$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/409F816F9F6076FF99779C7733845FD803FA035A.cer File: 409F816F9F6076FF99779C7733845FD803FA035A.cer (raw, json) Hash identifier: WU4NyE2MBwUpSuF0ybZag4uaKaSgWCo4ORQTaaWZuN4= Subject key identifier: 40:9F:81:6F:9F:60:76:FF:99:77:9C:77:33:84:5F:D8:03:FA:03:5A Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 6F3B38A14732F8F22DC988CE77B52BA8940F0FBD Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/70D661404135CBC4C9A26A7E0A41396D445E1D10397A15F537D8228C9A78EEC3/0/409F816F9F6076FF99779C7733845FD803FA035A.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/70D661404135CBC4C9A26A7E0A41396D445E1D10397A15F537D8228C9A78EEC3/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Fri 25 Apr 2025 12:05:01 +0000 Certificate not after: Fri 24 Apr 2026 12:10:01 +0000 Subordinate resources: AS: 52291 IP: 190.111.124.0/22 IP: 2803:3950::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:3b:38:a1:47:32:f8:f2:2d:c9:88:ce:77:b5:2b:a8:94:0f:0f:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Apr 25 12:05:01 2025 GMT Not After : Apr 24 12:10:01 2026 GMT Subject: CN=409F816F9F6076FF99779C7733845FD803FA035A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:1c:08:a3:7a:96:8d:e8:82:13:43:0d:43:65: 3b:9c:a4:0f:98:46:a7:4d:6e:c9:57:5c:f1:33:aa: f3:ad:35:c4:72:99:39:a8:44:26:8c:c1:7f:47:9b: 84:2f:64:13:39:03:de:31:10:98:30:92:0c:51:4c: ea:0d:16:e0:aa:a6:9a:29:e1:78:bc:64:31:4b:59: 45:78:ab:e9:c1:a8:98:5f:f9:23:c3:51:23:41:f0: 87:fe:05:d7:12:f0:b2:c8:5b:8e:e8:6b:d8:19:d3: 89:fd:33:99:5e:78:1a:58:6e:a9:f5:0e:3f:41:a0: 1c:e4:10:92:92:c3:15:08:4f:68:6c:94:a2:46:99: 5c:49:6c:39:df:e0:77:e7:02:f3:86:7b:54:0c:e4: fe:33:49:cb:22:36:df:6b:61:37:05:90:c4:e0:e7: 0f:26:f7:c4:49:87:1c:7c:51:fa:f6:2c:c7:bb:94: 7c:7c:2b:ba:96:8c:1a:f0:7b:aa:42:94:c0:7c:1f: ae:f3:60:1a:38:9f:d5:76:8c:97:4a:e2:59:eb:12: a7:90:2e:8f:08:f8:66:0f:67:95:a9:97:92:cb:ca: c4:3b:7d:5a:18:01:67:93:ad:1b:ff:c6:10:33:b5: 0b:0d:79:4f:bc:88:ab:20:e8:6d:ba:e3:e9:56:05: 4e:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 40:9F:81:6F:9F:60:76:FF:99:77:9C:77:33:84:5F:D8:03:FA:03:5A X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/70D661404135CBC4C9A26A7E0A41396D445E1D10397A15F537D8228C9A78EEC3/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/70D661404135CBC4C9A26A7E0A41396D445E1D10397A15F537D8228C9A78EEC3/0/409F816F9F6076FF99779C7733845FD803FA035A.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 190.111.124.0/22 IPv6: 2803:3950::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52291 Signature Algorithm: sha256WithRSAEncryption b5:9c:22:ac:06:62:6d:18:23:12:d6:4a:e0:b0:b2:33:88:0d: 52:fe:e8:ce:eb:5b:e9:50:a8:a7:da:41:20:f5:63:29:e6:94: 86:cc:15:dc:8e:9a:5e:3d:30:7b:27:3f:4c:60:e0:ef:7b:97: b4:9c:93:54:07:57:54:27:6a:cc:b6:6e:05:15:4c:80:c9:f7: 83:c3:88:f2:07:bf:d4:9e:1a:5d:e1:90:76:ea:8c:b8:77:28: e2:e4:7a:8d:c7:4d:ad:c7:d9:5e:f8:76:c6:b3:4e:94:d3:d7: 06:45:a1:f9:2d:6a:5b:ec:14:e2:da:0a:be:e9:65:44:10:64: 85:84:08:aa:97:3b:3c:68:70:f3:46:23:0f:46:b5:ac:84:39: be:d4:75:49:e7:39:e4:fb:38:be:6a:f5:e8:e3:0c:ff:05:99: 7f:0e:fe:cc:6e:ca:0b:96:3f:5d:33:fa:e1:a1:f2:80:b6:93: 97:6f:3f:be:fa:e9:04:4e:9d:f5:a6:61:1a:03:57:34:fd:c8: f7:04:5b:4d:ea:10:c0:f5:62:fa:3e:73:db:6d:83:bb:0b:35: ab:1f:22:5f:08:4a:59:d2:59:33:7c:d9:74:1c:41:96:04:ec: 5b:ed:41:70:6c:4d:1a:81:28:0b:58:d0:4d:c2:9b:84:46:e1: 7e:e6:8a:65 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUbzs4oUcy+PItyYjOd7UrqJQPD70wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTA0MjUxMjA1MDFaFw0yNjA0MjQxMjEwMDFaMDMxMTAvBgNV BAMTKDQwOUY4MTZGOUY2MDc2RkY5OTc3OUM3NzMzODQ1RkQ4MDNGQTAzNUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvHAijepaN6IITQw1DZTucpA+Y RqdNbslXXPEzqvOtNcRymTmoRCaMwX9Hm4QvZBM5A94xEJgwkgxRTOoNFuCqppop 4Xi8ZDFLWUV4q+nBqJhf+SPDUSNB8If+BdcS8LLIW47oa9gZ04n9M5leeBpYbqn1 Dj9BoBzkEJKSwxUIT2hslKJGmVxJbDnf4HfnAvOGe1QM5P4zScsiNt9rYTcFkMTg 5w8m98RJhxx8Ufr2LMe7lHx8K7qWjBrwe6pClMB8H67zYBo4n9V2jJdK4lnrEqeQ Lo8I+GYPZ5Wpl5LLysQ7fVoYAWeTrRv/xhAztQsNeU+8iKsg6G264+lWBU49AgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRAn4Fvn2B2/5l3 nHczhF/YA/oDWjAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNzBENjYxNDA0MTM1Q0JDNEM5QTI2QTdF MEE0MTM5NkQ0NDVFMUQxMDM5N0ExNUY1MzdEODIyOEM5QTc4RUVDMy8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy83MEQ2NjE0MDQxMzVDQkM0QzlBMjZBN0UwQTQxMzk2RDQ0NUUxRDEwMzk3 QTE1RjUzN0Q4MjI4QzlBNzhFRUMzLzAvNDA5RjgxNkY5RjYwNzZGRjk5Nzc5Qzc3 MzM4NDVGRDgwM0ZBMDM1QS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCvm98MA0EAgAC MAcDBQAoAzlQMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDMQzANBgkqhkiG9w0B AQsFAAOCAQEAtZwirAZibRgjEtZK4LCyM4gNUv7ozutb6VCop9pBIPVjKeaUhswV 3I6aXj0weyc/TGDg73uXtJyTVAdXVCdqzLZuBRVMgMn3g8OI8ge/1J4aXeGQduqM uHco4uR6jcdNrcfZXvh2xrNOlNPXBkWh+S1qW+wU4toKvullRBBkhYQIqpc7PGhw 80YjD0a1rIQ5vtR1Sec55Ps4vmr16OMM/wWZfw7+zG7KC5Y/XTP64aHygLaTl28/ vvrpBE6d9aZhGgNXNP3I9wRbTeoQwPVi+j5z222Duws1qx8iXwhKWdJZM3zZdBxB lgTsW+1BcGxNGoEoC1jQTcKbhEbhfuaKZQ== -----END CERTIFICATE-----Generated at Wed Nov 5 12:07:57 2025 by rpki-client