$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B0017A06CE3896D3844578DCE7407C8DF7DCB07.cer File: 2B0017A06CE3896D3844578DCE7407C8DF7DCB07.cer (raw, json) Hash identifier: l4ABfwCSx7z4sUUgbjMsYZ7CBKMTyw4V4YeRRLhDK90= Subject key identifier: 2B:00:17:A0:6C:E3:89:6D:38:44:57:8D:CE:74:07:C8:DF:7D:CB:07 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 0325201DF2D65EAB2FB24150485E334076E2F4B5 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/E603C5FCC57A84B30E3050D70B14CB2873C812B343DE7241DD4B8554F89498A5/0/2B0017A06CE3896D3844578DCE7407C8DF7DCB07.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/E603C5FCC57A84B30E3050D70B14CB2873C812B343DE7241DD4B8554F89498A5/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 12:12:21 +0000 Certificate not after: Wed 04 Feb 2026 12:17:21 +0000 Subordinate resources: AS: 267853 IP: 190.211.176.0/20 IP: 2803:3700::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:25:20:1d:f2:d6:5e:ab:2f:b2:41:50:48:5e:33:40:76:e2:f4:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 12:12:21 2025 GMT Not After : Feb 4 12:17:21 2026 GMT Subject: CN=2B0017A06CE3896D3844578DCE7407C8DF7DCB07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:b4:39:fc:bb:c8:ad:eb:97:0b:b7:d2:18:3f: 4e:6d:9a:af:c8:d1:85:24:d2:ed:33:67:fd:4c:e9: 4b:5d:f2:51:df:73:c1:98:59:22:49:e7:fd:70:9f: da:ef:10:1d:2d:23:8a:08:cf:6b:e3:f8:6d:59:38: d2:5c:79:7b:7c:ef:03:14:8e:fd:30:3f:26:34:fc: 6d:bd:ce:3b:f9:c9:5a:ee:dc:64:c0:12:9b:50:60: 48:58:77:65:39:51:7b:df:dd:69:5d:b6:6a:6f:e5: 50:26:02:5e:03:02:97:11:d9:9c:f2:e6:b3:45:93: 27:16:bb:23:94:d4:d2:97:5a:f9:ea:84:fa:15:1c: 6c:b2:76:ca:81:40:ec:8b:d9:1a:cf:d2:62:39:e8: 44:96:f8:8d:d2:7d:23:0c:52:b4:4f:95:96:ad:84: 6b:7c:3b:2a:cd:0f:4d:4e:46:37:ce:18:4c:7f:86: 79:56:4a:ea:ef:42:46:aa:b0:1e:2c:3c:e1:0f:f0: ac:2b:29:ca:97:0a:cd:6e:d9:e4:3e:75:27:a1:06: 65:df:9e:74:64:f0:83:99:bb:02:9a:4f:89:fc:14: 0c:a1:d4:d5:a0:4d:40:dc:14:a9:04:a4:63:d8:8b: 33:4c:84:7a:ed:95:67:c4:93:3a:af:a0:da:11:3d: be:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2B:00:17:A0:6C:E3:89:6D:38:44:57:8D:CE:74:07:C8:DF:7D:CB:07 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/E603C5FCC57A84B30E3050D70B14CB2873C812B343DE7241DD4B8554F89498A5/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/E603C5FCC57A84B30E3050D70B14CB2873C812B343DE7241DD4B8554F89498A5/0/2B0017A06CE3896D3844578DCE7407C8DF7DCB07.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 190.211.176.0/20 IPv6: 2803:3700::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267853 Signature Algorithm: sha256WithRSAEncryption 53:c8:eb:08:97:f4:eb:24:34:cd:0f:1e:a2:4d:aa:5c:82:d5: f0:4b:0a:91:74:57:f3:1b:8b:ee:58:fe:14:f7:2d:99:0a:43: 77:f6:43:68:03:c6:f4:3e:35:ab:5c:12:38:4e:a1:bd:9e:d1: 70:9b:a3:af:f9:69:1f:94:33:71:2f:62:53:65:2a:69:76:36: f8:50:b1:fd:d4:99:7a:01:1b:15:ad:cc:49:c1:80:5b:30:d5: 49:c6:13:fc:da:a6:f8:58:ff:d2:b8:81:b4:77:fd:2d:be:8c: 4a:02:e6:07:52:19:b8:98:df:7b:0d:3b:9c:1e:71:d8:59:91: 38:42:e8:4e:7e:9c:0b:c3:eb:d5:b5:12:40:e9:6a:2e:c2:c4: bc:c5:d7:47:6d:ad:55:ae:bb:e5:1e:29:6e:2e:e5:03:47:f8: 70:1c:86:42:70:ed:34:50:b3:cc:c5:cd:cf:86:77:44:62:a9: cf:79:4c:77:29:f0:3b:b5:b8:a0:90:07:7c:f9:34:8d:9f:41: e8:1f:e9:ac:7a:3d:db:f3:0d:86:18:19:2c:8f:fa:16:a0:e8: e6:57:d8:dc:42:77:b4:b1:a2:01:83:48:ad:b2:35:6e:cf:97: 07:f1:8b:da:d1:ff:79:ef:5b:e7:3a:6d:1d:ba:a0:23:0b:e8: 67:79:11:3f -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUAyUgHfLWXqsvskFQSF4zQHbi9LUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUxMjEyMjFaFw0yNjAyMDQxMjE3MjFaMDMxMTAvBgNV BAMTKDJCMDAxN0EwNkNFMzg5NkQzODQ0NTc4RENFNzQwN0M4REY3RENCMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrtDn8u8it65cLt9IYP05tmq/I 0YUk0u0zZ/1M6Utd8lHfc8GYWSJJ5/1wn9rvEB0tI4oIz2vj+G1ZONJceXt87wMU jv0wPyY0/G29zjv5yVru3GTAEptQYEhYd2U5UXvf3Wldtmpv5VAmAl4DApcR2Zzy 5rNFkycWuyOU1NKXWvnqhPoVHGyydsqBQOyL2RrP0mI56ESW+I3SfSMMUrRPlZat hGt8OyrND01ORjfOGEx/hnlWSurvQkaqsB4sPOEP8KwrKcqXCs1u2eQ+dSehBmXf nnRk8IOZuwKaT4n8FAyh1NWgTUDcFKkEpGPYizNMhHrtlWfEkzqvoNoRPb51AgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQrABegbOOJbThE V43OdAfI333LBzAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTYwM0M1RkNDNTdBODRCMzBFMzA1MEQ3 MEIxNENCMjg3M0M4MTJCMzQzREU3MjQxREQ0Qjg1NTRGODk0OThBNS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9FNjAzQzVGQ0M1N0E4NEIzMEUzMDUwRDcwQjE0Q0IyODczQzgxMkIzNDNE RTcyNDFERDRCODU1NEY4OTQ5OEE1LzAvMkIwMDE3QTA2Q0UzODk2RDM4NDQ1NzhE Q0U3NDA3QzhERjdEQ0IwNy5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQEvtOwMA0EAgAC MAcDBQAoAzcAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQWTTANBgkqhkiG9w0B AQsFAAOCAQEAU8jrCJf06yQ0zQ8eok2qXILV8EsKkXRX8xuL7lj+FPctmQpDd/ZD aAPG9D41q1wSOE6hvZ7RcJujr/lpH5QzcS9iU2UqaXY2+FCx/dSZegEbFa3MScGA WzDVScYT/Nqm+Fj/0riBtHf9Lb6MSgLmB1IZuJjfew07nB5x2FmROELoTn6cC8Pr 1bUSQOlqLsLEvMXXR22tVa675R4pbi7lA0f4cByGQnDtNFCzzMXNz4Z3RGKpz3lM dynwO7W4oJAHfPk0jZ9B6B/prHo92/MNhhgZLI/6FqDo5lfY3EJ3tLGiAYNIrbI1 bs+XB/GL2tH/ee9b5zptHbqgIwvoZ3kRPw== -----END CERTIFICATE-----Generated at Wed Nov 5 12:04:54 2025 by rpki-client