$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8CECD8998683594E93B9972D95397E3623CDB7A8.cer File: 8CECD8998683594E93B9972D95397E3623CDB7A8.cer (raw, json) Hash identifier: pY2B/bOL0Zq9M9zhZM/EQm5xLscAgefsZ1lhm9WFR5s= Subject key identifier: 8C:EC:D8:99:86:83:59:4E:93:B9:97:2D:95:39:7E:36:23:CD:B7:A8 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 50A04A65F4581AB097A70A1A3F892D6A03AE4EFA Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/67E8497BE2811FBA6D2C5D1CA1356D07B839D71D8E186CFE1EE3A24230F7F4FF/0/8CECD8998683594E93B9972D95397E3623CDB7A8.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/67E8497BE2811FBA6D2C5D1CA1356D07B839D71D8E186CFE1EE3A24230F7F4FF/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 16 Apr 2025 23:24:33 +0000 Certificate not after: Wed 15 Apr 2026 23:29:33 +0000 Subordinate resources: AS: 271861 IP: 131.255.136.0/22 IP: 2803:4780::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 02 May 2025 06:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:a0:4a:65:f4:58:1a:b0:97:a7:0a:1a:3f:89:2d:6a:03:ae:4e:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Apr 16 23:24:33 2025 GMT Not After : Apr 15 23:29:33 2026 GMT Subject: CN=8CECD8998683594E93B9972D95397E3623CDB7A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e6:87:93:6a:fe:bc:2f:3f:66:8f:e8:c2:cb: ca:f8:08:05:5b:8e:b4:ee:83:5a:56:03:96:d9:6b: bc:b7:9a:bd:d6:c9:56:6f:db:8b:4d:da:07:4e:05: a5:be:6a:23:7f:cb:b4:18:00:58:fd:23:1e:02:6d: 8d:0a:81:b9:f8:a7:0d:d7:5f:f2:2c:cb:3c:f7:4f: 9f:1f:74:be:c5:61:30:d4:c6:bb:da:b1:ce:3c:4a: 19:71:fb:9f:13:15:b3:d8:ed:c0:6c:fe:c2:ac:6d: 95:e8:7c:75:7e:70:b4:ca:1e:cd:a5:53:48:1b:ae: c0:f0:85:e8:04:15:44:86:8c:31:bf:86:fe:41:a1: d5:f8:b4:d2:e7:0d:1e:b3:b8:1e:f9:41:20:a3:2d: 66:f5:f1:6a:5f:df:d9:b3:f7:b5:bc:d9:76:40:83: f6:7d:a1:18:92:30:44:27:84:f7:2c:1d:35:05:b7: 89:89:9f:0b:0f:0c:13:3b:04:62:e3:4e:61:16:db: 13:9f:5a:d6:16:36:a0:9f:5a:cf:aa:8c:c3:ba:d1: 91:7d:16:9c:bf:2f:fd:e5:3e:2d:46:d3:ca:22:e0: 2c:53:21:57:8a:8c:19:7a:d0:f6:88:b1:c7:d0:90: 80:09:9c:6d:c1:94:1e:c6:14:79:7a:4f:e7:d0:fa: 12:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8C:EC:D8:99:86:83:59:4E:93:B9:97:2D:95:39:7E:36:23:CD:B7:A8 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/67E8497BE2811FBA6D2C5D1CA1356D07B839D71D8E186CFE1EE3A24230F7F4FF/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/67E8497BE2811FBA6D2C5D1CA1356D07B839D71D8E186CFE1EE3A24230F7F4FF/0/8CECD8998683594E93B9972D95397E3623CDB7A8.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.255.136.0/22 IPv6: 2803:4780::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 271861 Signature Algorithm: sha256WithRSAEncryption a0:4e:66:aa:6b:f7:93:fa:56:c3:22:a8:77:ef:09:42:bd:42: 55:09:85:6a:4e:2a:89:2d:91:a9:00:55:53:0e:c6:7b:9f:48: b9:27:52:70:65:ae:92:b6:a4:57:e1:32:fe:c4:15:c5:47:14: 88:70:c9:a9:29:a3:33:b3:b9:cb:64:e5:dd:48:5d:d1:4a:6e: 30:73:23:2c:9a:80:39:9a:c7:fc:ea:45:82:8c:e7:4d:51:fd: 9f:f4:e9:2f:97:28:32:93:3c:fe:c3:94:1f:a0:bd:54:c0:bb: d0:5b:7e:24:d1:fe:16:80:24:8a:f5:a0:8c:d7:f7:a7:90:58: ca:20:3c:2d:29:0f:83:3e:e7:64:98:46:22:92:b6:93:39:68: be:fb:05:b7:d7:fd:97:7e:10:d7:b7:b5:a1:5c:6b:b9:68:f8: 84:6e:63:46:f1:39:49:20:a8:4c:48:b1:a2:6a:78:e3:59:a2: e5:35:22:c2:97:65:ee:1a:73:89:39:9e:ee:bb:8a:b4:ef:99: 41:0d:9f:96:84:61:1b:2d:e6:6d:64:48:0b:83:65:7e:71:41: fc:1d:63:de:71:37:32:7f:69:5c:6a:db:cb:f2:e5:46:79:8f: 62:e7:af:c9:f9:c3:2b:e6:ef:22:af:15:ab:93:11:eb:3c:7c: 61:dd:5c:75 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUUKBKZfRYGrCXpwoaP4ktagOuTvowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTA0MTYyMzI0MzNaFw0yNjA0MTUyMzI5MzNaMDMxMTAvBgNV BAMTKDhDRUNEODk5ODY4MzU5NEU5M0I5OTcyRDk1Mzk3RTM2MjNDREI3QTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/5oeTav68Lz9mj+jCy8r4CAVb jrTug1pWA5bZa7y3mr3WyVZv24tN2gdOBaW+aiN/y7QYAFj9Ix4CbY0Kgbn4pw3X X/Isyzz3T58fdL7FYTDUxrvasc48Shlx+58TFbPY7cBs/sKsbZXofHV+cLTKHs2l U0gbrsDwhegEFUSGjDG/hv5BodX4tNLnDR6zuB75QSCjLWb18Wpf39mz97W82XZA g/Z9oRiSMEQnhPcsHTUFt4mJnwsPDBM7BGLjTmEW2xOfWtYWNqCfWs+qjMO60ZF9 Fpy/L/3lPi1G08oi4CxTIVeKjBl60PaIscfQkIAJnG3BlB7GFHl6T+fQ+hKHAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSM7NiZhoNZTpO5 ly2VOX42I823qDAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNjdFODQ5N0JFMjgxMUZCQTZEMkM1RDFD QTEzNTZEMDdCODM5RDcxRDhFMTg2Q0ZFMUVFM0EyNDIzMEY3RjRGRi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy82N0U4NDk3QkUyODExRkJBNkQyQzVEMUNBMTM1NkQwN0I4MzlENzFEOEUx ODZDRkUxRUUzQTI0MjMwRjdGNEZGLzAvOENFQ0Q4OTk4NjgzNTk0RTkzQjk5NzJE OTUzOTdFMzYyM0NEQjdBOC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCg/+IMA0EAgAC MAcDBQAoA0eAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQl9TANBgkqhkiG9w0B AQsFAAOCAQEAoE5mqmv3k/pWwyKod+8JQr1CVQmFak4qiS2RqQBVUw7Ge59IuSdS cGWukrakV+Ey/sQVxUcUiHDJqSmjM7O5y2Tl3Uhd0UpuMHMjLJqAOZrH/OpFgozn TVH9n/TpL5coMpM8/sOUH6C9VMC70Ft+JNH+FoAkivWgjNf3p5BYyiA8LSkPgz7n ZJhGIpK2kzlovvsFt9f9l34Q17e1oVxruWj4hG5jRvE5SSCoTEixomp441mi5TUi wpdl7hpziTme7ruKtO+ZQQ2floRhGy3mbWRIC4NlfnFB/B1j3nE3Mn9pXGrby/Ll RnmPYuevyfnDK+bvIq8Vq5MR6zx8Yd1cdQ== -----END CERTIFICATE-----Generated at Mon Apr 28 05:59:37 2025 by rpki-client on console.sobornost.net