$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A4EAE61F1B8952AFAD5693A1FC168A752D346DF1.cer File: A4EAE61F1B8952AFAD5693A1FC168A752D346DF1.cer (raw, json) Hash identifier: MxOp69gJkpjs36ossDCn86WUfRAWAqPmuHRWxn5Tsf0= Subject key identifier: A4:EA:E6:1F:1B:89:52:AF:AD:56:93:A1:FC:16:8A:75:2D:34:6D:F1 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 1746A745A5D2B5D10C6BA4C20AD8F3587EF1E098 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/FAD551EA17A5757AB68EFB2A65B5C86C48572DB8D1C268B850B06A9BCBDA3E1F/0/A4EAE61F1B8952AFAD5693A1FC168A752D346DF1.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/FAD551EA17A5757AB68EFB2A65B5C86C48572DB8D1C268B850B06A9BCBDA3E1F/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 13:17:29 +0000 Certificate not after: Wed 04 Feb 2026 13:22:29 +0000 Subordinate resources: AS: 273074 IP: 45.239.107.0/24 IP: 200.33.28.0/24 IP: 2803:2f90::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 02 May 2025 06:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:46:a7:45:a5:d2:b5:d1:0c:6b:a4:c2:0a:d8:f3:58:7e:f1:e0:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 13:17:29 2025 GMT Not After : Feb 4 13:22:29 2026 GMT Subject: CN=A4EAE61F1B8952AFAD5693A1FC168A752D346DF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ec:f7:c0:25:d5:34:41:f2:bc:18:a3:9c:f3: 97:3c:8e:90:20:62:25:a6:ed:70:cc:ec:46:38:a0: 68:25:bc:e0:ef:bf:aa:8a:c2:12:94:8a:00:00:73: b1:d7:84:d3:f3:4a:8c:bc:db:d9:22:e3:c1:4c:f0: b8:bb:6d:98:f6:11:59:50:f6:0d:76:1b:41:52:8a: d5:d8:33:ba:04:4c:64:82:63:7b:e3:89:1a:0e:de: 14:cd:e7:5d:01:e1:6d:f2:a4:ca:5c:d9:95:87:d5: 73:af:09:e5:36:a4:5b:e7:8d:88:9f:32:98:73:e3: 15:18:76:1f:86:11:5b:08:9a:16:b3:5e:c0:f3:bc: dc:fa:1a:1a:48:07:39:4c:28:7f:31:5d:8c:66:e4: 8b:81:9e:6a:c9:f1:4c:34:f7:c1:88:ff:65:ca:ef: 9c:32:77:71:db:e6:7f:d8:89:c2:0c:5d:fc:56:eb: 27:0d:3d:7d:83:cd:9f:ef:52:ed:43:fa:34:27:de: d4:00:e7:5e:1c:53:13:6e:f8:ed:7a:0a:30:83:9d: 5b:21:8e:97:1b:6e:3b:5d:1e:01:f5:f6:7a:4f:71: 7e:81:a4:52:88:de:56:f4:83:ba:f4:28:a8:7b:1c: 0a:c6:40:c9:e8:74:60:15:d7:35:48:88:9c:8b:25: 3a:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A4:EA:E6:1F:1B:89:52:AF:AD:56:93:A1:FC:16:8A:75:2D:34:6D:F1 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/FAD551EA17A5757AB68EFB2A65B5C86C48572DB8D1C268B850B06A9BCBDA3E1F/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/FAD551EA17A5757AB68EFB2A65B5C86C48572DB8D1C268B850B06A9BCBDA3E1F/0/A4EAE61F1B8952AFAD5693A1FC168A752D346DF1.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.239.107.0/24 200.33.28.0/24 IPv6: 2803:2f90::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273074 Signature Algorithm: sha256WithRSAEncryption 8c:fe:f6:0e:08:d1:da:70:39:b6:d1:51:4b:e7:a0:17:28:6d: 79:9c:97:1a:51:f3:b6:01:a4:75:79:b8:1d:38:5e:39:39:01: 6d:95:a2:72:0f:cb:2f:27:f1:bf:fd:2e:61:c8:40:2d:96:75: 8c:69:1a:f9:b7:cc:cb:1b:8c:88:8b:7f:08:ef:45:c9:a2:57: 43:b3:3b:3b:d7:44:78:3b:63:ed:96:1a:44:8e:1f:0b:e4:38: 67:4d:22:7e:f1:cf:c4:c6:41:e6:ba:5a:d6:75:40:12:88:77: 5b:06:c6:12:31:d3:74:73:ba:6e:fe:62:94:8a:48:7b:b2:da: 1c:52:b6:d9:a7:d7:dd:da:a9:f5:c5:41:b8:36:d6:94:6b:da: 66:40:c7:b4:35:42:a1:0f:89:6b:e2:31:f1:43:ec:9a:ce:1a: a5:8a:b3:58:1d:bd:03:57:7b:09:15:95:e9:dd:82:87:0d:50: e6:cb:b5:6e:7f:79:c9:52:48:8b:ac:31:e4:b1:b3:6c:69:d8: 53:7e:87:74:28:b7:22:f9:5b:f1:2d:fa:39:4d:a7:4b:f9:e9: d6:8a:05:7a:02:fb:8e:67:5c:82:40:ac:69:00:a2:60:41:c8: 2f:05:49:75:a4:f5:43:34:f2:d9:78:21:64:c6:53:85:6f:06: 40:85:f0:11 -----BEGIN CERTIFICATE----- MIIGqzCCBZOgAwIBAgIUF0anRaXStdEMa6TCCtjzWH7x4JgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUxMzE3MjlaFw0yNjAyMDQxMzIyMjlaMDMxMTAvBgNV BAMTKEE0RUFFNjFGMUI4OTUyQUZBRDU2OTNBMUZDMTY4QTc1MkQzNDZERjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv7PfAJdU0QfK8GKOc85c8jpAg YiWm7XDM7EY4oGglvODvv6qKwhKUigAAc7HXhNPzSoy829ki48FM8Li7bZj2EVlQ 9g12G0FSitXYM7oETGSCY3vjiRoO3hTN510B4W3ypMpc2ZWH1XOvCeU2pFvnjYif Mphz4xUYdh+GEVsImhazXsDzvNz6GhpIBzlMKH8xXYxm5IuBnmrJ8Uw098GI/2XK 75wyd3Hb5n/YicIMXfxW6ycNPX2DzZ/vUu1D+jQn3tQA514cUxNu+O16CjCDnVsh jpcbbjtdHgH19npPcX6BpFKI3lb0g7r0KKh7HArGQMnodGAV1zVIiJyLJTrPAgMB AAGjggO1MIIDsTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSk6uYfG4lSr61W k6H8Fop1LTRt8TAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRkFENTUxRUExN0E1NzU3QUI2OEVGQjJB NjVCNUM4NkM0ODU3MkRCOEQxQzI2OEI4NTBCMDZBOUJDQkRBM0UxRi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9GQUQ1NTFFQTE3QTU3NTdBQjY4RUZCMkE2NUI1Qzg2QzQ4NTcyREI4RDFD MjY4Qjg1MEIwNkE5QkNCREEzRTFGLzAvQTRFQUU2MUYxQjg5NTJBRkFENTY5M0Ex RkMxNjhBNzUyRDM0NkRGMS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQALe9rAwQAyCEc MA0EAgACMAcDBQAoAy+QMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQqsjANBgkq hkiG9w0BAQsFAAOCAQEAjP72DgjR2nA5ttFRS+egFyhteZyXGlHztgGkdXm4HThe OTkBbZWicg/LLyfxv/0uYchALZZ1jGka+bfMyxuMiIt/CO9FyaJXQ7M7O9dEeDtj 7ZYaRI4fC+Q4Z00ifvHPxMZB5rpa1nVAEoh3WwbGEjHTdHO6bv5ilIpIe7LaHFK2 2afX3dqp9cVBuDbWlGvaZkDHtDVCoQ+Ja+Ix8UPsms4apYqzWB29A1d7CRWV6d2C hw1Q5su1bn95yVJIi6wx5LGzbGnYU36HdCi3Ivlb8S36OU2nS/np1ooFegL7jmdc gkCsaQCiYEHILwVJdaT1QzTy2XghZMZThW8GQIXwEQ== -----END CERTIFICATE-----Generated at Mon Apr 28 05:59:39 2025 by rpki-client on console.sobornost.net