$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/62A5AEEF6B9D018E4B7F7F87EE23BFFC8337D2EC.cer File: 62A5AEEF6B9D018E4B7F7F87EE23BFFC8337D2EC.cer (raw, json) Hash identifier: zvMlV1gKitzCkt+Q/TYTV6x6ad+KiekN1mAPEdh3NA0= Subject key identifier: 62:A5:AE:EF:6B:9D:01:8E:4B:7F:7F:87:EE:23:BF:FC:83:37:D2:EC Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 1C1FADC7AD78F546882624738AB3B8A507DD6622 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/F301F141608B0862C172B16E456E11121BF613C4EE7F61B1428F237A5BFD6699/0/62A5AEEF6B9D018E4B7F7F87EE23BFFC8337D2EC.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/F301F141608B0862C172B16E456E11121BF613C4EE7F61B1428F237A5BFD6699/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 12:18:46 +0000 Certificate not after: Wed 04 Feb 2026 12:23:46 +0000 Subordinate resources: AS: 27758 IP: 201.219.192.0/19 IP: 2803:8980::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:1f:ad:c7:ad:78:f5:46:88:26:24:73:8a:b3:b8:a5:07:dd:66:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 12:18:46 2025 GMT Not After : Feb 4 12:23:46 2026 GMT Subject: CN=62A5AEEF6B9D018E4B7F7F87EE23BFFC8337D2EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a0:e8:81:34:17:7b:04:30:66:56:76:c5:d0: 4a:51:42:fe:95:00:96:46:69:e8:ad:d1:59:8d:02: 33:25:e4:60:60:c5:04:3d:2c:cc:8d:89:e1:ab:f4: 38:3a:a0:3f:34:a5:e5:2c:da:b6:3d:db:2d:7b:3f: 15:80:1a:82:08:ff:21:46:cd:a2:06:8e:39:fc:be: df:50:ac:d6:82:67:b6:23:a5:22:00:ba:39:d8:18: a6:97:bc:0b:0f:cd:0f:f1:20:35:6a:62:e9:e3:14: ba:05:91:1f:15:0b:9c:1c:e8:45:22:7a:ad:8e:45: 24:11:eb:44:f6:92:96:b2:10:0a:cd:18:40:8d:53: d6:68:7a:b2:bc:be:02:ba:3e:cb:1c:f2:38:36:79: 25:da:c8:49:d5:2f:98:43:d8:9a:46:a5:d6:87:3b: fc:b3:2c:38:79:6a:c6:b1:76:1f:5c:bb:03:b4:74: 67:bf:d5:a6:35:66:9b:4b:56:26:e4:40:d6:07:4e: 16:fc:2f:39:b7:2d:46:94:3d:42:f1:52:a1:0a:44: 86:ff:00:57:30:23:25:f9:0b:73:1a:3b:c2:72:ac: d0:bf:8b:42:cd:92:de:e5:a0:3d:de:9e:3b:e5:b2: 88:61:95:ff:83:de:5a:4d:a8:c8:de:81:83:33:93: 4f:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 62:A5:AE:EF:6B:9D:01:8E:4B:7F:7F:87:EE:23:BF:FC:83:37:D2:EC X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/F301F141608B0862C172B16E456E11121BF613C4EE7F61B1428F237A5BFD6699/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/F301F141608B0862C172B16E456E11121BF613C4EE7F61B1428F237A5BFD6699/0/62A5AEEF6B9D018E4B7F7F87EE23BFFC8337D2EC.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 201.219.192.0/19 IPv6: 2803:8980::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 27758 Signature Algorithm: sha256WithRSAEncryption a1:0b:7c:ce:43:d7:73:53:b8:06:13:19:bd:74:2d:bf:86:cc: ff:2a:a1:33:05:85:c6:70:9a:be:3f:67:53:9e:12:2f:a2:43: f7:1d:bc:8d:cf:de:1d:8d:57:28:9f:9f:b3:02:7f:87:09:3e: e0:ab:78:33:11:75:25:87:71:cf:29:f8:c6:86:0c:4d:7e:94: c8:40:47:c5:22:dc:8f:64:8a:c6:c2:3f:12:e9:c3:dd:ef:54: 33:e6:e3:13:c1:c4:b7:c4:9b:76:51:b6:f9:91:82:3c:0e:5f: 8c:86:98:90:8c:e5:ea:2e:1f:5b:be:78:5d:99:2b:fc:02:e4: 8b:77:e7:b8:4c:fe:e9:eb:0d:fe:f7:51:f0:32:48:a0:0d:e5: ab:d8:b5:b1:1f:bd:d8:61:a3:44:7b:50:e2:f5:18:81:0e:2f: a4:e0:8b:c3:ae:fc:c1:35:91:d9:35:55:81:c6:d0:a0:e6:33: 88:35:3a:20:49:8c:ea:ac:56:1e:94:d2:0f:1d:d7:d6:21:ca: e9:5a:c9:b6:fb:70:5a:e7:2f:87:84:3c:d9:03:50:1b:62:d9: 50:13:88:0b:13:5c:57:36:47:3a:97:7c:57:6e:b6:a2:dd:a8: 35:97:d2:78:61:cf:d6:5c:d4:40:94:39:db:d8:79:26:9c:f5: 79:af:f2:05 -----BEGIN CERTIFICATE----- MIIGpDCCBYygAwIBAgIUHB+tx6149UaIJiRzirO4pQfdZiIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUxMjE4NDZaFw0yNjAyMDQxMjIzNDZaMDMxMTAvBgNV BAMTKDYyQTVBRUVGNkI5RDAxOEU0QjdGN0Y4N0VFMjNCRkZDODMzN0QyRUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6oOiBNBd7BDBmVnbF0EpRQv6V AJZGaeit0VmNAjMl5GBgxQQ9LMyNieGr9Dg6oD80peUs2rY92y17PxWAGoII/yFG zaIGjjn8vt9QrNaCZ7YjpSIAujnYGKaXvAsPzQ/xIDVqYunjFLoFkR8VC5wc6EUi eq2ORSQR60T2kpayEArNGECNU9ZoerK8vgK6Pssc8jg2eSXayEnVL5hD2JpGpdaH O/yzLDh5asaxdh9cuwO0dGe/1aY1ZptLVibkQNYHThb8Lzm3LUaUPULxUqEKRIb/ AFcwIyX5C3MaO8JyrNC/i0LNkt7loD3enjvlsohhlf+D3lpNqMjegYMzk085AgMB AAGjggOuMIIDqjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRipa7va50Bjkt/ f4fuI7/8gzfS7DAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRjMwMUYxNDE2MDhCMDg2MkMxNzJCMTZF NDU2RTExMTIxQkY2MTNDNEVFN0Y2MUIxNDI4RjIzN0E1QkZENjY5OS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9GMzAxRjE0MTYwOEIwODYyQzE3MkIxNkU0NTZFMTExMjFCRjYxM0M0RUU3 RjYxQjE0MjhGMjM3QTVCRkQ2Njk5LzAvNjJBNUFFRUY2QjlEMDE4RTRCN0Y3Rjg3 RUUyM0JGRkM4MzM3RDJFQy5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQFydvAMA0EAgAC MAcDBQAoA4mAMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAmxuMA0GCSqGSIb3DQEB CwUAA4IBAQChC3zOQ9dzU7gGExm9dC2/hsz/KqEzBYXGcJq+P2dTnhIvokP3HbyN z94djVcon5+zAn+HCT7gq3gzEXUlh3HPKfjGhgxNfpTIQEfFItyPZIrGwj8S6cPd 71Qz5uMTwcS3xJt2Ubb5kYI8Dl+MhpiQjOXqLh9bvnhdmSv8AuSLd+e4TP7p6w3+ 91HwMkigDeWr2LWxH73YYaNEe1Di9RiBDi+k4IvDrvzBNZHZNVWBxtCg5jOINTog SYzqrFYelNIPHdfWIcrpWsm2+3Ba5y+HhDzZA1AbYtlQE4gLE1xXNkc6l3xXbrai 3ag1l9J4Yc/WXNRAlDnb2HkmnPV5r/IF -----END CERTIFICATE-----Generated at Wed Nov 5 22:17:47 2025 by rpki-client