$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81BC3D0F24DB890EA37C979CCC6BE88C7FED3340.cer File: 81BC3D0F24DB890EA37C979CCC6BE88C7FED3340.cer (raw, json) Hash identifier: 2ixpMV2v3svEJK3xPJ2XdFY0fXYpf23ZY3De5CaFDvA= Subject key identifier: 81:BC:3D:0F:24:DB:89:0E:A3:7C:97:9C:CC:6B:E8:8C:7F:ED:33:40 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 7011AA07348345CA79ABBD27B67B9FE8A30F9277 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/68AC6BF731FD32A25BB11D007FA3075F3A38B25B73B6D36291B50F323384CB8C/0/81BC3D0F24DB890EA37C979CCC6BE88C7FED3340.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/68AC6BF731FD32A25BB11D007FA3075F3A38B25B73B6D36291B50F323384CB8C/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 11:08:21 +0000 Certificate not after: Wed 04 Feb 2026 11:13:21 +0000 Subordinate resources: AS: 271911 IP: 45.70.56.0/22 IP: 2803:a820::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:11:aa:07:34:83:45:ca:79:ab:bd:27:b6:7b:9f:e8:a3:0f:92:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 11:08:21 2025 GMT Not After : Feb 4 11:13:21 2026 GMT Subject: CN=81BC3D0F24DB890EA37C979CCC6BE88C7FED3340 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:de:c9:21:fb:da:5a:b8:22:25:c8:b4:60:58: 97:cd:0a:cb:24:64:4a:35:40:5d:cd:6a:25:97:91: ff:42:dd:99:cd:d2:db:2d:1b:be:8f:b1:00:34:06: 53:5c:46:52:ba:6e:db:a2:1f:55:f0:7d:71:d8:68: 34:6a:a2:2b:cc:e9:1d:71:02:9f:1e:58:da:84:6b: 64:6b:21:31:03:62:42:16:29:e1:0c:3f:18:1f:a0: c9:01:7b:59:f8:32:0d:2b:a5:9c:50:66:04:10:06: e8:c8:fa:13:6c:a1:da:33:5c:96:4c:d6:85:99:eb: 66:10:e3:3d:62:ef:e3:8a:d8:da:87:68:6c:27:2f: 3e:3a:f6:2d:28:1e:7b:bf:d1:af:90:92:fa:c9:72: d2:93:2e:6a:fd:45:85:f9:aa:7c:19:9a:fd:91:c8: 28:fe:b2:f9:5a:4c:da:83:8a:9a:7e:94:4b:88:0a: aa:21:2d:d1:6c:78:e4:f3:1c:85:28:8c:b8:4f:b1: 93:b7:ad:53:7c:f4:7d:cd:1c:5b:07:e1:1d:0d:63: 69:60:c1:32:31:45:bb:79:4b:6c:20:68:21:94:ce: 01:6b:30:92:07:1a:69:3c:e1:c8:99:0a:f8:31:35: c5:f9:67:76:bb:a8:a0:0e:e9:af:a6:e0:1f:2d:00: 1a:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 81:BC:3D:0F:24:DB:89:0E:A3:7C:97:9C:CC:6B:E8:8C:7F:ED:33:40 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/68AC6BF731FD32A25BB11D007FA3075F3A38B25B73B6D36291B50F323384CB8C/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/68AC6BF731FD32A25BB11D007FA3075F3A38B25B73B6D36291B50F323384CB8C/0/81BC3D0F24DB890EA37C979CCC6BE88C7FED3340.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.70.56.0/22 IPv6: 2803:a820::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 271911 Signature Algorithm: sha256WithRSAEncryption 4f:10:dd:f2:7f:47:17:b2:f8:24:19:96:a2:76:fd:ea:cf:ce: 5c:21:3d:40:ec:37:85:53:df:83:57:06:f9:a4:e3:87:0c:cb: 56:f7:b1:b0:87:87:16:ad:78:f0:e1:e7:c9:90:63:2c:25:15: 4a:36:12:de:a4:ed:22:42:6c:49:85:30:34:c5:07:42:a8:ca: 7b:03:ef:c0:da:2e:d7:dd:d8:14:5f:01:9f:9c:1b:66:a3:9d: e2:22:aa:7e:f8:c1:d9:cb:ea:f4:61:23:d5:94:f2:b5:79:2b: 16:23:c9:2d:2b:75:ee:f2:5b:1e:82:4e:c7:4f:65:18:ba:4a: 39:f2:1a:8e:70:29:85:4c:19:e5:4f:44:11:41:f1:e3:5e:9b: 0a:03:3b:19:ff:29:35:be:f2:39:3d:70:56:84:76:5f:c9:83: 06:e3:29:61:25:27:88:8c:ed:0c:99:7c:fd:e6:b5:9b:06:53: 49:85:ee:b0:05:79:cf:d6:e8:6e:cd:e7:9f:e0:0a:a6:8a:d3: c5:2b:c2:d4:29:14:1d:0c:87:74:1b:e6:42:d1:bc:5a:34:8c: af:80:83:9c:a8:6e:31:7a:e3:95:6e:05:10:58:35:8a:a9:a5: 81:48:f9:9d:93:d8:41:d4:6a:65:60:32:3d:80:dd:48:91:2a: 7e:68:ca:66 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUcBGqBzSDRcp5q70ntnuf6KMPkncwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUxMTA4MjFaFw0yNjAyMDQxMTEzMjFaMDMxMTAvBgNV BAMTKDgxQkMzRDBGMjREQjg5MEVBMzdDOTc5Q0NDNkJFODhDN0ZFRDMzNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb3skh+9pauCIlyLRgWJfNCssk ZEo1QF3NaiWXkf9C3ZnN0tstG76PsQA0BlNcRlK6btuiH1XwfXHYaDRqoivM6R1x Ap8eWNqEa2RrITEDYkIWKeEMPxgfoMkBe1n4Mg0rpZxQZgQQBujI+hNsodozXJZM 1oWZ62YQ4z1i7+OK2NqHaGwnLz469i0oHnu/0a+QkvrJctKTLmr9RYX5qnwZmv2R yCj+svlaTNqDipp+lEuICqohLdFseOTzHIUojLhPsZO3rVN89H3NHFsH4R0NY2lg wTIxRbt5S2wgaCGUzgFrMJIHGmk84ciZCvgxNcX5Z3a7qKAO6a+m4B8tABo7AgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSBvD0PJNuJDqN8 l5zMa+iMf+0zQDAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNjhBQzZCRjczMUZEMzJBMjVCQjExRDAw N0ZBMzA3NUYzQTM4QjI1QjczQjZEMzYyOTFCNTBGMzIzMzg0Q0I4Qy8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy82OEFDNkJGNzMxRkQzMkEyNUJCMTFEMDA3RkEzMDc1RjNBMzhCMjVCNzNC NkQzNjI5MUI1MEYzMjMzODRDQjhDLzAvODFCQzNEMEYyNERCODkwRUEzN0M5NzlD Q0M2QkU4OEM3RkVEMzM0MC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLUY4MA0EAgAC MAcDBQAoA6ggMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQmJzANBgkqhkiG9w0B AQsFAAOCAQEATxDd8n9HF7L4JBmWonb96s/OXCE9QOw3hVPfg1cG+aTjhwzLVvex sIeHFq148OHnyZBjLCUVSjYS3qTtIkJsSYUwNMUHQqjKewPvwNou193YFF8Bn5wb ZqOd4iKqfvjB2cvq9GEj1ZTytXkrFiPJLSt17vJbHoJOx09lGLpKOfIajnAphUwZ 5U9EEUHx416bCgM7Gf8pNb7yOT1wVoR2X8mDBuMpYSUniIztDJl8/ea1mwZTSYXu sAV5z9bobs3nn+AKporTxSvC1CkUHQyHdBvmQtG8WjSMr4CDnKhuMXrjlW4FEFg1 iqmlgUj5nZPYQdRqZWAyPYDdSJEqfmjKZg== -----END CERTIFICATE-----Generated at Wed Nov 5 13:36:30 2025 by rpki-client