$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/767FD56E8257BDEBA22E443767B9E4B7EB036071.cer File: 767FD56E8257BDEBA22E443767B9E4B7EB036071.cer (raw, json) Hash identifier: pYszVkd1k2WBB7Fmy+RWTJp3hOYO7Bjz2JClq/GeDkM= Subject key identifier: 76:7F:D5:6E:82:57:BD:EB:A2:2E:44:37:67:B9:E4:B7:EB:03:60:71 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 4321228AA80D191FAE07804723551A522DC4FA6A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/AF74B287C6B05C585887F6B9FA16839C5C64F2221C1B5920F723B91E55059390/0/767FD56E8257BDEBA22E443767B9E4B7EB036071.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/AF74B287C6B05C585887F6B9FA16839C5C64F2221C1B5920F723B91E55059390/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 12:52:40 +0000 Certificate not after: Wed 04 Feb 2026 12:57:40 +0000 Subordinate resources: AS: 272872 IP: 2803:3a90::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 02 May 2025 06:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:21:22:8a:a8:0d:19:1f:ae:07:80:47:23:55:1a:52:2d:c4:fa:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 12:52:40 2025 GMT Not After : Feb 4 12:57:40 2026 GMT Subject: CN=767FD56E8257BDEBA22E443767B9E4B7EB036071 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f4:06:c6:56:39:d2:43:85:f5:96:9b:38:07: 8e:c4:11:60:c8:42:fe:3e:8c:43:f9:27:cc:7c:b8: 0e:8b:7b:c8:20:cf:f7:8b:07:cf:6d:59:82:a7:72: 01:0f:ce:2b:79:03:2f:0d:7e:7a:de:0e:55:9b:06: 9c:9f:66:cc:56:46:66:20:f3:9e:96:5a:03:a3:83: 4a:0a:0e:d5:06:8b:4b:2b:cd:86:82:bd:5c:b9:21: 3e:92:9b:a2:e3:45:70:3f:26:48:04:ae:ff:c0:41: ac:4b:98:20:55:4e:97:7f:4b:65:f7:db:00:18:2a: d1:c2:dc:d7:b6:5a:b5:5a:fb:9a:bd:70:13:47:fe: 44:8d:13:6e:39:4e:70:d1:4d:8a:e9:7e:cf:26:b5: ef:f3:b5:de:22:b9:d3:ec:92:2c:9b:89:15:b4:d7: c0:b1:8b:1d:0a:f0:fe:ef:9f:82:88:8d:b3:0e:b7: 2f:e8:86:bb:4c:97:24:92:18:34:a6:8e:a4:f0:73: 36:a4:54:6d:98:3b:7b:2e:48:14:78:f1:08:cd:bc: bc:90:e9:9c:73:fa:fd:8d:69:1b:62:80:03:85:a1: bb:a0:d2:0f:03:3b:2d:66:57:d2:ff:5e:ed:3a:54: eb:f5:59:13:4c:41:03:2a:75:9e:e8:7f:04:ba:8c: 83:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 76:7F:D5:6E:82:57:BD:EB:A2:2E:44:37:67:B9:E4:B7:EB:03:60:71 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/AF74B287C6B05C585887F6B9FA16839C5C64F2221C1B5920F723B91E55059390/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/AF74B287C6B05C585887F6B9FA16839C5C64F2221C1B5920F723B91E55059390/0/767FD56E8257BDEBA22E443767B9E4B7EB036071.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:3a90::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 272872 Signature Algorithm: sha256WithRSAEncryption b3:a9:46:05:16:ce:63:ec:22:d7:4d:98:a6:4e:65:55:0b:8c: 67:b3:76:d9:3f:89:4d:6a:e3:e9:02:2a:bd:cd:a2:1e:c0:fa: 87:ab:0c:2b:1a:90:c5:7f:dd:02:6d:87:de:b4:bc:12:29:7e: bf:6f:7d:19:19:78:ae:fc:74:08:43:64:81:23:96:27:fe:a4: 55:0c:43:3a:87:db:6c:68:66:a3:1e:68:ee:f9:ef:59:30:de: 2a:8f:1a:3e:08:69:da:66:06:19:28:01:9c:35:ae:ab:ee:48: 1b:b6:05:a4:c5:e9:a9:a7:b4:df:3a:f7:08:b6:6a:f5:96:24: 11:e4:1d:f1:31:96:43:e0:cf:47:d0:ac:1d:0e:55:43:45:2d: 8a:f7:e0:33:60:44:8d:68:54:34:d3:0e:79:a4:c9:70:96:06: b4:7d:38:96:45:cf:ba:e2:e0:a7:f3:d2:d5:e3:f6:32:ec:e0: 7e:c2:6a:35:d5:2d:08:fa:aa:c8:b2:cd:16:db:c4:62:ea:87: 03:4d:32:ab:a0:de:e9:e6:ff:d4:1e:b2:4d:63:95:07:9f:e3: b9:df:23:8e:f1:17:7f:ee:f2:7c:c0:f3:86:b0:64:f5:06:5f: de:e0:c9:f0:fc:dc:4f:91:0b:ce:f2:ce:65:58:1e:21:59:97: ee:23:98:43 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUQyEiiqgNGR+uB4BHI1UaUi3E+mowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUxMjUyNDBaFw0yNjAyMDQxMjU3NDBaMDMxMTAvBgNV BAMTKDc2N0ZENTZFODI1N0JERUJBMjJFNDQzNzY3QjlFNEI3RUIwMzYwNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf9AbGVjnSQ4X1lps4B47EEWDI Qv4+jEP5J8x8uA6Le8ggz/eLB89tWYKncgEPzit5Ay8NfnreDlWbBpyfZsxWRmYg 856WWgOjg0oKDtUGi0srzYaCvVy5IT6Sm6LjRXA/JkgErv/AQaxLmCBVTpd/S2X3 2wAYKtHC3Ne2WrVa+5q9cBNH/kSNE245TnDRTYrpfs8mte/ztd4iudPskiybiRW0 18Cxix0K8P7vn4KIjbMOty/ohrtMlySSGDSmjqTwczakVG2YO3suSBR48QjNvLyQ 6Zxz+v2NaRtigAOFobug0g8DOy1mV9L/Xu06VOv1WRNMQQMqdZ7ofwS6jIP1AgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR2f9Vugle966Iu RDdnueS36wNgcTAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQUY3NEIyODdDNkIwNUM1ODU4ODdGNkI5 RkExNjgzOUM1QzY0RjIyMjFDMUI1OTIwRjcyM0I5MUU1NTA1OTM5MC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9BRjc0QjI4N0M2QjA1QzU4NTg4N0Y2QjlGQTE2ODM5QzVDNjRGMjIyMUMx QjU5MjBGNzIzQjkxRTU1MDU5MzkwLzAvNzY3RkQ1NkU4MjU3QkRFQkEyMkU0NDM3 NjdCOUU0QjdFQjAzNjA3MS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAM6kDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEKegwDQYJKoZIhvcNAQELBQADggEBALOpRgUW zmPsItdNmKZOZVULjGezdtk/iU1q4+kCKr3Noh7A+oerDCsakMV/3QJth960vBIp fr9vfRkZeK78dAhDZIEjlif+pFUMQzqH22xoZqMeaO7571kw3iqPGj4IadpmBhko AZw1rqvuSBu2BaTF6amntN869wi2avWWJBHkHfExlkPgz0fQrB0OVUNFLYr34DNg RI1oVDTTDnmkyXCWBrR9OJZFz7ri4Kfz0tXj9jLs4H7CajXVLQj6qsiyzRbbxGLq hwNNMqug3unm/9Qesk1jlQef47nfI47xF3/u8nzA84awZPUGX97gyfD83E+RC87y zmVYHiFZl+4jmEM= -----END CERTIFICATE-----Generated at Mon Apr 28 05:59:35 2025 by rpki-client on console.sobornost.net