$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5094E25430BCD5E2E482E64388ADB10B84687666.cer File: 5094E25430BCD5E2E482E64388ADB10B84687666.cer (raw, json) Hash identifier: ulUGbWaarHK8rxcFTOA2pQytqJfPpOYaw/2nv0gE06Q= Subject key identifier: 50:94:E2:54:30:BC:D5:E2:E4:82:E6:43:88:AD:B1:0B:84:68:76:66 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 0193D14972A77044A82447D9C5ECEF783655B510 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/5094E25430BCD5E2E482E64388ADB10B84687666.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 21:18:29 +0000 Certificate not after: Wed 04 Feb 2026 21:23:29 +0000 Subordinate resources: AS: 28027 IP: 192.188.59.0/24 IP: 200.9.176.0/24 IP: 200.10.147.0 -- 200.10.151.255 IP: 200.126.0.0/19 IP: 2801:0:20::/48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:93:d1:49:72:a7:70:44:a8:24:47:d9:c5:ec:ef:78:36:55:b5:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 21:18:29 2025 GMT Not After : Feb 4 21:23:29 2026 GMT Subject: CN=5094E25430BCD5E2E482E64388ADB10B84687666 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:0a:2f:38:5c:5f:da:9c:43:9c:7e:6d:b1:f2: b7:9b:88:fe:2e:50:f8:63:66:e4:ad:23:f4:cb:aa: fa:67:0f:43:c6:33:e7:10:69:7b:8e:e8:cd:10:c4: 71:b9:0a:48:74:20:a4:48:9d:22:91:ed:8d:ca:bc: 23:ec:f6:20:9b:69:ae:e3:14:44:f8:86:de:2c:b4: fb:9b:4b:28:67:5a:7c:50:c6:26:ae:2b:54:6b:b6: 1f:eb:68:9c:93:18:4c:99:9d:17:99:e3:71:a6:49: 04:d6:82:a6:77:e5:eb:de:37:b6:3e:30:4e:7f:be: bd:a1:e5:ce:34:59:ef:b6:6c:b3:0d:98:9e:91:de: 2f:e2:44:88:d9:ee:47:8a:1d:01:d7:ca:c2:0a:75: 09:61:c3:5f:85:68:e6:1f:9d:c7:b1:0e:f3:f6:9c: 8d:51:d0:9e:fe:a7:bb:c9:dc:62:b9:7f:ba:49:74: 5e:32:85:8f:01:0e:3f:55:c7:0a:ef:0f:74:84:8c: 59:e8:79:a6:3a:03:95:81:01:11:8e:92:cd:2a:d8: b2:be:cd:c5:9c:03:4e:a2:80:b5:ce:5f:7f:03:fc: e1:4d:e4:8e:d6:9a:37:69:20:db:5e:b0:65:88:05: b5:ee:88:70:6d:b6:86:30:6e:d0:94:b4:9d:77:f5: 14:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 50:94:E2:54:30:BC:D5:E2:E4:82:E6:43:88:AD:B1:0B:84:68:76:66 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/5094E25430BCD5E2E482E64388ADB10B84687666.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.188.59.0/24 200.9.176.0/24 200.10.147.0-200.10.151.255 200.126.0.0/19 IPv6: 2801:0:20::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28027 Signature Algorithm: sha256WithRSAEncryption 1e:40:89:bf:ac:fd:7e:a0:9a:ce:91:14:32:67:8c:76:fe:0a: 41:e5:8f:8c:e3:69:68:1b:ff:35:6a:92:f1:51:8b:dc:3e:0b: 99:03:43:23:e8:96:49:83:31:1e:82:90:72:b6:4b:73:9c:2e: d1:70:f5:23:02:f4:a6:f2:0f:5e:75:49:72:95:ca:9d:07:87: 2c:16:de:ac:77:3d:59:d7:b5:55:a3:e8:bd:8c:37:b5:7c:14: 68:2f:51:d2:f8:61:8c:77:c1:4c:54:5a:11:9e:79:c3:12:b5: 2b:54:04:da:50:64:04:e5:dc:4e:8f:27:fd:99:df:db:57:22: 7e:30:6a:66:7b:11:6a:d6:2f:b8:69:a1:55:52:0f:91:44:57: 2e:e0:61:5c:90:79:e2:bd:0f:82:4e:ba:9a:ae:52:d5:55:4b: ea:eb:9c:2a:ce:e4:35:45:f3:d6:27:ed:3d:e1:9d:fc:02:28: bf:14:a4:06:dc:e5:29:1e:7e:09:bf:89:5b:d9:4c:ea:de:93: 09:16:dd:2e:3d:4c:37:18:5b:8b:09:eb:63:12:06:52:4d:bc: 23:d1:12:97:21:d3:aa:8e:76:40:e7:92:e7:9e:ba:4d:5a:7a: 1e:d4:1e:20:df:97:91:5c:97:06:9c:02:1e:a2:d0:16:53:88: ba:da:4c:27 -----BEGIN CERTIFICATE----- MIIGwDCCBaigAwIBAgIUAZPRSXKncESoJEfZxezveDZVtRAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUyMTE4MjlaFw0yNjAyMDQyMTIzMjlaMDMxMTAvBgNV BAMTKDUwOTRFMjU0MzBCQ0Q1RTJFNDgyRTY0Mzg4QURCMTBCODQ2ODc2NjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClCi84XF/anEOcfm2x8rebiP4u UPhjZuStI/TLqvpnD0PGM+cQaXuO6M0QxHG5Ckh0IKRInSKR7Y3KvCPs9iCbaa7j FET4ht4stPubSyhnWnxQxiauK1Rrth/raJyTGEyZnReZ43GmSQTWgqZ35eveN7Y+ ME5/vr2h5c40We+2bLMNmJ6R3i/iRIjZ7keKHQHXysIKdQlhw1+FaOYfncexDvP2 nI1R0J7+p7vJ3GK5f7pJdF4yhY8BDj9VxwrvD3SEjFnoeaY6A5WBARGOks0q2LK+ zcWcA06igLXOX38D/OFN5I7WmjdpINtesGWIBbXuiHBttoYwbtCUtJ139RSFAgMB AAGjggPKMIIDxjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRQlOJUMLzV4uSC 5kOIrbELhGh2ZjAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNDkxMDM4MzAzMzJBQzZCNjJCRTVGMDUw QTI0QTc2OThCNDU3RDg5OTY2QUM0OUY5RDJEMEQ1M0I2MTRBQ0QzRi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OTEwMzgzMDMzMkFDNkI2MkJFNUYwNTBBMjRBNzY5OEI0NTdEODk5NjZB QzQ5RjlEMkQwRDUzQjYxNEFDRDNGLzAvNTA5NEUyNTQzMEJDRDVFMkU0ODJFNjQz ODhBREIxMEI4NDY4NzY2Ni5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMEoGCCsGAQUFBwEHAQH/BDswOTAmBAIAATAgAwQAwLw7AwQAyAmw MAwDBADICpMDBAPICpADBAXIfgAwDwQCAAIwCQMHACgBAAAAIDAZBggrBgEFBQcB CAEB/wQKMAigBjAEAgJtezANBgkqhkiG9w0BAQsFAAOCAQEAHkCJv6z9fqCazpEU MmeMdv4KQeWPjONpaBv/NWqS8VGL3D4LmQNDI+iWSYMxHoKQcrZLc5wu0XD1IwL0 pvIPXnVJcpXKnQeHLBberHc9Wde1VaPovYw3tXwUaC9R0vhhjHfBTFRaEZ55wxK1 K1QE2lBkBOXcTo8n/Znf21cifjBqZnsRatYvuGmhVVIPkURXLuBhXJB54r0Pgk66 mq5S1VVL6uucKs7kNUXz1iftPeGd/AIovxSkBtzlKR5+Cb+JW9lM6t6TCRbdLj1M NxhbiwnrYxIGUk28I9ESlyHTqo52QOeS5566TVp6HtQeIN+XkVyXBpwCHqLQFlOI utpMJw== -----END CERTIFICATE-----Generated at Tue Nov 4 19:02:58 2025 by rpki-client