$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F4D4857F016A86FBFBD60566A3AEA9CE93B4CD5E.cer File: F4D4857F016A86FBFBD60566A3AEA9CE93B4CD5E.cer (raw, json) Hash identifier: ukW3aXmk1v7aFbLlk0iV2yPWV5TgBfE+H2TPD0ydjr8= Subject key identifier: F4:D4:85:7F:01:6A:86:FB:FB:D6:05:66:A3:AE:A9:CE:93:B4:CD:5E Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 2B4F8CF0A488AD536913DC411A1DEF6F5BAD8308 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/AD6BDD22E9F3DB31890AF596FB95F5737BAB8202CDF99CEDC3890B710EF52702/0/F4D4857F016A86FBFBD60566A3AEA9CE93B4CD5E.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/AD6BDD22E9F3DB31890AF596FB95F5737BAB8202CDF99CEDC3890B710EF52702/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 22:38:09 +0000 Certificate not after: Wed 04 Feb 2026 22:43:09 +0000 Subordinate resources: AS: 264675 IP: 168.121.56.0/22 IP: 2803:cd40::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 02 May 2025 06:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:4f:8c:f0:a4:88:ad:53:69:13:dc:41:1a:1d:ef:6f:5b:ad:83:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 22:38:09 2025 GMT Not After : Feb 4 22:43:09 2026 GMT Subject: CN=F4D4857F016A86FBFBD60566A3AEA9CE93B4CD5E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:11:94:3c:01:74:ea:37:12:10:ce:05:71:bd: e2:12:3c:4f:07:7a:ac:06:30:6f:2c:20:a1:f5:76: 24:30:30:ac:e0:23:bc:6c:ca:f5:45:33:a9:37:37: ae:23:bc:e4:0f:4f:df:48:48:fc:58:25:48:fe:33: bd:8b:92:ba:68:34:75:fe:7b:f8:62:81:8a:b8:85: a0:ee:0c:6b:28:53:82:bd:8b:1e:41:0b:0b:2f:34: 83:3a:66:51:7b:3a:b6:72:6d:f4:88:49:08:8d:1a: 82:c8:47:2d:e3:ad:a3:ae:41:8f:a7:69:7f:4a:e3: cd:b4:7a:94:28:48:3c:9a:97:af:59:92:2b:89:20: a7:91:c3:4b:75:19:c1:ef:d8:c1:43:93:b0:88:90: 8f:26:0d:f5:29:c4:bc:cd:33:ea:fe:39:bb:65:cc: 5a:ee:3f:5c:c3:8b:fe:74:d0:b6:c2:84:02:f0:31: f2:4b:55:46:c9:0a:b6:1d:04:a3:7a:46:52:c0:3d: 09:b6:b1:11:cf:fc:a8:18:2f:e3:9f:be:23:ec:ba: 77:a5:2e:10:96:93:4d:21:1b:17:f3:8f:06:e2:c5: 96:6f:8b:c1:ad:3f:d2:63:dc:ed:71:63:73:08:3e: 10:35:21:c6:03:b9:82:61:1d:13:cd:f3:2c:c1:4c: 5c:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F4:D4:85:7F:01:6A:86:FB:FB:D6:05:66:A3:AE:A9:CE:93:B4:CD:5E X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/AD6BDD22E9F3DB31890AF596FB95F5737BAB8202CDF99CEDC3890B710EF52702/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/AD6BDD22E9F3DB31890AF596FB95F5737BAB8202CDF99CEDC3890B710EF52702/0/F4D4857F016A86FBFBD60566A3AEA9CE93B4CD5E.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.121.56.0/22 IPv6: 2803:cd40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264675 Signature Algorithm: sha256WithRSAEncryption d9:f9:3b:63:9c:5d:33:ed:6f:82:bf:12:73:92:04:cc:30:7c: 71:97:3b:96:fc:ed:34:29:f5:e5:a3:b5:26:1f:16:a9:ff:ff: 0a:33:db:60:f0:90:af:41:34:c2:86:0a:84:71:d8:0f:a0:38: 2f:44:a3:46:7d:cb:d7:1e:eb:c5:da:ed:08:98:dc:7b:69:18: 32:b5:67:41:2e:c7:c3:b9:b9:e0:9f:4c:46:37:40:ac:fd:49: 59:32:11:0f:e8:ca:d6:b5:8c:ac:38:33:c7:df:36:7b:36:41: 49:af:b2:4b:ad:38:47:8b:ad:35:20:f2:4e:4e:cf:38:08:e9: b8:93:e3:ea:e0:67:e2:3a:f8:f1:8d:25:41:a0:d4:5b:80:90: d5:56:60:e7:17:df:e8:ac:e5:11:f1:2b:cb:9e:9e:1d:32:a9: 7a:09:6c:8c:49:c6:71:a9:58:d7:c1:e3:eb:f7:7d:fd:30:b7: c7:b7:f7:8d:31:09:e5:f2:2c:9e:3b:9b:47:fe:77:39:34:9b: d3:75:f5:35:c5:91:92:d5:1a:69:92:79:40:94:73:c8:eb:87: ff:e7:da:69:d3:2f:9e:b0:fc:1c:3b:c7:92:d2:4e:60:e4:62: 43:2c:47:c2:78:40:0e:35:2f:c7:93:e5:0a:2e:47:d8:ea:4f: 59:39:64:26 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUK0+M8KSIrVNpE9xBGh3vb1utgwgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUyMjM4MDlaFw0yNjAyMDQyMjQzMDlaMDMxMTAvBgNV BAMTKEY0RDQ4NTdGMDE2QTg2RkJGQkQ2MDU2NkEzQUVBOUNFOTNCNENENUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2EZQ8AXTqNxIQzgVxveISPE8H eqwGMG8sIKH1diQwMKzgI7xsyvVFM6k3N64jvOQPT99ISPxYJUj+M72LkrpoNHX+ e/higYq4haDuDGsoU4K9ix5BCwsvNIM6ZlF7OrZybfSISQiNGoLIRy3jraOuQY+n aX9K4820epQoSDyal69ZkiuJIKeRw0t1GcHv2MFDk7CIkI8mDfUpxLzNM+r+Obtl zFruP1zDi/500LbChALwMfJLVUbJCrYdBKN6RlLAPQm2sRHP/KgYL+OfviPsunel LhCWk00hGxfzjwbixZZvi8GtP9Jj3O1xY3MIPhA1IcYDuYJhHRPN8yzBTFy1AgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT01IV/AWqG+/vW BWajrqnOk7TNXjAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQUQ2QkREMjJFOUYzREIzMTg5MEFGNTk2 RkI5NUY1NzM3QkFCODIwMkNERjk5Q0VEQzM4OTBCNzEwRUY1MjcwMi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9BRDZCREQyMkU5RjNEQjMxODkwQUY1OTZGQjk1RjU3MzdCQUI4MjAyQ0RG OTlDRURDMzg5MEI3MTBFRjUyNzAyLzAvRjRENDg1N0YwMTZBODZGQkZCRDYwNTY2 QTNBRUE5Q0U5M0I0Q0Q1RS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCqHk4MA0EAgAC MAcDBQAoA81AMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQJ4zANBgkqhkiG9w0B AQsFAAOCAQEA2fk7Y5xdM+1vgr8Sc5IEzDB8cZc7lvztNCn15aO1Jh8Wqf//CjPb YPCQr0E0woYKhHHYD6A4L0SjRn3L1x7rxdrtCJjce2kYMrVnQS7Hw7m54J9MRjdA rP1JWTIRD+jK1rWMrDgzx982ezZBSa+yS604R4utNSDyTk7POAjpuJPj6uBn4jr4 8Y0lQaDUW4CQ1VZg5xff6KzlEfEry56eHTKpeglsjEnGcalY18Hj6/d9/TC3x7f3 jTEJ5fIsnjubR/53OTSb03X1NcWRktUaaZJ5QJRzyOuH/+faadMvnrD8HDvHktJO YORiQyxHwnhADjUvx5PlCi5H2OpPWTlkJg== -----END CERTIFICATE-----Generated at Mon Apr 28 05:59:45 2025 by rpki-client on console.sobornost.net