$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EB962D020BCD0C8EC8D36618D22902E2E350CD44.cer File: EB962D020BCD0C8EC8D36618D22902E2E350CD44.cer (raw, json) Hash identifier: lW8nO2+IKgQ434u5Ccy4bz2Tvfz6nfRDvdKBBTp5aps= Subject key identifier: EB:96:2D:02:0B:CD:0C:8E:C8:D3:66:18:D2:29:02:E2:E3:50:CD:44 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 270FB0A7B5DC233A28D23A8FD5845EECA5B84833 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/42E42C781DBB75A285DBB7B6FA83F07522E6DBEEB5F5A5C4B1928B21975F5BAC/0/EB962D020BCD0C8EC8D36618D22902E2E350CD44.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/42E42C781DBB75A285DBB7B6FA83F07522E6DBEEB5F5A5C4B1928B21975F5BAC/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 04 Feb 2025 18:53:59 +0000 Certificate not after: Tue 03 Feb 2026 18:58:59 +0000 Subordinate resources: AS: 52454 IP: 201.222.60.0/22 IP: 2803:6300::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 02 May 2025 06:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:0f:b0:a7:b5:dc:23:3a:28:d2:3a:8f:d5:84:5e:ec:a5:b8:48:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 4 18:53:59 2025 GMT Not After : Feb 3 18:58:59 2026 GMT Subject: CN=EB962D020BCD0C8EC8D36618D22902E2E350CD44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:a5:38:fb:88:87:56:7c:d4:53:f2:c8:97:81: 3a:09:c7:1b:03:1b:29:b7:ad:11:be:70:68:f2:f7: e5:e0:16:96:93:69:33:e1:86:90:56:81:0c:6f:4b: 6c:5c:ca:38:cc:ce:16:4f:32:3e:68:6d:a2:09:8c: 1d:af:af:d5:98:ca:5a:06:38:b0:07:b0:69:fa:3d: 82:a5:3f:1f:a6:fa:af:9b:99:fb:c6:4c:37:b8:e2: 50:0d:bf:4a:1b:45:9f:e8:2f:ed:3d:9e:09:32:47: 13:8b:24:f1:f7:ff:95:7b:24:98:41:b8:b1:5d:1a: 97:a0:f5:8c:1f:7f:cf:96:c9:99:27:44:45:20:d5: 30:d7:e0:d1:b6:a3:54:6a:81:cd:26:e2:5e:27:21: b4:25:e3:45:b7:04:2a:5d:3b:79:c5:2d:60:31:b3: 45:cb:5a:66:1a:a5:3f:fd:ee:0e:99:9a:0b:12:e0: fc:a8:8e:91:ef:3f:38:a3:ee:be:ff:f4:aa:55:4e: 00:5f:e0:82:93:d5:40:0b:30:46:61:a2:10:ad:3c: 2c:41:6d:02:d8:28:be:a2:f0:f4:4e:7b:42:33:0c: f2:bc:1b:19:2f:ae:85:64:fa:32:df:1d:39:bc:26: b2:8a:d8:64:a5:2c:6b:57:63:22:76:f1:63:59:51: d8:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: EB:96:2D:02:0B:CD:0C:8E:C8:D3:66:18:D2:29:02:E2:E3:50:CD:44 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/42E42C781DBB75A285DBB7B6FA83F07522E6DBEEB5F5A5C4B1928B21975F5BAC/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/42E42C781DBB75A285DBB7B6FA83F07522E6DBEEB5F5A5C4B1928B21975F5BAC/0/EB962D020BCD0C8EC8D36618D22902E2E350CD44.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 201.222.60.0/22 IPv6: 2803:6300::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52454 Signature Algorithm: sha256WithRSAEncryption d0:b5:a5:2c:73:45:c8:d2:c9:16:66:49:25:c9:0a:5b:65:55: df:54:df:c1:9c:18:48:fe:22:0b:dd:b0:ec:98:27:20:76:e9: a6:10:e7:4f:03:06:38:76:d8:6e:d8:c8:6d:9c:c0:b8:8d:0b: 25:39:a2:26:8f:db:b0:2c:d3:52:06:29:56:44:3b:fe:97:f2: f6:2b:7d:95:d6:e2:cf:e2:d9:5c:e6:b4:60:10:17:38:22:7e: 04:af:97:07:89:b3:28:af:4a:8b:4b:5c:f4:ee:83:99:a3:59: 04:68:d7:a7:58:88:fe:c6:16:33:0f:cf:0a:41:0f:b0:b4:f4: 7c:d9:54:f0:8e:9f:31:14:6f:2a:db:1a:c5:0b:11:55:99:41: 84:8e:e5:f8:69:7a:c0:02:df:1f:4a:83:9f:6c:70:4e:d1:de: 07:b5:c5:ac:f0:57:8a:e7:34:25:e5:9d:66:48:e5:89:5f:b7: 0a:b8:6a:c9:8d:86:f8:08:9b:44:5e:97:d4:ae:09:41:49:75: a2:44:73:ce:87:5f:84:21:b6:63:26:90:a2:30:3e:89:c7:28: 82:03:86:f3:af:cb:3c:a4:06:ec:18:d5:b3:15:9d:e7:a2:0a: 92:79:af:83:32:97:5f:aa:74:94:11:f2:60:62:9f:0f:c7:07: 43:51:a4:88 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUJw+wp7XcIzoo0jqP1YRe7KW4SDMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDQxODUzNTlaFw0yNjAyMDMxODU4NTlaMDMxMTAvBgNV BAMTKEVCOTYyRDAyMEJDRDBDOEVDOEQzNjYxOEQyMjkwMkUyRTM1MENENDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDapTj7iIdWfNRT8siXgToJxxsD Gym3rRG+cGjy9+XgFpaTaTPhhpBWgQxvS2xcyjjMzhZPMj5obaIJjB2vr9WYyloG OLAHsGn6PYKlPx+m+q+bmfvGTDe44lANv0obRZ/oL+09ngkyRxOLJPH3/5V7JJhB uLFdGpeg9Ywff8+WyZknREUg1TDX4NG2o1Rqgc0m4l4nIbQl40W3BCpdO3nFLWAx s0XLWmYapT/97g6ZmgsS4PyojpHvPzij7r7/9KpVTgBf4IKT1UALMEZhohCtPCxB bQLYKL6i8PROe0IzDPK8GxkvroVk+jLfHTm8JrKK2GSlLGtXYyJ28WNZUdgZAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTrli0CC80MjsjT ZhjSKQLi41DNRDAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNDJFNDJDNzgxREJCNzVBMjg1REJCN0I2 RkE4M0YwNzUyMkU2REJFRUI1RjVBNUM0QjE5MjhCMjE5NzVGNUJBQy8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80MkU0MkM3ODFEQkI3NUEyODVEQkI3QjZGQTgzRjA3NTIyRTZEQkVFQjVG NUE1QzRCMTkyOEIyMTk3NUY1QkFDLzAvRUI5NjJEMDIwQkNEMEM4RUM4RDM2NjE4 RDIyOTAyRTJFMzUwQ0Q0NC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCyd48MA0EAgAC MAcDBQAoA2MAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDM5jANBgkqhkiG9w0B AQsFAAOCAQEA0LWlLHNFyNLJFmZJJckKW2VV31TfwZwYSP4iC92w7JgnIHbpphDn TwMGOHbYbtjIbZzAuI0LJTmiJo/bsCzTUgYpVkQ7/pfy9it9ldbiz+LZXOa0YBAX OCJ+BK+XB4mzKK9Ki0tc9O6DmaNZBGjXp1iI/sYWMw/PCkEPsLT0fNlU8I6fMRRv KtsaxQsRVZlBhI7l+Gl6wALfH0qDn2xwTtHeB7XFrPBXiuc0JeWdZkjliV+3Crhq yY2G+AibRF6X1K4JQUl1okRzzodfhCG2YyaQojA+iccoggOG86/LPKQG7BjVsxWd 56IKknmvgzKXX6p0lBHyYGKfD8cHQ1GkiA== -----END CERTIFICATE-----Generated at Mon Apr 28 05:59:45 2025 by rpki-client on console.sobornost.net