$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7AE5BC811D41AB880C0B9EE47AD9B9980DC7EEAF.cer File: 7AE5BC811D41AB880C0B9EE47AD9B9980DC7EEAF.cer (raw, json) Hash identifier: ZflYsdw1Pj63E0aoPmIMKk1FxpkB8I92U91Dc1pEbAo= Subject key identifier: 7A:E5:BC:81:1D:41:AB:88:0C:0B:9E:E4:7A:D9:B9:98:0D:C7:EE:AF Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 6F4FBB46CC7315B5353F376DFA486CEE4A8DE9ED Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/3A7D08928422CEB84F66F47334FC5FF26A23608A87C64BEC5ECFD0752263DB4E/0/7AE5BC811D41AB880C0B9EE47AD9B9980DC7EEAF.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/3A7D08928422CEB84F66F47334FC5FF26A23608A87C64BEC5ECFD0752263DB4E/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 05:24:15 +0000 Certificate not after: Wed 04 Feb 2026 05:29:15 +0000 Subordinate resources: AS: 269949 IP: 190.83.124.0/22 IP: 2803:eae0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:4f:bb:46:cc:73:15:b5:35:3f:37:6d:fa:48:6c:ee:4a:8d:e9:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 05:24:15 2025 GMT Not After : Feb 4 05:29:15 2026 GMT Subject: CN=7AE5BC811D41AB880C0B9EE47AD9B9980DC7EEAF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c9:97:3f:ab:39:d7:52:a0:b9:fb:ac:c7:ac: 30:42:4f:48:7b:34:d1:2b:76:61:5c:98:e7:cc:1c: b7:73:3e:e7:55:0a:6d:b9:7f:97:dc:ce:74:5e:2b: ab:46:cc:ca:ac:eb:be:77:e5:75:a0:34:ac:61:b8: 9f:b4:e6:ce:e8:cd:95:da:5b:9e:37:9f:29:5e:fe: 01:59:dc:66:2f:45:ec:6c:ce:85:d4:d6:0e:f7:99: dd:70:c5:26:3a:5d:b9:be:80:68:3e:09:02:93:6e: 11:ab:dc:ba:77:d3:64:d5:df:e6:33:8f:f4:6d:c7: f2:df:ce:d6:fd:ed:7f:e2:95:ff:48:02:76:0a:e0: c1:67:ac:a1:a8:49:ca:69:05:37:f1:68:8a:74:25: ce:10:d9:1f:81:24:6f:0c:d0:78:56:b2:6d:cc:cd: b2:e2:23:2d:c7:5e:95:34:ad:f4:eb:16:0a:ea:1e: 7b:1e:7b:c9:d5:b4:ea:e9:a0:29:ad:25:c2:90:9c: e9:fd:a3:31:42:3c:21:13:fe:bf:ca:f5:81:dc:cd: 99:0e:e5:2b:ca:ea:6c:86:1c:11:35:44:bc:12:47: 03:7d:03:81:68:6e:7e:c2:69:be:3e:25:f1:f9:2f: fc:b1:71:bb:64:df:ab:74:ea:16:81:4c:11:28:a2: 11:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7A:E5:BC:81:1D:41:AB:88:0C:0B:9E:E4:7A:D9:B9:98:0D:C7:EE:AF X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/3A7D08928422CEB84F66F47334FC5FF26A23608A87C64BEC5ECFD0752263DB4E/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/3A7D08928422CEB84F66F47334FC5FF26A23608A87C64BEC5ECFD0752263DB4E/0/7AE5BC811D41AB880C0B9EE47AD9B9980DC7EEAF.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 190.83.124.0/22 IPv6: 2803:eae0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 269949 Signature Algorithm: sha256WithRSAEncryption e0:02:53:98:e8:7d:0b:52:7f:cd:ce:3d:62:d3:66:0e:f8:45: 53:7c:1d:0c:59:c2:b6:04:01:45:67:10:70:a8:f9:32:78:92: e9:35:cb:35:09:4d:59:e0:c0:d2:f1:3e:70:01:9d:10:ae:26: e0:05:8c:cc:75:99:e3:22:f0:ed:58:7e:c3:82:98:97:0a:93: 34:a5:43:59:ca:a3:cc:3d:b6:a3:4f:24:46:ab:c0:a3:c9:ff: 8a:4d:90:3d:b2:2e:87:13:c6:4d:a0:97:7f:5d:69:67:55:ea: ba:14:13:d7:06:43:d2:96:5a:4e:f2:58:91:40:16:2d:5f:d2: c4:d0:f2:75:d0:5f:40:30:32:8f:e4:36:42:be:3e:f4:ed:e5: c1:3c:7a:40:c5:a0:99:8c:69:ba:6e:2a:e4:52:66:c8:ed:a0: 5d:30:ad:88:39:57:3d:af:71:03:00:a5:29:58:e6:cb:b5:b7: 77:39:4a:cc:e8:c1:94:ea:81:eb:a6:53:f3:98:d0:ef:91:4f: 85:50:45:3f:bc:94:c9:7f:20:32:36:f5:65:07:a1:d2:06:cd: 78:b6:6e:dc:73:13:c7:c9:9a:19:37:9d:d9:8e:a5:25:7e:72: cb:0e:b4:18:d3:9a:9c:92:a8:1c:3e:5b:4e:a3:9e:88:02:c1: 9b:aa:28:99 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUb0+7RsxzFbU1Pzdt+khs7kqN6e0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUwNTI0MTVaFw0yNjAyMDQwNTI5MTVaMDMxMTAvBgNV BAMTKDdBRTVCQzgxMUQ0MUFCODgwQzBCOUVFNDdBRDlCOTk4MERDN0VFQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChyZc/qznXUqC5+6zHrDBCT0h7 NNErdmFcmOfMHLdzPudVCm25f5fcznReK6tGzMqs67535XWgNKxhuJ+05s7ozZXa W543nyle/gFZ3GYvRexszoXU1g73md1wxSY6Xbm+gGg+CQKTbhGr3Lp302TV3+Yz j/Rtx/Lfztb97X/ilf9IAnYK4MFnrKGoScppBTfxaIp0Jc4Q2R+BJG8M0HhWsm3M zbLiIy3HXpU0rfTrFgrqHnsee8nVtOrpoCmtJcKQnOn9ozFCPCET/r/K9YHczZkO 5SvK6myGHBE1RLwSRwN9A4Fobn7Cab4+JfH5L/yxcbtk36t06haBTBEoohEPAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR65byBHUGriAwL nuR62bmYDcfurzAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvM0E3RDA4OTI4NDIyQ0VCODRGNjZGNDcz MzRGQzVGRjI2QTIzNjA4QTg3QzY0QkVDNUVDRkQwNzUyMjYzREI0RS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8zQTdEMDg5Mjg0MjJDRUI4NEY2NkY0NzMzNEZDNUZGMjZBMjM2MDhBODdD NjRCRUM1RUNGRDA3NTIyNjNEQjRFLzAvN0FFNUJDODExRDQxQUI4ODBDMEI5RUU0 N0FEOUI5OTgwREM3RUVBRi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCvlN8MA0EAgAC MAcDBQAoA+rgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQefTANBgkqhkiG9w0B AQsFAAOCAQEA4AJTmOh9C1J/zc49YtNmDvhFU3wdDFnCtgQBRWcQcKj5MniS6TXL NQlNWeDA0vE+cAGdEK4m4AWMzHWZ4yLw7Vh+w4KYlwqTNKVDWcqjzD22o08kRqvA o8n/ik2QPbIuhxPGTaCXf11pZ1XquhQT1wZD0pZaTvJYkUAWLV/SxNDyddBfQDAy j+Q2Qr4+9O3lwTx6QMWgmYxpum4q5FJmyO2gXTCtiDlXPa9xAwClKVjmy7W3dzlK zOjBlOqB66ZT85jQ75FPhVBFP7yUyX8gMjb1ZQeh0gbNeLZu3HMTx8maGTed2Y6l JX5yyw60GNOanJKoHD5bTqOeiALBm6oomQ== -----END CERTIFICATE-----Generated at Wed Nov 5 13:37:13 2025 by rpki-client