYLbEL0D2UwlhLBaE+KyU3+oK1qnOe34+bHU d1Ae1zIXqcDsULqL0Wj0Re0D6xlSrPhnxSlk6kfx83xlFuEJrv22ROebWZDX1uW5 JRbdUA/Bd1C4m/DduUJbi5/ngm+wm82rMl+U2fzLqfEorIfXT+19Liq6jCXTRYe0 Q+LWguckHrEG8V1lU70jAMwbbPJh1lB3kg== -----END CERTIFICATE-----Generated at Mon Apr 28 05:59:33 2025 by rpki-client on console.sobornost.net