$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722.cer File: 8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722.cer (raw, json) Hash identifier: GlAomQd+JfH9xw5gCwUWkrkmq5O2jFHe2VTSCtmrDPE= Subject key identifier: 8A:3E:EB:5C:D5:9A:A0:CB:9A:B9:08:25:FC:C1:DD:80:92:45:E7:22 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 032FB2E10EEA5BD4A14885284EC0F4597217FED9 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/CD2CBDA216FD7E4F4CB3D387360940975C5878D720A50ECAB44188187892DFB1/0/8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/CD2CBDA216FD7E4F4CB3D387360940975C5878D720A50ECAB44188187892DFB1/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 02:38:56 +0000 Certificate not after: Wed 04 Feb 2026 02:43:56 +0000 Subordinate resources: AS: 270165 IP: 2806:3eb::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 02 May 2025 06:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:2f:b2:e1:0e:ea:5b:d4:a1:48:85:28:4e:c0:f4:59:72:17:fe:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 02:38:56 2025 GMT Not After : Feb 4 02:43:56 2026 GMT Subject: CN=8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:2c:26:b2:f7:b0:43:fe:c1:4b:ca:e0:68:1e: 9c:b8:b8:af:c1:b3:c3:d0:7d:77:6c:03:3f:19:57: 68:48:02:27:9d:c6:52:e4:81:fa:2a:92:d4:8d:e3: 0a:06:27:3c:a1:45:b2:fd:4d:eb:bd:1e:18:a0:10: 37:c8:d5:3e:35:c4:a0:04:ed:06:1f:f1:1c:75:70: a3:5c:53:5d:f4:e8:88:67:c7:4e:87:34:0c:e0:f4: 56:de:c0:91:2d:82:02:4b:a6:fc:d3:f7:23:67:f2: 81:30:d4:1a:d1:de:4e:d3:da:82:06:78:72:81:05: c0:dd:ea:7e:65:35:b0:76:4b:57:5a:18:8e:d2:83: cb:0f:56:9e:d3:77:e4:6f:bb:a6:76:96:6d:c8:11: 8d:4c:60:7c:96:5b:96:6f:4e:61:c7:44:17:c0:00: cc:d4:0f:8f:57:42:04:e0:37:3a:92:d0:db:1d:40: 28:70:93:62:3a:2a:c4:cf:28:bd:6b:d6:de:42:85: 45:2a:c8:09:eb:00:07:66:53:0d:e4:02:42:af:b1: b6:5f:f1:b0:f7:7a:a0:47:93:a7:d4:cf:05:67:b5: 34:49:02:9a:b0:46:f0:8c:ae:7f:15:31:de:9f:a4: ae:cc:d8:8e:bf:c6:fb:90:4c:71:61:99:fd:3b:1e: 03:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8A:3E:EB:5C:D5:9A:A0:CB:9A:B9:08:25:FC:C1:DD:80:92:45:E7:22 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/CD2CBDA216FD7E4F4CB3D387360940975C5878D720A50ECAB44188187892DFB1/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/CD2CBDA216FD7E4F4CB3D387360940975C5878D720A50ECAB44188187892DFB1/0/8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2806:3eb::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 270165 Signature Algorithm: sha256WithRSAEncryption 14:8b:06:5a:a3:ef:54:c0:0c:92:f7:cd:8d:3f:a6:56:88:e3: 04:a1:7a:49:2d:a4:5a:2f:86:c6:d8:14:16:5a:32:bc:7a:b5: ba:bd:f1:be:76:a0:9a:99:a6:7c:e8:e8:b6:39:5f:17:79:9f: 1f:46:41:d9:e3:b2:b2:42:57:25:ba:0d:73:34:ef:04:91:71: 98:5f:7b:36:b6:75:c1:7c:68:cd:7f:df:62:8f:62:a9:a6:d8: 69:9b:de:17:8e:ec:6a:a9:49:8f:34:62:4b:3b:4d:34:38:33: 1d:ac:b8:58:99:c3:12:33:90:c3:88:75:00:cc:70:01:5b:0b: dd:48:94:b9:7c:d1:97:2d:86:8e:29:4d:f8:05:e6:57:ee:cc: 72:3d:7d:38:0b:05:01:ae:8a:a9:05:ad:94:95:ea:59:fd:f8: c4:22:d4:03:a5:fe:4d:6e:07:51:f9:c1:c5:64:99:9d:c8:7b: 63:c8:07:e1:ee:86:01:bb:1b:1d:b6:ed:ce:3c:91:c5:bc:51: 86:e4:88:30:06:48:6d:2d:0d:72:41:29:15:95:ea:16:90:b5: 98:3b:76:f3:b3:4d:5c:17:4c:c9:a5:f2:b2:99:09:86:24:3e: c0:4a:40:7b:f4:3a:f3:65:26:57:4e:ac:b2:4b:f6:7f:00:ee: 9d:6c:0f:ba -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUAy+y4Q7qW9ShSIUoTsD0WXIX/tkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUwMjM4NTZaFw0yNjAyMDQwMjQzNTZaMDMxMTAvBgNV BAMTKDhBM0VFQjVDRDU5QUEwQ0I5QUI5MDgyNUZDQzFERDgwOTI0NUU3MjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnLCay97BD/sFLyuBoHpy4uK/B s8PQfXdsAz8ZV2hIAiedxlLkgfoqktSN4woGJzyhRbL9Teu9HhigEDfI1T41xKAE 7QYf8Rx1cKNcU1306Ihnx06HNAzg9FbewJEtggJLpvzT9yNn8oEw1BrR3k7T2oIG eHKBBcDd6n5lNbB2S1daGI7Sg8sPVp7Td+Rvu6Z2lm3IEY1MYHyWW5ZvTmHHRBfA AMzUD49XQgTgNzqS0NsdQChwk2I6KsTPKL1r1t5ChUUqyAnrAAdmUw3kAkKvsbZf 8bD3eqBHk6fUzwVntTRJApqwRvCMrn8VMd6fpK7M2I6/xvuQTHFhmf07HgOVAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSKPutc1Zqgy5q5 CCX8wd2AkkXnIjAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQ0QyQ0JEQTIxNkZEN0U0RjRDQjNEMzg3 MzYwOTQwOTc1QzU4NzhENzIwQTUwRUNBQjQ0MTg4MTg3ODkyREZCMS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9DRDJDQkRBMjE2RkQ3RTRGNENCM0QzODczNjA5NDA5NzVDNTg3OEQ3MjBB NTBFQ0FCNDQxODgxODc4OTJERkIxLzAvOEEzRUVCNUNENTlBQTBDQjlBQjkwODI1 RkNDMUREODA5MjQ1RTcyMi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAYD6zAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEH1UwDQYJKoZIhvcNAQELBQADggEBABSLBlqj 71TADJL3zY0/plaI4wShekktpFovhsbYFBZaMrx6tbq98b52oJqZpnzo6LY5Xxd5 nx9GQdnjsrJCVyW6DXM07wSRcZhfeza2dcF8aM1/32KPYqmm2Gmb3heO7GqpSY80 Yks7TTQ4Mx2suFiZwxIzkMOIdQDMcAFbC91IlLl80Zctho4pTfgF5lfuzHI9fTgL BQGuiqkFrZSV6ln9+MQi1AOl/k1uB1H5wcVkmZ3Ie2PIB+HuhgG7Gx227c48kcW8 UYbkiDAGSG0tDXJBKRWV6haQtZg7dvOzTVwXTMml8rKZCYYkPsBKQHv0OvNlJldO rLJL9n8A7p1sD7o= -----END CERTIFICATE-----Generated at Mon Apr 28 05:59:37 2025 by rpki-client on console.sobornost.net