$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F71B1B6812BF46371D2DCB57923AF0A2DB3927D.cer File: 7F71B1B6812BF46371D2DCB57923AF0A2DB3927D.cer (raw, json) Hash identifier: JOCHKW5SUwzH94pkHoyEm72fV3tu/A/ybB3xAqCuoBc= Subject key identifier: 7F:71:B1:B6:81:2B:F4:63:71:D2:DC:B5:79:23:AF:0A:2D:B3:92:7D Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 03706BE80764B37374234C34AAC1AFF68D4BBEC9 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/FFB2FF637FF852ABF1183856A475F643BFF3802B71973D6A7D06D8555BD7C0AF/0/7F71B1B6812BF46371D2DCB57923AF0A2DB3927D.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/FFB2FF637FF852ABF1183856A475F643BFF3802B71973D6A7D06D8555BD7C0AF/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 16:03:51 +0000 Certificate not after: Wed 04 Feb 2026 16:08:51 +0000 Subordinate resources: AS: 269733 IP: 45.181.120.0/22 IP: 2803:3160::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:70:6b:e8:07:64:b3:73:74:23:4c:34:aa:c1:af:f6:8d:4b:be:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 16:03:51 2025 GMT Not After : Feb 4 16:08:51 2026 GMT Subject: CN=7F71B1B6812BF46371D2DCB57923AF0A2DB3927D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:bd:82:63:53:6c:1c:05:be:96:82:96:d9:bf: c0:a3:68:d0:98:62:17:e9:fb:ef:50:4f:c7:95:5f: a3:43:4f:7e:ea:b3:38:b8:14:09:c9:a2:04:d7:50: 41:bc:f2:ef:0f:5f:ca:5d:7c:1d:44:50:fb:39:7d: 55:7b:c8:99:0e:e4:c1:42:9a:43:e0:d1:e2:52:aa: fa:3d:84:2b:3a:06:e9:23:94:df:be:ec:46:d9:2a: 57:12:d5:fa:6c:ca:8a:6b:81:0e:92:2e:ae:dd:fb: 9a:86:e6:4d:a8:cb:49:e7:0e:c2:90:eb:14:03:43: 23:c3:19:d7:19:4f:00:05:eb:33:45:7d:00:3a:57: 92:bd:13:03:89:37:c5:fe:4f:55:08:ea:0e:35:1e: 7d:17:57:a9:50:81:a3:01:6c:b2:62:f2:60:18:0f: 66:a1:73:a4:92:68:7f:2a:c9:eb:78:41:fb:36:5a: b7:44:d5:99:83:76:64:df:0d:cf:6c:62:04:cf:95: b6:54:23:9c:66:a6:d5:a1:d9:d4:40:f9:96:21:2e: e7:c9:b6:c9:c0:ae:35:1d:60:a3:b0:10:55:dd:21: 50:2c:cb:3c:69:0c:08:10:b8:a4:7c:f6:2b:98:6c: 6e:95:a5:cf:02:0d:58:79:d3:a0:63:29:f7:54:e8: 8b:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7F:71:B1:B6:81:2B:F4:63:71:D2:DC:B5:79:23:AF:0A:2D:B3:92:7D X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/FFB2FF637FF852ABF1183856A475F643BFF3802B71973D6A7D06D8555BD7C0AF/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/FFB2FF637FF852ABF1183856A475F643BFF3802B71973D6A7D06D8555BD7C0AF/0/7F71B1B6812BF46371D2DCB57923AF0A2DB3927D.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.181.120.0/22 IPv6: 2803:3160::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 269733 Signature Algorithm: sha256WithRSAEncryption b7:34:d7:e8:99:eb:48:dc:d6:97:b9:91:29:44:77:f8:23:80: b6:d8:10:df:5d:6a:60:74:4f:a5:b4:ef:e6:34:97:cd:e6:6b: 93:c4:c8:cc:93:05:db:67:d2:6b:e9:e6:06:1d:67:1d:b2:af: c5:5e:51:21:61:46:cf:ee:7b:e2:fb:bd:49:3f:a4:7e:97:90: 01:9c:35:0d:63:3d:16:3c:40:b2:55:ec:e0:45:ca:cc:d7:ed: 70:c2:2e:93:82:fe:0d:02:40:9b:cb:41:dd:6d:5f:ce:3c:fe: 38:fa:1f:8e:43:64:2d:73:c1:8b:64:55:6b:79:bc:b6:66:1b: 44:9a:b9:21:c8:61:08:90:e0:80:c0:6d:fd:ba:19:96:ae:84: 12:9a:ff:69:25:75:b5:f1:55:e0:97:73:55:a3:3c:59:c2:09: c1:11:0a:79:6c:96:9e:bc:0b:ca:f5:ca:bc:e1:c1:ab:64:3a: 63:81:b9:9c:d1:e8:44:cb:b5:a1:7d:6b:43:83:b2:b1:60:4a: 08:76:28:d0:f5:39:e3:f1:37:15:36:d6:f5:84:c5:d1:87:a2: 36:fa:bc:9c:5e:a4:94:0a:14:15:ce:13:a2:1d:06:82:ea:a6: 8b:6f:73:85:0e:1d:e5:d5:ef:da:db:c5:7d:00:4c:3f:b3:77: 0b:ee:99:53 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUA3Br6Adks3N0I0w0qsGv9o1LvskwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUxNjAzNTFaFw0yNjAyMDQxNjA4NTFaMDMxMTAvBgNV BAMTKDdGNzFCMUI2ODEyQkY0NjM3MUQyRENCNTc5MjNBRjBBMkRCMzkyN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+vYJjU2wcBb6WgpbZv8CjaNCY Yhfp++9QT8eVX6NDT37qszi4FAnJogTXUEG88u8PX8pdfB1EUPs5fVV7yJkO5MFC mkPg0eJSqvo9hCs6BukjlN++7EbZKlcS1fpsyoprgQ6SLq7d+5qG5k2oy0nnDsKQ 6xQDQyPDGdcZTwAF6zNFfQA6V5K9EwOJN8X+T1UI6g41Hn0XV6lQgaMBbLJi8mAY D2ahc6SSaH8qyet4Qfs2WrdE1ZmDdmTfDc9sYgTPlbZUI5xmptWh2dRA+ZYhLufJ tsnArjUdYKOwEFXdIVAsyzxpDAgQuKR89iuYbG6Vpc8CDVh506BjKfdU6IvbAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR/cbG2gSv0Y3HS 3LV5I68KLbOSfTAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRkZCMkZGNjM3RkY4NTJBQkYxMTgzODU2 QTQ3NUY2NDNCRkYzODAyQjcxOTczRDZBN0QwNkQ4NTU1QkQ3QzBBRi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9GRkIyRkY2MzdGRjg1MkFCRjExODM4NTZBNDc1RjY0M0JGRjM4MDJCNzE5 NzNENkE3RDA2RDg1NTVCRDdDMEFGLzAvN0Y3MUIxQjY4MTJCRjQ2MzcxRDJEQ0I1 NzkyM0FGMEEyREIzOTI3RC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLbV4MA0EAgAC MAcDBQAoAzFgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQdpTANBgkqhkiG9w0B AQsFAAOCAQEAtzTX6JnrSNzWl7mRKUR3+COAttgQ311qYHRPpbTv5jSXzeZrk8TI zJMF22fSa+nmBh1nHbKvxV5RIWFGz+574vu9ST+kfpeQAZw1DWM9FjxAslXs4EXK zNftcMIuk4L+DQJAm8tB3W1fzjz+OPofjkNkLXPBi2RVa3m8tmYbRJq5IchhCJDg gMBt/boZlq6EEpr/aSV1tfFV4JdzVaM8WcIJwREKeWyWnrwLyvXKvOHBq2Q6Y4G5 nNHoRMu1oX1rQ4OysWBKCHYo0PU54/E3FTbW9YTF0YeiNvq8nF6klAoUFc4Toh0G guqmi29zhQ4d5dXv2tvFfQBMP7N3C+6ZUw== -----END CERTIFICATE-----Generated at Wed Nov 5 12:07:24 2025 by rpki-client