$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer File: 96F6D055361134166E9B66FB555FF27DCEDBF85D.cer (raw, json) Hash identifier: KNMShOWqzlGBLN5RrAOQututfl2+3Kmf84qgSnaDP+U= Subject key identifier: 96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 7F9FC4D3E552D8AF4828005CC999E7659AA571E4 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 04 Feb 2025 23:22:50 +0000 Certificate not after: Tue 03 Feb 2026 23:27:50 +0000 Subordinate resources: AS: 19169 AS: 27947 AS: 52257 AS: 264788 IP: 168.197.188.0/22 IP: 181.39.0.0/16 IP: 181.198.0.0 -- 181.199.127.255 IP: 186.3.0.0/16 IP: 186.4.128.0 -- 186.5.127.255 IP: 186.101.0.0/16 IP: 190.95.128.0/17 IP: 200.93.192.0 -- 200.93.239.255 IP: 200.110.64.0/19 IP: 201.218.0.0/18 IP: 2800:2a0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 02 May 2025 06:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:9f:c4:d3:e5:52:d8:af:48:28:00:5c:c9:99:e7:65:9a:a5:71:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 4 23:22:50 2025 GMT Not After : Feb 3 23:27:50 2026 GMT Subject: CN=96F6D055361134166E9B66FB555FF27DCEDBF85D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:d3:5e:ad:c7:1d:7c:f5:bd:0b:c2:48:5a:bf: b9:9a:d3:33:d1:74:59:68:fb:0a:8b:86:01:a0:f1: 72:34:b3:d5:6d:ad:6f:44:08:2e:36:35:d4:cb:50: af:36:1c:ca:09:83:eb:62:d2:79:96:0f:51:51:04: 1c:cd:cb:c4:5e:94:88:be:4e:59:87:9a:f7:9d:48: e3:6b:a4:eb:a1:d6:27:bb:fa:61:7a:5a:6b:a9:9b: db:2b:1e:17:4a:6c:80:91:85:2a:1e:de:9d:78:1d: 8a:5b:ca:d3:45:d6:96:dd:08:5a:b6:76:ed:85:7c: cc:57:30:60:c7:c9:32:1d:be:6b:8c:7c:a8:ef:06: 3d:f7:d1:29:d1:5d:95:bf:02:aa:d5:85:4e:1a:7f: b7:e8:48:d7:a0:e2:f4:a7:07:43:91:14:1f:11:8b: 4d:f1:de:40:94:78:06:88:f3:13:6f:b9:9a:2f:eb: fc:be:69:97:9f:74:aa:41:cc:84:8f:29:9d:05:49: ab:80:18:e3:bc:0d:e8:04:aa:03:1d:c2:f9:99:21: 35:1d:7f:fa:90:e0:a4:be:a5:ce:9c:f5:c6:f2:fb: ed:c0:83:3d:e9:c0:7d:5f:13:d7:19:33:e8:53:77: 28:b3:01:58:60:b1:f7:e0:72:e8:18:0f:9f:45:a9: b9:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.197.188.0/22 181.39.0.0/16 181.198.0.0-181.199.127.255 186.3.0.0/16 186.4.128.0-186.5.127.255 186.101.0.0/16 190.95.128.0/17 200.93.192.0-200.93.239.255 200.110.64.0/19 201.218.0.0/18 IPv6: 2800:2a0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 19169 27947 52257 264788 Signature Algorithm: sha256WithRSAEncryption 86:ef:1a:62:ab:d1:fc:f9:db:f3:9b:f2:d4:6e:30:74:8d:5b: bf:72:87:90:f7:e0:24:d0:d3:b7:dd:da:2a:7e:b0:c5:4e:43: 6b:a5:4e:18:aa:08:2b:36:a0:61:06:3c:1e:bc:06:d5:1a:ab: 72:1b:81:56:9c:0f:d8:eb:64:b4:59:95:43:e7:50:08:60:46: 0e:e6:da:08:cf:40:ae:e0:54:76:09:6a:cb:6a:fd:38:f3:0c: 2f:a2:d5:9b:1c:98:07:17:33:38:57:71:41:a0:27:0c:65:57: fd:55:a3:2e:8f:6e:68:6d:ae:5f:8b:a1:5d:16:2f:50:6c:9a: ab:04:95:79:8a:96:10:b7:82:63:6b:e1:fd:88:d2:35:5f:fa: c0:45:7d:e6:23:f0:b0:25:fd:ea:4b:1b:d7:84:ee:d6:50:51: 45:da:5c:eb:ed:c4:a1:8e:e4:cb:3e:bf:94:3a:19:61:3d:49: 82:e1:9d:01:46:ef:49:13:99:18:dc:87:d1:17:3a:5d:64:36: c0:a5:16:c2:1a:19:02:d3:13:a9:55:58:07:59:1f:24:05:b3: 99:d4:fc:fe:08:47:60:bf:58:84:d4:60:96:f8:cd:39:e7:fc: 43:b4:f6:56:9e:2e:30:99:9b:1d:8a:bf:67:2d:ba:b9:59:3c: a5:db:01:7e -----BEGIN CERTIFICATE----- MIIG/DCCBeSgAwIBAgIUf5/E0+VS2K9IKABcyZnnZZqlceQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDQyMzIyNTBaFw0yNjAyMDMyMzI3NTBaMDMxMTAvBgNV BAMTKDk2RjZEMDU1MzYxMTM0MTY2RTlCNjZGQjU1NUZGMjdEQ0VEQkY4NUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJ016txx189b0Lwkhav7ma0zPR dFlo+wqLhgGg8XI0s9VtrW9ECC42NdTLUK82HMoJg+ti0nmWD1FRBBzNy8RelIi+ TlmHmvedSONrpOuh1ie7+mF6Wmupm9srHhdKbICRhSoe3p14HYpbytNF1pbdCFq2 du2FfMxXMGDHyTIdvmuMfKjvBj330SnRXZW/AqrVhU4af7foSNeg4vSnB0ORFB8R i03x3kCUeAaI8xNvuZov6/y+aZefdKpBzISPKZ0FSauAGOO8DegEqgMdwvmZITUd f/qQ4KS+pc6c9cby++3Agz3pwH1fE9cZM+hTdyizAVhgsffgcugYD59FqbkjAgMB AAGjggQGMIIEAjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSW9tBVNhE0Fm6b ZvtVX/J9ztv4XTAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRjc5NTlBMkRCMTI5QUI2ODE4QjlGMkNE RkNBNTQwMzkwMzk3MDhDQjg0NzcyNEJCMjM0MjM1NzY4NjJENEE3Ri8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9GNzk1OUEyREIxMjlBQjY4MThCOUYyQ0RGQ0E1NDAzOTAzOTcwOENCODQ3 NzI0QkIyMzQyMzU3Njg2MkQ0QTdGLzAvOTZGNkQwNTUzNjExMzQxNjZFOUI2NkZC NTU1RkYyN0RDRURCRjg1RC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMHgGCCsGAQUFBwEHAQH/BGkwZzBWBAIAATBQAwQCqMW8AwMAtScw CwMDAbXGAwQHtccAAwMAugMwDAMEB7oEgAMEB7oFAAMDALplAwQHvl+AMAwDBAbI XcADBATIXeADBAXIbkADBAbJ2gAwDQQCAAIwBwMFACgAAqAwJwYIKwYBBQUHAQgB Af8EGDAWoBQwEgICSuECAm0rAgMAzCECAwQKVDANBgkqhkiG9w0BAQsFAAOCAQEA hu8aYqvR/Pnb85vy1G4wdI1bv3KHkPfgJNDTt93aKn6wxU5Da6VOGKoIKzagYQY8 HrwG1RqrchuBVpwP2OtktFmVQ+dQCGBGDubaCM9AruBUdglqy2r9OPMML6LVmxyY BxczOFdxQaAnDGVX/VWjLo9uaG2uX4uhXRYvUGyaqwSVeYqWELeCY2vh/YjSNV/6 wEV95iPwsCX96ksb14Tu1lBRRdpc6+3EoY7kyz6/lDoZYT1JguGdAUbvSROZGNyH 0Rc6XWQ2wKUWwhoZAtMTqVVYB1kfJAWzmdT8/ghHYL9YhNRglvjNOef8Q7T2Vp4u MJmbHYq/Zy26uVk8pdsBfg== -----END CERTIFICATE-----Generated at Mon Apr 28 05:59:38 2025 by rpki-client on console.sobornost.net