$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CF30813FA8F0F3E08E452C964FD82F7CA748290A.cer File: CF30813FA8F0F3E08E452C964FD82F7CA748290A.cer (raw, json) Hash identifier: Ja5+XwZ8myGMyHjIZFVbllVdIVRV6btC4CAVf+t/fl0= Subject key identifier: CF:30:81:3F:A8:F0:F3:E0:8E:45:2C:96:4F:D8:2F:7C:A7:48:29:0A Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 0ECD04C1F5EC14401CC13F8F5793EB5FD11C96CC Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/783F6C703079210FC9CE96CA7DC0C9985F528961BE92F13181792495747D9918/0/CF30813FA8F0F3E08E452C964FD82F7CA748290A.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/783F6C703079210FC9CE96CA7DC0C9985F528961BE92F13181792495747D9918/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 09:13:48 +0000 Certificate not after: Wed 04 Feb 2026 09:18:48 +0000 Subordinate resources: AS: 15125 IP: 200.89.0.0/19 IP: 2001:1300::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 02 May 2025 06:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:cd:04:c1:f5:ec:14:40:1c:c1:3f:8f:57:93:eb:5f:d1:1c:96:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 09:13:48 2025 GMT Not After : Feb 4 09:18:48 2026 GMT Subject: CN=CF30813FA8F0F3E08E452C964FD82F7CA748290A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c7:3a:f6:ad:06:37:b3:41:33:0a:65:a0:80: 22:32:a1:90:4b:82:e4:8e:ba:4a:51:97:3f:ac:db: 74:ae:32:08:07:6a:75:b2:0f:c7:9f:88:27:0d:65: da:62:a1:6f:18:a1:83:44:53:20:8e:a9:36:97:32: d2:e1:04:29:45:89:4c:c1:fe:28:07:72:e5:98:14: 52:70:91:a2:00:fc:fd:b2:6e:dd:67:9d:e0:a4:7c: 02:65:f5:79:59:41:78:71:59:4b:cb:66:1f:73:b5: 36:02:3e:de:42:10:c4:01:01:70:77:e2:30:fc:6d: 9d:95:02:a7:88:ca:23:99:36:9d:db:f0:5c:91:a9: 7e:20:5e:6b:5d:13:4c:7f:f2:96:91:47:4a:10:dd: b4:7f:d8:06:dc:48:6a:97:82:cd:81:52:a8:be:79: 3c:89:c0:0a:40:bf:25:07:b8:42:74:30:4e:cc:76: c4:36:97:b5:e5:06:e3:63:b9:c3:39:22:3b:32:d7: 10:3c:3d:34:fa:e7:2c:d0:43:f0:91:81:2b:33:c8: fa:74:c2:cd:15:c4:eb:ef:61:58:f4:88:d7:44:9d: 01:69:d5:22:71:7c:59:b6:76:88:f1:4f:d7:36:e1: de:20:1b:f6:6b:63:96:36:4e:09:28:fe:14:4b:74: b9:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CF:30:81:3F:A8:F0:F3:E0:8E:45:2C:96:4F:D8:2F:7C:A7:48:29:0A X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/783F6C703079210FC9CE96CA7DC0C9985F528961BE92F13181792495747D9918/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/783F6C703079210FC9CE96CA7DC0C9985F528961BE92F13181792495747D9918/0/CF30813FA8F0F3E08E452C964FD82F7CA748290A.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.89.0.0/19 IPv6: 2001:1300::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 15125 Signature Algorithm: sha256WithRSAEncryption 14:d0:ac:2e:37:27:5e:86:0b:91:0e:3a:8d:d8:ad:f2:30:f7: 15:d7:7f:61:2d:0a:6d:31:52:f8:d0:2a:60:a9:2f:d7:69:5d: 49:ae:45:4e:e0:77:6e:a8:c8:18:c3:28:95:d4:7d:5d:51:dd: c6:46:bb:56:85:1a:4b:03:9b:e6:ab:06:2d:f6:44:f2:32:10: a7:13:b5:9f:fb:4b:3e:8a:f1:8a:62:60:b9:2f:c9:aa:f3:31: 9a:51:db:8c:df:31:f5:c3:45:59:0f:c0:85:29:e5:42:aa:b1: ff:b1:dd:9e:bf:20:9f:7a:f1:cf:8a:42:67:b3:45:54:f6:4f: 33:43:c9:74:23:a9:01:96:c5:f2:3b:24:cd:6f:61:3f:41:0f: a8:49:cd:46:2a:43:d9:10:06:f5:43:98:fd:be:0e:d2:62:25: cc:6e:e4:08:ae:35:4f:dc:1f:66:15:7c:ad:52:44:36:ea:53: c2:e4:10:45:c3:7b:08:d0:9f:19:f3:61:a8:51:6e:dc:6a:ef: 91:9e:fc:6b:0a:9c:17:7d:5d:80:56:b9:8a:f7:a1:7e:d7:aa: a2:11:b2:0c:58:0d:e8:60:88:d4:52:08:c8:3a:da:61:d6:28: e5:c5:a5:c7:e3:6c:20:5e:3f:7c:ee:f8:61:0b:f3:22:cf:6f: a9:dc:cd:04 -----BEGIN CERTIFICATE----- MIIGpDCCBYygAwIBAgIUDs0EwfXsFEAcwT+PV5PrX9EclswwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUwOTEzNDhaFw0yNjAyMDQwOTE4NDhaMDMxMTAvBgNV BAMTKENGMzA4MTNGQThGMEYzRTA4RTQ1MkM5NjRGRDgyRjdDQTc0ODI5MEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClxzr2rQY3s0EzCmWggCIyoZBL guSOukpRlz+s23SuMggHanWyD8efiCcNZdpioW8YoYNEUyCOqTaXMtLhBClFiUzB /igHcuWYFFJwkaIA/P2ybt1nneCkfAJl9XlZQXhxWUvLZh9ztTYCPt5CEMQBAXB3 4jD8bZ2VAqeIyiOZNp3b8FyRqX4gXmtdE0x/8paRR0oQ3bR/2AbcSGqXgs2BUqi+ eTyJwApAvyUHuEJ0ME7MdsQ2l7XlBuNjucM5Ijsy1xA8PTT65yzQQ/CRgSszyPp0 ws0VxOvvYVj0iNdEnQFp1SJxfFm2dojxT9c24d4gG/ZrY5Y2Tgko/hRLdLltAgMB AAGjggOuMIIDqjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTPMIE/qPDz4I5F LJZP2C98p0gpCjAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNzgzRjZDNzAzMDc5MjEwRkM5Q0U5NkNB N0RDMEM5OTg1RjUyODk2MUJFOTJGMTMxODE3OTI0OTU3NDdEOTkxOC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy83ODNGNkM3MDMwNzkyMTBGQzlDRTk2Q0E3REMwQzk5ODVGNTI4OTYxQkU5 MkYxMzE4MTc5MjQ5NTc0N0Q5OTE4LzAvQ0YzMDgxM0ZBOEYwRjNFMDhFNDUyQzk2 NEZEODJGN0NBNzQ4MjkwQS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQFyFkAMA0EAgAC MAcDBQAgARMAMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAjsVMA0GCSqGSIb3DQEB CwUAA4IBAQAU0KwuNydehguRDjqN2K3yMPcV139hLQptMVL40CpgqS/XaV1JrkVO 4HduqMgYwyiV1H1dUd3GRrtWhRpLA5vmqwYt9kTyMhCnE7Wf+0s+ivGKYmC5L8mq 8zGaUduM3zH1w0VZD8CFKeVCqrH/sd2evyCfevHPikJns0VU9k8zQ8l0I6kBlsXy OyTNb2E/QQ+oSc1GKkPZEAb1Q5j9vg7SYiXMbuQIrjVP3B9mFXytUkQ26lPC5BBF w3sI0J8Z82GoUW7cau+RnvxrCpwXfV2AVrmK96F+16qiEbIMWA3oYIjUUgjIOtph 1ijlxaXH42wgXj987vhhC/Miz2+p3M0E -----END CERTIFICATE-----Generated at Mon Apr 28 05:59:42 2025 by rpki-client on console.sobornost.net