$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6849B5A5EAE77557BB150A5044601E12FBB39CE9.cer File: 6849B5A5EAE77557BB150A5044601E12FBB39CE9.cer (raw, json) Hash identifier: PCnsCw+ldpJElU8PfE2+/gtFBm1STPqkhi07Yz8bYNc= Subject key identifier: 68:49:B5:A5:EA:E7:75:57:BB:15:0A:50:44:60:1E:12:FB:B3:9C:E9 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 6635BF0210C11416594F25D6CB445CF6C605D629 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/4123437DC60BA69F884764D290B59D3C5C41403186FC99E2BFBBC5C15B61235D/0/6849B5A5EAE77557BB150A5044601E12FBB39CE9.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/4123437DC60BA69F884764D290B59D3C5C41403186FC99E2BFBBC5C15B61235D/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 14:38:14 +0000 Certificate not after: Wed 04 Feb 2026 14:43:14 +0000 Subordinate resources: AS: 270152 IP: 177.124.84.0/22 IP: 2806:3e3::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:35:bf:02:10:c1:14:16:59:4f:25:d6:cb:44:5c:f6:c6:05:d6:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 14:38:14 2025 GMT Not After : Feb 4 14:43:14 2026 GMT Subject: CN=6849B5A5EAE77557BB150A5044601E12FBB39CE9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a4:06:a6:c4:31:6e:0d:ea:f7:b1:02:28:d2: 42:2f:69:5c:e3:37:54:38:26:43:ab:85:c9:45:a6: 3b:25:64:e6:a5:15:27:3b:2c:40:80:ec:3b:7c:05: ad:bc:cf:ed:b2:cb:53:3a:f5:6c:00:1e:cc:a3:75: 48:8d:e5:82:e2:c3:ba:42:9c:a2:99:e3:13:21:fd: d3:5c:4b:79:85:78:4c:6a:60:1d:d8:43:27:7a:3e: 1b:8c:f0:11:7d:b6:e7:c9:f3:62:04:ba:6e:c1:35: 5c:f2:6e:f6:a6:bf:8e:15:de:d2:d2:19:df:70:25: 57:cc:11:55:51:ce:5f:6a:bf:1f:9a:d8:7d:c8:a0: b5:51:fb:2d:7b:d2:4d:f6:99:b3:eb:93:39:c3:24: cd:ec:ab:7e:b2:10:8d:8f:c3:c7:8c:ca:c0:8c:2c: 3e:9d:5c:c6:15:e2:2c:8c:67:0b:8c:f9:89:3d:aa: 64:0b:4f:55:b7:87:82:7d:59:10:89:52:e2:68:8e: 38:02:ba:c5:c6:14:63:d4:cf:d7:fe:1d:e9:fe:56: 39:26:2c:04:6a:4e:a0:73:0c:76:2b:91:4e:f8:52: 4d:13:93:d8:26:a9:9d:f1:77:e3:1d:61:bd:a6:f8: a0:54:72:df:d3:1b:39:ca:91:ab:7e:cd:ce:c1:f9: 32:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 68:49:B5:A5:EA:E7:75:57:BB:15:0A:50:44:60:1E:12:FB:B3:9C:E9 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/4123437DC60BA69F884764D290B59D3C5C41403186FC99E2BFBBC5C15B61235D/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/4123437DC60BA69F884764D290B59D3C5C41403186FC99E2BFBBC5C15B61235D/0/6849B5A5EAE77557BB150A5044601E12FBB39CE9.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.124.84.0/22 IPv6: 2806:3e3::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 270152 Signature Algorithm: sha256WithRSAEncryption 7f:ad:b0:95:ce:b0:00:31:5d:4c:b2:d3:1b:74:76:f7:8e:b2: e6:e5:5e:b9:8d:fb:97:60:75:30:09:43:79:c3:60:0f:aa:35: 23:a6:af:81:3c:34:f3:20:23:08:cf:f8:53:fb:26:d2:2d:59: 98:e7:3a:ea:b0:3f:47:9e:36:9b:dd:53:90:16:5c:94:d7:ad: 67:c1:29:1d:af:ea:d3:07:c0:e6:69:e7:20:56:5b:48:e7:7b: 6f:6a:01:12:8c:11:f0:97:e6:9f:2d:04:f3:41:2e:2a:4d:5f: 18:92:bd:e0:f1:ae:b3:08:c4:53:8d:48:6a:38:27:d0:fb:b1: fc:8f:e6:15:ab:dd:a8:9e:60:e4:b7:70:6d:30:07:78:6c:10: 2f:8c:e9:ae:67:52:86:4d:37:7f:09:41:a9:6c:7b:69:df:14: d1:e5:e1:64:a6:03:2b:3b:d9:64:72:10:cb:53:02:32:09:07: 8e:01:8a:b8:50:b5:d5:17:32:21:db:0a:35:8e:4d:55:57:26: 85:88:a1:d5:96:88:07:1d:38:e9:f5:d2:08:af:ef:53:35:f1: 0c:e4:3f:85:ad:f1:f9:84:20:9d:a2:c2:cf:10:d5:55:af:40: fc:f5:50:fc:8f:80:68:30:d7:56:8b:aa:90:d1:a4:22:cc:17: 06:4a:36:e2 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUZjW/AhDBFBZZTyXWy0Rc9sYF1ikwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUxNDM4MTRaFw0yNjAyMDQxNDQzMTRaMDMxMTAvBgNV BAMTKDY4NDlCNUE1RUFFNzc1NTdCQjE1MEE1MDQ0NjAxRTEyRkJCMzlDRTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYpAamxDFuDer3sQIo0kIvaVzj N1Q4JkOrhclFpjslZOalFSc7LECA7Dt8Ba28z+2yy1M69WwAHsyjdUiN5YLiw7pC nKKZ4xMh/dNcS3mFeExqYB3YQyd6PhuM8BF9tufJ82IEum7BNVzybvamv44V3tLS Gd9wJVfMEVVRzl9qvx+a2H3IoLVR+y170k32mbPrkznDJM3sq36yEI2Pw8eMysCM LD6dXMYV4iyMZwuM+Yk9qmQLT1W3h4J9WRCJUuJojjgCusXGFGPUz9f+Hen+Vjkm LARqTqBzDHYrkU74Uk0Tk9gmqZ3xd+MdYb2m+KBUct/TGznKkat+zc7B+TJBAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRoSbWl6ud1V7sV ClBEYB4S+7Oc6TAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNDEyMzQzN0RDNjBCQTY5Rjg4NDc2NEQy OTBCNTlEM0M1QzQxNDAzMTg2RkM5OUUyQkZCQkM1QzE1QjYxMjM1RC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80MTIzNDM3REM2MEJBNjlGODg0NzY0RDI5MEI1OUQzQzVDNDE0MDMxODZG Qzk5RTJCRkJCQzVDMTVCNjEyMzVELzAvNjg0OUI1QTVFQUU3NzU1N0JCMTUwQTUw NDQ2MDFFMTJGQkIzOUNFOS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCsXxUMA0EAgAC MAcDBQAoBgPjMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQfSDANBgkqhkiG9w0B AQsFAAOCAQEAf62wlc6wADFdTLLTG3R2946y5uVeuY37l2B1MAlDecNgD6o1I6av gTw08yAjCM/4U/sm0i1ZmOc66rA/R542m91TkBZclNetZ8EpHa/q0wfA5mnnIFZb SOd7b2oBEowR8Jfmny0E80EuKk1fGJK94PGuswjEU41Iajgn0Pux/I/mFavdqJ5g 5LdwbTAHeGwQL4zprmdShk03fwlBqWx7ad8U0eXhZKYDKzvZZHIQy1MCMgkHjgGK uFC11RcyIdsKNY5NVVcmhYih1ZaIBx046fXSCK/vUzXxDOQ/ha3x+YQgnaLCzxDV Va9A/PVQ/I+AaDDXVouqkNGkIswXBko24g== -----END CERTIFICATE-----Generated at Wed Nov 5 12:07:35 2025 by rpki-client