$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B57B438CFF3F02CD31FFA267CFD03FC2140E1C17.cer File: B57B438CFF3F02CD31FFA267CFD03FC2140E1C17.cer (raw, json) Hash identifier: +NAZWUoKm0EA9nUuL8opH8IhoEBTLnENd4Da4Ch8LLc= Subject key identifier: B5:7B:43:8C:FF:3F:02:CD:31:FF:A2:67:CF:D0:3F:C2:14:0E:1C:17 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 28FD9C03E0EB22792686AC94C75A9276459C5990 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/B6B5E4684BEE1F7763249A49CBAB846BE8CF475056C8D564BFF46B3996938AB6/0/B57B438CFF3F02CD31FFA267CFD03FC2140E1C17.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/B6B5E4684BEE1F7763249A49CBAB846BE8CF475056C8D564BFF46B3996938AB6/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 17:35:19 +0000 Certificate not after: Wed 04 Feb 2026 17:40:19 +0000 Subordinate resources: AS: 263700 IP: 132.255.68.0/22 IP: 138.121.168.0/22 IP: 170.239.152.0/23 IP: 2803:db80::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 02 May 2025 06:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:fd:9c:03:e0:eb:22:79:26:86:ac:94:c7:5a:92:76:45:9c:59:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 17:35:19 2025 GMT Not After : Feb 4 17:40:19 2026 GMT Subject: CN=B57B438CFF3F02CD31FFA267CFD03FC2140E1C17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:20:71:60:fa:d1:83:00:1f:ef:bd:4d:ff:a3: a0:96:d8:e0:bf:b1:6d:4d:49:bf:47:32:db:d7:b9: 7e:4b:db:75:84:f4:a2:39:b4:12:e0:b7:e0:33:7c: 77:b9:6c:e8:50:f8:24:b0:32:07:22:09:23:d5:ec: ad:6a:f3:00:bd:39:87:c9:c7:7e:6c:9a:fd:0c:04: 38:68:81:25:9a:d8:a1:3c:44:7a:97:30:ee:0a:34: 81:5a:d3:50:7d:31:1f:9e:76:bb:50:91:89:00:0b: ba:3d:7d:69:7e:67:30:e9:a3:89:43:26:49:20:ef: b0:46:10:49:c7:06:5e:af:23:55:1a:a0:6a:d9:c9: 86:45:9b:b4:be:dd:14:02:5c:da:02:80:98:77:e1: 91:71:68:0e:f1:36:dd:3d:92:fd:6e:a4:f6:df:4e: d5:83:db:0d:85:7b:fb:b1:90:d4:e1:98:87:fd:70: 12:d5:17:67:9d:92:70:72:cf:00:0c:c1:57:d2:e8: 02:9a:fe:01:b0:ef:25:d1:f5:5f:b7:ca:6a:14:1b: 88:22:33:e7:16:e5:3f:da:3c:a0:a9:f1:b5:d8:0b: 3d:0c:50:0a:7d:6b:82:c6:20:79:c4:ff:ab:e0:27: 72:8b:4e:34:00:60:c5:93:3b:58:07:57:55:f4:6b: 78:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B5:7B:43:8C:FF:3F:02:CD:31:FF:A2:67:CF:D0:3F:C2:14:0E:1C:17 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/B6B5E4684BEE1F7763249A49CBAB846BE8CF475056C8D564BFF46B3996938AB6/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/B6B5E4684BEE1F7763249A49CBAB846BE8CF475056C8D564BFF46B3996938AB6/0/B57B438CFF3F02CD31FFA267CFD03FC2140E1C17.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 132.255.68.0/22 138.121.168.0/22 170.239.152.0/23 IPv6: 2803:db80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263700 Signature Algorithm: sha256WithRSAEncryption 56:f0:11:72:3a:8e:23:f9:40:00:be:49:17:97:d3:ba:53:37: ed:03:bc:cd:ec:12:1e:9c:58:27:e2:60:03:b5:09:df:db:f7: 8d:64:19:b3:f4:44:7c:0b:b2:be:2d:8a:e0:0f:6f:74:9e:4a: 38:34:53:06:71:a2:43:94:97:37:cf:7b:80:23:da:a5:80:cf: 21:ea:8c:ce:8b:db:0c:43:bd:0a:83:37:7f:fd:5c:f5:a5:e2: 73:27:dd:5d:f7:1d:9e:48:3a:35:da:8f:53:26:ee:53:d6:30: 7b:ca:09:32:6e:35:f6:ff:6c:6c:97:31:85:08:3c:63:51:88: ca:63:a3:49:4b:18:5b:c0:4a:48:4d:f8:ae:10:6f:7d:8b:cf: 4a:44:fa:d7:55:9b:d9:8e:29:5b:4f:87:90:73:3c:2c:b2:80: d7:ef:37:26:ea:ad:57:5f:d4:fe:1a:bd:a2:82:3d:6d:02:9b: 57:22:ce:4b:97:b3:a4:03:78:07:f3:59:c1:ad:06:71:ae:78: 3a:20:32:33:cd:2c:15:01:46:1a:0c:be:80:9f:c6:24:61:1a: 29:6b:ec:0f:12:aa:df:51:e2:5a:90:a6:87:64:68:24:d3:6e: 53:84:f3:86:b3:2d:6d:b7:a0:f8:fb:54:17:53:22:87:97:dd: 3d:7f:5b:48 -----BEGIN CERTIFICATE----- MIIGsTCCBZmgAwIBAgIUKP2cA+DrInkmhqyUx1qSdkWcWZAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUxNzM1MTlaFw0yNjAyMDQxNzQwMTlaMDMxMTAvBgNV BAMTKEI1N0I0MzhDRkYzRjAyQ0QzMUZGQTI2N0NGRDAzRkMyMTQwRTFDMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSIHFg+tGDAB/vvU3/o6CW2OC/ sW1NSb9HMtvXuX5L23WE9KI5tBLgt+AzfHe5bOhQ+CSwMgciCSPV7K1q8wC9OYfJ x35smv0MBDhogSWa2KE8RHqXMO4KNIFa01B9MR+edrtQkYkAC7o9fWl+ZzDpo4lD Jkkg77BGEEnHBl6vI1UaoGrZyYZFm7S+3RQCXNoCgJh34ZFxaA7xNt09kv1upPbf TtWD2w2Fe/uxkNThmIf9cBLVF2edknByzwAMwVfS6AKa/gGw7yXR9V+3ymoUG4gi M+cW5T/aPKCp8bXYCz0MUAp9a4LGIHnE/6vgJ3KLTjQAYMWTO1gHV1X0a3jvAgMB AAGjggO7MIIDtzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS1e0OM/z8CzTH/ omfP0D/CFA4cFzAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQjZCNUU0Njg0QkVFMUY3NzYzMjQ5QTQ5 Q0JBQjg0NkJFOENGNDc1MDU2QzhENTY0QkZGNDZCMzk5NjkzOEFCNi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9CNkI1RTQ2ODRCRUUxRjc3NjMyNDlBNDlDQkFCODQ2QkU4Q0Y0NzUwNTZD OEQ1NjRCRkY0NkIzOTk2OTM4QUI2LzAvQjU3QjQzOENGRjNGMDJDRDMxRkZBMjY3 Q0ZEMDNGQzIxNDBFMUMxNy5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQChP9EAwQCinmo AwQBqu+YMA0EAgACMAcDBQAoA9uAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQG FDANBgkqhkiG9w0BAQsFAAOCAQEAVvARcjqOI/lAAL5JF5fTulM37QO8zewSHpxY J+JgA7UJ39v3jWQZs/REfAuyvi2K4A9vdJ5KODRTBnGiQ5SXN897gCPapYDPIeqM zovbDEO9CoM3f/1c9aXicyfdXfcdnkg6NdqPUybuU9Ywe8oJMm419v9sbJcxhQg8 Y1GIymOjSUsYW8BKSE34rhBvfYvPSkT611Wb2Y4pW0+HkHM8LLKA1+83JuqtV1/U /hq9ooI9bQKbVyLOS5ezpAN4B/NZwa0Gca54OiAyM80sFQFGGgy+gJ/GJGEaKWvs DxKq31HiWpCmh2RoJNNuU4TzhrMtbbeg+PtUF1Mih5fdPX9bSA== -----END CERTIFICATE-----Generated at Mon Apr 28 05:59:40 2025 by rpki-client on console.sobornost.net