$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.cer File: 7D1F174BFBB17B7822E82D3AA14E86D385483089.cer (raw, json) Hash identifier: Ss5B8IX7FYSpx3ys1822AxK0pH82lgsU7LsBj9wEVa0= Subject key identifier: 7D:1F:17:4B:FB:B1:7B:78:22:E8:2D:3A:A1:4E:86:D3:85:48:30:89 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 5BABC622715D67FDA4399D6C79705ED725902253 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Sat 11 Oct 2025 04:19:49 +0000 Certificate not after: Sat 10 Oct 2026 04:24:49 +0000 Subordinate resources: AS: 262216 IP: 138.0.104.0/22 IP: 190.113.224.0/21 IP: 2803:5a00::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:ab:c6:22:71:5d:67:fd:a4:39:9d:6c:79:70:5e:d7:25:90:22:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Oct 11 04:19:49 2025 GMT Not After : Oct 10 04:24:49 2026 GMT Subject: CN=7D1F174BFBB17B7822E82D3AA14E86D385483089 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:01:80:ff:43:39:62:6e:1d:45:23:1b:fe:c5: b7:d4:27:b0:63:c5:5a:a8:ef:a1:cc:f4:84:62:71: 75:e2:ec:77:12:ed:57:1a:50:8e:16:2b:5d:48:4a: fd:b4:21:89:53:11:96:bb:87:59:36:51:78:e1:ec: bf:22:6e:76:1e:79:fa:92:1b:03:96:55:47:d7:65: c0:8b:62:3f:72:1e:d2:00:98:da:d1:92:7a:a0:cc: 4d:09:40:0d:1b:4d:e6:82:75:65:0f:56:e2:30:02: c2:5b:ea:31:2b:8f:3c:d0:a9:f0:9e:03:bb:84:43: 44:a4:35:ee:a2:5a:d3:43:d4:c0:ff:28:42:11:7d: 11:ec:5c:8f:de:b4:ab:8d:71:9f:1f:a8:02:b3:b0: 53:47:2b:d3:2f:80:6f:ef:0a:30:ca:d9:21:ef:bf: 1b:94:7b:42:72:9f:a5:4b:d3:a4:ae:ab:48:77:e9: 84:97:66:2d:44:4d:c3:52:bc:12:05:d5:88:e0:8e: c1:04:1b:bc:c0:31:a2:e2:6d:35:3a:24:77:ad:ed: 2c:42:13:c1:b0:a8:bc:c5:2f:99:b7:80:10:41:9d: 13:b9:26:77:58:32:44:f2:fa:b0:3e:62:1f:3d:bd: c8:f5:5d:fc:bf:4f:de:aa:46:07:18:a0:8f:f6:4c: 0e:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7D:1F:17:4B:FB:B1:7B:78:22:E8:2D:3A:A1:4E:86:D3:85:48:30:89 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.0.104.0/22 190.113.224.0/21 IPv6: 2803:5a00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 262216 Signature Algorithm: sha256WithRSAEncryption 3b:b8:7c:ae:aa:33:ae:e8:33:a7:ae:51:04:ad:61:90:4e:da: 33:09:2f:c3:7e:a3:da:be:04:c8:2c:80:8a:99:24:cf:c4:e7: 78:57:a6:cd:80:48:83:ff:61:05:1d:ce:57:74:34:00:15:b5: 1d:ae:ff:56:6a:f5:f2:f7:ed:59:72:99:f9:e1:8c:05:0a:69: 1d:17:c5:7c:e1:83:b2:17:02:a2:71:24:00:51:00:80:89:42: 84:3f:56:3b:ee:1e:07:32:28:79:dd:28:7c:11:b1:13:dd:e6: c5:40:b1:1a:fe:6f:67:96:7e:3b:3e:07:fc:77:6a:c7:06:9f: df:58:ae:87:a2:ed:86:56:cd:c0:db:af:08:9a:64:5f:03:2e: a4:d5:c5:80:2f:71:91:aa:15:19:e6:88:7b:37:86:c4:fb:ed: 9a:6d:04:fd:08:cb:02:b0:51:f4:15:62:a5:bf:0d:0d:f7:1c: 18:6d:c6:7f:d3:82:ba:07:02:cb:86:b3:b3:c2:c3:bd:c7:3b: f7:1f:a4:8f:9b:ac:ac:80:85:c1:b3:4c:8f:1e:34:2f:64:18: 53:5e:23:5c:eb:9f:d4:9b:14:a8:ee:f3:4e:bc:b6:55:bd:7e: 66:49:1a:57:e4:77:21:1b:06:f4:2e:bd:34:6d:f1:79:df:37: b1:67:65:3e -----BEGIN CERTIFICATE----- MIIGqzCCBZOgAwIBAgIUW6vGInFdZ/2kOZ1seXBe1yWQIlMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTEwMTEwNDE5NDlaFw0yNjEwMTAwNDI0NDlaMDMxMTAvBgNV BAMTKDdEMUYxNzRCRkJCMTdCNzgyMkU4MkQzQUExNEU4NkQzODU0ODMwODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9AYD/Qzlibh1FIxv+xbfUJ7Bj xVqo76HM9IRicXXi7HcS7VcaUI4WK11ISv20IYlTEZa7h1k2UXjh7L8ibnYeefqS GwOWVUfXZcCLYj9yHtIAmNrRknqgzE0JQA0bTeaCdWUPVuIwAsJb6jErjzzQqfCe A7uEQ0SkNe6iWtND1MD/KEIRfRHsXI/etKuNcZ8fqAKzsFNHK9MvgG/vCjDK2SHv vxuUe0Jyn6VL06Suq0h36YSXZi1ETcNSvBIF1YjgjsEEG7zAMaLibTU6JHet7SxC E8GwqLzFL5m3gBBBnRO5JndYMkTy+rA+Yh89vcj1Xfy/T96qRgcYoI/2TA6lAgMB AAGjggO1MIIDsTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR9HxdL+7F7eCLo LTqhTobThUgwiTAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvREJDRTMzRDVBODRFQzNFQkU1ODAzQjQz OTg3OTkwODcxOEIxNjM3RkRGMDIwRUY5QzgyREI3QkUyMDIwMDdDQy8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9EQkNFMzNENUE4NEVDM0VCRTU4MDNCNDM5ODc5OTA4NzE4QjE2MzdGREYw MjBFRjlDODJEQjdCRTIwMjAwN0NDLzAvN0QxRjE3NEJGQkIxN0I3ODIyRTgyRDNB QTE0RTg2RDM4NTQ4MzA4OS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCigBoAwQDvnHg MA0EAgACMAcDBQAoA1oAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQASDANBgkq hkiG9w0BAQsFAAOCAQEAO7h8rqozrugzp65RBK1hkE7aMwkvw36j2r4EyCyAipkk z8TneFemzYBIg/9hBR3OV3Q0ABW1Ha7/Vmr18vftWXKZ+eGMBQppHRfFfOGDshcC onEkAFEAgIlChD9WO+4eBzIoed0ofBGxE93mxUCxGv5vZ5Z+Oz4H/Hdqxwaf31iu h6LthlbNwNuvCJpkXwMupNXFgC9xkaoVGeaIezeGxPvtmm0E/QjLArBR9BVipb8N DfccGG3Gf9OCugcCy4azs8LDvcc79x+kj5usrICFwbNMjx40L2QYU14jXOuf1JsU qO7zTry2Vb1+ZkkaV+R3IRsG9C69NG3xed83sWdlPg== -----END CERTIFICATE-----Generated at Tue Nov 4 21:38:01 2025 by rpki-client