$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/27546F9D546FDC6043E85AB367A990FC32BA9281.cer File: 27546F9D546FDC6043E85AB367A990FC32BA9281.cer (raw, json) Hash identifier: M51p4j4KagKerpwYEv2nofCU8X0CuNixORvWz0nh/DY= Subject key identifier: 27:54:6F:9D:54:6F:DC:60:43:E8:5A:B3:67:A9:90:FC:32:BA:92:81 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 1C388A753B13C92659B4E47820A393B30517BF97 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/E74B1F5230CAF552B6161B5176207DBCBDD9A5BCE93CF28442077465C2E2A6CC/0/27546F9D546FDC6043E85AB367A990FC32BA9281.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/E74B1F5230CAF552B6161B5176207DBCBDD9A5BCE93CF28442077465C2E2A6CC/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 06:04:13 +0000 Certificate not after: Wed 04 Feb 2026 06:09:13 +0000 Subordinate resources: AS: 267918 IP: 45.178.84.0/22 IP: 2803:6e60::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:38:8a:75:3b:13:c9:26:59:b4:e4:78:20:a3:93:b3:05:17:bf:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 06:04:13 2025 GMT Not After : Feb 4 06:09:13 2026 GMT Subject: CN=27546F9D546FDC6043E85AB367A990FC32BA9281 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:21:cb:33:04:92:56:68:92:a3:ca:25:f4:73: 59:10:98:b9:d7:a8:54:76:e7:f5:6d:b3:58:17:97: 0c:6a:b4:74:af:8f:7b:cc:3e:85:51:3f:8b:e1:65: c3:30:1a:50:68:dc:34:e5:7f:36:98:78:8e:07:55: 3d:ed:e3:82:a3:42:25:1d:c0:37:22:f7:d5:a5:81: 7b:c7:e0:4d:f1:d2:17:f5:85:86:2a:fa:f9:2b:d5: ba:22:5b:5b:2f:45:9a:e6:6b:8f:23:df:55:2f:62: 8f:14:d1:b2:2a:2d:8a:f1:f5:b9:43:90:f6:d2:cb: 57:37:bb:f9:62:9e:e9:e1:e3:be:a3:6e:40:f1:f7: 70:2f:d3:25:bb:d7:ce:f2:4b:28:7f:7b:c3:27:8f: c2:a9:f8:16:99:1e:b8:42:1f:c0:81:77:9d:ed:8b: 6b:57:a8:d0:ee:1b:fc:a5:2f:cd:1c:cb:8f:10:f1: 42:a5:99:87:cc:0c:48:30:c4:d4:56:e3:27:61:96: c0:a6:3d:6c:c1:78:1f:cc:2b:2f:7b:3d:a5:5d:54: 39:24:18:15:c8:41:2c:02:df:0e:8c:43:3d:49:60: 0f:88:0e:72:cd:73:fc:8e:b4:08:00:18:f5:03:5d: 70:6a:84:85:c1:ab:8a:cf:19:44:48:32:4c:b5:43: 21:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 27:54:6F:9D:54:6F:DC:60:43:E8:5A:B3:67:A9:90:FC:32:BA:92:81 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/E74B1F5230CAF552B6161B5176207DBCBDD9A5BCE93CF28442077465C2E2A6CC/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/E74B1F5230CAF552B6161B5176207DBCBDD9A5BCE93CF28442077465C2E2A6CC/0/27546F9D546FDC6043E85AB367A990FC32BA9281.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.178.84.0/22 IPv6: 2803:6e60::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267918 Signature Algorithm: sha256WithRSAEncryption 7c:d5:7c:cf:c4:10:4a:72:91:b8:db:11:d2:f4:f2:9f:2d:ed: 12:bc:3c:8b:5e:b2:f2:bf:1a:df:d1:b2:3e:34:27:45:02:51: 47:3b:ac:ca:37:d9:e4:ca:be:38:e3:bf:36:c1:5c:29:26:85: 01:90:5c:77:65:ad:a1:c8:29:67:ba:a0:55:20:61:6a:5a:80: ab:0d:b8:38:02:46:4e:fb:c2:80:c9:f3:e0:60:e5:59:f3:27: 53:0d:6e:b8:1a:ff:64:ab:0d:71:2f:e5:d3:ca:a3:fa:85:4b: 53:76:62:0c:0c:6a:4d:d0:81:bb:a5:b0:b6:67:ce:10:23:c3: 95:a1:ef:22:73:87:08:eb:f6:e8:7c:3a:19:6b:43:f4:9e:e7: 9d:2a:bb:b0:05:d3:17:69:da:ec:b0:96:9e:48:8b:bc:5a:66: 60:01:87:ee:bb:c9:8e:2e:34:6d:20:2e:58:c7:c4:ee:90:76: 2f:0f:01:59:5c:37:98:eb:f4:de:53:6d:7b:19:02:df:e8:5f: 00:f6:f4:25:a1:45:4f:eb:f6:14:f0:dd:aa:be:83:42:da:95: 0f:f3:6f:b1:49:71:6f:c0:c0:ec:1f:4b:36:69:eb:a2:8b:9b: bf:63:59:7e:84:9b:63:18:fb:aa:34:ab:3d:a1:a1:1d:41:a8: 44:07:c1:73 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUHDiKdTsTySZZtOR4IKOTswUXv5cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUwNjA0MTNaFw0yNjAyMDQwNjA5MTNaMDMxMTAvBgNV BAMTKDI3NTQ2RjlENTQ2RkRDNjA0M0U4NUFCMzY3QTk5MEZDMzJCQTkyODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCIcszBJJWaJKjyiX0c1kQmLnX qFR25/Vts1gXlwxqtHSvj3vMPoVRP4vhZcMwGlBo3DTlfzaYeI4HVT3t44KjQiUd wDci99WlgXvH4E3x0hf1hYYq+vkr1boiW1svRZrma48j31UvYo8U0bIqLYrx9blD kPbSy1c3u/linunh476jbkDx93Av0yW7187ySyh/e8Mnj8Kp+BaZHrhCH8CBd53t i2tXqNDuG/ylL80cy48Q8UKlmYfMDEgwxNRW4ydhlsCmPWzBeB/MKy97PaVdVDkk GBXIQSwC3w6MQz1JYA+IDnLNc/yOtAgAGPUDXXBqhIXBq4rPGURIMky1QyEPAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQnVG+dVG/cYEPo WrNnqZD8MrqSgTAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTc0QjFGNTIzMENBRjU1MkI2MTYxQjUx NzYyMDdEQkNCREQ5QTVCQ0U5M0NGMjg0NDIwNzc0NjVDMkUyQTZDQy8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9FNzRCMUY1MjMwQ0FGNTUyQjYxNjFCNTE3NjIwN0RCQ0JERDlBNUJDRTkz Q0YyODQ0MjA3NzQ2NUMyRTJBNkNDLzAvMjc1NDZGOUQ1NDZGREM2MDQzRTg1QUIz NjdBOTkwRkMzMkJBOTI4MS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLbJUMA0EAgAC MAcDBQAoA25gMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQWjjANBgkqhkiG9w0B AQsFAAOCAQEAfNV8z8QQSnKRuNsR0vTyny3tErw8i16y8r8a39GyPjQnRQJRRzus yjfZ5Mq+OOO/NsFcKSaFAZBcd2WtocgpZ7qgVSBhalqAqw24OAJGTvvCgMnz4GDl WfMnUw1uuBr/ZKsNcS/l08qj+oVLU3ZiDAxqTdCBu6WwtmfOECPDlaHvInOHCOv2 6Hw6GWtD9J7nnSq7sAXTF2na7LCWnkiLvFpmYAGH7rvJji40bSAuWMfE7pB2Lw8B WVw3mOv03lNtexkC3+hfAPb0JaFFT+v2FPDdqr6DQtqVD/NvsUlxb8DA7B9LNmnr ooubv2NZfoSbYxj7qjSrPaGhHUGoRAfBcw== -----END CERTIFICATE-----Generated at Wed Nov 5 22:46:48 2025 by rpki-client