$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/53953B71C225D2143C92C173E8F140C5C5F22612.cer File: 53953B71C225D2143C92C173E8F140C5C5F22612.cer (raw, json) Hash identifier: z//qPbHUAOLElP1ncLF0j0pDdifOWt2o/Kr85Gl6OkU= Subject key identifier: 53:95:3B:71:C2:25:D2:14:3C:92:C1:73:E8:F1:40:C5:C5:F2:26:12 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 37FF1FB694DAE795A942DCFFBD410CDB5167E1E2 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/321930FA337A4AC8D474ACAA8CA8F1514123E3C21B9B720CD404877AD4DCD9EA/0/53953B71C225D2143C92C173E8F140C5C5F22612.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/321930FA337A4AC8D474ACAA8CA8F1514123E3C21B9B720CD404877AD4DCD9EA/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 01:18:53 +0000 Certificate not after: Wed 04 Feb 2026 01:23:53 +0000 Subordinate resources: AS: 52337 IP: 131.72.224.0/22 IP: 190.105.152.0/22 IP: 2803:2d80::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:ff:1f:b6:94:da:e7:95:a9:42:dc:ff:bd:41:0c:db:51:67:e1:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 01:18:53 2025 GMT Not After : Feb 4 01:23:53 2026 GMT Subject: CN=53953B71C225D2143C92C173E8F140C5C5F22612 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:f6:b1:b6:d2:6b:f8:f5:6d:0f:4d:f8:42:2e: ee:6b:2e:38:60:ea:e9:20:ea:8f:a0:61:30:da:8f: 31:79:a6:5d:3e:65:11:c1:13:c0:f5:3c:32:fb:df: 31:12:83:f8:56:f2:63:bc:e4:6a:92:54:8b:39:7d: df:07:d3:18:8f:95:75:23:2b:7b:f9:90:b5:66:73: cb:b6:73:04:b9:c4:38:a3:c9:d9:4a:36:57:33:1d: 8f:13:a1:7e:7d:e7:13:c2:80:78:f5:78:ae:ad:f6: 72:27:8a:e5:38:82:3a:47:6b:a8:2a:99:d8:20:85: bb:c0:75:ef:43:6b:eb:d7:f4:01:dc:b7:44:3e:80: 60:4b:c2:1a:50:1f:ca:67:28:a6:40:48:8a:75:7e: 13:2f:2e:62:ac:a5:c1:bc:dc:dc:09:d1:47:a2:b8: a5:cc:94:a4:77:c1:c5:17:aa:ae:0f:99:e5:11:ce: 38:96:01:44:b6:a9:e9:3a:20:c9:83:72:0e:eb:ad: 23:c2:a8:09:3f:dc:bb:c6:eb:02:4c:54:6a:58:36: 9f:d7:3c:e5:95:2c:48:4e:74:13:cf:a6:8a:7c:c9: 24:32:33:08:f1:0f:39:4f:8c:4e:0b:6c:7c:92:1a: 3b:55:d2:09:66:08:32:ec:c3:86:7f:db:d5:e3:b5: ab:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 53:95:3B:71:C2:25:D2:14:3C:92:C1:73:E8:F1:40:C5:C5:F2:26:12 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/321930FA337A4AC8D474ACAA8CA8F1514123E3C21B9B720CD404877AD4DCD9EA/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/321930FA337A4AC8D474ACAA8CA8F1514123E3C21B9B720CD404877AD4DCD9EA/0/53953B71C225D2143C92C173E8F140C5C5F22612.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.72.224.0/22 190.105.152.0/22 IPv6: 2803:2d80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52337 Signature Algorithm: sha256WithRSAEncryption 27:29:55:ad:a2:97:fb:77:42:52:14:32:95:67:51:e4:67:8b: 8d:f7:95:b8:8c:7c:39:3a:92:12:70:0c:c3:f5:c4:09:c5:a0: d3:ed:a9:ab:e1:a0:2e:ce:62:0e:7b:6c:d4:34:92:e9:fb:ea: a6:01:63:d2:90:5f:d1:46:70:f4:9c:a5:16:ea:20:70:07:74: 6d:98:6e:70:68:72:4d:52:b5:21:88:f5:00:2f:1b:19:87:fa: b3:26:56:48:69:c2:cb:c9:cb:b0:a7:8e:dd:97:5d:4c:09:dc: 52:d6:42:98:2b:6e:7b:b7:07:ed:1a:f8:73:26:c5:8a:c6:71: ac:05:13:33:41:11:a7:e8:0e:a8:e2:70:3f:19:6b:7e:89:cc: 51:d3:28:9f:60:80:e8:7d:e2:06:79:0b:73:8a:be:56:8c:e6: 5c:46:6d:16:a7:62:c9:72:42:66:88:28:61:18:7e:d7:e7:d4: d9:c9:64:b9:91:6a:ef:e7:e2:8e:9a:c2:c2:70:67:06:ba:d5: 69:3f:02:d6:63:47:54:22:01:42:4f:31:8f:35:2b:34:ee:07: 80:a6:9f:c4:d7:71:aa:56:88:af:40:a5:9c:f2:8c:32:03:c2: f5:60:06:47:63:3b:88:01:c7:e7:33:b3:5f:44:38:ef:ea:c2: f0:90:33:02 -----BEGIN CERTIFICATE----- MIIGqzCCBZOgAwIBAgIUN/8ftpTa55WpQtz/vUEM21Fn4eIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUwMTE4NTNaFw0yNjAyMDQwMTIzNTNaMDMxMTAvBgNV BAMTKDUzOTUzQjcxQzIyNUQyMTQzQzkyQzE3M0U4RjE0MEM1QzVGMjI2MTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ9rG20mv49W0PTfhCLu5rLjhg 6ukg6o+gYTDajzF5pl0+ZRHBE8D1PDL73zESg/hW8mO85GqSVIs5fd8H0xiPlXUj K3v5kLVmc8u2cwS5xDijydlKNlczHY8ToX595xPCgHj1eK6t9nIniuU4gjpHa6gq mdgghbvAde9Da+vX9AHct0Q+gGBLwhpQH8pnKKZASIp1fhMvLmKspcG83NwJ0Uei uKXMlKR3wcUXqq4PmeURzjiWAUS2qek6IMmDcg7rrSPCqAk/3LvG6wJMVGpYNp/X POWVLEhOdBPPpop8ySQyMwjxDzlPjE4LbHySGjtV0glmCDLsw4Z/29XjtatTAgMB AAGjggO1MIIDsTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRTlTtxwiXSFDyS wXPo8UDFxfImEjAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMzIxOTMwRkEzMzdBNEFDOEQ0NzRBQ0FB OENBOEYxNTE0MTIzRTNDMjFCOUI3MjBDRDQwNDg3N0FENERDRDlFQS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8zMjE5MzBGQTMzN0E0QUM4RDQ3NEFDQUE4Q0E4RjE1MTQxMjNFM0MyMUI5 QjcyMENENDA0ODc3QUQ0RENEOUVBLzAvNTM5NTNCNzFDMjI1RDIxNDNDOTJDMTcz RThGMTQwQzVDNUYyMjYxMi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCg0jgAwQCvmmY MA0EAgACMAcDBQAoAy2AMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDMcTANBgkq hkiG9w0BAQsFAAOCAQEAJylVraKX+3dCUhQylWdR5GeLjfeVuIx8OTqSEnAMw/XE CcWg0+2pq+GgLs5iDnts1DSS6fvqpgFj0pBf0UZw9JylFuogcAd0bZhucGhyTVK1 IYj1AC8bGYf6syZWSGnCy8nLsKeO3ZddTAncUtZCmCtue7cH7Rr4cybFisZxrAUT M0ERp+gOqOJwPxlrfonMUdMon2CA6H3iBnkLc4q+VozmXEZtFqdiyXJCZogoYRh+ 1+fU2clkuZFq7+fijprCwnBnBrrVaT8C1mNHVCIBQk8xjzUrNO4HgKafxNdxqlaI r0ClnPKMMgPC9WAGR2M7iAHH5zOzX0Q47+rC8JAzAg== -----END CERTIFICATE-----Generated at Wed Nov 5 17:16:55 2025 by rpki-client