$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8099611B7BF0F6A8CA74DFD374E3EDF2C89FBD7A.cer File: 8099611B7BF0F6A8CA74DFD374E3EDF2C89FBD7A.cer (raw, json) Hash identifier: KG6W7p6SxYKA3uhyN5PMXeK1Kct91Tpib5bbPkL86Og= Subject key identifier: 80:99:61:1B:7B:F0:F6:A8:CA:74:DF:D3:74:E3:ED:F2:C8:9F:BD:7A Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 6C9D25337B386542035FD4DB5467B6AD8442A6C9 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/AB19A1F333FFA36CC0FA1B59F186DA1CFD5AFC697CF1D898D76C3E7C5F417EBA/0/8099611B7BF0F6A8CA74DFD374E3EDF2C89FBD7A.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/AB19A1F333FFA36CC0FA1B59F186DA1CFD5AFC697CF1D898D76C3E7C5F417EBA/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 21:36:25 +0000 Certificate not after: Wed 04 Feb 2026 21:41:25 +0000 Subordinate resources: AS: 263770 IP: 138.118.144.0/22 IP: 2803:3840::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 02 May 2025 06:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:9d:25:33:7b:38:65:42:03:5f:d4:db:54:67:b6:ad:84:42:a6:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 21:36:25 2025 GMT Not After : Feb 4 21:41:25 2026 GMT Subject: CN=8099611B7BF0F6A8CA74DFD374E3EDF2C89FBD7A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:8f:3a:53:69:67:5c:13:68:f8:bf:80:84:32: 14:d2:7c:65:ce:4b:90:3b:2c:cd:54:36:a1:8e:2c: f7:2f:66:5a:ce:00:fa:77:a6:3c:23:88:3b:fd:8c: 14:51:cc:8a:66:a3:13:cc:b5:6e:20:5f:9e:bf:2f: 63:c9:26:e4:e4:f3:1b:ff:3e:94:b4:22:79:87:0c: 1c:33:ba:e9:24:65:72:cd:e6:db:5f:21:00:5b:88: fb:63:d4:7d:06:8c:fc:df:02:8d:72:88:6a:87:be: 20:98:44:1b:4e:63:0c:57:89:b2:fc:71:ea:ca:58: b4:24:c6:62:c8:d4:17:1b:2c:81:fe:23:22:8b:4a: ea:b5:81:d3:c0:ef:c4:93:4f:b5:f1:7c:d8:30:ad: 90:63:07:8c:55:4e:63:d0:44:db:84:54:97:79:e4: aa:d9:20:17:bd:6f:75:41:28:ca:7a:b9:2e:15:cb: 7d:bc:c5:29:9f:87:80:6c:59:bb:91:a7:ce:5c:41: d4:39:b4:d3:e6:ca:e9:cf:3d:35:75:a5:5e:12:ef: 4c:a5:c0:ad:0a:95:e1:65:7f:8b:65:a6:3c:e9:77: 66:bf:16:85:cc:f7:67:7d:83:78:27:c6:fe:53:8a: 36:a4:8d:52:93:51:04:bc:4d:32:d2:f8:0a:49:34: cc:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 80:99:61:1B:7B:F0:F6:A8:CA:74:DF:D3:74:E3:ED:F2:C8:9F:BD:7A X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/AB19A1F333FFA36CC0FA1B59F186DA1CFD5AFC697CF1D898D76C3E7C5F417EBA/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/AB19A1F333FFA36CC0FA1B59F186DA1CFD5AFC697CF1D898D76C3E7C5F417EBA/0/8099611B7BF0F6A8CA74DFD374E3EDF2C89FBD7A.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.118.144.0/22 IPv6: 2803:3840::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263770 Signature Algorithm: sha256WithRSAEncryption 80:83:1c:92:74:b6:04:66:d3:b2:00:73:f9:76:dc:d5:16:91: 84:d3:d6:eb:47:a8:56:d5:2c:fe:d2:c4:c7:53:e7:48:44:25: 95:3b:ae:b6:ab:92:b9:36:9e:58:51:d2:30:fa:1b:60:d6:d1: 7a:87:e7:0e:c6:ce:97:c5:f9:ff:61:7a:b9:40:71:ce:e2:d1: 6b:58:8e:fc:1a:bd:c3:45:dd:c6:ff:fe:da:08:23:1a:31:9b: e7:11:cd:bb:ec:a3:5a:e7:6d:02:2a:b2:49:2a:a7:1a:3e:33: 1b:ab:a1:95:8e:15:d3:9f:f3:45:f0:92:a0:85:d1:85:52:c0: 51:74:bc:65:39:52:0b:80:03:25:30:2d:56:dc:4d:fb:3a:99: 04:3b:01:9a:78:1f:42:e7:71:f9:3b:ac:c5:92:c7:3b:f5:32: 43:8e:5e:8b:18:4c:08:13:15:23:e6:14:05:5e:97:da:5b:6f: cb:89:be:12:d6:00:5e:27:be:33:ee:49:80:e8:89:02:75:48: 5d:7f:73:0f:0a:d7:9b:18:91:16:20:42:eb:e2:a8:98:ad:d2: 2d:a5:22:5d:9b:78:76:be:1f:fd:5f:4d:0d:80:db:8d:41:d8: 4d:38:ed:c2:b3:14:13:ff:94:f2:7b:1b:e5:1a:6a:9e:ca:04: e5:9b:2b:d2 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUbJ0lM3s4ZUIDX9TbVGe2rYRCpskwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUyMTM2MjVaFw0yNjAyMDQyMTQxMjVaMDMxMTAvBgNV BAMTKDgwOTk2MTFCN0JGMEY2QThDQTc0REZEMzc0RTNFREYyQzg5RkJEN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKjzpTaWdcE2j4v4CEMhTSfGXO S5A7LM1UNqGOLPcvZlrOAPp3pjwjiDv9jBRRzIpmoxPMtW4gX56/L2PJJuTk8xv/ PpS0InmHDBwzuukkZXLN5ttfIQBbiPtj1H0GjPzfAo1yiGqHviCYRBtOYwxXibL8 cerKWLQkxmLI1BcbLIH+IyKLSuq1gdPA78STT7XxfNgwrZBjB4xVTmPQRNuEVJd5 5KrZIBe9b3VBKMp6uS4Vy328xSmfh4BsWbuRp85cQdQ5tNPmyunPPTV1pV4S70yl wK0KleFlf4tlpjzpd2a/FoXM92d9g3gnxv5TijakjVKTUQS8TTLS+ApJNMx9AgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSAmWEbe/D2qMp0 39N04+3yyJ+9ejAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQUIxOUExRjMzM0ZGQTM2Q0MwRkExQjU5 RjE4NkRBMUNGRDVBRkM2OTdDRjFEODk4RDc2QzNFN0M1RjQxN0VCQS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9BQjE5QTFGMzMzRkZBMzZDQzBGQTFCNTlGMTg2REExQ0ZENUFGQzY5N0NG MUQ4OThENzZDM0U3QzVGNDE3RUJBLzAvODA5OTYxMUI3QkYwRjZBOENBNzRERkQz NzRFM0VERjJDODlGQkQ3QS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCinaQMA0EAgAC MAcDBQAoAzhAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQGWjANBgkqhkiG9w0B AQsFAAOCAQEAgIMcknS2BGbTsgBz+Xbc1RaRhNPW60eoVtUs/tLEx1PnSEQllTuu tquSuTaeWFHSMPobYNbReofnDsbOl8X5/2F6uUBxzuLRa1iO/Bq9w0Xdxv/+2ggj GjGb5xHNu+yjWudtAiqySSqnGj4zG6uhlY4V05/zRfCSoIXRhVLAUXS8ZTlSC4AD JTAtVtxN+zqZBDsBmngfQudx+TusxZLHO/UyQ45eixhMCBMVI+YUBV6X2ltvy4m+ EtYAXie+M+5JgOiJAnVIXX9zDwrXmxiRFiBC6+KomK3SLaUiXZt4dr4f/V9NDYDb jUHYTTjtwrMUE/+U8nsb5RpqnsoE5Zsr0g== -----END CERTIFICATE-----Generated at Mon Apr 28 05:59:36 2025 by rpki-client on console.sobornost.net