$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0811C9BE6F1864485DCDE07CD0344B0C0D7CFC78.cer File: 0811C9BE6F1864485DCDE07CD0344B0C0D7CFC78.cer (raw, json) Hash identifier: Js2UZHF6Uvm4otz8yV6swi1ImJHtAKIpfE5z9Y3/c10= Subject key identifier: 08:11:C9:BE:6F:18:64:48:5D:CD:E0:7C:D0:34:4B:0C:0D:7C:FC:78 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 42B2CA8FE4C0D3FE82558146482E59F51ED4A816 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/7A8F8C6117C61C69072D3E86A59B3311A3D87DA8A1719BB6996FE2B7D403D0C2/0/0811C9BE6F1864485DCDE07CD0344B0C0D7CFC78.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/7A8F8C6117C61C69072D3E86A59B3311A3D87DA8A1719BB6996FE2B7D403D0C2/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Fri 13 Jun 2025 09:14:21 +0000 Certificate not after: Fri 12 Jun 2026 09:19:21 +0000 Subordinate resources: AS: 262236 IP: 200.115.178.0/24 IP: 2801:0:300::/48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 25 Jun 2025 11:30:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:b2:ca:8f:e4:c0:d3:fe:82:55:81:46:48:2e:59:f5:1e:d4:a8:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Jun 13 09:14:21 2025 GMT Not After : Jun 12 09:19:21 2026 GMT Subject: CN=0811C9BE6F1864485DCDE07CD0344B0C0D7CFC78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:68:50:e7:20:7e:c5:9a:06:a0:a1:bf:6f:04: e7:fd:b3:35:7f:1c:63:6a:42:b7:1c:95:e5:c5:47: 8a:1f:dc:c2:4d:9c:86:11:22:0f:f6:75:27:ee:fe: a9:15:4a:84:04:8c:a8:5c:22:d0:44:c4:88:3e:48: 1a:27:5e:55:18:af:58:0a:d5:9e:2e:9b:b3:09:63: ab:d5:e8:0a:88:a2:6d:54:a0:ec:20:13:56:35:f5: ed:92:a6:b6:7f:b0:5b:0a:9d:bf:3d:21:cb:c4:1b: cb:6b:9f:96:2f:f9:76:b8:2c:54:27:0e:7c:0c:54: b8:7b:5b:fc:19:07:43:b0:43:2c:58:a4:3b:9f:f6: 12:97:0c:c1:a8:c3:61:84:1a:5f:66:98:9b:a0:c0: f1:8a:e2:80:7c:9b:69:d7:bb:fd:1d:1c:23:0b:b6: b5:c7:60:43:10:5e:7e:03:78:ef:10:05:42:e1:83: bf:ca:5a:09:02:0a:88:76:30:76:f8:8f:aa:77:71: 6d:3f:83:82:08:02:bc:9c:40:1f:db:12:1c:a9:7d: 0d:83:a8:66:cb:a1:cb:d5:3d:88:ae:33:8e:76:7f: cc:47:05:0d:5f:0b:ef:66:63:14:7f:b7:74:3d:fe: c2:63:03:df:e9:e5:b0:56:3b:97:d0:3d:e9:67:2a: 06:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 08:11:C9:BE:6F:18:64:48:5D:CD:E0:7C:D0:34:4B:0C:0D:7C:FC:78 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/7A8F8C6117C61C69072D3E86A59B3311A3D87DA8A1719BB6996FE2B7D403D0C2/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/7A8F8C6117C61C69072D3E86A59B3311A3D87DA8A1719BB6996FE2B7D403D0C2/0/0811C9BE6F1864485DCDE07CD0344B0C0D7CFC78.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.115.178.0/24 IPv6: 2801:0:300::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 262236 Signature Algorithm: sha256WithRSAEncryption c8:d5:16:0d:29:b6:4e:7d:dd:94:63:d3:dd:36:6b:63:65:4b: 9b:d9:52:b8:28:da:f1:e9:2b:21:39:13:76:fd:95:29:91:22: 4d:fb:75:6f:6a:7f:aa:fc:9e:31:08:31:15:5d:b6:e6:c1:69: 54:1f:af:a5:88:7a:f3:43:9c:ac:19:62:70:3b:b8:9b:07:36: b3:25:db:26:d5:e2:34:39:a3:50:cd:85:27:4a:d5:8f:84:6a: ba:92:dd:00:83:ad:f3:56:a1:86:69:3c:8e:83:f5:4e:19:99: 28:58:13:f3:04:88:e8:0a:e7:f8:ad:a8:7b:95:ad:31:f1:8c: 51:a6:b7:57:6b:17:0f:87:73:9e:da:ff:98:bf:53:30:56:db: 9b:7e:2a:10:49:64:df:56:17:10:9e:bc:1a:1e:52:5e:95:29: ab:05:c6:6d:9e:64:40:7e:05:7d:62:cd:3f:b0:16:af:fc:43: 24:42:53:8a:3f:c0:21:c3:2b:b2:2a:96:e7:26:c0:78:1b:42: 57:a5:d5:bb:93:47:d9:e2:38:d7:04:00:54:b6:a1:96:65:e5: e2:18:d9:00:27:68:3b:c8:e5:43:dc:96:08:05:fb:b4:99:65: ad:8d:f6:91:d5:d6:c7:89:63:ef:86:24:a9:65:45:b3:e8:39: b8:65:12:35 -----BEGIN CERTIFICATE----- MIIGpzCCBY+gAwIBAgIUQrLKj+TA0/6CVYFGSC5Z9R7UqBYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTA2MTMwOTE0MjFaFw0yNjA2MTIwOTE5MjFaMDMxMTAvBgNV BAMTKDA4MTFDOUJFNkYxODY0NDg1RENERTA3Q0QwMzQ0QjBDMEQ3Q0ZDNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpaFDnIH7Fmgagob9vBOf9szV/ HGNqQrccleXFR4of3MJNnIYRIg/2dSfu/qkVSoQEjKhcItBExIg+SBonXlUYr1gK 1Z4um7MJY6vV6AqIom1UoOwgE1Y19e2SprZ/sFsKnb89IcvEG8trn5Yv+Xa4LFQn DnwMVLh7W/wZB0OwQyxYpDuf9hKXDMGow2GEGl9mmJugwPGK4oB8m2nXu/0dHCML trXHYEMQXn4DeO8QBULhg7/KWgkCCoh2MHb4j6p3cW0/g4IIArycQB/bEhypfQ2D qGbLocvVPYiuM452f8xHBQ1fC+9mYxR/t3Q9/sJjA9/p5bBWO5fQPelnKgbJAgMB AAGjggOxMIIDrTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQIEcm+bxhkSF3N 4HzQNEsMDXz8eDAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvN0E4RjhDNjExN0M2MUM2OTA3MkQzRTg2 QTU5QjMzMTFBM0Q4N0RBOEExNzE5QkI2OTk2RkUyQjdENDAzRDBDMi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy83QThGOEM2MTE3QzYxQzY5MDcyRDNFODZBNTlCMzMxMUEzRDg3REE4QTE3 MTlCQjY5OTZGRTJCN0Q0MDNEMEMyLzAvMDgxMUM5QkU2RjE4NjQ0ODVEQ0RFMDdD RDAzNDRCMEMwRDdDRkM3OC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAyHOyMA8EAgAC MAkDBwAoAQAAAwAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBABcMA0GCSqGSIb3 DQEBCwUAA4IBAQDI1RYNKbZOfd2UY9PdNmtjZUub2VK4KNrx6SshORN2/ZUpkSJN +3Vvan+q/J4xCDEVXbbmwWlUH6+liHrzQ5ysGWJwO7ibBzazJdsm1eI0OaNQzYUn StWPhGq6kt0Ag63zVqGGaTyOg/VOGZkoWBPzBIjoCuf4rah7la0x8YxRprdXaxcP h3Oe2v+Yv1MwVtubfioQSWTfVhcQnrwaHlJelSmrBcZtnmRAfgV9Ys0/sBav/EMk QlOKP8AhwyuyKpbnJsB4G0JXpdW7k0fZ4jjXBABUtqGWZeXiGNkAJ2g7yOVD3JYI Bfu0mWWtjfaR1dbHiWPvhiSpZUWz6Dm4ZRI1 -----END CERTIFICATE-----Generated at Sat Jun 21 10:44:10 2025 by rpki-client