$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F43917327673645BD0B520BF95E9CA235CEFEB8.cer File: 4F43917327673645BD0B520BF95E9CA235CEFEB8.cer (raw, json) Hash identifier: FVu7L+dv1NZTP6/gdKuLDcVJZa3zLPNirrbSu2MZHuc= Subject key identifier: 4F:43:91:73:27:67:36:45:BD:0B:52:0B:F9:5E:9C:A2:35:CE:FE:B8 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 565D6818DFA1E1B4D9AE7E75452D5E593FFEF837 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/CF8B87503A84E48F7652084EAC8AF0DE7CB357A55CDCA2F4B682724B356B877F/0/4F43917327673645BD0B520BF95E9CA235CEFEB8.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/CF8B87503A84E48F7652084EAC8AF0DE7CB357A55CDCA2F4B682724B356B877F/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 19:08:18 +0000 Certificate not after: Wed 04 Feb 2026 19:13:18 +0000 Subordinate resources: AS: 28392 IP: 201.131.6.0/23 IP: 2801:c4:b4::/48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:5d:68:18:df:a1:e1:b4:d9:ae:7e:75:45:2d:5e:59:3f:fe:f8:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 19:08:18 2025 GMT Not After : Feb 4 19:13:18 2026 GMT Subject: CN=4F43917327673645BD0B520BF95E9CA235CEFEB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:29:09:bf:d7:a3:0b:bc:a0:e8:80:04:df:13: 78:9b:00:56:ef:64:a7:cd:b3:fd:78:c3:a1:e7:09: 54:9d:e9:3a:70:b5:af:89:41:dd:db:7c:c3:98:6f: 00:3b:55:96:eb:69:f8:92:21:47:be:ec:37:26:7a: ed:83:12:f8:79:ab:c1:1b:27:4b:ed:ca:e9:a9:ce: cf:ed:8e:3c:c8:c3:fd:e5:2b:c8:ca:87:61:ed:a9: af:e1:54:2f:b9:ce:46:35:64:87:b4:69:2e:0b:c9: 30:63:20:66:42:c5:cf:d7:1d:6c:99:83:46:64:9a: 74:07:f4:06:14:ad:c1:5b:a1:44:e6:44:a8:a3:2a: 22:3d:bf:ab:8d:81:0a:02:7a:42:15:1c:07:1f:ad: 10:16:ad:fb:77:27:fc:89:d9:60:7f:89:43:2a:47: 14:88:8d:6d:5b:6e:b6:e0:dc:75:f1:2a:4b:7a:28: b5:2e:4c:68:12:ab:c0:e8:64:dd:d0:9e:0c:3c:cc: 74:8c:79:0e:b5:7c:55:65:1c:20:c7:d6:cc:f4:d7: 64:ea:13:8f:39:74:2c:85:06:f7:d7:6c:6b:a1:a2: 9d:dd:1f:6d:a1:2f:65:a1:62:2e:ce:9a:20:b8:61: 69:01:44:88:eb:b4:60:52:68:b6:5d:aa:24:be:f7: 81:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4F:43:91:73:27:67:36:45:BD:0B:52:0B:F9:5E:9C:A2:35:CE:FE:B8 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/CF8B87503A84E48F7652084EAC8AF0DE7CB357A55CDCA2F4B682724B356B877F/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/CF8B87503A84E48F7652084EAC8AF0DE7CB357A55CDCA2F4B682724B356B877F/0/4F43917327673645BD0B520BF95E9CA235CEFEB8.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 201.131.6.0/23 IPv6: 2801:c4:b4::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28392 Signature Algorithm: sha256WithRSAEncryption e0:b6:0d:59:a2:17:03:d3:6b:c5:ad:97:98:fc:ff:01:ea:76: da:c6:41:9c:df:e2:91:9c:f2:01:9f:47:d3:a2:27:85:a8:82: 66:2e:72:f2:52:36:05:d2:65:d4:e2:c3:17:06:18:ea:01:9d: d0:16:02:a7:25:a0:ca:56:a5:1d:f1:c5:74:b8:fe:56:df:0c: 4d:7b:91:f4:66:76:7b:ef:05:e7:a4:48:f5:e9:4c:3a:bf:2a: 01:6e:41:4a:e2:cd:a4:d7:51:24:81:fc:04:fc:df:b0:73:a4: 5a:ca:c3:9b:3d:06:18:17:7c:0a:d9:d3:39:c3:ab:63:0e:06: 68:a2:b9:44:db:6b:02:b6:a6:e3:15:e7:0e:d1:9c:54:6a:fd: b5:92:62:93:c3:1b:ba:ff:9a:b8:65:97:9b:e9:41:b9:a7:ce: de:f1:61:fe:b4:d5:e8:f9:7c:38:15:34:2c:b1:9b:14:0e:88: 27:91:1b:28:d0:fc:41:f7:dc:3f:ba:d9:e2:b1:45:fa:73:76: 93:9b:75:97:20:43:69:1e:b8:47:68:5f:e2:5f:30:a9:27:2c: f1:b8:23:f5:19:4a:38:4c:e9:ca:d2:74:52:f7:65:c3:05:82: 20:f5:c9:a7:08:2d:f1:3c:ac:e0:d0:ff:23:5f:c6:a7:f4:e0: c1:88:a5:4e -----BEGIN CERTIFICATE----- MIIGpjCCBY6gAwIBAgIUVl1oGN+h4bTZrn51RS1eWT/++DcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUxOTA4MThaFw0yNjAyMDQxOTEzMThaMDMxMTAvBgNV BAMTKDRGNDM5MTczMjc2NzM2NDVCRDBCNTIwQkY5NUU5Q0EyMzVDRUZFQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2KQm/16MLvKDogATfE3ibAFbv ZKfNs/14w6HnCVSd6Tpwta+JQd3bfMOYbwA7VZbrafiSIUe+7Dcmeu2DEvh5q8Eb J0vtyumpzs/tjjzIw/3lK8jKh2Htqa/hVC+5zkY1ZIe0aS4LyTBjIGZCxc/XHWyZ g0ZkmnQH9AYUrcFboUTmRKijKiI9v6uNgQoCekIVHAcfrRAWrft3J/yJ2WB/iUMq RxSIjW1bbrbg3HXxKkt6KLUuTGgSq8DoZN3Qngw8zHSMeQ61fFVlHCDH1sz012Tq E485dCyFBvfXbGuhop3dH22hL2WhYi7OmiC4YWkBRIjrtGBSaLZdqiS+94FJAgMB AAGjggOwMIIDrDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRPQ5FzJ2c2Rb0L Ugv5XpyiNc7+uDAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQ0Y4Qjg3NTAzQTg0RTQ4Rjc2NTIwODRF QUM4QUYwREU3Q0IzNTdBNTVDRENBMkY0QjY4MjcyNEIzNTZCODc3Ri8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9DRjhCODc1MDNBODRFNDhGNzY1MjA4NEVBQzhBRjBERTdDQjM1N0E1NUNE Q0EyRjRCNjgyNzI0QjM1NkI4NzdGLzAvNEY0MzkxNzMyNzY3MzY0NUJEMEI1MjBC Rjk1RTlDQTIzNUNFRkVCOC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQByYMGMA8EAgAC MAkDBwAoAQDEALQwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICbugwDQYJKoZIhvcN AQELBQADggEBAOC2DVmiFwPTa8Wtl5j8/wHqdtrGQZzf4pGc8gGfR9OiJ4WogmYu cvJSNgXSZdTiwxcGGOoBndAWAqcloMpWpR3xxXS4/lbfDE17kfRmdnvvBeekSPXp TDq/KgFuQUrizaTXUSSB/AT837BzpFrKw5s9BhgXfArZ0znDq2MOBmiiuUTbawK2 puMV5w7RnFRq/bWSYpPDG7r/mrhll5vpQbmnzt7xYf601ej5fDgVNCyxmxQOiCeR GyjQ/EH33D+62eKxRfpzdpObdZcgQ2keuEdoX+JfMKknLPG4I/UZSjhM6crSdFL3 ZcMFgiD1yacILfE8rODQ/yNfxqf04MGIpU4= -----END CERTIFICATE-----Generated at Tue Nov 4 21:38:27 2025 by rpki-client