$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B81794CD98EF0A02BE2F181B268BD8569A7BE41.cer File: 5B81794CD98EF0A02BE2F181B268BD8569A7BE41.cer (raw, json) Hash identifier: vSiJcUkFZCdG2kp0xBU/LizYiAvTG117OQyQKOQqXOk= Subject key identifier: 5B:81:79:4C:D9:8E:F0:A0:2B:E2:F1:81:B2:68:BD:85:69:A7:BE:41 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 3CCEA963C445317461BAFD897351482114D5689C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/AE2B17A5E948EDBEE25BA20C857C5CFEA9D4A1FA57A927CE63B9367D23762EB2/0/5B81794CD98EF0A02BE2F181B268BD8569A7BE41.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/AE2B17A5E948EDBEE25BA20C857C5CFEA9D4A1FA57A927CE63B9367D23762EB2/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 04 Feb 2025 21:52:33 +0000 Certificate not after: Tue 03 Feb 2026 21:57:33 +0000 Subordinate resources: AS: 272891 IP: 2803:c690::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:ce:a9:63:c4:45:31:74:61:ba:fd:89:73:51:48:21:14:d5:68:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 4 21:52:33 2025 GMT Not After : Feb 3 21:57:33 2026 GMT Subject: CN=5B81794CD98EF0A02BE2F181B268BD8569A7BE41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e8:ac:af:a9:49:98:72:b1:8a:83:db:8d:c7: 84:99:08:e8:b2:b1:c5:a2:9f:91:e6:6f:59:e4:31: 46:17:83:4c:ef:81:85:10:ca:90:ec:4f:f4:fa:66: a4:7c:4f:33:1f:c7:ac:b9:ae:bd:4c:fb:b0:84:c2: d4:b0:43:d8:30:8e:a6:7f:5e:8b:b6:ce:d0:13:dc: 6a:7b:d9:f6:cc:ba:46:1a:53:8f:f2:63:f1:16:00: b8:54:b5:9a:8f:bc:ef:98:b7:6c:d2:4b:e5:f6:3b: 4b:2a:76:ed:cf:73:9f:04:73:24:ae:02:c4:2a:c1: 84:06:f0:ab:99:bf:c4:8e:27:84:7d:c0:b9:1a:7c: aa:25:c6:4d:80:59:34:73:64:48:df:fc:07:5d:3e: 7b:48:95:21:73:b3:62:68:d0:2d:95:94:49:c6:7b: 50:db:36:4c:c1:d1:11:b8:5c:79:3c:d5:34:06:e3: fc:7c:c3:e9:c7:d4:83:f5:f3:9a:59:f7:d8:16:52: ca:de:72:d3:ed:04:8a:1f:51:dd:16:69:7f:c4:50: 39:d8:6b:5d:88:75:28:a5:b5:20:31:80:b7:fd:e3: e9:0f:af:8a:92:63:50:a8:b0:7d:46:c9:00:d7:01: 5b:54:12:26:4d:74:ea:68:f8:6d:e0:d9:8f:07:5d: 3e:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5B:81:79:4C:D9:8E:F0:A0:2B:E2:F1:81:B2:68:BD:85:69:A7:BE:41 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/AE2B17A5E948EDBEE25BA20C857C5CFEA9D4A1FA57A927CE63B9367D23762EB2/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/AE2B17A5E948EDBEE25BA20C857C5CFEA9D4A1FA57A927CE63B9367D23762EB2/0/5B81794CD98EF0A02BE2F181B268BD8569A7BE41.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:c690::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 272891 Signature Algorithm: sha256WithRSAEncryption 92:21:5f:cd:0e:8c:29:b8:ab:df:e3:6d:99:f8:d6:60:ef:39: a4:75:51:14:ec:52:20:10:7e:2a:9c:21:8a:ba:b2:bc:95:f8: 22:cc:6b:25:aa:ac:4e:02:b0:c5:7d:8e:ec:79:fd:89:67:c2: b3:28:c7:44:0d:8f:91:cc:d7:d0:f7:d7:05:aa:b3:eb:e9:61: 8b:be:cb:77:73:31:e2:a2:2f:16:67:14:17:30:ef:7a:98:71: 2e:1d:e6:a7:2c:8f:dd:6c:87:7b:84:97:99:1f:23:04:ea:10: 70:8a:f6:c8:0b:57:a2:75:76:b7:3a:10:7d:ad:1a:28:03:9c: 66:3b:ce:ac:ae:74:5a:64:78:a3:74:1b:79:15:6f:c4:5f:6f: c3:71:0b:b5:a9:f6:54:38:b5:38:e4:26:cf:ef:ba:8c:f8:20: f9:7f:98:a9:55:2c:5b:d2:ee:80:1a:5d:b7:7a:40:3b:d9:85: 8d:24:ee:d9:ff:ca:27:4f:81:9a:c0:33:76:5a:d9:16:97:af: a6:17:01:ce:a6:af:f0:1a:f6:75:d1:fa:bf:bf:65:64:38:90: f0:2c:aa:d0:6c:aa:71:fb:f9:d0:08:e4:99:fd:3a:b9:58:43: b7:cd:40:09:b7:6d:2e:23:b0:da:9e:cd:85:65:97:41:b3:20: dd:be:61:fc -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUPM6pY8RFMXRhuv2Jc1FIIRTVaJwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDQyMTUyMzNaFw0yNjAyMDMyMTU3MzNaMDMxMTAvBgNV BAMTKDVCODE3OTRDRDk4RUYwQTAyQkUyRjE4MUIyNjhCRDg1NjlBN0JFNDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC06KyvqUmYcrGKg9uNx4SZCOiy scWin5Hmb1nkMUYXg0zvgYUQypDsT/T6ZqR8TzMfx6y5rr1M+7CEwtSwQ9gwjqZ/ Xou2ztAT3Gp72fbMukYaU4/yY/EWALhUtZqPvO+Yt2zSS+X2O0sqdu3Pc58EcySu AsQqwYQG8KuZv8SOJ4R9wLkafKolxk2AWTRzZEjf/AddPntIlSFzs2Jo0C2VlEnG e1DbNkzB0RG4XHk81TQG4/x8w+nH1IP185pZ99gWUsrectPtBIofUd0WaX/EUDnY a12IdSiltSAxgLf94+kPr4qSY1CosH1GyQDXAVtUEiZNdOpo+G3g2Y8HXT5lAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRbgXlM2Y7woCvi 8YGyaL2Faae+QTAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQUUyQjE3QTVFOTQ4RURCRUUyNUJBMjBD ODU3QzVDRkVBOUQ0QTFGQTU3QTkyN0NFNjNCOTM2N0QyMzc2MkVCMi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9BRTJCMTdBNUU5NDhFREJFRTI1QkEyMEM4NTdDNUNGRUE5RDRBMUZBNTdB OTI3Q0U2M0I5MzY3RDIzNzYyRUIyLzAvNUI4MTc5NENEOThFRjBBMDJCRTJGMTgx QjI2OEJEODU2OUE3QkU0MS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAPGkDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEKfswDQYJKoZIhvcNAQELBQADggEBAJIhX80O jCm4q9/jbZn41mDvOaR1URTsUiAQfiqcIYq6sryV+CLMayWqrE4CsMV9jux5/Yln wrMox0QNj5HM19D31wWqs+vpYYu+y3dzMeKiLxZnFBcw73qYcS4d5qcsj91sh3uE l5kfIwTqEHCK9sgLV6J1drc6EH2tGigDnGY7zqyudFpkeKN0G3kVb8Rfb8NxC7Wp 9lQ4tTjkJs/vuoz4IPl/mKlVLFvS7oAaXbd6QDvZhY0k7tn/yidPgZrAM3Za2RaX r6YXAc6mr/Aa9nXR+r+/ZWQ4kPAsqtBsqnH7+dAI5Jn9OrlYQ7fNQAm3bS4jsNqe zYVll0GzIN2+Yfw= -----END CERTIFICATE-----Generated at Tue Nov 4 21:38:05 2025 by rpki-client