$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A06BAE214A0B6811D36AB18B3D4882EF55013A91.cer File: A06BAE214A0B6811D36AB18B3D4882EF55013A91.cer (raw, json) Hash identifier: mQYAWFMTKQ0PUnKZj0/rIZtJFOtahQ/giJuK2bSEVHA= Subject key identifier: A0:6B:AE:21:4A:0B:68:11:D3:6A:B1:8B:3D:48:82:EF:55:01:3A:91 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 1E7174BAEC48B4728D8DF5A87C6FA17DB9BA6771 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/4F51C08B4D5191C7F019574926433E112688CEA92166AEDAD2EFED0EB8641266/0/A06BAE214A0B6811D36AB18B3D4882EF55013A91.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/4F51C08B4D5191C7F019574926433E112688CEA92166AEDAD2EFED0EB8641266/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 16:14:00 +0000 Certificate not after: Wed 04 Feb 2026 16:19:00 +0000 Subordinate resources: AS: 266720 AS: 272821 IP: 45.229.252.0/22 IP: 2801:1d4::/36 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 02 May 2025 06:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:71:74:ba:ec:48:b4:72:8d:8d:f5:a8:7c:6f:a1:7d:b9:ba:67:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 16:14:00 2025 GMT Not After : Feb 4 16:19:00 2026 GMT Subject: CN=A06BAE214A0B6811D36AB18B3D4882EF55013A91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c7:f2:91:3b:42:3c:f3:f3:75:c0:94:2d:c9: d9:15:6f:09:2d:95:b4:aa:75:3d:bc:69:98:84:de: 22:3b:8a:b0:d4:98:23:97:b6:a6:c2:b6:4e:6a:a0: 41:5d:b1:5e:89:61:97:1b:f7:68:4e:72:43:cc:f3: 73:91:8b:da:69:87:ca:6d:fd:2e:a0:a4:98:e7:ba: 17:8c:5f:1f:64:dd:c8:c9:f5:73:0e:c5:e6:08:6c: 48:92:00:f2:26:51:c5:b2:9a:92:30:69:55:f0:75: ce:b6:eb:66:b2:4c:a7:60:cb:43:fb:e3:10:70:99: 5e:57:64:df:59:16:a2:60:f1:56:69:4f:16:31:7b: 3f:60:15:63:30:c7:fd:0b:5d:f7:7d:5b:77:55:a6: e6:b7:85:e5:0a:2a:cd:c8:d5:a3:e6:be:02:00:d5: 47:d5:cd:0b:26:0b:ee:e6:6e:bf:5e:ca:a7:3e:35: 7f:6f:35:36:03:17:1c:56:16:bd:b9:dd:b0:1e:0e: 12:e8:e7:e5:07:b0:ce:d1:71:4e:7e:92:e5:e9:d4: 93:3a:01:3d:64:72:2f:5d:84:7a:a0:57:8c:3f:74: ac:44:b0:1d:4d:58:1d:c5:48:92:13:13:6f:b4:82: 03:db:f7:7b:b8:2e:bb:42:b4:c0:af:54:b3:d7:82: 8d:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A0:6B:AE:21:4A:0B:68:11:D3:6A:B1:8B:3D:48:82:EF:55:01:3A:91 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/4F51C08B4D5191C7F019574926433E112688CEA92166AEDAD2EFED0EB8641266/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/4F51C08B4D5191C7F019574926433E112688CEA92166AEDAD2EFED0EB8641266/0/A06BAE214A0B6811D36AB18B3D4882EF55013A91.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.229.252.0/22 IPv6: 2801:1d4::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266720 272821 Signature Algorithm: sha256WithRSAEncryption 74:81:13:86:5f:19:7e:7e:72:1b:b4:f7:50:2b:1a:a7:0b:8e: a2:26:0f:a3:b0:2b:03:33:e2:f5:a0:ff:e7:f7:92:33:2a:4a: af:6c:cb:4e:2a:fc:42:7a:2e:9a:59:7e:06:c9:90:a4:16:bf: 38:a1:34:82:a8:08:ee:6a:ee:f6:5e:a1:e5:6c:17:cc:ee:40: ee:41:e0:8d:d5:91:89:74:53:1d:6a:ab:40:a4:bc:4d:de:a1: 76:e1:74:b7:10:27:03:0f:a9:c4:c2:53:90:c7:6d:0b:fb:1a: b3:ee:90:3a:4a:07:27:64:32:2a:26:65:8c:07:b3:57:e5:f9: 2b:35:e5:5d:5b:6c:da:b2:19:98:de:95:6f:1d:a8:da:01:a2: fb:0d:40:62:74:49:3a:1e:9f:c4:f0:34:cb:04:52:19:43:7f: 7d:de:5e:d8:4d:a8:4d:33:51:32:c4:5c:37:c4:1e:95:52:a5: 2a:b6:c5:d0:a7:c8:f4:e8:8f:67:47:17:07:5d:06:8c:06:e5: 8a:81:90:f4:ec:55:d2:f2:e8:22:7b:14:c6:0d:05:9f:ab:49: c0:29:86:39:8d:e5:b0:6c:71:71:ff:01:ce:72:1b:24:62:5a: 00:f8:7c:fa:5b:37:76:99:27:4d:ec:75:72:7b:dd:f1:b2:83: 2f:3f:5a:05 -----BEGIN CERTIFICATE----- MIIGqzCCBZOgAwIBAgIUHnF0uuxItHKNjfWofG+hfbm6Z3EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUxNjE0MDBaFw0yNjAyMDQxNjE5MDBaMDMxMTAvBgNV BAMTKEEwNkJBRTIxNEEwQjY4MTFEMzZBQjE4QjNENDg4MkVGNTUwMTNBOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2x/KRO0I88/N1wJQtydkVbwkt lbSqdT28aZiE3iI7irDUmCOXtqbCtk5qoEFdsV6JYZcb92hOckPM83ORi9pph8pt /S6gpJjnuheMXx9k3cjJ9XMOxeYIbEiSAPImUcWympIwaVXwdc6262ayTKdgy0P7 4xBwmV5XZN9ZFqJg8VZpTxYxez9gFWMwx/0LXfd9W3dVpua3heUKKs3I1aPmvgIA 1UfVzQsmC+7mbr9eyqc+NX9vNTYDFxxWFr253bAeDhLo5+UHsM7RcU5+kuXp1JM6 AT1kci9dhHqgV4w/dKxEsB1NWB3FSJITE2+0ggPb93u4LrtCtMCvVLPXgo1BAgMB AAGjggO1MIIDsTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSga64hSgtoEdNq sYs9SILvVQE6kTAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNEY1MUMwOEI0RDUxOTFDN0YwMTk1NzQ5 MjY0MzNFMTEyNjg4Q0VBOTIxNjZBRURBRDJFRkVEMEVCODY0MTI2Ni8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80RjUxQzA4QjRENTE5MUM3RjAxOTU3NDkyNjQzM0UxMTI2ODhDRUE5MjE2 NkFFREFEMkVGRUQwRUI4NjQxMjY2LzAvQTA2QkFFMjE0QTBCNjgxMUQzNkFCMThC M0Q0ODgyRUY1NTAxM0E5MS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQCLeX8MA4EAgAC MAgDBgQoAQHUADAfBggrBgEFBQcBCAEB/wQQMA6gDDAKAgMEEeACAwQptTANBgkq hkiG9w0BAQsFAAOCAQEAdIEThl8Zfn5yG7T3UCsapwuOoiYPo7ArAzPi9aD/5/eS MypKr2zLTir8Qnoumll+BsmQpBa/OKE0gqgI7mru9l6h5WwXzO5A7kHgjdWRiXRT HWqrQKS8Td6hduF0txAnAw+pxMJTkMdtC/sas+6QOkoHJ2QyKiZljAezV+X5KzXl XVts2rIZmN6Vbx2o2gGi+w1AYnRJOh6fxPA0ywRSGUN/fd5e2E2oTTNRMsRcN8Qe lVKlKrbF0KfI9OiPZ0cXB10GjAblioGQ9OxV0vLoInsUxg0Fn6tJwCmGOY3lsGxx cf8BznIbJGJaAPh8+ls3dpknTex1cnvd8bKDLz9aBQ== -----END CERTIFICATE-----Generated at Mon Apr 28 05:59:39 2025 by rpki-client on console.sobornost.net