$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8216836CFEBB6D738CAAE53C6968AA4C1180539B.cer File: 8216836CFEBB6D738CAAE53C6968AA4C1180539B.cer (raw, json) Hash identifier: Gur/M8CokcRI0F0QYUiHbRHv5WKcMBVN8YRRykvfYFc= Subject key identifier: 82:16:83:6C:FE:BB:6D:73:8C:AA:E5:3C:69:68:AA:4C:11:80:53:9B Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 1ACCB564C1042998D9EC3545B36D5DA9A9079466 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/932BF618BE2DF16F7C820FC42441AE90D713E344AEC8FEFE013933B533504615/0/8216836CFEBB6D738CAAE53C6968AA4C1180539B.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/932BF618BE2DF16F7C820FC42441AE90D713E344AEC8FEFE013933B533504615/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 18:59:53 +0000 Certificate not after: Wed 04 Feb 2026 19:04:53 +0000 Subordinate resources: AS: 270061 IP: 177.87.250.0/23 IP: 2803:7de0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:cc:b5:64:c1:04:29:98:d9:ec:35:45:b3:6d:5d:a9:a9:07:94:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 18:59:53 2025 GMT Not After : Feb 4 19:04:53 2026 GMT Subject: CN=8216836CFEBB6D738CAAE53C6968AA4C1180539B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:4c:82:26:c4:e1:35:77:c5:7a:46:6e:75:de: 85:e8:10:3c:44:ee:ce:5d:cf:ff:e6:53:4d:41:97: b4:55:a3:0d:b5:d8:99:8d:e8:66:3b:69:3b:43:82: 45:f3:d3:8c:23:81:63:16:d5:3f:6b:41:92:de:1b: c1:27:32:e3:5a:db:f1:1c:22:75:b1:c3:93:cd:1e: 9b:9e:d2:4c:49:2a:75:c5:a8:78:6c:1b:79:94:db: 0d:a2:3e:7c:6b:9a:56:84:1d:02:79:a3:c4:ef:5c: 72:59:04:64:94:15:67:e8:c2:42:b9:c3:72:ed:50: 75:ce:5f:7a:19:35:e2:39:7b:4d:0f:36:19:d6:ed: 58:3e:de:f0:e3:23:c1:82:04:84:b8:36:5d:21:a1: 35:c4:fa:dc:b9:05:3c:20:c4:c0:d7:2c:8a:74:28: f0:74:93:90:24:c5:4c:43:e3:a6:5c:40:31:01:f7: 6b:92:61:d1:c9:81:f3:ac:6d:21:6b:bd:e1:a6:74: 10:80:b0:30:54:94:b2:8c:6f:96:8b:4f:82:b0:ff: c9:36:3e:f1:a0:3f:1b:96:e8:04:75:55:36:07:08: 00:33:b7:46:38:f9:4b:d5:1b:6c:3a:85:af:a7:11: db:1d:99:86:13:1a:13:f2:47:04:89:88:7a:f4:c9: 86:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 82:16:83:6C:FE:BB:6D:73:8C:AA:E5:3C:69:68:AA:4C:11:80:53:9B X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/932BF618BE2DF16F7C820FC42441AE90D713E344AEC8FEFE013933B533504615/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/932BF618BE2DF16F7C820FC42441AE90D713E344AEC8FEFE013933B533504615/0/8216836CFEBB6D738CAAE53C6968AA4C1180539B.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.87.250.0/23 IPv6: 2803:7de0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 270061 Signature Algorithm: sha256WithRSAEncryption e5:45:08:da:06:b3:00:cc:4f:e8:c4:21:41:5b:77:84:15:ec: c5:f2:75:20:4e:f7:56:ef:4c:88:33:36:01:88:70:b2:8c:e8: e6:e0:38:8b:62:dd:0a:e7:6f:f0:3f:29:1d:82:c6:cd:47:02: 8b:eb:e4:98:f2:43:6a:f8:1e:df:41:8d:26:92:49:f0:61:05: e4:df:27:09:06:95:bd:ec:53:b2:c3:a1:4d:e0:cf:78:b7:90: ce:5b:3d:51:b7:0b:c2:ae:41:1f:4a:4e:47:ff:28:8e:a8:be: 7d:bb:06:d7:97:4b:69:29:83:d6:82:1d:ed:5a:82:22:41:13: f9:c3:df:a2:53:d9:e4:37:c0:44:7a:bd:59:f3:7b:03:bd:a0: fe:cd:7c:d9:36:50:24:5f:a1:4f:ff:1c:50:70:0c:77:00:68: 47:81:c4:0c:6c:e9:9b:8c:a1:8c:d6:62:57:c7:25:9a:b6:06: 1a:bb:47:aa:6a:36:a4:3e:12:f6:29:e3:79:9a:90:96:5e:f7: 52:20:be:65:ee:10:17:4b:6d:81:d8:ac:0d:ac:04:35:8a:ec: 52:56:f7:56:7b:59:93:5c:6d:f5:98:a6:91:18:e7:cd:12:37: 25:37:80:93:6a:a2:dc:9d:3b:85:d3:73:96:bf:8b:92:b6:e2: 7b:16:da:39 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUGsy1ZMEEKZjZ7DVFs21dqakHlGYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUxODU5NTNaFw0yNjAyMDQxOTA0NTNaMDMxMTAvBgNV BAMTKDgyMTY4MzZDRkVCQjZENzM4Q0FBRTUzQzY5NjhBQTRDMTE4MDUzOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnTIImxOE1d8V6Rm513oXoEDxE 7s5dz//mU01Bl7RVow212JmN6GY7aTtDgkXz04wjgWMW1T9rQZLeG8EnMuNa2/Ec InWxw5PNHpue0kxJKnXFqHhsG3mU2w2iPnxrmlaEHQJ5o8TvXHJZBGSUFWfowkK5 w3LtUHXOX3oZNeI5e00PNhnW7Vg+3vDjI8GCBIS4Nl0hoTXE+ty5BTwgxMDXLIp0 KPB0k5AkxUxD46ZcQDEB92uSYdHJgfOsbSFrveGmdBCAsDBUlLKMb5aLT4Kw/8k2 PvGgPxuW6AR1VTYHCAAzt0Y4+UvVG2w6ha+nEdsdmYYTGhPyRwSJiHr0yYanAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSCFoNs/rttc4yq 5TxpaKpMEYBTmzAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvOTMyQkY2MThCRTJERjE2RjdDODIwRkM0 MjQ0MUFFOTBENzEzRTM0NEFFQzhGRUZFMDEzOTMzQjUzMzUwNDYxNS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy85MzJCRjYxOEJFMkRGMTZGN0M4MjBGQzQyNDQxQUU5MEQ3MTNFMzQ0QUVD OEZFRkUwMTM5MzNCNTMzNTA0NjE1LzAvODIxNjgzNkNGRUJCNkQ3MzhDQUFFNTND Njk2OEFBNEMxMTgwNTM5Qi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBsVf6MA0EAgAC MAcDBQAoA33gMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQe7TANBgkqhkiG9w0B AQsFAAOCAQEA5UUI2gazAMxP6MQhQVt3hBXsxfJ1IE73Vu9MiDM2AYhwsozo5uA4 i2LdCudv8D8pHYLGzUcCi+vkmPJDavge30GNJpJJ8GEF5N8nCQaVvexTssOhTeDP eLeQzls9UbcLwq5BH0pOR/8ojqi+fbsG15dLaSmD1oId7VqCIkET+cPfolPZ5DfA RHq9WfN7A72g/s182TZQJF+hT/8cUHAMdwBoR4HEDGzpm4yhjNZiV8clmrYGGrtH qmo2pD4S9injeZqQll73UiC+Ze4QF0ttgdisDawENYrsUlb3VntZk1xt9ZimkRjn zRI3JTeAk2qi3J07hdNzlr+LkrbiexbaOQ== -----END CERTIFICATE-----Generated at Tue Nov 4 21:37:48 2025 by rpki-client