$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/958A517F1B57F15CAC71A4ABE5A03A21F805ED14.cer File: 958A517F1B57F15CAC71A4ABE5A03A21F805ED14.cer (raw, json) Hash identifier: DtzHYsNHKfFd/svR27CbRS50b/iBoWtcYa4XCZYOG3M= Subject key identifier: 95:8A:51:7F:1B:57:F1:5C:AC:71:A4:AB:E5:A0:3A:21:F8:05:ED:14 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 420233EB1D0B6489E8518DE8DA3ACCC8E1CBB186 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/FE4F4B537633F057E5D7A50F05241B24ECB6101701C1CD692F3E7A681925BE62/0/958A517F1B57F15CAC71A4ABE5A03A21F805ED14.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/FE4F4B537633F057E5D7A50F05241B24ECB6101701C1CD692F3E7A681925BE62/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 10 Dec 2024 23:20:01 +0000 Certificate not after: Tue 09 Dec 2025 23:25:01 +0000 Subordinate resources: AS: 273969 IP: 2803:10d0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 02 May 2025 06:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:02:33:eb:1d:0b:64:89:e8:51:8d:e8:da:3a:cc:c8:e1:cb:b1:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Dec 10 23:20:01 2024 GMT Not After : Dec 9 23:25:01 2025 GMT Subject: CN=958A517F1B57F15CAC71A4ABE5A03A21F805ED14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:50:19:c6:4a:09:64:56:4a:94:41:2c:4a:1b: be:de:6c:85:bc:d0:92:d0:d3:36:d1:87:d9:6d:c0: fd:87:df:9d:f2:3d:d8:21:0b:09:ba:75:3d:e0:13: 7f:c1:b9:7c:e6:04:77:92:f4:de:f6:85:b1:a2:e1: ba:bf:f2:68:b8:4f:2e:c1:ca:90:f0:d4:42:05:72: e6:64:59:b0:18:13:33:e6:bb:e7:19:ee:ee:88:29: 4f:5c:2b:e9:3e:9a:ab:81:c5:e9:d6:4b:bb:22:94: db:9a:cb:60:31:27:68:bf:26:70:f0:40:41:d0:0a: 9c:82:63:2e:bb:bd:65:26:12:de:00:59:ff:04:4f: 8d:8f:7a:f3:b2:9f:2c:d2:d2:a3:4f:1f:62:da:c1: 8e:e4:27:9d:35:6b:2b:67:86:5f:11:d8:75:70:96: 48:09:21:ef:e4:dc:77:b5:82:00:31:fe:68:c2:61: fb:68:4f:cf:bc:79:df:d0:f6:58:32:86:92:64:0b: 30:d1:73:97:d7:0f:82:0a:b3:ec:fb:95:fb:f9:a5: 09:3c:67:23:eb:00:06:a6:c7:de:5b:0c:41:a8:60: 53:13:70:7b:26:3e:f8:90:b2:68:fe:fc:13:90:d2: 53:10:9f:35:ce:94:2a:7c:81:a6:f8:01:cc:5b:c4: ed:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 95:8A:51:7F:1B:57:F1:5C:AC:71:A4:AB:E5:A0:3A:21:F8:05:ED:14 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/FE4F4B537633F057E5D7A50F05241B24ECB6101701C1CD692F3E7A681925BE62/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/FE4F4B537633F057E5D7A50F05241B24ECB6101701C1CD692F3E7A681925BE62/0/958A517F1B57F15CAC71A4ABE5A03A21F805ED14.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:10d0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273969 Signature Algorithm: sha256WithRSAEncryption 7c:3a:f0:db:d5:ba:ae:bb:6e:5f:72:88:9a:a7:c8:07:f6:14: 3d:1b:f8:d9:7c:eb:cb:ac:c6:b5:1a:9e:6d:6f:25:08:98:51: d9:3e:86:0a:89:b0:32:82:35:2a:3b:4d:35:df:46:29:97:bc: 5f:2b:c6:76:77:17:3f:05:cd:c1:a6:e9:90:07:97:ea:80:6c: 51:00:c2:37:c9:e3:97:ea:b0:f6:e7:9d:9f:95:f6:d2:5d:71: ef:3f:44:c5:2e:dd:77:ac:d7:f2:7c:8e:10:22:fd:67:38:0b: 41:e3:16:71:a5:c5:07:4b:13:73:21:15:fc:f0:50:bb:eb:a6: 8b:86:33:ee:f7:b1:8c:37:fe:ad:10:7d:e8:6a:39:a6:18:0e: 4b:26:5f:ff:c9:e6:5b:9f:cc:5a:42:ef:31:60:28:a8:8a:a8: b2:90:34:62:0e:a4:60:a2:c0:d7:bd:97:7f:6e:83:cd:2b:a0: 8e:84:60:b9:93:6c:4a:7c:28:51:02:03:9c:92:4a:c3:99:eb: cd:e1:be:e2:aa:5a:23:77:ad:73:d9:fa:77:07:b2:d6:52:e0: 1f:35:f6:90:48:94:00:e8:4b:ee:06:91:8d:01:d0:20:cd:df: e6:d2:6f:66:f3:f8:3d:a5:97:43:84:7d:ac:55:f9:f2:fa:00: 93:5c:0a:3f -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUQgIz6x0LZInoUY3o2jrMyOHLsYYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDEyMTAyMzIwMDFaFw0yNTEyMDkyMzI1MDFaMDMxMTAvBgNV BAMTKDk1OEE1MTdGMUI1N0YxNUNBQzcxQTRBQkU1QTAzQTIxRjgwNUVEMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0UBnGSglkVkqUQSxKG77ebIW8 0JLQ0zbRh9ltwP2H353yPdghCwm6dT3gE3/BuXzmBHeS9N72hbGi4bq/8mi4Ty7B ypDw1EIFcuZkWbAYEzPmu+cZ7u6IKU9cK+k+mquBxenWS7silNuay2AxJ2i/JnDw QEHQCpyCYy67vWUmEt4AWf8ET42PevOynyzS0qNPH2LawY7kJ501aytnhl8R2HVw lkgJIe/k3He1ggAx/mjCYftoT8+8ed/Q9lgyhpJkCzDRc5fXD4IKs+z7lfv5pQk8 ZyPrAAamx95bDEGoYFMTcHsmPviQsmj+/BOQ0lMQnzXOlCp8gab4AcxbxO21AgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSVilF/G1fxXKxx pKvloDoh+AXtFDAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRkU0RjRCNTM3NjMzRjA1N0U1RDdBNTBG MDUyNDFCMjRFQ0I2MTAxNzAxQzFDRDY5MkYzRTdBNjgxOTI1QkU2Mi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9GRTRGNEI1Mzc2MzNGMDU3RTVEN0E1MEYwNTI0MUIyNEVDQjYxMDE3MDFD MUNENjkyRjNFN0E2ODE5MjVCRTYyLzAvOTU4QTUxN0YxQjU3RjE1Q0FDNzFBNEFC RTVBMDNBMjFGODA1RUQxNC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAMQ0DAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMELjEwDQYJKoZIhvcNAQELBQADggEBAHw68NvV uq67bl9yiJqnyAf2FD0b+Nl868usxrUanm1vJQiYUdk+hgqJsDKCNSo7TTXfRimX vF8rxnZ3Fz8FzcGm6ZAHl+qAbFEAwjfJ45fqsPbnnZ+V9tJdce8/RMUu3Xes1/J8 jhAi/Wc4C0HjFnGlxQdLE3MhFfzwULvrpouGM+73sYw3/q0QfehqOaYYDksmX//J 5lufzFpC7zFgKKiKqLKQNGIOpGCiwNe9l39ug80roI6EYLmTbEp8KFECA5ySSsOZ 683hvuKqWiN3rXPZ+ncHstZS4B819pBIlADoS+4GkY0B0CDN3+bSb2bz+D2ll0OE faxV+fL6AJNcCj8= -----END CERTIFICATE-----Generated at Mon Apr 28 05:59:38 2025 by rpki-client on console.sobornost.net