$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/830123DD60A275D6932F9910FF8F5827E6D8A206.cer File: 830123DD60A275D6932F9910FF8F5827E6D8A206.cer (raw, json) Hash identifier: BE7bfCtKiHDOsluji55M99ZRVFaWVQUK9cW70zwg6Jk= Subject key identifier: 83:01:23:DD:60:A2:75:D6:93:2F:99:10:FF:8F:58:27:E6:D8:A2:06 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 54BBC4211B659C5992354C3727AF26E4C2857F86 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/B6AC5F5369D37487E526BDC129212B6016F5E6B928C68D1308A029FAFC9CD20D/0/830123DD60A275D6932F9910FF8F5827E6D8A206.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/B6AC5F5369D37487E526BDC129212B6016F5E6B928C68D1308A029FAFC9CD20D/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Mon 21 Jul 2025 01:12:25 +0000 Certificate not after: Mon 20 Jul 2026 01:17:25 +0000 Subordinate resources: AS: 3132 IP: 161.132.0.0/16 IP: 200.1.176.0/21 IP: 209.45.0.0/17 IP: 2801:150::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:bb:c4:21:1b:65:9c:59:92:35:4c:37:27:af:26:e4:c2:85:7f:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Jul 21 01:12:25 2025 GMT Not After : Jul 20 01:17:25 2026 GMT Subject: CN=830123DD60A275D6932F9910FF8F5827E6D8A206 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:88:1b:8a:02:a9:84:fb:75:de:04:64:05:6c: 4d:b6:98:71:89:44:e4:25:9c:bf:dd:04:37:32:65: f6:ad:07:23:7c:eb:60:f7:f0:e0:21:81:6a:d1:ca: de:db:fc:92:f1:25:a9:12:db:95:16:36:b2:37:2e: 24:01:6b:2f:69:70:5e:37:63:d6:b5:b1:1b:ef:13: 50:2c:4a:8e:0d:02:ae:05:49:a8:b0:85:95:0b:78: bb:0c:51:ce:42:5c:e3:ca:fa:9d:76:4c:00:1e:6a: 1f:2a:31:58:af:a6:2e:6d:54:ed:12:6c:70:b6:e1: f7:54:45:07:ff:26:ad:c2:93:27:3c:6f:66:b8:62: 85:ca:9a:ad:54:b7:b5:c9:aa:f9:e0:80:f5:3e:2d: ba:7b:c4:81:5f:52:05:4b:ec:7f:f8:9b:2c:ff:4e: d3:23:7d:04:d0:e9:ef:45:6a:67:53:bf:df:f2:ff: a5:34:fd:a4:97:10:61:ea:b2:18:db:e6:8b:5e:21: ca:25:a8:87:b5:b4:2e:79:ff:62:7a:db:cb:fe:ba: 1d:ce:11:2a:a7:c2:06:08:c7:63:91:4a:4d:79:53: 05:40:ba:a9:78:9a:61:06:6c:3c:87:ab:17:e4:6c: 1a:53:85:59:aa:10:7d:d7:90:0c:da:d4:89:c6:68: b9:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 83:01:23:DD:60:A2:75:D6:93:2F:99:10:FF:8F:58:27:E6:D8:A2:06 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/B6AC5F5369D37487E526BDC129212B6016F5E6B928C68D1308A029FAFC9CD20D/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/B6AC5F5369D37487E526BDC129212B6016F5E6B928C68D1308A029FAFC9CD20D/0/830123DD60A275D6932F9910FF8F5827E6D8A206.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 161.132.0.0/16 200.1.176.0/21 209.45.0.0/17 IPv6: 2801:150::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 3132 Signature Algorithm: sha256WithRSAEncryption 3c:3b:f6:58:05:d8:53:d4:73:4d:ec:5b:01:db:cc:a6:00:69: 0d:4e:ce:c3:73:45:fe:71:07:7d:c9:85:45:05:10:8d:75:c3: 3c:fd:b7:ac:42:71:07:55:f7:c2:0f:af:02:19:ac:ab:31:84: 77:fd:b7:a2:8d:79:c4:68:0d:d6:fb:7f:41:7a:3a:41:25:da: 46:79:70:15:90:3a:95:fe:5b:4a:f4:ea:29:73:c4:20:6a:1f: 37:85:51:a2:ae:9d:e7:58:ae:0e:d6:a0:b4:4f:c8:83:76:02: 8f:2b:bf:d4:9e:65:02:bd:fc:58:ba:d8:29:78:34:97:bb:df: 4c:95:ed:40:b3:39:6c:a0:38:f6:ca:9d:c0:ec:92:ca:0e:c0: 0c:c8:fd:9a:8c:41:7f:da:27:f7:af:9c:c0:2c:86:ef:fc:cc: 98:1d:4b:c4:a8:5f:db:ca:27:49:d4:c3:d3:39:9a:3d:a5:16: e1:55:89:ba:1d:9e:cc:a2:27:9c:f8:58:03:29:26:fc:f6:65: 4b:1b:18:78:cf:d3:5b:b4:6a:2f:b8:db:07:56:a7:47:26:79: 8d:fa:a7:51:9c:45:e2:36:dd:03:a7:f6:f4:05:39:5a:e3:66: 74:94:ec:b6:30:78:81:6c:f2:e5:db:99:aa:92:b7:06:1e:21: a0:61:99:57 -----BEGIN CERTIFICATE----- MIIGrzCCBZegAwIBAgIUVLvEIRtlnFmSNUw3J68m5MKFf4YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTA3MjEwMTEyMjVaFw0yNjA3MjAwMTE3MjVaMDMxMTAvBgNV BAMTKDgzMDEyM0RENjBBMjc1RDY5MzJGOTkxMEZGOEY1ODI3RTZEOEEyMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYiBuKAqmE+3XeBGQFbE22mHGJ ROQlnL/dBDcyZfatByN862D38OAhgWrRyt7b/JLxJakS25UWNrI3LiQBay9pcF43 Y9a1sRvvE1AsSo4NAq4FSaiwhZULeLsMUc5CXOPK+p12TAAeah8qMVivpi5tVO0S bHC24fdURQf/Jq3Ckyc8b2a4YoXKmq1Ut7XJqvnggPU+Lbp7xIFfUgVL7H/4myz/ TtMjfQTQ6e9FamdTv9/y/6U0/aSXEGHqshjb5oteIcolqIe1tC55/2J628v+uh3O ESqnwgYIx2ORSk15UwVAuql4mmEGbDyHqxfkbBpThVmqEH3XkAza1InGaLnJAgMB AAGjggO5MIIDtTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSDASPdYKJ11pMv mRD/j1gn5tiiBjAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQjZBQzVGNTM2OUQzNzQ4N0U1MjZCREMx MjkyMTJCNjAxNkY1RTZCOTI4QzY4RDEzMDhBMDI5RkFGQzlDRDIwRC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9CNkFDNUY1MzY5RDM3NDg3RTUyNkJEQzEyOTIxMkI2MDE2RjVFNkI5MjhD NjhEMTMwOEEwMjlGQUZDOUNEMjBELzAvODMwMTIzREQ2MEEyNzVENjkzMkY5OTEw RkY4RjU4MjdFNkQ4QTIwNi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAXBAIAATARAwMAoYQDBAPIAbAD BAfRLQAwDQQCAAIwBwMFACgBAVAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICDDww DQYJKoZIhvcNAQELBQADggEBADw79lgF2FPUc03sWwHbzKYAaQ1OzsNzRf5xB33J hUUFEI11wzz9t6xCcQdV98IPrwIZrKsxhHf9t6KNecRoDdb7f0F6OkEl2kZ5cBWQ OpX+W0r06ilzxCBqHzeFUaKunedYrg7WoLRPyIN2Ao8rv9SeZQK9/Fi62Cl4NJe7 30yV7UCzOWygOPbKncDsksoOwAzI/ZqMQX/aJ/evnMAshu/8zJgdS8SoX9vKJ0nU w9M5mj2lFuFVibodnsyiJ5z4WAMpJvz2ZUsbGHjP01u0ai+42wdWp0cmeY36p1Gc ReI23QOn9vQFOVrjZnSU7LYweIFs8uXbmaqStwYeIaBhmVc= -----END CERTIFICATE-----Generated at Tue Nov 4 21:39:28 2025 by rpki-client