$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9CD403CF3D72D1F1D363DE2A143DCA2D6D0CCF4.cer File: B9CD403CF3D72D1F1D363DE2A143DCA2D6D0CCF4.cer (raw, json) Hash identifier: 0cQGKKNodIkWYXqZROFSpxGz6S+xxasj0nzObLwVzyY= Subject key identifier: B9:CD:40:3C:F3:D7:2D:1F:1D:36:3D:E2:A1:43:DC:A2:D6:D0:CC:F4 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 21AAA098E4EA814205558D965E58DBC59032E7F1 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/FCAD8EF080A5A0713CB1062E716ED3F1ED18CE9C963EAA7227C6CA9FBF49C1C5/0/B9CD403CF3D72D1F1D363DE2A143DCA2D6D0CCF4.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/FCAD8EF080A5A0713CB1062E716ED3F1ED18CE9C963EAA7227C6CA9FBF49C1C5/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 01:11:12 +0000 Certificate not after: Wed 04 Feb 2026 01:16:12 +0000 Subordinate resources: AS: 269838 IP: 45.186.140.0/23 IP: 2803:1f60::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 02 May 2025 06:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:aa:a0:98:e4:ea:81:42:05:55:8d:96:5e:58:db:c5:90:32:e7:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 01:11:12 2025 GMT Not After : Feb 4 01:16:12 2026 GMT Subject: CN=B9CD403CF3D72D1F1D363DE2A143DCA2D6D0CCF4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:dc:b9:41:f8:0c:b6:0c:83:b6:db:ea:ca:07: e6:d3:e4:a1:14:4a:58:ee:1c:c3:30:0c:f9:c2:11: 5c:19:83:5f:18:b9:ce:67:4a:02:1f:90:49:f7:f5: 4a:76:fc:f6:64:b8:54:e0:03:38:25:e7:50:32:93: 19:56:41:df:1e:34:7e:8a:e6:f2:a1:db:52:c8:fa: 14:24:5f:43:5f:2e:70:45:72:25:54:7c:65:8e:c0: 13:ac:2c:b6:09:26:a6:fd:34:f9:eb:0c:52:e2:bc: 75:2c:2a:71:d2:e0:0d:80:1e:a2:66:b5:78:f4:84: e0:b1:25:df:ac:07:d0:98:1e:88:2d:e4:d8:34:e4: c2:fb:ea:eb:40:3a:43:9c:6b:08:83:1c:89:25:af: 17:40:ef:d1:67:57:c8:7c:4e:96:9b:75:c2:4d:34: bc:e8:ed:7a:3e:6f:09:ce:a3:cf:7f:bb:e9:6e:76: cf:17:bf:71:a9:d6:77:53:ea:9a:6f:e3:02:ad:74: 8f:c1:5f:ff:ed:23:08:d2:71:7b:52:2f:33:cb:47: 0c:e3:80:6a:da:99:f1:b1:28:24:ee:44:dd:70:cb: 2c:c5:c7:15:88:69:fa:6d:54:d1:f3:b2:14:29:72: 1d:1f:cc:f8:7e:4e:bc:d0:34:57:9a:ea:b3:1b:73: ad:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B9:CD:40:3C:F3:D7:2D:1F:1D:36:3D:E2:A1:43:DC:A2:D6:D0:CC:F4 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/FCAD8EF080A5A0713CB1062E716ED3F1ED18CE9C963EAA7227C6CA9FBF49C1C5/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/FCAD8EF080A5A0713CB1062E716ED3F1ED18CE9C963EAA7227C6CA9FBF49C1C5/0/B9CD403CF3D72D1F1D363DE2A143DCA2D6D0CCF4.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.186.140.0/23 IPv6: 2803:1f60::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 269838 Signature Algorithm: sha256WithRSAEncryption 4e:02:a7:3a:61:90:52:c2:81:1a:ea:6b:a5:1c:dd:40:02:e5: e1:45:c1:21:f8:8f:0b:0a:3f:bd:3e:fb:9b:7f:f0:2b:dc:43: ee:03:a2:39:06:7d:f5:9a:70:3b:42:a9:5a:9a:2d:45:03:69: 12:dc:d8:8f:41:46:dd:79:4c:55:bd:0b:1e:35:8f:be:61:75: 83:7c:40:46:bc:7e:10:02:0c:2c:b9:0e:3a:21:11:2f:ae:f4: 42:00:ab:f0:24:ab:68:62:c7:e3:19:85:0a:ea:05:ae:42:a2: e4:73:a0:06:b0:98:91:7c:27:0f:c6:a1:bc:58:d6:6e:08:98: 66:1a:84:23:93:a8:ee:38:be:eb:e0:b0:77:00:8b:49:8d:ef: 51:72:2f:0a:42:4a:8a:a0:7d:69:7d:c7:65:48:cb:28:0b:83: 54:19:b3:23:38:1c:82:d4:2e:9d:d4:25:a4:16:58:26:ed:bc: a4:5a:1c:a8:65:77:2e:27:6b:5f:f1:9c:4d:15:90:0f:09:b9: f4:39:c6:c9:bc:fb:fe:94:e2:4e:80:27:d9:10:2d:df:88:86: 97:a0:ef:cf:f9:f3:3b:3a:e8:26:f0:cd:e9:33:bd:9e:a0:ff: cf:8d:d4:ce:e1:de:8b:f6:a9:07:40:d0:8e:6a:2b:63:a2:6d: 1a:a3:6e:69 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUIaqgmOTqgUIFVY2WXljbxZAy5/EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUwMTExMTJaFw0yNjAyMDQwMTE2MTJaMDMxMTAvBgNV BAMTKEI5Q0Q0MDNDRjNENzJEMUYxRDM2M0RFMkExNDNEQ0EyRDZEMENDRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa3LlB+Ay2DIO22+rKB+bT5KEU SljuHMMwDPnCEVwZg18Yuc5nSgIfkEn39Up2/PZkuFTgAzgl51AykxlWQd8eNH6K 5vKh21LI+hQkX0NfLnBFciVUfGWOwBOsLLYJJqb9NPnrDFLivHUsKnHS4A2AHqJm tXj0hOCxJd+sB9CYHogt5Ng05ML76utAOkOcawiDHIklrxdA79FnV8h8TpabdcJN NLzo7Xo+bwnOo89/u+luds8Xv3Gp1ndT6ppv4wKtdI/BX//tIwjScXtSLzPLRwzj gGramfGxKCTuRN1wyyzFxxWIafptVNHzshQpch0fzPh+TrzQNFea6rMbc62rAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS5zUA889ctHx02 PeKhQ9yi1tDM9DAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRkNBRDhFRjA4MEE1QTA3MTNDQjEwNjJF NzE2RUQzRjFFRDE4Q0U5Qzk2M0VBQTcyMjdDNkNBOUZCRjQ5QzFDNS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9GQ0FEOEVGMDgwQTVBMDcxM0NCMTA2MkU3MTZFRDNGMUVEMThDRTlDOTYz RUFBNzIyN0M2Q0E5RkJGNDlDMUM1LzAvQjlDRDQwM0NGM0Q3MkQxRjFEMzYzREUy QTE0M0RDQTJENkQwQ0NGNC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBLbqMMA0EAgAC MAcDBQAoAx9gMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQeDjANBgkqhkiG9w0B AQsFAAOCAQEATgKnOmGQUsKBGuprpRzdQALl4UXBIfiPCwo/vT77m3/wK9xD7gOi OQZ99ZpwO0KpWpotRQNpEtzYj0FG3XlMVb0LHjWPvmF1g3xARrx+EAIMLLkOOiER L670QgCr8CSraGLH4xmFCuoFrkKi5HOgBrCYkXwnD8ahvFjWbgiYZhqEI5Oo7ji+ 6+CwdwCLSY3vUXIvCkJKiqB9aX3HZUjLKAuDVBmzIzgcgtQundQlpBZYJu28pFoc qGV3LidrX/GcTRWQDwm59DnGybz7/pTiToAn2RAt34iGl6Dvz/nzOzroJvDN6TO9 nqD/z43UzuHei/apB0DQjmorY6JtGqNuaQ== -----END CERTIFICATE-----Generated at Mon Apr 28 05:59:41 2025 by rpki-client on console.sobornost.net