$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82006612D78CE747BD2436D4D0450475F50B53D5.cer File: 82006612D78CE747BD2436D4D0450475F50B53D5.cer (raw, json) Hash identifier: o1S1e6zh14ZeGP/K4xBNAq3Xqu0f2XsMZPLusQas3CM= Subject key identifier: 82:00:66:12:D7:8C:E7:47:BD:24:36:D4:D0:45:04:75:F5:0B:53:D5 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 5F3DBD31A9CE125D45D195441FEB25D3CC59FBDE Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/7ABCA87E804BBAD475D6D31A96ABA64323B56AB31732F12670418CC5FE6462F5/0/82006612D78CE747BD2436D4D0450475F50B53D5.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/7ABCA87E804BBAD475D6D31A96ABA64323B56AB31732F12670418CC5FE6462F5/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 04 Feb 2025 23:14:21 +0000 Certificate not after: Tue 03 Feb 2026 23:19:21 +0000 Subordinate resources: AS: 271810 IP: 168.181.88.0/22 IP: 2803:9010::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:3d:bd:31:a9:ce:12:5d:45:d1:95:44:1f:eb:25:d3:cc:59:fb:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 4 23:14:21 2025 GMT Not After : Feb 3 23:19:21 2026 GMT Subject: CN=82006612D78CE747BD2436D4D0450475F50B53D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b9:c7:1f:49:b2:20:7c:5d:8d:ba:80:62:3e: b5:4c:18:d3:8f:37:98:fc:58:27:d6:92:65:5a:39: e9:b5:5d:9f:82:3b:bb:18:f5:d9:ea:29:a5:76:85: ca:d7:88:d5:68:43:e1:87:69:39:c3:30:3f:62:0a: 3d:69:0c:50:e0:6e:9e:a4:ff:cc:33:02:f3:dd:88: 5d:70:c6:43:dc:de:f7:fc:c8:0b:12:ed:eb:d9:e3: 9f:9d:3f:8f:58:60:5b:81:4d:9e:9a:55:ea:ff:b4: 94:c7:b7:a6:ca:db:29:9a:0d:77:fe:2a:c1:90:4b: 40:7f:53:15:ce:20:1a:34:1b:e2:c9:79:1e:e6:be: d9:77:40:63:f3:80:02:48:58:22:14:13:88:fd:ee: d0:a8:6f:01:fe:25:5f:d4:ce:a5:33:69:36:d8:da: 0a:b5:48:ab:b7:5e:c6:9e:e8:6a:da:ec:2d:4a:5f: 8e:64:fc:64:e3:3c:08:f9:ae:b2:97:b1:a6:53:4e: a7:37:89:21:78:61:c8:ca:e5:58:9e:eb:43:1c:45: 81:5d:8f:d8:40:b4:26:58:8e:fa:d3:5a:97:24:a8: 77:73:1b:92:e2:fd:00:1c:cf:e6:58:5a:4a:b8:f8: 28:38:1c:12:fa:99:19:b5:4f:83:86:24:47:a0:6e: 95:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 82:00:66:12:D7:8C:E7:47:BD:24:36:D4:D0:45:04:75:F5:0B:53:D5 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/7ABCA87E804BBAD475D6D31A96ABA64323B56AB31732F12670418CC5FE6462F5/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/7ABCA87E804BBAD475D6D31A96ABA64323B56AB31732F12670418CC5FE6462F5/0/82006612D78CE747BD2436D4D0450475F50B53D5.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.181.88.0/22 IPv6: 2803:9010::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 271810 Signature Algorithm: sha256WithRSAEncryption b3:21:5e:64:df:98:00:57:db:72:7b:50:33:c8:27:a3:a4:14: 55:88:37:77:2b:8c:d3:c9:a4:f6:62:4b:e7:13:ff:8d:19:66: ca:ca:a2:73:2a:41:bc:b4:89:18:5f:8e:fa:ce:85:34:ad:2f: 97:82:3f:a4:40:d8:56:83:b3:a7:9d:aa:85:1c:82:d9:de:3b: 80:db:dd:b5:fb:46:3d:16:b1:74:58:3c:d8:f6:a1:52:7c:10: 4c:af:4a:96:c1:93:b7:79:63:57:b7:7e:14:87:d5:62:de:50: 08:16:5d:20:9d:96:9c:9f:34:99:a4:b6:de:69:7b:d2:bb:35: 4a:98:0e:5d:55:7b:50:1b:5d:cd:cf:93:eb:3f:83:68:3b:ce: 40:90:c6:8f:83:26:1e:a8:b9:dd:52:d3:e2:26:d1:09:91:05: e8:50:9f:89:7e:e3:40:d0:c4:04:f4:97:a6:51:79:93:f9:f6: 97:fa:4a:ce:b8:89:d4:6f:f5:af:82:59:cd:ec:ab:06:e4:25: 7b:19:89:d7:ae:69:df:16:3f:c3:0c:5a:6a:ab:9f:3e:6c:f3: 4a:99:ed:4b:72:a3:55:46:48:c3:d1:52:91:2b:e6:9d:09:45: 0f:41:41:b7:c0:9b:58:2c:32:b8:9e:cd:52:b1:06:fa:c9:a9: 06:32:e9:d0 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUXz29ManOEl1F0ZVEH+sl08xZ+94wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDQyMzE0MjFaFw0yNjAyMDMyMzE5MjFaMDMxMTAvBgNV BAMTKDgyMDA2NjEyRDc4Q0U3NDdCRDI0MzZENEQwNDUwNDc1RjUwQjUzRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1uccfSbIgfF2NuoBiPrVMGNOP N5j8WCfWkmVaOem1XZ+CO7sY9dnqKaV2hcrXiNVoQ+GHaTnDMD9iCj1pDFDgbp6k /8wzAvPdiF1wxkPc3vf8yAsS7evZ45+dP49YYFuBTZ6aVer/tJTHt6bK2ymaDXf+ KsGQS0B/UxXOIBo0G+LJeR7mvtl3QGPzgAJIWCIUE4j97tCobwH+JV/UzqUzaTbY 2gq1SKu3Xsae6Gra7C1KX45k/GTjPAj5rrKXsaZTTqc3iSF4YcjK5Vie60McRYFd j9hAtCZYjvrTWpckqHdzG5Li/QAcz+ZYWkq4+Cg4HBL6mRm1T4OGJEegbpXdAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSCAGYS14znR70k NtTQRQR19QtT1TAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvN0FCQ0E4N0U4MDRCQkFENDc1RDZEMzFB OTZBQkE2NDMyM0I1NkFCMzE3MzJGMTI2NzA0MThDQzVGRTY0NjJGNS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy83QUJDQTg3RTgwNEJCQUQ0NzVENkQzMUE5NkFCQTY0MzIzQjU2QUIzMTcz MkYxMjY3MDQxOENDNUZFNjQ2MkY1LzAvODIwMDY2MTJENzhDRTc0N0JEMjQzNkQ0 RDA0NTA0NzVGNTBCNTNENS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCqLVYMA0EAgAC MAcDBQAoA5AQMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQlwjANBgkqhkiG9w0B AQsFAAOCAQEAsyFeZN+YAFfbcntQM8gno6QUVYg3dyuM08mk9mJL5xP/jRlmysqi cypBvLSJGF+O+s6FNK0vl4I/pEDYVoOzp52qhRyC2d47gNvdtftGPRaxdFg82Pah UnwQTK9KlsGTt3ljV7d+FIfVYt5QCBZdIJ2WnJ80maS23ml70rs1SpgOXVV7UBtd zc+T6z+DaDvOQJDGj4MmHqi53VLT4ibRCZEF6FCfiX7jQNDEBPSXplF5k/n2l/pK zriJ1G/1r4JZzeyrBuQlexmJ165p3xY/wwxaaqufPmzzSpntS3KjVUZIw9FSkSvm nQlFD0FBt8CbWCwyuJ7NUrEG+smpBjLp0A== -----END CERTIFICATE-----Generated at Tue Nov 4 21:38:18 2025 by rpki-client