$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B4C3626E6F6928DC3655F1ED05EB7827A4FBB9.cer File: D8B4C3626E6F6928DC3655F1ED05EB7827A4FBB9.cer (raw, json) Hash identifier: y96nckhLptiz8S4dHY5hEGtj2IKJsQSV1A9hJ1Y+K7I= Subject key identifier: D8:B4:C3:62:6E:6F:69:28:DC:36:55:F1:ED:05:EB:78:27:A4:FB:B9 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 379C20F8F761D13BDF0798D292D9574D370A4E8E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/F207CCF97F44CDD65B7B130389FDBC9E32213F8E9E8671D59BAD81080264A6D1/0/D8B4C3626E6F6928DC3655F1ED05EB7827A4FBB9.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/F207CCF97F44CDD65B7B130389FDBC9E32213F8E9E8671D59BAD81080264A6D1/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 08:52:40 +0000 Certificate not after: Wed 04 Feb 2026 08:57:40 +0000 Subordinate resources: AS: 264690 IP: 200.10.156.0/23 IP: 2801:16:9000::/48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 02 May 2025 06:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:9c:20:f8:f7:61:d1:3b:df:07:98:d2:92:d9:57:4d:37:0a:4e:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 08:52:40 2025 GMT Not After : Feb 4 08:57:40 2026 GMT Subject: CN=D8B4C3626E6F6928DC3655F1ED05EB7827A4FBB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:81:af:c3:b2:65:aa:f1:18:ff:89:64:71:42: 83:7f:6f:91:8d:8c:8c:ad:a8:5e:ff:ab:0d:80:d7: f9:a5:18:b0:f5:48:66:cd:56:34:c6:fd:c5:ed:e4: 8d:83:de:11:f4:ed:55:d4:88:ff:f5:e8:10:1f:fc: eb:e5:34:83:e9:9c:09:04:b8:5d:49:8d:38:11:66: a2:06:6a:0d:74:a4:ad:1c:d9:bd:09:bb:13:2f:56: 56:e1:de:a4:32:0c:3a:96:64:1a:cd:b0:7e:47:12: 29:c6:91:d4:a0:60:a0:29:e2:9f:f7:6e:c2:5d:63: 56:fe:34:7e:fe:2c:68:c2:40:3c:0d:5e:a3:b4:40: dd:60:5e:18:86:c2:72:b0:d8:66:ac:78:ac:7a:02: 9c:7d:ea:95:aa:6c:8b:a5:90:bf:16:ef:4d:2e:75: 12:94:c6:4e:92:9a:a5:e3:6a:a6:96:91:ec:8d:c7: 9a:66:f1:5c:68:54:e1:60:a4:f8:ce:2c:e5:e3:9a: ba:1c:da:cb:14:48:6f:76:b5:fd:61:43:4e:54:08: 62:63:02:ea:dd:38:82:80:71:f6:8a:e6:ff:c3:c4: 72:54:83:00:d9:60:79:8c:51:8e:92:b8:6b:4c:dd: f9:6b:6e:2c:20:18:df:8a:f0:98:f6:d3:f3:53:9f: 63:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D8:B4:C3:62:6E:6F:69:28:DC:36:55:F1:ED:05:EB:78:27:A4:FB:B9 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/F207CCF97F44CDD65B7B130389FDBC9E32213F8E9E8671D59BAD81080264A6D1/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/F207CCF97F44CDD65B7B130389FDBC9E32213F8E9E8671D59BAD81080264A6D1/0/D8B4C3626E6F6928DC3655F1ED05EB7827A4FBB9.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.10.156.0/23 IPv6: 2801:16:9000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264690 Signature Algorithm: sha256WithRSAEncryption af:e0:40:19:34:68:02:c3:e4:23:24:b8:f7:c1:e0:b0:fe:f1: 82:4f:9f:48:de:48:2f:4b:42:46:ff:54:98:7b:74:67:6d:a5: 6c:3c:0c:a3:2f:e8:5f:ab:f8:3e:0b:8d:0f:84:8d:d0:69:c2: d1:aa:ed:33:04:f3:75:00:6e:fa:b6:3b:2d:d4:fd:01:32:25: 22:10:40:29:7a:ad:23:44:f3:fe:22:6a:bd:11:0d:76:66:a0: 11:27:f1:47:ac:8b:b3:09:d9:a6:48:dc:03:20:ea:82:3e:39: 5d:76:48:f2:46:93:b0:ef:b5:db:ee:09:70:75:77:5f:53:51: 6f:6a:29:b7:49:e8:14:40:b2:eb:23:36:1b:e1:9a:34:6a:b0: 19:c1:1b:2e:3d:1c:01:51:2a:b6:23:35:2d:7e:2e:71:0e:45: 7e:85:9c:58:38:a6:1d:bf:c5:0e:11:ce:1d:04:e9:4c:2d:4f: f8:a8:1f:a7:54:7d:b2:ac:51:c5:7d:54:0d:f6:af:61:3c:e0: 0c:3d:4c:ad:6d:78:38:ad:b1:0d:f1:64:ea:9a:b9:06:1a:ff: 46:14:74:03:bd:2d:52:b3:59:16:03:08:a9:9a:30:27:a5:cf: 22:89:b2:f0:0e:b4:58:bc:01:27:07:c5:97:68:66:7d:c2:87: 0b:60:e0:f5 -----BEGIN CERTIFICATE----- MIIGpzCCBY+gAwIBAgIUN5wg+Pdh0TvfB5jSktlXTTcKTo4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUwODUyNDBaFw0yNjAyMDQwODU3NDBaMDMxMTAvBgNV BAMTKEQ4QjRDMzYyNkU2RjY5MjhEQzM2NTVGMUVEMDVFQjc4MjdBNEZCQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnga/DsmWq8Rj/iWRxQoN/b5GN jIytqF7/qw2A1/mlGLD1SGbNVjTG/cXt5I2D3hH07VXUiP/16BAf/OvlNIPpnAkE uF1JjTgRZqIGag10pK0c2b0JuxMvVlbh3qQyDDqWZBrNsH5HEinGkdSgYKAp4p/3 bsJdY1b+NH7+LGjCQDwNXqO0QN1gXhiGwnKw2GaseKx6Apx96pWqbIulkL8W700u dRKUxk6SmqXjaqaWkeyNx5pm8VxoVOFgpPjOLOXjmroc2ssUSG92tf1hQ05UCGJj AurdOIKAcfaK5v/DxHJUgwDZYHmMUY6SuGtM3flrbiwgGN+K8Jj20/NTn2PTAgMB AAGjggOxMIIDrTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTYtMNibm9pKNw2 VfHtBet4J6T7uTAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRjIwN0NDRjk3RjQ0Q0RENjVCN0IxMzAz ODlGREJDOUUzMjIxM0Y4RTlFODY3MUQ1OUJBRDgxMDgwMjY0QTZEMS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9GMjA3Q0NGOTdGNDRDREQ2NUI3QjEzMDM4OUZEQkM5RTMyMjEzRjhFOUU4 NjcxRDU5QkFEODEwODAyNjRBNkQxLzAvRDhCNEMzNjI2RTZGNjkyOERDMzY1NUYx RUQwNUVCNzgyN0E0RkJCOS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQByAqcMA8EAgAC MAkDBwAoAQAWkAAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAnyMA0GCSqGSIb3 DQEBCwUAA4IBAQCv4EAZNGgCw+QjJLj3weCw/vGCT59I3kgvS0JG/1SYe3RnbaVs PAyjL+hfq/g+C40PhI3QacLRqu0zBPN1AG76tjst1P0BMiUiEEApeq0jRPP+Imq9 EQ12ZqARJ/FHrIuzCdmmSNwDIOqCPjlddkjyRpOw77Xb7glwdXdfU1Fvaim3SegU QLLrIzYb4Zo0arAZwRsuPRwBUSq2IzUtfi5xDkV+hZxYOKYdv8UOEc4dBOlMLU/4 qB+nVH2yrFHFfVQN9q9hPOAMPUytbXg4rbEN8WTqmrkGGv9GFHQDvS1Ss1kWAwip mjAnpc8iibLwDrRYvAEnB8WXaGZ9wocLYOD1 -----END CERTIFICATE-----Generated at Mon Apr 28 05:59:43 2025 by rpki-client on console.sobornost.net