$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84B6E0EF21A41448788FD7C69334F2BAEFCE6689.cer File: 84B6E0EF21A41448788FD7C69334F2BAEFCE6689.cer (raw, json) Hash identifier: bwBXL9c+QtpXlEtKmv07bIJtnnJtW/NSa2e+VCEiHUw= Subject key identifier: 84:B6:E0:EF:21:A4:14:48:78:8F:D7:C6:93:34:F2:BA:EF:CE:66:89 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 7263FB2F0E653A49483D7B577A814385F018B22D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/F739BF2BFC071B9A995E0777D60BF0A6B6F1C96F3ED1C7B302A5399103AC8DBE/0/84B6E0EF21A41448788FD7C69334F2BAEFCE6689.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/F739BF2BFC071B9A995E0777D60BF0A6B6F1C96F3ED1C7B302A5399103AC8DBE/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 12:57:59 +0000 Certificate not after: Wed 04 Feb 2026 13:02:59 +0000 Subordinate resources: AS: 265786 IP: 192.141.148.0/22 IP: 2803:3fc0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:63:fb:2f:0e:65:3a:49:48:3d:7b:57:7a:81:43:85:f0:18:b2:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 12:57:59 2025 GMT Not After : Feb 4 13:02:59 2026 GMT Subject: CN=84B6E0EF21A41448788FD7C69334F2BAEFCE6689 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a7:de:c4:09:6e:a8:c3:57:d3:57:ff:48:05: b8:82:c3:47:b4:71:b2:3b:49:e5:73:1b:13:f4:0b: 05:28:02:51:81:cf:c6:be:e5:e2:70:76:bd:a8:f1: 22:50:94:17:e9:26:da:d9:a7:5a:d1:16:5e:93:f4: 76:4d:17:64:c1:9d:cf:80:e6:28:8e:5a:de:a7:a5: d3:00:3e:eb:45:28:dd:20:68:51:cd:b7:78:eb:16: de:82:89:3a:ff:a8:8a:22:4b:ab:44:fc:c5:92:22: 44:dc:e5:fd:fa:cc:f8:29:be:1b:e1:92:b3:bf:a9: ff:41:98:9b:41:e8:58:85:19:06:9c:27:a1:49:e5: b8:93:c9:09:84:40:44:2a:b5:4c:ec:ff:02:c6:71: 16:1d:ed:72:9b:e4:4b:ae:fc:72:6c:55:84:fd:70: 2d:22:34:ff:7a:34:4c:e7:86:f7:5d:12:93:be:bc: df:98:09:54:14:ec:fe:dc:10:58:89:ee:ad:73:61: 15:e0:ff:96:17:fa:32:2d:fb:26:4d:ee:9b:ac:35: a3:45:b8:b0:6d:4d:d8:cf:cc:ba:32:14:5d:1a:40: 9e:5e:89:41:11:2b:55:06:8c:1f:2a:a4:7f:8a:02: 62:0c:ca:c6:0c:84:a9:3e:e0:a1:5e:34:ef:a3:57: 26:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 84:B6:E0:EF:21:A4:14:48:78:8F:D7:C6:93:34:F2:BA:EF:CE:66:89 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/F739BF2BFC071B9A995E0777D60BF0A6B6F1C96F3ED1C7B302A5399103AC8DBE/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/F739BF2BFC071B9A995E0777D60BF0A6B6F1C96F3ED1C7B302A5399103AC8DBE/0/84B6E0EF21A41448788FD7C69334F2BAEFCE6689.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.141.148.0/22 IPv6: 2803:3fc0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265786 Signature Algorithm: sha256WithRSAEncryption 5d:f0:80:0b:fc:ed:ba:89:5d:95:66:cf:06:75:29:b1:8c:73: cd:0b:d5:7c:f1:4f:cc:d4:d9:eb:33:f0:cc:c3:d0:2c:6d:37: 2c:89:8f:ab:d1:8e:01:f1:96:bc:9a:45:75:3f:cf:70:97:71: 33:02:cb:48:e9:4a:22:f1:f6:f1:3a:80:74:8e:37:a7:ec:eb: 53:36:fc:cc:47:80:2d:e9:e7:ab:e0:4d:34:c7:c6:10:38:a3: f4:36:89:ed:ef:e5:d7:fd:84:b6:01:99:58:c4:15:8d:5d:69: f3:74:ea:6b:69:19:0d:4e:6b:ed:d9:c4:31:e8:eb:2b:9e:2e: d7:ce:ee:5e:4e:31:3d:9d:71:fa:15:73:4a:da:5f:90:32:71: b3:fd:25:e7:90:5d:a8:83:c0:4a:54:af:33:e3:cc:0c:d2:a2: 82:de:4f:5f:44:f1:ae:8d:cf:75:06:84:5b:85:a1:35:ec:2d: 25:61:f8:42:7d:78:c4:b4:26:6d:8a:1a:df:15:83:2d:a3:bb: 69:19:c0:a9:43:7d:8b:6f:8e:7e:e5:ad:d3:ad:fe:2b:ea:23: 84:20:7e:3b:0e:59:bd:da:ec:c4:1d:99:7d:15:2a:81:a4:63: 56:bd:1c:f7:2b:71:64:18:66:68:86:73:4c:6e:0f:5b:14:55: 03:31:eb:0f -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUcmP7Lw5lOklIPXtXeoFDhfAYsi0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUxMjU3NTlaFw0yNjAyMDQxMzAyNTlaMDMxMTAvBgNV BAMTKDg0QjZFMEVGMjFBNDE0NDg3ODhGRDdDNjkzMzRGMkJBRUZDRTY2ODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2p97ECW6ow1fTV/9IBbiCw0e0 cbI7SeVzGxP0CwUoAlGBz8a+5eJwdr2o8SJQlBfpJtrZp1rRFl6T9HZNF2TBnc+A 5iiOWt6npdMAPutFKN0gaFHNt3jrFt6CiTr/qIoiS6tE/MWSIkTc5f36zPgpvhvh krO/qf9BmJtB6FiFGQacJ6FJ5biTyQmEQEQqtUzs/wLGcRYd7XKb5Euu/HJsVYT9 cC0iNP96NEznhvddEpO+vN+YCVQU7P7cEFiJ7q1zYRXg/5YX+jIt+yZN7pusNaNF uLBtTdjPzLoyFF0aQJ5eiUERK1UGjB8qpH+KAmIMysYMhKk+4KFeNO+jVyYtAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSEtuDvIaQUSHiP 18aTNPK6785miTAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRjczOUJGMkJGQzA3MUI5QTk5NUUwNzc3 RDYwQkYwQTZCNkYxQzk2RjNFRDFDN0IzMDJBNTM5OTEwM0FDOERCRS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9GNzM5QkYyQkZDMDcxQjlBOTk1RTA3NzdENjBCRjBBNkI2RjFDOTZGM0VE MUM3QjMwMkE1Mzk5MTAzQUM4REJFLzAvODRCNkUwRUYyMUE0MTQ0ODc4OEZEN0M2 OTMzNEYyQkFFRkNFNjY4OS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCwI2UMA0EAgAC MAcDBQAoAz/AMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQOOjANBgkqhkiG9w0B AQsFAAOCAQEAXfCAC/ztuoldlWbPBnUpsYxzzQvVfPFPzNTZ6zPwzMPQLG03LImP q9GOAfGWvJpFdT/PcJdxMwLLSOlKIvH28TqAdI43p+zrUzb8zEeALennq+BNNMfG EDij9DaJ7e/l1/2EtgGZWMQVjV1p83Tqa2kZDU5r7dnEMejrK54u187uXk4xPZ1x +hVzStpfkDJxs/0l55BdqIPASlSvM+PMDNKigt5PX0Txro3PdQaEW4WhNewtJWH4 Qn14xLQmbYoa3xWDLaO7aRnAqUN9i2+OfuWt063+K+ojhCB+Ow5ZvdrsxB2ZfRUq gaRjVr0c9ytxZBhmaIZzTG4PWxRVAzHrDw== -----END CERTIFICATE-----Generated at Tue Nov 4 21:37:33 2025 by rpki-client