$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1FF21857EA288ABC3D5018816284FC74ED1A1CCC.cer File: 1FF21857EA288ABC3D5018816284FC74ED1A1CCC.cer (raw, json) Hash identifier: FZEJCUFTsWbrj2YtZZ13b1dIlG6q6A9LZn904UOVVgQ= Subject key identifier: 1F:F2:18:57:EA:28:8A:BC:3D:50:18:81:62:84:FC:74:ED:1A:1C:CC Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 70626D86FABB9067D5E24A6D19CCEDC43499C3BF Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/DFE6CDC7E766B98D80C28F25199F10970DD8987334F8EDB0B9D232DC5206854B/0/1FF21857EA288ABC3D5018816284FC74ED1A1CCC.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/DFE6CDC7E766B98D80C28F25199F10970DD8987334F8EDB0B9D232DC5206854B/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 02:19:10 +0000 Certificate not after: Wed 04 Feb 2026 02:24:10 +0000 Subordinate resources: IP: 45.224.52.0/22 IP: 2803:7220::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:62:6d:86:fa:bb:90:67:d5:e2:4a:6d:19:cc:ed:c4:34:99:c3:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 02:19:10 2025 GMT Not After : Feb 4 02:24:10 2026 GMT Subject: CN=1FF21857EA288ABC3D5018816284FC74ED1A1CCC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:34:7a:2b:10:59:e2:2f:2b:18:e2:26:80:cc: 63:01:ac:4f:5a:dd:34:62:88:5f:90:22:00:48:18: e8:bb:09:8c:1e:b3:c8:b6:f4:1e:91:90:e3:fb:1e: ca:80:33:f1:6a:be:ba:a2:eb:ab:f8:30:f7:f8:1e: f4:65:01:2a:14:5a:c7:59:78:56:6e:d3:7b:f5:ae: 8f:b7:06:19:66:72:10:c9:a7:bd:e4:cf:bd:53:36: e0:6b:0c:9e:57:ac:83:90:65:b8:0b:73:ca:b4:16: 56:43:47:f3:95:aa:07:10:7d:bf:0d:f1:87:42:f1: 47:9e:3d:8d:aa:14:2b:cc:38:63:6c:32:ba:1b:ca: 0b:01:79:8e:0b:04:8b:74:be:58:41:33:57:4c:58: 59:32:d6:2d:e1:01:ae:9f:a5:a5:10:af:ff:83:6d: af:67:9b:88:51:a7:e9:dc:27:c8:73:01:5e:a3:47: 12:b5:2e:e7:1e:80:12:0f:4c:de:8f:4b:2b:31:72: 01:6e:b2:19:4d:cf:9b:72:be:04:ac:05:8c:52:ca: b1:09:0a:ae:e1:80:92:c3:ae:bc:ba:d1:2e:e3:f5: 3d:ee:16:47:f9:75:5e:f5:ca:c1:5d:47:ab:80:6a: 51:de:73:18:15:75:27:a5:f2:ba:31:e0:f1:ac:8c: 4d:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1F:F2:18:57:EA:28:8A:BC:3D:50:18:81:62:84:FC:74:ED:1A:1C:CC X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/DFE6CDC7E766B98D80C28F25199F10970DD8987334F8EDB0B9D232DC5206854B/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/DFE6CDC7E766B98D80C28F25199F10970DD8987334F8EDB0B9D232DC5206854B/0/1FF21857EA288ABC3D5018816284FC74ED1A1CCC.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.224.52.0/22 IPv6: 2803:7220::/32 Signature Algorithm: sha256WithRSAEncryption 35:a8:8d:a9:1c:3b:58:8f:63:5c:8e:72:5d:58:f7:b6:b6:2e: b0:e9:fb:a7:67:01:07:a7:8c:1c:fa:43:48:b4:46:fe:e4:df: 61:eb:8b:3b:a1:15:24:d1:05:3e:0d:bc:01:b3:dc:71:df:fd: 93:67:31:92:69:cd:45:32:b1:b7:6d:88:98:c8:d0:d3:1e:6d: b9:46:9a:7f:6b:7b:a5:8a:ad:98:c9:5c:be:62:91:a5:56:29: eb:e4:64:2d:9e:d4:b1:e6:60:e9:ae:8b:82:d7:99:4a:ed:40: ef:6c:c7:be:04:73:e8:38:61:6d:72:9c:fa:12:a4:8c:a2:f2: bd:8c:8b:95:be:ad:9b:a4:99:62:ad:e4:bb:90:57:89:c4:54: 7b:bb:63:6c:76:be:55:13:ec:47:b5:bc:63:a2:59:ec:c9:3e: 29:9c:79:86:fb:56:b8:59:69:62:e7:cb:0e:d6:3e:c2:90:ad: e4:87:a0:be:64:17:ba:95:5b:b4:e7:6a:90:40:50:0a:38:b5: db:e6:fb:9c:d0:07:9c:68:09:1a:1b:95:8c:a9:93:d6:4a:d0: 92:fe:5a:53:29:ab:38:c7:5c:96:9f:1f:21:ac:8e:6f:25:00: 1a:f7:46:ab:b7:a8:3f:d4:9a:d5:1f:ea:0a:ab:d5:07:ec:78: 35:ed:20:18 -----BEGIN CERTIFICATE----- MIIGiTCCBXGgAwIBAgIUcGJthvq7kGfV4kptGcztxDSZw78wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUwMjE5MTBaFw0yNjAyMDQwMjI0MTBaMDMxMTAvBgNV BAMTKDFGRjIxODU3RUEyODhBQkMzRDUwMTg4MTYyODRGQzc0RUQxQTFDQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4NHorEFniLysY4iaAzGMBrE9a 3TRiiF+QIgBIGOi7CYwes8i29B6RkOP7HsqAM/Fqvrqi66v4MPf4HvRlASoUWsdZ eFZu03v1ro+3BhlmchDJp73kz71TNuBrDJ5XrIOQZbgLc8q0FlZDR/OVqgcQfb8N 8YdC8UeePY2qFCvMOGNsMrobygsBeY4LBIt0vlhBM1dMWFky1i3hAa6fpaUQr/+D ba9nm4hRp+ncJ8hzAV6jRxK1LucegBIPTN6PSysxcgFushlNz5tyvgSsBYxSyrEJ Cq7hgJLDrry60S7j9T3uFkf5dV71ysFdR6uAalHecxgVdSel8rox4PGsjE1ZAgMB AAGjggOTMIIDjzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQf8hhX6iiKvD1Q GIFihPx07RoczDAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvREZFNkNEQzdFNzY2Qjk4RDgwQzI4RjI1 MTk5RjEwOTcwREQ4OTg3MzM0RjhFREIwQjlEMjMyREM1MjA2ODU0Qi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9ERkU2Q0RDN0U3NjZCOThEODBDMjhGMjUxOTlGMTA5NzBERDg5ODczMzRG OEVEQjBCOUQyMzJEQzUyMDY4NTRCLzAvMUZGMjE4NTdFQTI4OEFCQzNENTAxODgx NjI4NEZDNzRFRDFBMUNDQy5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLeA0MA0EAgAC MAcDBQAoA3IgMA0GCSqGSIb3DQEBCwUAA4IBAQA1qI2pHDtYj2NcjnJdWPe2ti6w 6funZwEHp4wc+kNItEb+5N9h64s7oRUk0QU+DbwBs9xx3/2TZzGSac1FMrG3bYiY yNDTHm25Rpp/a3uliq2YyVy+YpGlVinr5GQtntSx5mDprouC15lK7UDvbMe+BHPo OGFtcpz6EqSMovK9jIuVvq2bpJlireS7kFeJxFR7u2Nsdr5VE+xHtbxjolnsyT4p nHmG+1a4WWli58sO1j7CkK3kh6C+ZBe6lVu052qQQFAKOLXb5vuc0AecaAkaG5WM qZPWStCS/lpTKas4x1yWnx8hrI5vJQAa90art6g/1JrVH+oKq9UH7Hg17SAY -----END CERTIFICATE-----Generated at Wed Nov 5 12:07:51 2025 by rpki-client