$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/66F64BC72E6C76569769AD7FB7ECB465B51A0C7C.cer File: 66F64BC72E6C76569769AD7FB7ECB465B51A0C7C.cer (raw, json) Hash identifier: zakDWALrWJrBjEAA33znUyOlOKe/LkpolPR/83HIpbo= Subject key identifier: 66:F6:4B:C7:2E:6C:76:56:97:69:AD:7F:B7:EC:B4:65:B5:1A:0C:7C Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 18B41995BC9F6CFC645D6F87824BC6170954A85E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/E3B2776B3F24A01AAC2AFF09095AAE335FB6E0AB3186188D184F7D980DBCCD63/0/66F64BC72E6C76569769AD7FB7ECB465B51A0C7C.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/E3B2776B3F24A01AAC2AFF09095AAE335FB6E0AB3186188D184F7D980DBCCD63/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 02:45:23 +0000 Certificate not after: Wed 04 Feb 2026 02:50:23 +0000 Subordinate resources: AS: 265580 IP: 45.174.252.0/22 IP: 2806:335::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:b4:19:95:bc:9f:6c:fc:64:5d:6f:87:82:4b:c6:17:09:54:a8:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 02:45:23 2025 GMT Not After : Feb 4 02:50:23 2026 GMT Subject: CN=66F64BC72E6C76569769AD7FB7ECB465B51A0C7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:09:fb:b8:55:cd:77:b6:36:d0:da:a1:2a:50: 42:c6:e3:15:ea:fb:36:b0:5d:cc:58:78:3f:14:6e: 32:21:74:80:73:e5:4b:99:56:88:be:ac:82:47:c5: 8f:c7:cd:5e:04:51:0a:57:86:d7:21:46:4c:41:dc: 7c:6d:12:1e:27:5a:49:9f:64:03:e1:8e:da:0c:96: 6e:c3:46:47:df:1a:09:27:d1:18:0a:cd:c3:8b:aa: 6b:87:dd:82:9f:f8:af:62:ae:98:d9:4e:f5:82:97: a7:df:21:4f:2d:9e:aa:c6:97:e7:da:06:ac:86:9e: 71:26:f1:f0:18:32:6a:40:e9:34:1b:48:e8:7b:ba: 1c:f2:cf:2e:a8:67:36:bd:a7:37:94:1c:e3:5b:e6: 8b:a3:47:1e:bc:d4:2f:10:03:9e:72:cc:ca:76:5f: e2:60:48:d4:b4:00:2c:ca:28:8b:6c:d2:0b:ad:14: 64:ca:c4:19:f9:82:6b:65:c4:40:a5:13:d4:f2:8c: 48:69:66:0a:31:9b:69:ba:b1:a2:a2:82:79:d9:03: 05:62:6b:f9:d7:f2:58:f5:63:92:c8:50:e5:92:af: 29:c6:58:ae:23:3b:39:df:2b:3b:3c:64:15:6a:46: 6c:d9:dd:70:d5:a5:bd:41:f0:7d:81:ca:3f:6b:2b: cd:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 66:F6:4B:C7:2E:6C:76:56:97:69:AD:7F:B7:EC:B4:65:B5:1A:0C:7C X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/E3B2776B3F24A01AAC2AFF09095AAE335FB6E0AB3186188D184F7D980DBCCD63/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/E3B2776B3F24A01AAC2AFF09095AAE335FB6E0AB3186188D184F7D980DBCCD63/0/66F64BC72E6C76569769AD7FB7ECB465B51A0C7C.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.174.252.0/22 IPv6: 2806:335::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265580 Signature Algorithm: sha256WithRSAEncryption 84:5e:56:f0:ee:91:60:bb:4b:24:7b:23:0f:94:a9:fb:e8:a7: 5a:7b:7d:01:a8:a7:d7:6c:7b:40:9a:bc:f5:2a:c5:41:ff:de: 6a:f9:8f:b2:4c:0a:5f:ab:01:ab:4f:cf:aa:52:ae:60:03:19: c0:6f:a5:3c:48:c3:93:b0:31:dd:ef:85:8c:26:85:53:5a:00: 2c:33:e6:98:c5:be:37:50:94:28:df:69:fe:fe:43:57:d3:8e: c9:6b:ef:d7:ee:93:e0:9d:3f:70:3d:2e:38:63:20:73:47:92: 7e:e7:71:22:01:9e:8f:f3:f2:ac:ea:80:24:15:3e:e8:f6:99: f0:bf:37:2b:4b:a8:c2:70:a4:95:d9:73:06:65:1c:e3:5b:af: 1b:a5:75:ee:0d:df:d4:9f:80:c9:b3:a4:17:5a:78:6d:21:cc: 78:90:c2:d9:87:1b:44:5f:49:ad:af:b9:ed:b1:77:6b:96:8d: 14:fc:12:20:6a:d2:98:40:ca:32:2d:2e:0c:56:e4:79:27:f7: 01:db:fc:44:cb:42:aa:dd:43:1a:de:fb:21:70:7e:0a:27:bf: db:f9:09:ab:e0:7c:67:6c:ab:17:52:58:a7:b0:3d:5f:1a:76: d9:72:47:ed:da:d0:b5:cc:d1:63:68:8f:f2:39:95:9a:4b:17: dd:53:a3:ed -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUGLQZlbyfbPxkXW+HgkvGFwlUqF4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUwMjQ1MjNaFw0yNjAyMDQwMjUwMjNaMDMxMTAvBgNV BAMTKDY2RjY0QkM3MkU2Qzc2NTY5NzY5QUQ3RkI3RUNCNDY1QjUxQTBDN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRCfu4Vc13tjbQ2qEqUELG4xXq +zawXcxYeD8UbjIhdIBz5UuZVoi+rIJHxY/HzV4EUQpXhtchRkxB3HxtEh4nWkmf ZAPhjtoMlm7DRkffGgkn0RgKzcOLqmuH3YKf+K9irpjZTvWCl6ffIU8tnqrGl+fa BqyGnnEm8fAYMmpA6TQbSOh7uhzyzy6oZza9pzeUHONb5oujRx681C8QA55yzMp2 X+JgSNS0ACzKKIts0gutFGTKxBn5gmtlxEClE9TyjEhpZgoxm2m6saKignnZAwVi a/nX8lj1Y5LIUOWSrynGWK4jOznfKzs8ZBVqRmzZ3XDVpb1B8H2Byj9rK807AgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRm9kvHLmx2Vpdp rX+37LRltRoMfDAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTNCMjc3NkIzRjI0QTAxQUFDMkFGRjA5 MDk1QUFFMzM1RkI2RTBBQjMxODYxODhEMTg0RjdEOTgwREJDQ0Q2My8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9FM0IyNzc2QjNGMjRBMDFBQUMyQUZGMDkwOTVBQUUzMzVGQjZFMEFCMzE4 NjE4OEQxODRGN0Q5ODBEQkNDRDYzLzAvNjZGNjRCQzcyRTZDNzY1Njk3NjlBRDdG QjdFQ0I0NjVCNTFBMEM3Qy5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLa78MA0EAgAC MAcDBQAoBgM1MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQNbDANBgkqhkiG9w0B AQsFAAOCAQEAhF5W8O6RYLtLJHsjD5Sp++inWnt9Aain12x7QJq89SrFQf/eavmP skwKX6sBq0/PqlKuYAMZwG+lPEjDk7Ax3e+FjCaFU1oALDPmmMW+N1CUKN9p/v5D V9OOyWvv1+6T4J0/cD0uOGMgc0eSfudxIgGej/PyrOqAJBU+6PaZ8L83K0uownCk ldlzBmUc41uvG6V17g3f1J+AybOkF1p4bSHMeJDC2YcbRF9Jra+57bF3a5aNFPwS IGrSmEDKMi0uDFbkeSf3Adv8RMtCqt1DGt77IXB+Cie/2/kJq+B8Z2yrF1JYp7A9 Xxp22XJH7drQtczRY2iP8jmVmksX3VOj7Q== -----END CERTIFICATE-----Generated at Tue Nov 4 21:39:29 2025 by rpki-client