$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/626C22B37E986FBB36DBE7A36C8BC48148D8366D.cer File: 626C22B37E986FBB36DBE7A36C8BC48148D8366D.cer (raw, json) Hash identifier: YhSqnfB+YghpW7Jh49pMPVzDUCd6IIJthAkty7iMMPk= Subject key identifier: 62:6C:22:B3:7E:98:6F:BB:36:DB:E7:A3:6C:8B:C4:81:48:D8:36:6D Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 71F68F676F92CCAD2EB7266759EC0A51B7E30FAB Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/A4D488C09058A2EF6A14BE40F492A671BB57F2377D27BB07C27DF4547E73FBD0/0/626C22B37E986FBB36DBE7A36C8BC48148D8366D.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/A4D488C09058A2EF6A14BE40F492A671BB57F2377D27BB07C27DF4547E73FBD0/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 09:13:12 +0000 Certificate not after: Wed 04 Feb 2026 09:18:12 +0000 Subordinate resources: AS: 269758 IP: 45.183.41.0/24 IP: 2801:13:8800::/48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:f6:8f:67:6f:92:cc:ad:2e:b7:26:67:59:ec:0a:51:b7:e3:0f:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 09:13:12 2025 GMT Not After : Feb 4 09:18:12 2026 GMT Subject: CN=626C22B37E986FBB36DBE7A36C8BC48148D8366D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d9:2f:fa:a5:d6:b3:28:fc:44:36:22:5b:19: 45:13:7c:0c:0a:fa:87:fa:eb:6a:8e:66:80:f8:43: b5:6c:e7:91:3e:c9:75:42:26:3c:8e:88:0b:ba:84: a0:2a:fd:e3:77:bf:bd:4d:7a:2c:85:f8:d3:9c:cb: 17:b3:d4:c2:8b:28:50:89:07:fd:a3:54:b7:c3:bf: 2b:8b:9d:cb:c8:ee:f5:0c:63:0a:27:98:ee:ad:f7: 18:f9:ed:99:48:3f:42:e2:1d:7c:87:b0:e0:bf:df: 51:ac:03:9c:4d:fd:da:05:d1:55:09:60:97:6d:67: b1:76:3e:17:7e:b9:2e:d0:b2:b0:3d:7e:46:93:10: 96:a2:4d:88:18:28:56:34:43:d2:92:82:22:3b:a3: 01:61:e8:cb:05:f1:71:a4:8f:cf:15:e2:5d:92:f3: f9:5f:b4:06:cb:af:ad:4f:6f:15:7a:2a:77:b7:e1: 6d:ca:25:8d:27:e2:79:d1:62:89:3a:e4:2a:db:ed: cc:ea:1e:46:af:25:5b:a0:f4:8d:23:4c:a1:16:bc: 2c:b3:d4:2a:a2:e0:10:93:02:25:1b:09:aa:70:ff: c3:60:32:75:7e:35:51:1b:86:0b:db:d8:07:b2:7c: 43:a4:70:b9:4b:9d:4b:97:06:fb:1f:0c:b0:86:c4: 90:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 62:6C:22:B3:7E:98:6F:BB:36:DB:E7:A3:6C:8B:C4:81:48:D8:36:6D X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/A4D488C09058A2EF6A14BE40F492A671BB57F2377D27BB07C27DF4547E73FBD0/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/A4D488C09058A2EF6A14BE40F492A671BB57F2377D27BB07C27DF4547E73FBD0/0/626C22B37E986FBB36DBE7A36C8BC48148D8366D.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.183.41.0/24 IPv6: 2801:13:8800::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 269758 Signature Algorithm: sha256WithRSAEncryption 73:65:21:7f:a0:27:dd:b7:a5:bc:b4:a9:12:22:ba:d6:64:c4: 18:cc:6b:3e:45:ec:75:eb:66:3c:83:39:58:3b:61:5f:04:18: da:95:9a:38:cb:8c:f0:ef:70:08:2b:e2:93:9f:33:33:59:20: f1:63:60:37:1f:57:64:7c:45:12:56:85:35:f8:c5:46:26:dd: 9d:2e:5a:d5:3c:f0:03:7c:ff:c2:d1:23:1c:2c:4f:c7:60:57: e3:03:a3:a7:35:01:58:42:61:a9:9f:b6:83:49:e5:71:f9:a5: 30:64:fb:72:f9:f8:30:3e:97:b4:cb:30:cb:59:5d:9b:27:63: 6e:49:11:d1:0a:8a:af:ac:ec:a4:32:a7:74:d5:b6:55:12:8b: cb:78:55:73:58:bd:3c:8d:b6:8b:91:2a:36:e7:82:1e:e3:5e: 84:a3:7f:67:1f:d6:ee:fd:97:55:95:f7:87:a9:45:84:ba:cd: 05:2e:2e:33:ef:8d:55:33:f5:ee:05:ad:ce:67:b7:f3:12:ff: 4b:40:97:e0:7c:59:53:6f:a6:bb:51:b4:70:63:df:59:7d:2b: 14:88:06:d3:fc:87:2b:8c:10:62:31:6a:5a:40:70:22:b6:19: 8d:6e:b9:a1:ff:86:32:f5:9d:54:fe:0e:5a:cd:0f:ff:b3:64: 82:85:28:ca -----BEGIN CERTIFICATE----- MIIGpzCCBY+gAwIBAgIUcfaPZ2+SzK0utyZnWewKUbfjD6swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUwOTEzMTJaFw0yNjAyMDQwOTE4MTJaMDMxMTAvBgNV BAMTKDYyNkMyMkIzN0U5ODZGQkIzNkRCRTdBMzZDOEJDNDgxNDhEODM2NkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC82S/6pdazKPxENiJbGUUTfAwK +of662qOZoD4Q7Vs55E+yXVCJjyOiAu6hKAq/eN3v71NeiyF+NOcyxez1MKLKFCJ B/2jVLfDvyuLncvI7vUMYwonmO6t9xj57ZlIP0LiHXyHsOC/31GsA5xN/doF0VUJ YJdtZ7F2Phd+uS7QsrA9fkaTEJaiTYgYKFY0Q9KSgiI7owFh6MsF8XGkj88V4l2S 8/lftAbLr61PbxV6Kne34W3KJY0n4nnRYok65Crb7czqHkavJVug9I0jTKEWvCyz 1Cqi4BCTAiUbCapw/8NgMnV+NVEbhgvb2AeyfEOkcLlLnUuXBvsfDLCGxJDlAgMB AAGjggOxMIIDrTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRibCKzfphvuzbb 56Nsi8SBSNg2bTAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQTRENDg4QzA5MDU4QTJFRjZBMTRCRTQw RjQ5MkE2NzFCQjU3RjIzNzdEMjdCQjA3QzI3REY0NTQ3RTczRkJEMC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9BNEQ0ODhDMDkwNThBMkVGNkExNEJFNDBGNDkyQTY3MUJCNTdGMjM3N0Qy N0JCMDdDMjdERjQ1NDdFNzNGQkQwLzAvNjI2QzIyQjM3RTk4NkZCQjM2REJFN0Ez NkM4QkM0ODE0OEQ4MzY2RC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQALbcpMA8EAgAC MAkDBwAoAQATiAAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBB2+MA0GCSqGSIb3 DQEBCwUAA4IBAQBzZSF/oCfdt6W8tKkSIrrWZMQYzGs+Rex162Y8gzlYO2FfBBja lZo4y4zw73AIK+KTnzMzWSDxY2A3H1dkfEUSVoU1+MVGJt2dLlrVPPADfP/C0SMc LE/HYFfjA6OnNQFYQmGpn7aDSeVx+aUwZPty+fgwPpe0yzDLWV2bJ2NuSRHRCoqv rOykMqd01bZVEovLeFVzWL08jbaLkSo254Ie416Eo39nH9bu/ZdVlfeHqUWEus0F Li4z741VM/XuBa3OZ7fzEv9LQJfgfFlTb6a7UbRwY99ZfSsUiAbT/IcrjBBiMWpa QHAithmNbrmh/4Yy9Z1U/g5azQ//s2SChSjK -----END CERTIFICATE-----Generated at Thu Nov 6 00:25:30 2025 by rpki-client