$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/61AC4D14594A2836E063EF44EC4E2248F46BFB74.cer File: 61AC4D14594A2836E063EF44EC4E2248F46BFB74.cer (raw, json) Hash identifier: cwx0BjbTZSUSLt3mE8ma8p7EG1Cpg8tF4m8Kn2pztNQ= Subject key identifier: 61:AC:4D:14:59:4A:28:36:E0:63:EF:44:EC:4E:22:48:F4:6B:FB:74 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 60B5492BFABC0A1824861B22E7C3FC52D6AE7A4C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/CA631B4294DE9A89B00CD7E09AF0238C16E29F58B2A7106987C299F53C546E5A/0/61AC4D14594A2836E063EF44EC4E2248F46BFB74.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/CA631B4294DE9A89B00CD7E09AF0238C16E29F58B2A7106987C299F53C546E5A/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 11:13:34 +0000 Certificate not after: Wed 04 Feb 2026 11:18:34 +0000 Subordinate resources: AS: 265863 IP: 45.226.204.0/22 IP: 2803:6620::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:b5:49:2b:fa:bc:0a:18:24:86:1b:22:e7:c3:fc:52:d6:ae:7a:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 11:13:34 2025 GMT Not After : Feb 4 11:18:34 2026 GMT Subject: CN=61AC4D14594A2836E063EF44EC4E2248F46BFB74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:d7:0b:58:7b:40:4b:36:b0:63:db:18:60:31: ae:a8:10:3b:0e:90:3c:5b:4f:77:d7:06:95:fa:44: 17:36:41:2a:11:d0:f8:8b:46:d6:80:be:35:d7:9e: 56:0d:8f:08:ef:10:2e:bb:16:d5:28:f1:f8:5f:e1: 78:d6:5b:37:f0:10:ce:ff:f1:e6:31:c4:c0:bf:6e: d5:46:13:ae:5f:f0:47:1e:69:e2:2f:33:f3:54:58: 2d:14:11:06:8f:3f:48:9c:1c:e5:f1:33:fb:d1:87: 81:40:6c:38:20:a2:43:2b:7f:5b:39:c0:35:18:a6: 3a:46:f3:00:8e:99:4d:e2:7d:ee:ca:9a:12:17:1d: 05:95:ab:70:b0:54:ce:09:79:2c:39:c8:37:cd:e5: 48:b4:b2:5b:59:06:71:49:a7:57:c5:ba:d1:e5:85: 03:af:72:92:3e:f3:f2:33:05:de:56:71:eb:74:d5: 58:2b:e5:b1:ee:78:d8:13:37:1a:97:0d:0a:5a:43: 57:a0:2f:85:9a:66:c6:91:21:5d:4e:96:0e:b0:f2: e6:97:4c:47:f9:0e:54:4a:29:f0:97:e7:1e:83:20: 80:fa:53:72:3a:9b:b4:6f:e4:12:ee:6e:59:72:81: f6:61:de:8c:de:f9:94:00:de:59:6d:2e:5b:90:b6: 8a:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 61:AC:4D:14:59:4A:28:36:E0:63:EF:44:EC:4E:22:48:F4:6B:FB:74 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/CA631B4294DE9A89B00CD7E09AF0238C16E29F58B2A7106987C299F53C546E5A/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/CA631B4294DE9A89B00CD7E09AF0238C16E29F58B2A7106987C299F53C546E5A/0/61AC4D14594A2836E063EF44EC4E2248F46BFB74.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.226.204.0/22 IPv6: 2803:6620::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265863 Signature Algorithm: sha256WithRSAEncryption d3:db:3b:bb:d2:8b:0d:e3:2c:1d:bc:bb:71:6d:b7:06:66:1f: 2c:5f:54:ba:e4:ec:da:98:04:88:76:cd:5e:ef:93:83:06:3c: 9d:3d:cd:33:ac:ae:16:18:6c:34:6f:e0:e9:a9:be:45:de:95: d2:43:76:09:d7:be:ab:a7:d1:5b:21:50:58:25:b1:cc:3b:c2: a9:43:77:58:0d:8a:0e:76:89:1f:09:fb:10:3d:9e:2c:26:63: 3d:d8:c4:11:eb:d9:5e:12:5b:b0:c1:c4:67:cf:c4:75:b4:56: 29:25:80:c7:f1:78:ab:27:ae:a1:db:9b:1c:c4:33:1b:f8:35: d2:22:af:94:c6:96:bd:d4:dd:ad:67:ac:9e:b8:b0:af:f9:5f: 55:f9:a9:da:ea:c4:f0:4e:f6:ac:0f:09:a0:fe:7a:52:b5:31: 98:ca:e6:1a:6c:0f:88:ca:d1:e3:7d:e6:8d:84:2c:2c:da:15: 61:62:8f:d9:c1:b3:fc:2a:27:4c:ec:5e:16:52:94:86:bf:0c: 7a:70:8b:e7:cd:5d:9a:af:49:a1:3b:fb:61:d1:8f:4a:12:40: af:5e:42:af:d1:8a:d8:e9:9d:02:fe:cb:f1:39:a1:55:8f:73: d0:b8:1d:13:d3:59:7d:23:96:6d:0e:42:8a:4c:d7:46:01:03: 52:d3:c4:48 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUYLVJK/q8Chgkhhsi58P8UtauekwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUxMTEzMzRaFw0yNjAyMDQxMTE4MzRaMDMxMTAvBgNV BAMTKDYxQUM0RDE0NTk0QTI4MzZFMDYzRUY0NEVDNEUyMjQ4RjQ2QkZCNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDg1wtYe0BLNrBj2xhgMa6oEDsO kDxbT3fXBpX6RBc2QSoR0PiLRtaAvjXXnlYNjwjvEC67FtUo8fhf4XjWWzfwEM7/ 8eYxxMC/btVGE65f8EceaeIvM/NUWC0UEQaPP0icHOXxM/vRh4FAbDggokMrf1s5 wDUYpjpG8wCOmU3ife7KmhIXHQWVq3CwVM4JeSw5yDfN5Ui0sltZBnFJp1fFutHl hQOvcpI+8/IzBd5Wcet01Vgr5bHueNgTNxqXDQpaQ1egL4WaZsaRIV1Olg6w8uaX TEf5DlRKKfCX5x6DIID6U3I6m7Rv5BLubllygfZh3oze+ZQA3lltLluQtoqDAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRhrE0UWUooNuBj 70TsTiJI9Gv7dDAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQ0E2MzFCNDI5NERFOUE4OUIwMENEN0Uw OUFGMDIzOEMxNkUyOUY1OEIyQTcxMDY5ODdDMjk5RjUzQzU0NkU1QS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9DQTYzMUI0Mjk0REU5QTg5QjAwQ0Q3RTA5QUYwMjM4QzE2RTI5RjU4QjJB NzEwNjk4N0MyOTlGNTNDNTQ2RTVBLzAvNjFBQzREMTQ1OTRBMjgzNkUwNjNFRjQ0 RUM0RTIyNDhGNDZCRkI3NC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLeLMMA0EAgAC MAcDBQAoA2YgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQOhzANBgkqhkiG9w0B AQsFAAOCAQEA09s7u9KLDeMsHby7cW23BmYfLF9UuuTs2pgEiHbNXu+TgwY8nT3N M6yuFhhsNG/g6am+Rd6V0kN2Cde+q6fRWyFQWCWxzDvCqUN3WA2KDnaJHwn7ED2e LCZjPdjEEevZXhJbsMHEZ8/EdbRWKSWAx/F4qyeuodubHMQzG/g10iKvlMaWvdTd rWesnriwr/lfVfmp2urE8E72rA8JoP56UrUxmMrmGmwPiMrR433mjYQsLNoVYWKP 2cGz/ConTOxeFlKUhr8MenCL581dmq9JoTv7YdGPShJAr15Cr9GK2OmdAv7L8Tmh VY9z0LgdE9NZfSOWbQ5CikzXRgEDUtPESA== -----END CERTIFICATE-----Generated at Wed Nov 5 15:42:53 2025 by rpki-client