$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C36A670C53A27F65B8EF7F309F07097DCEF7A41.cer File: 2C36A670C53A27F65B8EF7F309F07097DCEF7A41.cer (raw, json) Hash identifier: dg9hPtkxGTM+7po/zZnCN9QfON3XA7iMqk0WJK6U69s= Subject key identifier: 2C:36:A6:70:C5:3A:27:F6:5B:8E:F7:F3:09:F0:70:97:DC:EF:7A:41 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 4B61F7A9179367AF10A8E7999361013214CC2F7B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/457A20C0CFF178C222744665E71A9184FAB99379C3143468BDE84D09C5E64D80/0/2C36A670C53A27F65B8EF7F309F07097DCEF7A41.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/457A20C0CFF178C222744665E71A9184FAB99379C3143468BDE84D09C5E64D80/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Fri 25 Jul 2025 16:35:01 +0000 Certificate not after: Fri 24 Jul 2026 16:40:01 +0000 Subordinate resources: AS: 52430 IP: 186.64.96.0/21 IP: 2803:9500::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 06 Aug 2025 17:55:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:61:f7:a9:17:93:67:af:10:a8:e7:99:93:61:01:32:14:cc:2f:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Jul 25 16:35:01 2025 GMT Not After : Jul 24 16:40:01 2026 GMT Subject: CN=2C36A670C53A27F65B8EF7F309F07097DCEF7A41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:5a:b5:f4:49:d4:b1:86:60:a2:e9:9e:ac:9b: 13:de:26:2d:08:22:3a:9a:7a:e8:9f:38:dc:f1:78: b9:77:12:21:73:e0:60:16:cf:3e:7d:fb:ce:cf:fe: a6:31:8e:5b:9a:cb:45:cd:00:5a:0f:a2:f2:24:90: ee:ff:e2:9a:fc:e9:3d:9a:d4:89:96:63:7e:0d:e5: 44:8f:d2:7b:62:db:9b:54:6f:91:4d:30:93:30:34: 6e:3f:59:44:10:f2:ea:cc:82:9e:91:7a:9c:6a:1d: 62:a7:75:c3:55:11:02:e9:0b:f3:77:13:54:a1:46: a0:52:a6:90:6c:61:4f:48:0b:57:7d:1f:a0:36:60: ee:0b:53:ce:62:d6:57:62:3d:65:fa:0d:2c:7a:3e: 03:c0:46:e3:9e:d4:8c:a7:10:53:99:63:fc:eb:72: 44:9a:51:57:87:79:ca:47:58:d2:77:bb:32:02:f8: 35:96:01:c8:4f:85:a5:4f:1f:dd:c8:1b:a8:f4:0a: 45:75:ba:8b:68:0c:b6:d4:e5:8f:f2:28:60:0c:f6: 4a:36:d5:be:3d:1d:21:77:c1:ab:89:4f:48:e6:cd: c8:f1:88:19:4f:54:14:e7:a5:d9:fb:ab:39:22:62: ff:37:32:f0:75:19:ed:54:05:d0:f5:6d:de:c3:22: 6d:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2C:36:A6:70:C5:3A:27:F6:5B:8E:F7:F3:09:F0:70:97:DC:EF:7A:41 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/457A20C0CFF178C222744665E71A9184FAB99379C3143468BDE84D09C5E64D80/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/457A20C0CFF178C222744665E71A9184FAB99379C3143468BDE84D09C5E64D80/0/2C36A670C53A27F65B8EF7F309F07097DCEF7A41.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 186.64.96.0/21 IPv6: 2803:9500::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52430 Signature Algorithm: sha256WithRSAEncryption 1d:e7:9c:a0:53:f6:51:45:fb:8c:81:2c:ac:9d:32:00:06:6a: 76:13:c3:43:e2:6d:7e:6e:73:d5:0b:9a:95:d8:ab:c4:de:59: 96:fa:a2:2c:38:c4:b0:7a:6f:93:7a:81:5c:6d:66:b2:0c:c2: d3:a8:25:cc:29:28:97:cc:cb:81:70:4a:cd:78:43:4b:5d:47: b1:bf:69:95:52:e1:2f:9b:9b:cf:d8:f4:af:1e:61:56:18:59: 3b:a5:a5:43:21:7a:61:29:4c:b8:6b:9a:78:03:3a:fd:9e:cc: 9e:82:ff:22:7d:74:3c:19:95:cc:49:de:ef:8f:6c:f1:a3:1b: ea:90:be:d3:22:10:0b:61:3c:45:6c:40:a1:b4:92:2e:69:d5: 02:60:6b:cc:e6:7c:8a:72:de:f9:ef:e4:31:55:d8:a4:a8:11: db:e1:94:1d:f7:cf:f2:71:ac:ce:93:c2:93:72:e6:d0:33:c3: 33:ac:c8:20:b3:d3:10:e2:07:6d:cd:47:68:d0:85:4c:3b:21: c3:c4:f8:e2:88:f1:25:a4:e1:e3:cc:3c:56:34:33:ca:71:9c: 2c:9d:80:0b:76:22:45:ba:c0:bc:0a:40:98:a4:bd:6d:16:a4: ef:5e:44:6d:bc:9b:ed:24:bb:1d:dc:ae:0a:89:6f:93:2f:31: 32:21:c2:9a -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUS2H3qReTZ68QqOeZk2EBMhTML3swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTA3MjUxNjM1MDFaFw0yNjA3MjQxNjQwMDFaMDMxMTAvBgNV BAMTKDJDMzZBNjcwQzUzQTI3RjY1QjhFRjdGMzA5RjA3MDk3RENFRjdBNDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOWrX0SdSxhmCi6Z6smxPeJi0I IjqaeuifONzxeLl3EiFz4GAWzz59+87P/qYxjluay0XNAFoPovIkkO7/4pr86T2a 1ImWY34N5USP0nti25tUb5FNMJMwNG4/WUQQ8urMgp6RepxqHWKndcNVEQLpC/N3 E1ShRqBSppBsYU9IC1d9H6A2YO4LU85i1ldiPWX6DSx6PgPARuOe1IynEFOZY/zr ckSaUVeHecpHWNJ3uzIC+DWWAchPhaVPH93IG6j0CkV1uotoDLbU5Y/yKGAM9ko2 1b49HSF3wauJT0jmzcjxiBlPVBTnpdn7qzkiYv83MvB1Ge1UBdD1bd7DIm2XAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQsNqZwxTon9luO 9/MJ8HCX3O96QTAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNDU3QTIwQzBDRkYxNzhDMjIyNzQ0NjY1 RTcxQTkxODRGQUI5OTM3OUMzMTQzNDY4QkRFODREMDlDNUU2NEQ4MC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80NTdBMjBDMENGRjE3OEMyMjI3NDQ2NjVFNzFBOTE4NEZBQjk5Mzc5QzMx NDM0NjhCREU4NEQwOUM1RTY0RDgwLzAvMkMzNkE2NzBDNTNBMjdGNjVCOEVGN0Yz MDlGMDcwOTdEQ0VGN0E0MS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDukBgMA0EAgAC MAcDBQAoA5UAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDMzjANBgkqhkiG9w0B AQsFAAOCAQEAHeecoFP2UUX7jIEsrJ0yAAZqdhPDQ+Jtfm5z1QualdirxN5Zlvqi LDjEsHpvk3qBXG1msgzC06glzCkol8zLgXBKzXhDS11Hsb9plVLhL5ubz9j0rx5h VhhZO6WlQyF6YSlMuGuaeAM6/Z7MnoL/In10PBmVzEne749s8aMb6pC+0yIQC2E8 RWxAobSSLmnVAmBrzOZ8inLe+e/kMVXYpKgR2+GUHffP8nGszpPCk3Lm0DPDM6zI ILPTEOIHbc1HaNCFTDshw8T44ojxJaTh48w8VjQzynGcLJ2AC3YiRbrAvApAmKS9 bRak715Ebbyb7SS7HdyuColvky8xMiHCmg== -----END CERTIFICATE-----Generated at Sun Aug 3 00:57:43 2025 by rpki-client