$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D6C01932C342063BFD909811E1D18892BDD422B.cer File: 5D6C01932C342063BFD909811E1D18892BDD422B.cer (raw, json) Hash identifier: mi0td8Oc6+TFd7jVJsVJPnB6tgfrPXuePyvUdNAmPbo= Subject key identifier: 5D:6C:01:93:2C:34:20:63:BF:D9:09:81:1E:1D:18:89:2B:DD:42:2B Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 5B1C36EEC2D6C8AAFBB77E57162767F75E2B906E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/BEA8C17C1D054CBAD5762BBAC86AD9F770AED53931C3AA75741E46CF52901F04/0/5D6C01932C342063BFD909811E1D18892BDD422B.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/BEA8C17C1D054CBAD5762BBAC86AD9F770AED53931C3AA75741E46CF52901F04/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Thu 06 Feb 2025 00:46:51 +0000 Certificate not after: Thu 05 Feb 2026 00:51:51 +0000 Subordinate resources: AS: 263221 IP: 161.0.176.0/21 IP: 2803:a680::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:1c:36:ee:c2:d6:c8:aa:fb:b7:7e:57:16:27:67:f7:5e:2b:90:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 6 00:46:51 2025 GMT Not After : Feb 5 00:51:51 2026 GMT Subject: CN=5D6C01932C342063BFD909811E1D18892BDD422B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:96:6f:15:5a:a8:7c:a6:d6:7f:20:69:d9:d5: 1d:bb:6f:6c:01:39:89:41:8c:5c:8e:a7:77:a8:cb: 6f:4b:1e:f5:c7:b9:71:15:fc:1f:30:9b:74:de:73: 82:22:33:54:e4:c7:7e:0b:24:e6:75:ea:68:79:c7: 9d:5a:d2:d3:c0:d9:a6:5f:be:4c:4b:d5:79:b6:c6: bd:7e:e4:98:cc:1d:9d:6a:f1:74:fd:00:f9:13:33: 75:0a:84:73:88:05:3c:ab:04:97:85:bc:96:4a:0a: 0e:60:6e:da:03:16:c2:30:f0:24:20:11:71:bf:d0: 0f:8f:ef:60:95:f8:ef:fa:64:66:c0:cf:0b:d1:f4: 88:fc:26:4d:b5:c5:2d:5b:ad:48:7f:80:fb:7a:0a: 8c:10:e4:5e:08:2b:3e:6c:e1:04:ee:cd:f7:4b:25: c8:38:aa:32:61:47:21:65:e9:b1:01:c1:7c:80:3b: 33:75:b1:43:17:d8:c4:e9:94:56:dc:b9:75:9b:b0: 0f:eb:12:42:98:76:a2:7d:0b:07:6d:9e:de:26:b1: cb:a9:ae:86:73:2a:a4:fb:90:46:29:96:2c:0d:f2: 04:f5:a3:c7:f5:a5:01:77:f8:06:65:9a:fb:6e:74: ef:3c:8a:52:75:9b:8a:cf:8d:b7:6b:7c:0c:af:1f: 73:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5D:6C:01:93:2C:34:20:63:BF:D9:09:81:1E:1D:18:89:2B:DD:42:2B X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/BEA8C17C1D054CBAD5762BBAC86AD9F770AED53931C3AA75741E46CF52901F04/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/BEA8C17C1D054CBAD5762BBAC86AD9F770AED53931C3AA75741E46CF52901F04/0/5D6C01932C342063BFD909811E1D18892BDD422B.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 161.0.176.0/21 IPv6: 2803:a680::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263221 Signature Algorithm: sha256WithRSAEncryption 01:30:e4:16:87:00:49:e0:cf:ba:c5:36:86:6b:c7:80:1c:2a: c1:0c:24:2f:ab:a2:8a:55:72:3b:c3:6d:a9:ac:a0:9a:7b:41: b1:8a:fc:2a:ec:f0:99:49:1c:74:81:cb:95:66:bf:ac:eb:95: 10:5e:90:3d:f5:18:f5:68:c5:2e:2b:d0:4b:93:ff:d0:2f:4c: 50:75:02:68:0d:9d:4d:f0:77:41:b1:85:d8:5b:00:af:17:fd: 18:5d:15:61:67:d9:fa:fa:c7:25:01:c8:db:d5:e6:b0:6c:1f: 7a:22:c9:2e:92:4c:b9:14:fc:35:7b:96:4a:57:0c:e9:e8:b0: 54:51:c5:e4:2b:70:b8:29:c4:3c:d6:00:e8:5f:a6:ba:f9:f0: e3:9e:53:6c:66:53:73:fe:c0:ea:9d:dc:2b:2b:d2:f8:e8:de: be:26:d9:57:67:ce:01:23:c3:03:6d:75:26:d3:a8:34:40:43: 68:3d:37:01:bb:59:bf:d3:68:70:73:e8:b3:30:e4:17:b6:15: 59:85:90:7c:f2:5c:af:96:be:d5:a7:ff:fc:76:ae:a4:be:06: 83:55:e8:22:85:b7:eb:cd:bb:1e:1e:db:87:bd:64:3c:97:8b: a1:dc:b3:6c:4e:2f:63:89:e9:c4:a9:62:c9:39:b1:99:ef:ac: 52:57:a9:09 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUWxw27sLWyKr7t35XFidn914rkG4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDYwMDQ2NTFaFw0yNjAyMDUwMDUxNTFaMDMxMTAvBgNV BAMTKDVENkMwMTkzMkMzNDIwNjNCRkQ5MDk4MTFFMUQxODg5MkJERDQyMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSlm8VWqh8ptZ/IGnZ1R27b2wB OYlBjFyOp3eoy29LHvXHuXEV/B8wm3Tec4IiM1Tkx34LJOZ16mh5x51a0tPA2aZf vkxL1Xm2xr1+5JjMHZ1q8XT9APkTM3UKhHOIBTyrBJeFvJZKCg5gbtoDFsIw8CQg EXG/0A+P72CV+O/6ZGbAzwvR9Ij8Jk21xS1brUh/gPt6CowQ5F4IKz5s4QTuzfdL Jcg4qjJhRyFl6bEBwXyAOzN1sUMX2MTplFbcuXWbsA/rEkKYdqJ9Cwdtnt4mscup roZzKqT7kEYpliwN8gT1o8f1pQF3+AZlmvtudO88ilJ1m4rPjbdrfAyvH3O1AgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRdbAGTLDQgY7/Z CYEeHRiJK91CKzAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQkVBOEMxN0MxRDA1NENCQUQ1NzYyQkJB Qzg2QUQ5Rjc3MEFFRDUzOTMxQzNBQTc1NzQxRTQ2Q0Y1MjkwMUYwNC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9CRUE4QzE3QzFEMDU0Q0JBRDU3NjJCQkFDODZBRDlGNzcwQUVENTM5MzFD M0FBNzU3NDFFNDZDRjUyOTAxRjA0LzAvNUQ2QzAxOTMyQzM0MjA2M0JGRDkwOTgx MUUxRDE4ODkyQkRENDIyQi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDoQCwMA0EAgAC MAcDBQAoA6aAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQENTANBgkqhkiG9w0B AQsFAAOCAQEAATDkFocASeDPusU2hmvHgBwqwQwkL6uiilVyO8NtqaygmntBsYr8 KuzwmUkcdIHLlWa/rOuVEF6QPfUY9WjFLivQS5P/0C9MUHUCaA2dTfB3QbGF2FsA rxf9GF0VYWfZ+vrHJQHI29XmsGwfeiLJLpJMuRT8NXuWSlcM6eiwVFHF5CtwuCnE PNYA6F+muvnw455TbGZTc/7A6p3cKyvS+OjevibZV2fOASPDA211JtOoNEBDaD03 AbtZv9NocHPoszDkF7YVWYWQfPJcr5a+1af//HaupL4Gg1XoIoW36827Hh7bh71k PJeLodyzbE4vY4npxKliyTmxme+sUlepCQ== -----END CERTIFICATE-----Generated at Tue Nov 4 21:37:28 2025 by rpki-client