$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7116290D7EB961DBB2AE7C4F1070543D6F8030A9.cer File: 7116290D7EB961DBB2AE7C4F1070543D6F8030A9.cer (raw, json) Hash identifier: u59M2NWwgdkB1E4jNxfVW4EYQ/Mvkq1qIc+N/XQsdQ8= Subject key identifier: 71:16:29:0D:7E:B9:61:DB:B2:AE:7C:4F:10:70:54:3D:6F:80:30:A9 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 4EE5003FD17E34BA9C87F46C08C8EBB9B042CDEF Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/88D7B05E68A363B604AA1DBA9B3665F8C3F55B13B2B284317471F87709EEA0D8/0/7116290D7EB961DBB2AE7C4F1070543D6F8030A9.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/88D7B05E68A363B604AA1DBA9B3665F8C3F55B13B2B284317471F87709EEA0D8/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 20:15:10 +0000 Certificate not after: Wed 04 Feb 2026 20:20:10 +0000 Subordinate resources: AS: 265741 IP: 128.201.80.0/22 IP: 2803:93c0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 02 May 2025 06:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:e5:00:3f:d1:7e:34:ba:9c:87:f4:6c:08:c8:eb:b9:b0:42:cd:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 20:15:10 2025 GMT Not After : Feb 4 20:20:10 2026 GMT Subject: CN=7116290D7EB961DBB2AE7C4F1070543D6F8030A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:11:dd:e3:8b:5d:7a:18:96:1a:73:a9:6b:a1: 21:c3:8f:b1:87:bd:2a:0e:2b:b7:de:2b:6c:9b:64: 67:b5:21:ae:79:f1:3e:2d:d6:21:76:4e:7c:44:ca: f9:16:ea:58:40:66:d9:6a:fe:3c:0d:03:87:c7:60: 33:52:9d:ab:15:bc:9f:67:ce:d8:27:ff:ac:05:05: 9c:75:56:6d:16:42:a0:d7:6f:bf:29:8b:58:4c:73: 93:79:13:e2:8b:3f:30:1b:65:4e:a5:d1:d7:2e:cd: 67:4e:ac:3b:3f:f3:9b:c0:3e:4b:a7:42:fe:24:79: 54:36:bf:1c:d3:09:23:b1:39:6d:6f:8d:78:2a:a6: 92:34:46:01:df:e9:c1:3d:2e:30:c6:b7:b8:b4:51: ea:c9:76:8f:9b:79:37:47:3d:5e:05:b8:2c:67:ee: 07:8f:b5:85:83:17:5e:e4:c2:15:7e:20:ab:e1:bf: 1b:b0:b3:49:1e:44:d9:1e:8b:9c:4a:e4:c9:d7:90: a7:cb:74:af:5b:32:6a:77:3e:3b:85:5d:9c:94:bc: 68:2c:5b:b3:57:f7:10:6a:71:d5:97:04:ed:0d:7a: 26:d6:c7:e6:fe:7b:e6:af:ac:f0:e0:c2:e4:c0:56: 72:5e:65:ee:0e:08:6e:b8:27:49:12:67:66:ab:5d: 08:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 71:16:29:0D:7E:B9:61:DB:B2:AE:7C:4F:10:70:54:3D:6F:80:30:A9 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/88D7B05E68A363B604AA1DBA9B3665F8C3F55B13B2B284317471F87709EEA0D8/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/88D7B05E68A363B604AA1DBA9B3665F8C3F55B13B2B284317471F87709EEA0D8/0/7116290D7EB961DBB2AE7C4F1070543D6F8030A9.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 128.201.80.0/22 IPv6: 2803:93c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265741 Signature Algorithm: sha256WithRSAEncryption ad:55:51:15:d4:ac:86:9a:c2:e8:3d:83:0f:db:1a:30:ea:db: 00:1a:7c:c3:1b:e6:29:41:55:4b:f1:af:b5:32:7b:ec:bf:d0: e3:b1:61:be:5b:ad:61:74:31:0d:7b:5b:6d:03:7a:1e:51:91: 31:ae:c0:89:33:85:e8:a0:51:8c:fc:0c:a5:81:28:bc:ee:8c: 70:69:86:f2:4a:82:a9:50:76:9b:5b:73:c0:4c:19:b3:c4:42: 34:88:b0:74:e8:04:ef:43:0e:dd:19:67:2f:a8:17:03:9a:b4: 2a:0a:27:ae:6f:f0:7e:e2:4a:dd:16:f8:1c:9e:9c:af:33:86: f6:55:a7:c3:f4:32:5b:95:9f:db:0d:f0:1b:d2:c0:b3:83:c5: 93:cb:24:e1:1b:a4:21:1f:5d:66:e1:60:63:02:14:12:6a:d9: f2:50:32:ab:08:b7:40:b5:26:f6:b0:bd:47:7d:31:8b:c1:0a: c2:6b:d6:4e:87:15:0b:48:5a:d6:7d:c1:e3:9a:bb:15:b5:64: 22:15:c1:f7:5e:0b:e5:ce:2e:14:a1:a3:af:59:1f:ed:a7:56: 52:40:b3:67:4b:33:fe:a4:86:7a:fb:45:14:94:34:12:4b:39: 80:ac:e2:ae:26:a2:98:65:90:86:f5:83:0a:cd:91:a4:ec:68: 40:41:20:5a -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUTuUAP9F+NLqch/RsCMjrubBCze8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUyMDE1MTBaFw0yNjAyMDQyMDIwMTBaMDMxMTAvBgNV BAMTKDcxMTYyOTBEN0VCOTYxREJCMkFFN0M0RjEwNzA1NDNENkY4MDMwQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCEd3ji116GJYac6lroSHDj7GH vSoOK7feK2ybZGe1Ia558T4t1iF2TnxEyvkW6lhAZtlq/jwNA4fHYDNSnasVvJ9n ztgn/6wFBZx1Vm0WQqDXb78pi1hMc5N5E+KLPzAbZU6l0dcuzWdOrDs/85vAPkun Qv4keVQ2vxzTCSOxOW1vjXgqppI0RgHf6cE9LjDGt7i0UerJdo+beTdHPV4FuCxn 7gePtYWDF17kwhV+IKvhvxuws0keRNkei5xK5MnXkKfLdK9bMmp3PjuFXZyUvGgs W7NX9xBqcdWXBO0NeibWx+b+e+avrPDgwuTAVnJeZe4OCG64J0kSZ2arXQjdAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRxFikNfrlh27Ku fE8QcFQ9b4AwqTAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvODhEN0IwNUU2OEEzNjNCNjA0QUExREJB OUIzNjY1RjhDM0Y1NUIxM0IyQjI4NDMxNzQ3MUY4NzcwOUVFQTBEOC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy84OEQ3QjA1RTY4QTM2M0I2MDRBQTFEQkE5QjM2NjVGOEMzRjU1QjEzQjJC Mjg0MzE3NDcxRjg3NzA5RUVBMEQ4LzAvNzExNjI5MEQ3RUI5NjFEQkIyQUU3QzRG MTA3MDU0M0Q2RjgwMzBBOS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCgMlQMA0EAgAC MAcDBQAoA5PAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQODTANBgkqhkiG9w0B AQsFAAOCAQEArVVRFdSshprC6D2DD9saMOrbABp8wxvmKUFVS/GvtTJ77L/Q47Fh vlutYXQxDXtbbQN6HlGRMa7AiTOF6KBRjPwMpYEovO6McGmG8kqCqVB2m1tzwEwZ s8RCNIiwdOgE70MO3RlnL6gXA5q0Kgonrm/wfuJK3Rb4HJ6crzOG9lWnw/QyW5Wf 2w3wG9LAs4PFk8sk4RukIR9dZuFgYwIUEmrZ8lAyqwi3QLUm9rC9R30xi8EKwmvW TocVC0ha1n3B45q7FbVkIhXB914L5c4uFKGjr1kf7adWUkCzZ0sz/qSGevtFFJQ0 Eks5gKziriaimGWQhvWDCs2RpOxoQEEgWg== -----END CERTIFICATE-----Generated at Mon Apr 28 05:59:35 2025 by rpki-client on console.sobornost.net