$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/16423C98CF2548839D74EFD9FB7304F4DAB4AE75.cer File: 16423C98CF2548839D74EFD9FB7304F4DAB4AE75.cer (raw, json) Hash identifier: n+R4Ejich+usIdDD9ygwRzneCpsXnqBWzbJ2gJJTSsA= Subject key identifier: 16:42:3C:98:CF:25:48:83:9D:74:EF:D9:FB:73:04:F4:DA:B4:AE:75 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 73AE233594F36ACB763A52B5A90B6FE4911BA7ED Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/81A266F8152CBB106F1FEFE167201B2DF81CE38502EB834FF9E421D83E728469/0/16423C98CF2548839D74EFD9FB7304F4DAB4AE75.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/81A266F8152CBB106F1FEFE167201B2DF81CE38502EB834FF9E421D83E728469/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 18:17:48 +0000 Certificate not after: Wed 04 Feb 2026 18:22:48 +0000 Subordinate resources: AS: 265819 IP: 45.6.8.0/22 IP: 2803:a9c0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:ae:23:35:94:f3:6a:cb:76:3a:52:b5:a9:0b:6f:e4:91:1b:a7:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 18:17:48 2025 GMT Not After : Feb 4 18:22:48 2026 GMT Subject: CN=16423C98CF2548839D74EFD9FB7304F4DAB4AE75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:83:9c:77:e0:4b:e9:a5:38:f7:41:fb:3f:53: 3c:e9:11:3b:bf:2e:9c:94:87:ce:14:14:07:9e:d6: 89:21:b4:62:cf:90:78:9e:a3:07:65:06:6e:64:aa: 42:9c:c9:86:e7:37:c5:6f:55:e6:7d:b7:03:bb:96: ce:73:b7:1c:b2:2d:79:02:65:e6:f6:53:9d:0d:ec: 4c:d7:e6:37:04:ac:66:29:47:db:eb:af:23:76:75: 7e:ff:5f:da:d6:96:e4:26:df:19:e3:bf:f0:ff:6a: 2f:b1:43:fa:0a:6f:f1:d9:76:e0:2e:d8:e3:ff:67: 84:d3:6d:14:91:c9:0f:d2:75:58:6c:4a:88:51:7f: 7c:64:8f:2f:b7:dc:68:dc:cd:f3:f0:08:45:2d:e1: 35:56:ab:07:78:46:73:1b:1e:87:49:9a:8c:d8:cc: 78:0d:c8:bf:af:59:c2:cd:09:42:66:30:ac:83:5c: e4:44:92:81:b5:7c:f4:a8:00:ee:4d:e7:72:71:1a: a0:ea:ea:b9:70:e4:2d:cd:21:b0:10:28:ea:a7:40: c0:c2:2b:b3:db:04:f6:75:21:02:4e:9b:0a:83:48: d5:6a:c3:3d:e1:70:0b:68:eb:92:0c:b6:73:4f:8d: 60:0a:b0:26:8d:82:74:86:8a:d3:19:90:c9:3d:7b: c7:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 16:42:3C:98:CF:25:48:83:9D:74:EF:D9:FB:73:04:F4:DA:B4:AE:75 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/81A266F8152CBB106F1FEFE167201B2DF81CE38502EB834FF9E421D83E728469/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/81A266F8152CBB106F1FEFE167201B2DF81CE38502EB834FF9E421D83E728469/0/16423C98CF2548839D74EFD9FB7304F4DAB4AE75.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.6.8.0/22 IPv6: 2803:a9c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265819 Signature Algorithm: sha256WithRSAEncryption bb:d4:14:9f:77:ef:ae:b2:a0:06:ee:e3:1e:b3:86:88:d3:04: 61:fc:ee:dc:e1:db:73:56:60:9c:bf:53:f4:1d:66:d1:18:e5: 7e:25:c8:f5:33:b2:e9:02:aa:1b:58:7d:0a:11:5a:8c:a7:5e: 62:3a:a2:33:b0:25:4d:70:a9:29:a4:48:9c:ae:08:54:a6:26: 27:72:42:04:0a:a3:76:ee:5e:d3:d6:b8:60:7b:07:b9:fb:69: 91:69:08:f8:94:b7:68:b7:ed:c1:2f:f4:e0:20:0b:e5:81:42: 76:79:b7:c2:c6:3b:93:89:48:bd:1f:25:97:4d:c6:df:48:46: 52:be:89:78:fb:88:3c:94:1f:40:7a:1f:24:77:82:1d:32:38: c4:f2:3f:76:fc:5f:d9:32:7f:b2:aa:8a:29:5b:91:5e:3c:11: 5a:a0:2c:5a:19:68:8f:da:93:e3:41:a0:e7:2a:42:f9:aa:60: 91:28:ba:06:30:5c:4e:51:9a:07:53:cf:e2:42:f5:73:b9:ba: 8d:33:9b:1c:c4:06:7a:ea:1f:80:fb:ff:da:b3:18:e3:27:0c: b5:0c:92:88:0d:a9:01:42:be:e9:ed:4b:05:48:5d:d0:8c:1f: e0:9d:4a:dd:2e:49:82:2a:03:40:f3:9c:1c:8e:ba:fc:49:f7: e4:c7:c2:60 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUc64jNZTzast2OlK1qQtv5JEbp+0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUxODE3NDhaFw0yNjAyMDQxODIyNDhaMDMxMTAvBgNV BAMTKDE2NDIzQzk4Q0YyNTQ4ODM5RDc0RUZEOUZCNzMwNEY0REFCNEFFNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPg5x34EvppTj3Qfs/UzzpETu/ LpyUh84UFAee1okhtGLPkHieowdlBm5kqkKcyYbnN8VvVeZ9twO7ls5ztxyyLXkC Zeb2U50N7EzX5jcErGYpR9vrryN2dX7/X9rWluQm3xnjv/D/ai+xQ/oKb/HZduAu 2OP/Z4TTbRSRyQ/SdVhsSohRf3xkjy+33GjczfPwCEUt4TVWqwd4RnMbHodJmozY zHgNyL+vWcLNCUJmMKyDXOREkoG1fPSoAO5N53JxGqDq6rlw5C3NIbAQKOqnQMDC K7PbBPZ1IQJOmwqDSNVqwz3hcAto65IMtnNPjWAKsCaNgnSGitMZkMk9e8ffAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQWQjyYzyVIg510 79n7cwT02rSudTAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvODFBMjY2RjgxNTJDQkIxMDZGMUZFRkUx NjcyMDFCMkRGODFDRTM4NTAyRUI4MzRGRjlFNDIxRDgzRTcyODQ2OS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy84MUEyNjZGODE1MkNCQjEwNkYxRkVGRTE2NzIwMUIyREY4MUNFMzg1MDJF QjgzNEZGOUU0MjFEODNFNzI4NDY5LzAvMTY0MjNDOThDRjI1NDg4MzlENzRFRkQ5 RkI3MzA0RjREQUI0QUU3NS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLQYIMA0EAgAC MAcDBQAoA6nAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQOWzANBgkqhkiG9w0B AQsFAAOCAQEAu9QUn3fvrrKgBu7jHrOGiNMEYfzu3OHbc1ZgnL9T9B1m0RjlfiXI 9TOy6QKqG1h9ChFajKdeYjqiM7AlTXCpKaRInK4IVKYmJ3JCBAqjdu5e09a4YHsH uftpkWkI+JS3aLftwS/04CAL5YFCdnm3wsY7k4lIvR8ll03G30hGUr6JePuIPJQf QHofJHeCHTI4xPI/dvxf2TJ/sqqKKVuRXjwRWqAsWhloj9qT40Gg5ypC+apgkSi6 BjBcTlGaB1PP4kL1c7m6jTObHMQGeuofgPv/2rMY4ycMtQySiA2pAUK+6e1LBUhd 0Iwf4J1K3S5JgioDQPOcHI66/En35MfCYA== -----END CERTIFICATE-----Generated at Tue Nov 4 21:39:04 2025 by rpki-client