$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F5B1971F99DD1FD781D649403114BF5C0CDE9D3.cer File: 5F5B1971F99DD1FD781D649403114BF5C0CDE9D3.cer (raw, json) Hash identifier: k/51h/ejGNWfE1ZuQ58Je/IWRXGhpJBMT+q9LBrwlKk= Subject key identifier: 5F:5B:19:71:F9:9D:D1:FD:78:1D:64:94:03:11:4B:F5:C0:CD:E9:D3 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 6FDA5344DB9C414F91FB0E40E60CAFC10D765C4D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/B10D7998608B8722D3EEF5EC2506DBF6D37F6B518401ACD29D699E267664D724/0/5F5B1971F99DD1FD781D649403114BF5C0CDE9D3.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/B10D7998608B8722D3EEF5EC2506DBF6D37F6B518401ACD29D699E267664D724/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Fri 25 Apr 2025 00:44:01 +0000 Certificate not after: Fri 24 Apr 2026 00:49:01 +0000 Subordinate resources: AS: 270023 IP: 186.148.196.0/22 IP: 2803:39e0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 02 May 2025 06:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:da:53:44:db:9c:41:4f:91:fb:0e:40:e6:0c:af:c1:0d:76:5c:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Apr 25 00:44:01 2025 GMT Not After : Apr 24 00:49:01 2026 GMT Subject: CN=5F5B1971F99DD1FD781D649403114BF5C0CDE9D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:6a:76:29:6e:ad:a6:d3:c1:c6:94:45:a3:12: f1:b2:16:09:6f:9a:27:bc:0f:a1:fd:a1:4c:e4:cb: a2:b9:33:33:c8:46:d2:a3:b4:27:9d:2d:20:11:1d: 9f:39:7b:8d:7a:33:c8:28:ca:d2:ae:37:1d:23:6e: 66:6b:19:95:e3:22:19:0a:e9:ae:27:72:2d:88:ea: 25:be:b9:99:43:cc:31:87:cc:22:3c:4c:ba:18:21: c3:ad:e9:c7:7c:8a:e5:fa:62:18:fd:62:2b:bd:62: 8a:44:8b:c4:ce:ff:b3:57:58:de:b7:10:7f:f8:3c: ca:ef:70:7a:17:7d:0c:ed:a4:8f:bf:00:ae:d5:fa: 01:6b:47:be:7f:c0:0b:1c:33:a4:e4:67:15:c0:d1: 7e:fc:bc:ea:b3:ac:ec:e5:85:fc:b7:ee:ce:35:a7: 72:b9:65:74:47:3c:74:c8:58:56:b1:8e:57:74:a3: 43:82:dc:d5:5c:03:94:82:c3:68:2f:25:96:e8:7e: 25:ab:cb:e9:4c:a9:47:7f:aa:c2:70:f6:67:80:25: 33:11:15:a3:4e:bc:dc:63:1d:4c:3f:71:5b:4d:f8: 29:cd:32:1c:a5:3d:03:3d:12:29:c0:cc:d8:5c:a9: 4d:53:ba:77:bd:5a:85:5e:8e:76:39:1d:37:2d:ec: c7:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5F:5B:19:71:F9:9D:D1:FD:78:1D:64:94:03:11:4B:F5:C0:CD:E9:D3 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/B10D7998608B8722D3EEF5EC2506DBF6D37F6B518401ACD29D699E267664D724/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/B10D7998608B8722D3EEF5EC2506DBF6D37F6B518401ACD29D699E267664D724/0/5F5B1971F99DD1FD781D649403114BF5C0CDE9D3.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 186.148.196.0/22 IPv6: 2803:39e0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 270023 Signature Algorithm: sha256WithRSAEncryption bc:87:9f:3e:08:41:ef:21:e8:1b:3e:51:c2:d6:b3:e1:df:68: a2:6d:32:04:3a:b1:90:5f:1d:80:a8:84:c0:a6:2d:9c:c0:bd: 38:ee:74:83:60:eb:62:9c:b2:de:f5:9b:f2:c8:68:1b:7c:34: 26:a8:58:93:b7:98:aa:52:7e:ff:7e:09:bc:e0:5a:21:04:d8: fa:c4:18:3f:23:3f:cf:43:da:74:b6:4e:c9:a6:31:32:f6:47: fc:48:22:84:02:e4:c4:dc:af:b5:fc:30:0e:1f:e5:03:fd:b4: b8:e0:55:36:bb:a3:be:18:49:3c:13:27:02:42:c8:88:c1:e9: ce:d0:e4:59:ff:1c:17:1e:98:08:9c:67:5f:6d:ed:fb:b0:1b: 90:1c:fc:fa:4d:ba:34:23:53:fa:7d:2d:0f:ff:9c:2c:20:3b: dd:04:f8:cd:bb:d7:5c:aa:d1:af:d6:5b:c4:45:ca:f8:fe:13: 29:4d:e2:7a:45:24:82:76:4b:3d:fa:f8:a8:06:98:44:ee:98: b8:c0:3a:67:60:7f:c4:97:6c:d2:05:b6:54:58:28:bc:0f:39: ef:cd:f9:7c:9d:5b:ba:37:a9:d5:d5:49:c9:3c:c4:88:33:46: f5:25:64:97:9c:b3:48:5a:ff:a0:c8:53:10:68:57:81:ee:20: 62:fa:dc:53 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUb9pTRNucQU+R+w5A5gyvwQ12XE0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTA0MjUwMDQ0MDFaFw0yNjA0MjQwMDQ5MDFaMDMxMTAvBgNV BAMTKDVGNUIxOTcxRjk5REQxRkQ3ODFENjQ5NDAzMTE0QkY1QzBDREU5RDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyanYpbq2m08HGlEWjEvGyFglv mie8D6H9oUzky6K5MzPIRtKjtCedLSARHZ85e416M8goytKuNx0jbmZrGZXjIhkK 6a4nci2I6iW+uZlDzDGHzCI8TLoYIcOt6cd8iuX6Yhj9Yiu9YopEi8TO/7NXWN63 EH/4PMrvcHoXfQztpI+/AK7V+gFrR75/wAscM6TkZxXA0X78vOqzrOzlhfy37s41 p3K5ZXRHPHTIWFaxjld0o0OC3NVcA5SCw2gvJZbofiWry+lMqUd/qsJw9meAJTMR FaNOvNxjHUw/cVtN+CnNMhylPQM9EinAzNhcqU1Tune9WoVejnY5HTct7MdBAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRfWxlx+Z3R/Xgd ZJQDEUv1wM3p0zAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQjEwRDc5OTg2MDhCODcyMkQzRUVGNUVD MjUwNkRCRjZEMzdGNkI1MTg0MDFBQ0QyOUQ2OTlFMjY3NjY0RDcyNC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9CMTBENzk5ODYwOEI4NzIyRDNFRUY1RUMyNTA2REJGNkQzN0Y2QjUxODQw MUFDRDI5RDY5OUUyNjc2NjRENzI0LzAvNUY1QjE5NzFGOTlERDFGRDc4MUQ2NDk0 MDMxMTRCRjVDMENERTlEMy5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCupTEMA0EAgAC MAcDBQAoAzngMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQexzANBgkqhkiG9w0B AQsFAAOCAQEAvIefPghB7yHoGz5Rwtaz4d9oom0yBDqxkF8dgKiEwKYtnMC9OO50 g2DrYpyy3vWb8shoG3w0JqhYk7eYqlJ+/34JvOBaIQTY+sQYPyM/z0PadLZOyaYx MvZH/EgihALkxNyvtfwwDh/lA/20uOBVNrujvhhJPBMnAkLIiMHpztDkWf8cFx6Y CJxnX23t+7AbkBz8+k26NCNT+n0tD/+cLCA73QT4zbvXXKrRr9ZbxEXK+P4TKU3i ekUkgnZLPfr4qAaYRO6YuMA6Z2B/xJds0gW2VFgovA857835fJ1bujep1dVJyTzE iDNG9SVkl5yzSFr/oMhTEGhXge4gYvrcUw== -----END CERTIFICATE-----Generated at Mon Apr 28 05:59:34 2025 by rpki-client on console.sobornost.net