$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DF7BA6674A1C6C4D2CC18E914BC6A3AD8A01755B.cer File: DF7BA6674A1C6C4D2CC18E914BC6A3AD8A01755B.cer (raw, json) Hash identifier: 53W/OGBdYymoeRIlvMiV1ylsEcUL+nIa9wmFK+dCths= Subject key identifier: DF:7B:A6:67:4A:1C:6C:4D:2C:C1:8E:91:4B:C6:A3:AD:8A:01:75:5B Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 08482FFAA4B0E57EAE4561B722BC245729088095 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/64B0A40F11547A1880CB4465F57270B879E0ACAB83F42F6C2674A4166EF87ACC/0/DF7BA6674A1C6C4D2CC18E914BC6A3AD8A01755B.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/64B0A40F11547A1880CB4465F57270B879E0ACAB83F42F6C2674A4166EF87ACC/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 02 Apr 2025 16:38:03 +0000 Certificate not after: Wed 01 Apr 2026 16:43:03 +0000 Subordinate resources: AS: 273235 IP: 2803:fe50::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 02 May 2025 06:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:48:2f:fa:a4:b0:e5:7e:ae:45:61:b7:22:bc:24:57:29:08:80:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Apr 2 16:38:03 2025 GMT Not After : Apr 1 16:43:03 2026 GMT Subject: CN=DF7BA6674A1C6C4D2CC18E914BC6A3AD8A01755B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:8d:2b:e7:7b:14:92:4c:63:7b:e7:23:61:54: 85:ae:9e:25:ee:e8:e0:cf:2b:9b:4e:d8:fd:66:66: c3:11:09:01:c2:d6:a0:94:1d:9e:b2:d9:49:d2:bf: e7:e7:4a:da:b8:4a:fd:f5:ae:6e:ba:32:0c:a0:56: 74:16:03:25:b7:0b:05:3b:a4:1d:40:69:34:09:a9: 89:16:e8:ce:ea:34:4b:d4:17:55:2d:75:b5:82:a9: b4:2b:16:56:c7:26:38:db:55:2c:a5:fe:6a:e7:af: 98:8c:5f:eb:b8:cb:d2:c4:7b:1a:7f:66:26:24:41: 7b:94:60:9f:e6:5e:1a:f5:82:5f:5f:15:0a:88:ff: 30:3c:9d:1a:44:5a:48:ab:70:ad:12:3b:5f:5b:a5: cb:af:53:a0:62:fa:c4:23:57:fb:93:21:b5:aa:fb: 44:30:ce:fc:3c:71:f5:10:18:f4:99:1d:9f:78:ef: 71:10:25:d0:ae:d9:1f:21:4d:d0:06:7a:41:d4:57: 3d:7b:cb:06:69:11:16:c0:d4:26:70:2e:3f:d5:ff: 5d:00:9f:f7:98:51:4b:f3:4b:a6:52:64:70:ee:e5: 24:8c:21:f3:2b:11:1b:b9:44:28:a9:11:80:b1:50: da:16:4c:fe:5d:45:e7:af:3d:7f:e1:41:68:15:fc: b8:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DF:7B:A6:67:4A:1C:6C:4D:2C:C1:8E:91:4B:C6:A3:AD:8A:01:75:5B X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/64B0A40F11547A1880CB4465F57270B879E0ACAB83F42F6C2674A4166EF87ACC/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/64B0A40F11547A1880CB4465F57270B879E0ACAB83F42F6C2674A4166EF87ACC/0/DF7BA6674A1C6C4D2CC18E914BC6A3AD8A01755B.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:fe50::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273235 Signature Algorithm: sha256WithRSAEncryption ab:f2:6c:7f:10:c0:1a:ba:dd:1d:64:8c:11:65:7c:42:0e:f5: e1:db:2d:c6:17:76:f4:8a:04:54:94:13:d1:a3:95:9e:46:40: 85:36:20:92:a6:99:59:59:d6:17:56:aa:e9:81:7a:01:f1:c2: 22:87:34:73:3a:ea:cb:33:b8:39:22:4d:91:09:40:ff:ab:e5: 0e:91:64:8c:fd:f7:4f:3a:3b:2a:e1:e4:05:ca:e2:5b:96:84: 10:e5:82:64:58:58:90:89:d4:83:48:7a:28:9d:65:0b:e5:fa: ca:40:e5:58:6c:13:5d:a6:fd:0d:77:3a:c7:68:6e:d5:70:3d: e9:9c:1a:d3:a6:96:b5:36:1e:c8:86:ec:e5:35:41:9e:47:c8: 96:22:35:bb:23:75:81:51:c3:dc:27:db:59:0c:ae:47:65:ae: 6e:8d:9d:79:fb:2e:a2:24:55:5d:06:54:f3:3a:37:3c:38:79: c8:c9:12:33:ac:95:de:5a:1c:37:f9:ef:b6:ca:cc:b6:21:91: c4:65:e2:65:75:6d:e9:60:b4:1c:d8:66:46:ee:76:f2:01:af: d9:e3:8c:7b:0c:5c:67:39:37:d3:b8:0d:c0:ce:99:f3:c9:68: 52:41:fc:cc:de:f6:78:81:9a:08:e6:34:a6:29:a0:76:66:a8: ad:95:33:31 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUCEgv+qSw5X6uRWG3IrwkVykIgJUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTA0MDIxNjM4MDNaFw0yNjA0MDExNjQzMDNaMDMxMTAvBgNV BAMTKERGN0JBNjY3NEExQzZDNEQyQ0MxOEU5MTRCQzZBM0FEOEEwMTc1NUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyjSvnexSSTGN75yNhVIWuniXu 6ODPK5tO2P1mZsMRCQHC1qCUHZ6y2UnSv+fnStq4Sv31rm66MgygVnQWAyW3CwU7 pB1AaTQJqYkW6M7qNEvUF1UtdbWCqbQrFlbHJjjbVSyl/mrnr5iMX+u4y9LEexp/ ZiYkQXuUYJ/mXhr1gl9fFQqI/zA8nRpEWkircK0SO19bpcuvU6Bi+sQjV/uTIbWq +0Qwzvw8cfUQGPSZHZ9473EQJdCu2R8hTdAGekHUVz17ywZpERbA1CZwLj/V/10A n/eYUUvzS6ZSZHDu5SSMIfMrERu5RCipEYCxUNoWTP5dReevPX/hQWgV/Lh9AgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTfe6ZnShxsTSzB jpFLxqOtigF1WzAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNjRCMEE0MEYxMTU0N0ExODgwQ0I0NDY1 RjU3MjcwQjg3OUUwQUNBQjgzRjQyRjZDMjY3NEE0MTY2RUY4N0FDQy8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy82NEIwQTQwRjExNTQ3QTE4ODBDQjQ0NjVGNTcyNzBCODc5RTBBQ0FCODNG NDJGNkMyNjc0QTQxNjZFRjg3QUNDLzAvREY3QkE2Njc0QTFDNkM0RDJDQzE4RTkx NEJDNkEzQUQ4QTAxNzU1Qi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAP+UDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEK1MwDQYJKoZIhvcNAQELBQADggEBAKvybH8Q wBq63R1kjBFlfEIO9eHbLcYXdvSKBFSUE9GjlZ5GQIU2IJKmmVlZ1hdWqumBegHx wiKHNHM66sszuDkiTZEJQP+r5Q6RZIz99086Oyrh5AXK4luWhBDlgmRYWJCJ1INI eiidZQvl+spA5VhsE12m/Q13OsdobtVwPemcGtOmlrU2HsiG7OU1QZ5HyJYiNbsj dYFRw9wn21kMrkdlrm6NnXn7LqIkVV0GVPM6Nzw4ecjJEjOsld5aHDf577bKzLYh kcRl4mV1belgtBzYZkbudvIBr9njjHsMXGc5N9O4DcDOmfPJaFJB/Mze9niBmgjm NKYpoHZmqK2VMzE= -----END CERTIFICATE-----Generated at Mon Apr 28 05:59:43 2025 by rpki-client on console.sobornost.net