$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F9D596B5F4DD5B3F4DC80916A137A68D104D408.cer File: 8F9D596B5F4DD5B3F4DC80916A137A68D104D408.cer (raw, json) Hash identifier: 5tdPZq0qm8YecQwnxOguTKtASJy3SfQ4J4e2LMlZ96g= Subject key identifier: 8F:9D:59:6B:5F:4D:D5:B3:F4:DC:80:91:6A:13:7A:68:D1:04:D4:08 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 20C42666158F61575F64865C43FA587208970BF2 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/244C18D5CEF38E6C71D35E4A8BBEFB1C5120FFAB6B5AFD278F5F89DB12D24056/0/8F9D596B5F4DD5B3F4DC80916A137A68D104D408.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/244C18D5CEF38E6C71D35E4A8BBEFB1C5120FFAB6B5AFD278F5F89DB12D24056/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 19 Feb 2025 10:37:27 +0000 Certificate not after: Wed 18 Feb 2026 10:42:27 +0000 Subordinate resources: AS: 269913 IP: 200.123.228.0/22 IP: 2803:dce0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 02 May 2025 06:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:c4:26:66:15:8f:61:57:5f:64:86:5c:43:fa:58:72:08:97:0b:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 19 10:37:27 2025 GMT Not After : Feb 18 10:42:27 2026 GMT Subject: CN=8F9D596B5F4DD5B3F4DC80916A137A68D104D408 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d7:c1:03:3c:06:2e:80:4b:d7:af:f6:cd:27: ea:47:09:36:dd:f6:a4:52:23:d0:65:9c:f2:9d:f2: 0d:f0:8e:f8:bb:cc:1b:9f:36:be:0d:14:58:42:68: 2b:c7:b3:1c:ef:06:65:6a:59:bf:50:be:99:f1:a7: 9a:b4:ad:56:73:3c:f9:56:1c:04:83:c5:2d:1e:cb: 05:8f:a7:25:5e:ea:45:6a:2d:ad:99:f2:6e:fb:c9: 6a:fa:7c:8f:7c:bc:9b:1b:15:43:3b:c7:da:48:46: e9:0f:6c:8c:fc:14:af:af:f6:d1:f1:b2:7b:66:58: d0:d3:e6:3e:b9:67:c2:03:4c:cb:01:09:bf:68:ea: 09:49:bd:a3:87:07:fa:50:dc:b2:14:04:38:6f:22: 43:41:24:03:fb:17:43:b1:35:a8:6b:a9:48:67:76: c4:6f:45:03:03:3f:f7:85:02:55:c9:2a:ee:49:58: 0d:ab:41:f9:e4:e0:95:2d:6e:32:05:9c:79:ea:90: 4e:a7:31:01:7a:c5:d0:fa:97:6b:12:3e:73:0b:d2: 85:4c:24:77:23:3b:66:d2:bf:6c:cb:87:27:db:03: 09:84:e3:ee:31:3c:4c:db:37:70:b7:cb:dc:05:03: 1a:d2:e8:5f:28:d7:eb:47:c8:b3:34:a5:ad:56:30: 30:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8F:9D:59:6B:5F:4D:D5:B3:F4:DC:80:91:6A:13:7A:68:D1:04:D4:08 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/244C18D5CEF38E6C71D35E4A8BBEFB1C5120FFAB6B5AFD278F5F89DB12D24056/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/244C18D5CEF38E6C71D35E4A8BBEFB1C5120FFAB6B5AFD278F5F89DB12D24056/0/8F9D596B5F4DD5B3F4DC80916A137A68D104D408.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.123.228.0/22 IPv6: 2803:dce0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 269913 Signature Algorithm: sha256WithRSAEncryption c6:61:9a:49:30:72:e8:12:17:b6:cd:93:c3:ba:01:3e:6b:1d: 0f:e5:4d:9d:74:4e:2f:3b:80:87:c8:56:17:d5:76:0f:9f:18: 61:f0:ed:71:2f:b2:78:e3:18:85:fd:26:e6:bc:30:88:8a:a6: d8:8e:6d:27:2e:37:5e:23:0c:e1:74:6d:32:e1:08:c1:39:99: 49:92:20:2d:46:63:a9:e7:be:16:55:71:35:a3:00:b2:5a:c9: 92:f2:44:45:c3:6e:1d:a0:d8:f8:bb:23:ee:34:3f:56:f6:4b: e1:6d:24:c6:57:d0:a7:f7:97:46:dd:2a:76:c3:61:b7:53:50: 4e:14:95:f2:7e:33:89:c2:3a:d6:7c:45:c3:55:04:8d:67:30: 0e:fe:36:e2:94:53:c4:67:d7:32:35:11:df:cc:22:65:64:da: dd:20:6c:53:9a:5a:bb:b6:cc:e6:40:38:17:86:fb:93:9f:d3: 1e:81:23:b8:7d:79:83:e1:60:22:12:b1:e4:56:16:1e:50:f5: 9c:98:ec:f2:ca:15:52:9e:bb:d2:cd:77:75:3a:0e:fe:08:42: 7a:1d:5c:1e:17:42:cc:85:06:cd:8f:ac:3f:95:a8:b9:5f:8d: 09:16:31:58:48:fe:0d:69:43:c3:c5:4b:9a:2f:a0:0f:51:c4: 05:f3:d4:e1 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUIMQmZhWPYVdfZIZcQ/pYcgiXC/IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMTkxMDM3MjdaFw0yNjAyMTgxMDQyMjdaMDMxMTAvBgNV BAMTKDhGOUQ1OTZCNUY0REQ1QjNGNERDODA5MTZBMTM3QTY4RDEwNEQ0MDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+18EDPAYugEvXr/bNJ+pHCTbd 9qRSI9BlnPKd8g3wjvi7zBufNr4NFFhCaCvHsxzvBmVqWb9Qvpnxp5q0rVZzPPlW HASDxS0eywWPpyVe6kVqLa2Z8m77yWr6fI98vJsbFUM7x9pIRukPbIz8FK+v9tHx sntmWNDT5j65Z8IDTMsBCb9o6glJvaOHB/pQ3LIUBDhvIkNBJAP7F0OxNahrqUhn dsRvRQMDP/eFAlXJKu5JWA2rQfnk4JUtbjIFnHnqkE6nMQF6xdD6l2sSPnML0oVM JHcjO2bSv2zLhyfbAwmE4+4xPEzbN3C3y9wFAxrS6F8o1+tHyLM0pa1WMDB7AgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSPnVlrX03Vs/Tc gJFqE3po0QTUCDAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMjQ0QzE4RDVDRUYzOEU2QzcxRDM1RTRB OEJCRUZCMUM1MTIwRkZBQjZCNUFGRDI3OEY1Rjg5REIxMkQyNDA1Ni8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8yNDRDMThENUNFRjM4RTZDNzFEMzVFNEE4QkJFRkIxQzUxMjBGRkFCNkI1 QUZEMjc4RjVGODlEQjEyRDI0MDU2LzAvOEY5RDU5NkI1RjRERDVCM0Y0REM4MDkx NkExMzdBNjhEMTA0RDQwOC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCyHvkMA0EAgAC MAcDBQAoA9zgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQeWTANBgkqhkiG9w0B AQsFAAOCAQEAxmGaSTBy6BIXts2Tw7oBPmsdD+VNnXROLzuAh8hWF9V2D58YYfDt cS+yeOMYhf0m5rwwiIqm2I5tJy43XiMM4XRtMuEIwTmZSZIgLUZjqee+FlVxNaMA slrJkvJERcNuHaDY+Lsj7jQ/VvZL4W0kxlfQp/eXRt0qdsNht1NQThSV8n4zicI6 1nxFw1UEjWcwDv424pRTxGfXMjUR38wiZWTa3SBsU5pau7bM5kA4F4b7k5/THoEj uH15g+FgIhKx5FYWHlD1nJjs8soVUp670s13dToO/ghCeh1cHhdCzIUGzY+sP5Wo uV+NCRYxWEj+DWlDw8VLmi+gD1HEBfPU4Q== -----END CERTIFICATE-----Generated at Mon Apr 28 05:59:37 2025 by rpki-client on console.sobornost.net