$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/121BB05553FD8170C35FA9B8265458699CAC81AD.cer File: 121BB05553FD8170C35FA9B8265458699CAC81AD.cer (raw, json) Hash identifier: Js7yUk+jZuSs16Obu0S0Q0JYdViMFfYowxSB8if+P4o= Subject key identifier: 12:1B:B0:55:53:FD:81:70:C3:5F:A9:B8:26:54:58:69:9C:AC:81:AD Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 137DA39D613C8BB369AE405E590FC265CA5E1961 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/12EBE38A9E3CEED0508257A3AA4759B384258D8C2D38C392CB925ED7B74D592D/0/121BB05553FD8170C35FA9B8265458699CAC81AD.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/12EBE38A9E3CEED0508257A3AA4759B384258D8C2D38C392CB925ED7B74D592D/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 12:43:35 +0000 Certificate not after: Wed 04 Feb 2026 12:48:35 +0000 Subordinate resources: AS: 52279 IP: 179.51.247.0/24 IP: 181.224.96.0/19 IP: 186.148.128.0/19 IP: 2803:900::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:7d:a3:9d:61:3c:8b:b3:69:ae:40:5e:59:0f:c2:65:ca:5e:19:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 12:43:35 2025 GMT Not After : Feb 4 12:48:35 2026 GMT Subject: CN=121BB05553FD8170C35FA9B8265458699CAC81AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:b3:38:b8:ed:2f:2e:40:10:2c:26:cb:fc:35: ca:93:ce:43:42:60:aa:80:e2:a4:c3:70:8c:0d:67: be:81:12:82:1d:70:7a:65:d4:74:94:bd:af:78:7c: 26:4c:70:a6:99:c2:18:78:f8:31:45:2f:4f:05:78: 48:3f:9a:ad:f7:d9:28:24:b5:cf:3b:b2:de:18:a3: 86:36:fb:69:fb:1d:a1:81:09:84:00:c5:0b:7d:06: fe:cc:fe:dc:a7:e1:7b:54:68:5f:c2:7e:7c:7b:18: 49:de:93:5f:5f:67:8a:f5:2f:ee:ed:89:a8:c9:e1: 12:22:29:7d:61:e1:19:ff:bb:00:51:42:46:dd:22: db:53:a4:77:a4:3f:60:a0:80:ef:9a:af:52:33:e8: 9a:57:43:62:f9:99:92:f0:18:4a:a4:00:35:49:d4: fb:d1:da:29:c8:45:12:e5:6d:ab:33:19:c2:62:2f: 3e:cf:c0:c2:0d:f8:6f:7a:8e:71:0b:b3:77:33:6c: 22:f7:e3:b0:78:68:63:14:f0:31:78:cf:93:7c:9d: 90:e2:8b:9c:c8:8e:10:35:8d:f7:dc:65:c5:1a:66: 45:64:b0:ad:4a:2c:96:62:56:32:3b:bc:a4:7c:79: be:3c:5a:1f:2d:6e:2a:12:01:eb:98:17:b2:e2:17: 3d:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 12:1B:B0:55:53:FD:81:70:C3:5F:A9:B8:26:54:58:69:9C:AC:81:AD X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/12EBE38A9E3CEED0508257A3AA4759B384258D8C2D38C392CB925ED7B74D592D/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/12EBE38A9E3CEED0508257A3AA4759B384258D8C2D38C392CB925ED7B74D592D/0/121BB05553FD8170C35FA9B8265458699CAC81AD.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 179.51.247.0/24 181.224.96.0/19 186.148.128.0/19 IPv6: 2803:900::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52279 Signature Algorithm: sha256WithRSAEncryption c9:ad:4b:bb:70:2d:0e:6a:b7:c8:96:45:0e:54:fc:cf:ae:a0: 52:07:1c:81:1d:53:01:59:3d:8f:d2:62:9f:71:bd:aa:ab:00: 8f:ea:15:39:41:a5:d1:40:61:0b:d5:31:95:28:32:66:1f:c8: 83:58:dd:dd:08:10:d8:96:f4:d9:32:03:f4:44:ae:ed:e8:7c: fc:14:9c:4e:0d:d8:da:18:c9:06:30:45:11:29:2c:d2:2b:5c: a2:a7:b4:f4:51:f8:66:46:40:10:fe:6b:cd:69:19:91:b2:ef: 28:59:19:b4:8d:85:b7:a3:c1:00:68:c7:6c:3c:aa:7d:6f:dd: 73:fc:4f:89:d8:41:45:a8:a0:3b:b4:a6:e2:e9:a2:0a:99:79: e6:68:c4:38:b4:05:7d:e7:3e:f7:8e:7d:30:ff:a0:6a:33:4c: fb:a6:36:ca:d7:83:41:05:ec:22:2a:7c:9c:74:63:f3:d1:4b: bc:59:cf:6a:1d:91:90:20:08:4d:68:f8:93:69:69:b1:5d:6d: fc:f0:56:b0:ff:59:b8:0c:ca:c7:14:f1:0a:f0:ed:09:3c:cb: e2:64:63:4b:b3:69:40:5e:aa:7f:06:44:ce:a2:bd:08:6d:4f: 91:71:af:79:f5:92:ef:51:d0:ff:7b:d9:86:07:0e:5d:10:b8: 48:28:8a:a5 -----BEGIN CERTIFICATE----- MIIGsTCCBZmgAwIBAgIUE32jnWE8i7NprkBeWQ/CZcpeGWEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUxMjQzMzVaFw0yNjAyMDQxMjQ4MzVaMDMxMTAvBgNV BAMTKDEyMUJCMDU1NTNGRDgxNzBDMzVGQTlCODI2NTQ1ODY5OUNBQzgxQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMszi47S8uQBAsJsv8NcqTzkNC YKqA4qTDcIwNZ76BEoIdcHpl1HSUva94fCZMcKaZwhh4+DFFL08FeEg/mq332Sgk tc87st4Yo4Y2+2n7HaGBCYQAxQt9Bv7M/tyn4XtUaF/Cfnx7GEnek19fZ4r1L+7t iajJ4RIiKX1h4Rn/uwBRQkbdIttTpHekP2CggO+ar1Iz6JpXQ2L5mZLwGEqkADVJ 1PvR2inIRRLlbaszGcJiLz7PwMIN+G96jnELs3czbCL347B4aGMU8DF4z5N8nZDi i5zIjhA1jffcZcUaZkVksK1KLJZiVjI7vKR8eb48Wh8tbioSAeuYF7LiFz2BAgMB AAGjggO7MIIDtzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQSG7BVU/2BcMNf qbgmVFhpnKyBrTAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMTJFQkUzOEE5RTNDRUVEMDUwODI1N0Ez QUE0NzU5QjM4NDI1OEQ4QzJEMzhDMzkyQ0I5MjVFRDdCNzRENTkyRC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8xMkVCRTM4QTlFM0NFRUQwNTA4MjU3QTNBQTQ3NTlCMzg0MjU4RDhDMkQz OEMzOTJDQjkyNUVEN0I3NEQ1OTJELzAvMTIxQkIwNTU1M0ZEODE3MEMzNUZBOUI4 MjY1NDU4Njk5Q0FDODFBRC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQAszP3AwQFteBg AwQFupSAMA0EAgACMAcDBQAoAwkAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDM NzANBgkqhkiG9w0BAQsFAAOCAQEAya1Lu3AtDmq3yJZFDlT8z66gUgccgR1TAVk9 j9Jin3G9qqsAj+oVOUGl0UBhC9UxlSgyZh/Ig1jd3QgQ2Jb02TID9ESu7eh8/BSc Tg3Y2hjJBjBFESks0itcoqe09FH4ZkZAEP5rzWkZkbLvKFkZtI2Ft6PBAGjHbDyq fW/dc/xPidhBRaigO7Sm4umiCpl55mjEOLQFfec+9459MP+gajNM+6Y2yteDQQXs Iip8nHRj89FLvFnPah2RkCAITWj4k2lpsV1t/PBWsP9ZuAzKxxTxCvDtCTzL4mRj S7NpQF6qfwZEzqK9CG1PkXGvefWS71HQ/3vZhgcOXRC4SCiKpQ== -----END CERTIFICATE-----Generated at Tue Nov 4 21:38:56 2025 by rpki-client