$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/75D4F41FAB0A4B4D8085C19D7FEA62B8FFDC6E2D.cer File: 75D4F41FAB0A4B4D8085C19D7FEA62B8FFDC6E2D.cer (raw, json) Hash identifier: f8lor+FgX4NO5b/f5qFlBrHH2VWewcXCsC6r/FWuj7Q= Subject key identifier: 75:D4:F4:1F:AB:0A:4B:4D:80:85:C1:9D:7F:EA:62:B8:FF:DC:6E:2D Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 1576D4F01E74FCA174388B3C1A0C677726B79BA6 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/C1089EA8D8DD189885376A0F648BDB342B11AA3AB9751B1B6D9E212AB24A87ED/0/75D4F41FAB0A4B4D8085C19D7FEA62B8FFDC6E2D.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/C1089EA8D8DD189885376A0F648BDB342B11AA3AB9751B1B6D9E212AB24A87ED/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 12:42:40 +0000 Certificate not after: Wed 04 Feb 2026 12:47:40 +0000 Subordinate resources: AS: 264736 IP: 170.233.92.0/22 IP: 2803:d740::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 02 May 2025 06:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:76:d4:f0:1e:74:fc:a1:74:38:8b:3c:1a:0c:67:77:26:b7:9b:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 12:42:40 2025 GMT Not After : Feb 4 12:47:40 2026 GMT Subject: CN=75D4F41FAB0A4B4D8085C19D7FEA62B8FFDC6E2D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:44:6e:57:b3:17:ef:f4:e9:4c:7a:30:1f:f7: 79:0e:33:f6:67:22:7a:83:d3:33:8e:db:d5:e4:ad: 59:eb:af:88:61:f5:32:33:27:7b:e0:ea:45:ee:f5: 0d:ac:6a:68:aa:e3:67:87:6d:64:8d:27:be:d7:6a: 32:7b:b5:75:25:71:b4:42:37:67:21:ba:98:9d:43: b2:d1:80:eb:c9:9e:53:6f:3f:1c:04:88:bd:f5:c8: ba:79:b0:e3:82:d9:96:7d:f9:21:48:61:f3:9c:d6: b2:b3:d3:e8:ef:8f:ee:88:42:0d:18:85:c4:9c:88: 77:cd:b3:79:8d:5a:18:4e:3c:c1:40:91:b2:50:9c: f3:17:99:8f:f8:5f:e4:4c:c6:b2:5d:df:a6:62:32: 6b:b2:fd:92:90:7c:77:e5:9c:82:19:5b:47:68:61: 95:7f:56:b0:d9:27:89:3d:45:04:34:06:0e:a9:e1: 45:02:d3:25:df:b8:9e:c9:b2:a4:36:ea:f8:f6:5e: ee:44:b3:b6:e9:c8:fc:43:b9:5f:bc:ea:38:1d:87: 20:08:59:07:a7:41:a4:bf:af:09:46:0b:a8:22:14: 9f:f4:6f:6e:52:90:09:6f:a9:13:3a:bb:c3:b8:50: 31:b6:47:00:d7:d7:24:92:c2:1a:f4:6c:55:ca:74: 3c:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 75:D4:F4:1F:AB:0A:4B:4D:80:85:C1:9D:7F:EA:62:B8:FF:DC:6E:2D X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/C1089EA8D8DD189885376A0F648BDB342B11AA3AB9751B1B6D9E212AB24A87ED/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/C1089EA8D8DD189885376A0F648BDB342B11AA3AB9751B1B6D9E212AB24A87ED/0/75D4F41FAB0A4B4D8085C19D7FEA62B8FFDC6E2D.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.233.92.0/22 IPv6: 2803:d740::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264736 Signature Algorithm: sha256WithRSAEncryption a5:5a:c8:2f:9b:98:e2:8c:77:91:a5:2c:78:3a:f5:6d:6c:bb: 34:c3:5e:f4:95:ac:3a:b9:04:39:3f:f0:3e:39:ad:64:30:3a: f0:80:77:10:7f:dc:64:c0:69:58:5a:23:df:bc:9f:b3:d2:58: 19:8d:5b:d9:50:ae:86:69:ef:19:de:59:6f:e8:23:fc:07:cf: 40:ac:d4:c0:df:58:f8:27:5c:ae:11:3c:0c:4c:14:19:bf:82: 2d:64:c3:cc:70:de:1a:e4:aa:fe:a2:4e:59:21:09:32:5b:e6: 19:cc:5e:7b:7e:64:66:18:04:f6:f6:ea:f5:02:c1:bc:4b:9b: 47:a1:67:66:4b:3f:5c:b7:f4:ae:d6:58:49:22:96:a0:98:b0: b2:d9:d0:41:73:89:a4:a9:ff:d6:84:76:8b:e3:da:fb:49:1c: bc:19:68:24:3f:b7:e4:e0:4f:a7:db:c1:a1:83:84:42:9f:4a: a9:19:e7:6e:c1:b1:53:f9:09:86:85:9e:a7:2e:9d:82:01:e4: 5c:1a:6c:98:1e:47:b0:69:ee:88:f6:52:4e:87:e9:de:06:b8: 7d:05:79:66:aa:0e:39:2d:6b:b9:8d:9a:d3:df:6d:62:b0:91: ec:95:71:3c:f0:f6:fd:5b:37:e7:d9:96:6b:59:60:b1:ac:8e: 67:fa:5e:47 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUFXbU8B50/KF0OIs8Ggxndya3m6YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUxMjQyNDBaFw0yNjAyMDQxMjQ3NDBaMDMxMTAvBgNV BAMTKDc1RDRGNDFGQUIwQTRCNEQ4MDg1QzE5RDdGRUE2MkI4RkZEQzZFMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsRG5Xsxfv9OlMejAf93kOM/Zn InqD0zOO29XkrVnrr4hh9TIzJ3vg6kXu9Q2samiq42eHbWSNJ77XajJ7tXUlcbRC N2chupidQ7LRgOvJnlNvPxwEiL31yLp5sOOC2ZZ9+SFIYfOc1rKz0+jvj+6IQg0Y hcSciHfNs3mNWhhOPMFAkbJQnPMXmY/4X+RMxrJd36ZiMmuy/ZKQfHflnIIZW0do YZV/VrDZJ4k9RQQ0Bg6p4UUC0yXfuJ7JsqQ26vj2Xu5Es7bpyPxDuV+86jgdhyAI WQenQaS/rwlGC6giFJ/0b25SkAlvqRM6u8O4UDG2RwDX1ySSwhr0bFXKdDyjAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR11PQfqwpLTYCF wZ1/6mK4/9xuLTAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQzEwODlFQThEOEREMTg5ODg1Mzc2QTBG NjQ4QkRCMzQyQjExQUEzQUI5NzUxQjFCNkQ5RTIxMkFCMjRBODdFRC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9DMTA4OUVBOEQ4REQxODk4ODUzNzZBMEY2NDhCREIzNDJCMTFBQTNBQjk3 NTFCMUI2RDlFMjEyQUIyNEE4N0VELzAvNzVENEY0MUZBQjBBNEI0RDgwODVDMTlE N0ZFQTYyQjhGRkRDNkUyRC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCqulcMA0EAgAC MAcDBQAoA9dAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQKIDANBgkqhkiG9w0B AQsFAAOCAQEApVrIL5uY4ox3kaUseDr1bWy7NMNe9JWsOrkEOT/wPjmtZDA68IB3 EH/cZMBpWFoj37yfs9JYGY1b2VCuhmnvGd5Zb+gj/AfPQKzUwN9Y+CdcrhE8DEwU Gb+CLWTDzHDeGuSq/qJOWSEJMlvmGcxee35kZhgE9vbq9QLBvEubR6FnZks/XLf0 rtZYSSKWoJiwstnQQXOJpKn/1oR2i+Pa+0kcvBloJD+35OBPp9vBoYOEQp9KqRnn bsGxU/kJhoWepy6dggHkXBpsmB5HsGnuiPZSTofp3ga4fQV5ZqoOOS1ruY2a099t YrCR7JVxPPD2/Vs359mWa1lgsayOZ/peRw== -----END CERTIFICATE-----Generated at Mon Apr 28 05:59:35 2025 by rpki-client on console.sobornost.net