$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.cer File: C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.cer (raw, json) Hash identifier: N/HCbIpPZnuGdFT03RqXsESjbr9izVW1nV/PRwdV6uo= Subject key identifier: C4:E4:73:26:7C:7E:D8:DB:FC:CD:20:9A:C0:9A:1C:A7:B8:4A:7C:39 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 5360ADDCA5ECE8C4237F188DC3B6679D0FB563B2 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 06:42:10 +0000 Certificate not after: Wed 04 Feb 2026 06:47:10 +0000 Subordinate resources: AS: 27976 IP: 168.121.116.0/22 IP: 168.196.252.0/22 IP: 179.63.208.0/21 IP: 200.63.120.0/21 IP: 2803:700::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 02 May 2025 06:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:60:ad:dc:a5:ec:e8:c4:23:7f:18:8d:c3:b6:67:9d:0f:b5:63:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 06:42:10 2025 GMT Not After : Feb 4 06:47:10 2026 GMT Subject: CN=C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:bb:f0:1f:69:ae:93:8b:b4:1d:2d:e1:f4:6e: b9:94:4b:a9:fd:4b:54:a5:49:d5:ba:75:8f:94:78: f5:f4:ea:1c:b3:f2:0b:1e:25:51:e2:aa:4c:5a:f0: 18:ab:69:c2:a3:29:69:21:55:5d:6c:dc:cd:5e:b8: 58:6b:75:ea:53:38:38:7f:1d:f1:2e:e5:72:91:ab: 81:9e:40:65:b5:ce:1f:1c:5d:bc:03:ef:32:e1:fb: 07:b9:90:aa:05:02:a8:f0:a8:e5:cf:47:21:09:69: d9:3d:0b:4d:60:f9:43:e6:a8:86:b5:6e:03:bd:2f: 76:58:d9:4e:f1:23:40:82:b7:b9:1d:eb:8d:66:f5: d9:5d:fb:bf:3a:fe:7a:49:29:fd:67:ca:cd:2f:c1: dd:23:ef:3c:f4:1c:0b:63:86:d7:01:7e:31:b6:ca: df:f7:8d:26:9d:ba:3f:ad:ea:65:fc:4c:63:2f:34: ef:b3:4c:db:86:46:6f:ca:21:72:dc:12:a0:57:38: 0e:e4:a5:4a:60:a3:d8:cc:c0:31:82:f8:0a:2a:77: 9b:e7:5b:57:2c:e7:45:17:bd:31:1d:f1:a9:c2:23: a1:12:c1:2f:3e:09:ad:8a:7e:d7:8c:8c:dc:e4:fd: 43:10:ae:0f:48:7e:58:88:8d:be:64:70:14:23:0e: 11:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C4:E4:73:26:7C:7E:D8:DB:FC:CD:20:9A:C0:9A:1C:A7:B8:4A:7C:39 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.121.116.0/22 168.196.252.0/22 179.63.208.0/21 200.63.120.0/21 IPv6: 2803:700::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 27976 Signature Algorithm: sha256WithRSAEncryption af:e1:69:9b:52:45:2d:fe:1a:e8:a9:40:27:8e:ee:ce:0f:05: c1:74:b4:da:4f:02:6c:fb:dd:33:7e:a4:4c:9c:6c:9c:c8:2c: 36:01:a6:28:2a:13:1b:b4:bf:c9:bd:6d:e2:61:4f:61:4e:68: 92:44:ad:15:2b:a1:bd:0a:55:05:36:1e:e7:89:e2:69:0b:26: 9e:fa:11:b5:e7:cb:3c:8f:65:19:c7:86:f6:c6:05:7f:76:36: c5:03:6e:80:0a:69:c5:2f:74:9d:ba:dc:4b:a0:19:a8:0c:86: 3f:24:7e:a6:40:58:a2:b9:67:f0:b5:f5:37:52:2c:5b:8c:ec: f5:d2:de:e3:91:7b:0c:f1:33:61:df:2d:ea:e9:af:97:94:77: 44:de:c0:a9:52:47:a0:b3:a8:f6:b0:55:bf:a5:59:73:a5:aa: 3f:39:a4:42:35:0a:04:75:f8:f2:c6:ec:ff:88:b4:79:82:08: 6e:51:8c:e9:ce:16:55:fb:66:23:8d:6a:90:9f:96:2a:ae:76: d8:66:01:b8:15:7e:67:bf:82:1c:57:ec:26:98:8c:2e:c8:b2: 22:6f:7e:f2:ad:b0:09:7b:38:7e:05:c8:18:52:80:d0:93:82: 52:55:f9:05:1d:77:9f:44:eb:a9:da:00:6f:76:ba:d4:d1:df: d0:5d:6c:b2 -----BEGIN CERTIFICATE----- MIIGtjCCBZ6gAwIBAgIUU2Ct3KXs6MQjfxiNw7ZnnQ+1Y7IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUwNjQyMTBaFw0yNjAyMDQwNjQ3MTBaMDMxMTAvBgNV BAMTKEM0RTQ3MzI2N0M3RUQ4REJGQ0NEMjA5QUMwOUExQ0E3Qjg0QTdDMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4u/Afaa6Ti7QdLeH0brmUS6n9 S1SlSdW6dY+UePX06hyz8gseJVHiqkxa8BiracKjKWkhVV1s3M1euFhrdepTODh/ HfEu5XKRq4GeQGW1zh8cXbwD7zLh+we5kKoFAqjwqOXPRyEJadk9C01g+UPmqIa1 bgO9L3ZY2U7xI0CCt7kd641m9dld+786/npJKf1nys0vwd0j7zz0HAtjhtcBfjG2 yt/3jSaduj+t6mX8TGMvNO+zTNuGRm/KIXLcEqBXOA7kpUpgo9jMwDGC+Aoqd5vn W1cs50UXvTEd8anCI6ESwS8+Ca2KfteMjNzk/UMQrg9IfliIjb5kcBQjDhEpAgMB AAGjggPAMIIDvDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTE5HMmfH7Y2/zN IJrAmhynuEp8OTAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMUMyRDlCMUU2MTZCRkM2MDMwRjNEQTFE NkYyMEI2QjQxNDMxOUE4Q0RENDRFRTY0MjBCNkZGRTcwRDY1QzVCOS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8xQzJEOUIxRTYxNkJGQzYwMzBGM0RBMUQ2RjIwQjZCNDE0MzE5QThDREQ0 NEVFNjQyMEI2RkZFNzBENjVDNUI5LzAvQzRFNDczMjY3QzdFRDhEQkZDQ0QyMDlB QzA5QTFDQTdCODRBN0MzOS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQCqHl0AwQCqMT8 AwQDsz/QAwQDyD94MA0EAgACMAcDBQAoAwcAMBkGCCsGAQUFBwEIAQH/BAowCKAG MAQCAm1IMA0GCSqGSIb3DQEBCwUAA4IBAQCv4WmbUkUt/hroqUAnju7ODwXBdLTa TwJs+90zfqRMnGycyCw2AaYoKhMbtL/JvW3iYU9hTmiSRK0VK6G9ClUFNh7nieJp Cyae+hG158s8j2UZx4b2xgV/djbFA26ACmnFL3SdutxLoBmoDIY/JH6mQFiiuWfw tfU3UixbjOz10t7jkXsM8TNh3y3q6a+XlHdE3sCpUkegs6j2sFW/pVlzpao/OaRC NQoEdfjyxuz/iLR5gghuUYzpzhZV+2YjjWqQn5YqrnbYZgG4FX5nv4IcV+wmmIwu yLIib37yrbAJezh+BcgYUoDQk4JSVfkFHXefROup2gBvdrrU0d/QXWyy -----END CERTIFICATE-----Generated at Mon Apr 28 05:59:41 2025 by rpki-client on console.sobornost.net