$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8749535E400379B62B4631901E5DC801A7E80E13.cer File: 8749535E400379B62B4631901E5DC801A7E80E13.cer (raw, json) Hash identifier: MbTfWfRhpHy7ARKRI8TqD4fDiB5zPY8AIeBo5tlON4A= Subject key identifier: 87:49:53:5E:40:03:79:B6:2B:46:31:90:1E:5D:C8:01:A7:E8:0E:13 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 21B2E52F6394C1A14AD37C0714B7F5096A37088C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/A305FBB967C3C42509419EC3ED452F5970AF89354555169E4F7991908A1870F0/0/8749535E400379B62B4631901E5DC801A7E80E13.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/A305FBB967C3C42509419EC3ED452F5970AF89354555169E4F7991908A1870F0/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 17:06:38 +0000 Certificate not after: Wed 04 Feb 2026 17:11:38 +0000 Subordinate resources: AS: 264759 IP: 168.195.116.0/22 IP: 181.199.160.0 -- 181.199.171.255 IP: 2803:c0c0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:b2:e5:2f:63:94:c1:a1:4a:d3:7c:07:14:b7:f5:09:6a:37:08:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 17:06:38 2025 GMT Not After : Feb 4 17:11:38 2026 GMT Subject: CN=8749535E400379B62B4631901E5DC801A7E80E13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:5b:99:c7:4b:a5:b5:64:12:48:f1:98:f2:1a: 53:55:92:da:49:e9:1c:e5:b0:a3:25:8b:55:68:cd: 09:28:75:c2:e1:f0:06:bd:eb:9f:a0:2f:75:1c:b8: 14:7f:73:a1:74:bb:4b:a7:23:b1:b7:57:12:53:a8: e1:9c:80:78:36:db:52:26:a4:29:b6:8f:d9:c9:44: fd:57:71:48:ad:66:74:06:b3:70:c0:02:b6:04:dc: 1d:78:8b:ef:83:34:92:30:b3:13:a2:c9:76:b8:12: b2:ab:5a:6f:35:df:06:f0:91:d8:c9:44:34:10:59: d8:82:bb:04:0a:dd:05:27:17:01:27:68:e2:34:b0: 50:f9:34:24:60:16:3d:05:eb:f6:c2:e6:d5:d5:11: 52:c5:24:8a:29:06:f0:70:98:62:0f:8e:62:51:51: 17:da:06:67:b8:ed:d4:01:d8:bf:32:f1:8a:fd:89: c3:5c:d9:55:f4:46:ca:53:af:c0:f1:6f:de:87:5e: bc:c2:a3:e3:f2:83:90:4b:95:99:ef:47:b7:d9:45: 04:7f:2c:f1:92:32:53:a0:aa:09:39:ed:28:2b:2b: e5:30:3b:2b:b6:e3:b3:66:c9:34:63:7f:0f:b6:c3: 54:58:12:15:41:76:3c:e5:25:49:d9:9b:55:33:1f: fd:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 87:49:53:5E:40:03:79:B6:2B:46:31:90:1E:5D:C8:01:A7:E8:0E:13 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/A305FBB967C3C42509419EC3ED452F5970AF89354555169E4F7991908A1870F0/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/A305FBB967C3C42509419EC3ED452F5970AF89354555169E4F7991908A1870F0/0/8749535E400379B62B4631901E5DC801A7E80E13.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.195.116.0/22 181.199.160.0-181.199.171.255 IPv6: 2803:c0c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264759 Signature Algorithm: sha256WithRSAEncryption c8:8c:fd:4a:d5:b0:13:93:69:8b:66:c0:c6:60:a1:92:9f:c4: ab:7f:23:ca:22:0f:c8:c4:18:49:54:d0:2d:00:9a:b5:43:9c: bc:7d:bc:36:2c:76:1d:94:72:c9:43:25:61:85:c2:b5:25:8d: a0:03:50:8d:24:dd:8f:9b:eb:e2:d4:97:36:e3:09:b6:48:9a: d4:20:51:9e:13:67:fc:d8:bf:45:7d:ba:d1:06:c8:88:f7:1d: ed:ad:00:c2:77:1b:7d:f8:75:e7:9a:0a:3a:84:63:6f:e1:68: 8b:64:97:90:1d:5c:3a:71:69:05:5e:22:f0:83:f3:30:88:a7: 09:c0:d0:8f:ee:17:1c:aa:0d:97:0d:17:3e:75:e3:fc:27:ca: 43:fd:ff:50:62:fe:18:72:c8:a3:7d:50:f5:de:cb:c5:76:09: 1c:87:61:3d:1b:f5:fa:f4:89:24:fd:b9:9c:18:15:84:a0:0f: a8:77:ea:74:28:42:6c:67:e9:f9:e8:93:31:99:78:e1:88:0e: 52:94:d1:82:2b:c2:fc:cc:20:fb:bb:2f:39:28:1b:2e:9d:72: 82:bd:86:7b:e0:8e:0c:d8:9e:69:ef:5e:bc:b7:e6:d4:85:10: b8:9f:93:44:78:4a:1e:4e:69:14:2c:7f:be:f4:21:be:a8:a3: 5d:2f:de:92 -----BEGIN CERTIFICATE----- MIIGszCCBZugAwIBAgIUIbLlL2OUwaFK03wHFLf1CWo3CIwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUxNzA2MzhaFw0yNjAyMDQxNzExMzhaMDMxMTAvBgNV BAMTKDg3NDk1MzVFNDAwMzc5QjYyQjQ2MzE5MDFFNURDODAxQTdFODBFMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmW5nHS6W1ZBJI8ZjyGlNVktpJ 6RzlsKMli1VozQkodcLh8Aa965+gL3UcuBR/c6F0u0unI7G3VxJTqOGcgHg221Im pCm2j9nJRP1XcUitZnQGs3DAArYE3B14i++DNJIwsxOiyXa4ErKrWm813wbwkdjJ RDQQWdiCuwQK3QUnFwEnaOI0sFD5NCRgFj0F6/bC5tXVEVLFJIopBvBwmGIPjmJR URfaBme47dQB2L8y8Yr9icNc2VX0RspTr8Dxb96HXrzCo+Pyg5BLlZnvR7fZRQR/ LPGSMlOgqgk57SgrK+UwOyu247NmyTRjfw+2w1RYEhVBdjzlJUnZm1UzH/0fAgMB AAGjggO9MIIDuTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSHSVNeQAN5titG MZAeXcgBp+gOEzAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQTMwNUZCQjk2N0MzQzQyNTA5NDE5RUMz RUQ0NTJGNTk3MEFGODkzNTQ1NTUxNjlFNEY3OTkxOTA4QTE4NzBGMC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9BMzA1RkJCOTY3QzNDNDI1MDk0MTlFQzNFRDQ1MkY1OTcwQUY4OTM1NDU1 NTE2OUU0Rjc5OTE5MDhBMTg3MEYwLzAvODc0OTUzNUU0MDAzNzlCNjJCNDYzMTkw MUU1REM4MDFBN0U4MEUxMy5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAaBAIAATAUAwQCqMN0MAwDBAW1 x6ADBAK1x6gwDQQCAAIwBwMFACgDwMAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BAo3MA0GCSqGSIb3DQEBCwUAA4IBAQDIjP1K1bATk2mLZsDGYKGSn8SrfyPKIg/I xBhJVNAtAJq1Q5y8fbw2LHYdlHLJQyVhhcK1JY2gA1CNJN2Pm+vi1Jc24wm2SJrU IFGeE2f82L9FfbrRBsiI9x3trQDCdxt9+HXnmgo6hGNv4WiLZJeQHVw6cWkFXiLw g/MwiKcJwNCP7hccqg2XDRc+deP8J8pD/f9QYv4YcsijfVD13svFdgkch2E9G/X6 9Ikk/bmcGBWEoA+od+p0KEJsZ+n56JMxmXjhiA5SlNGCK8L8zCD7uy85KBsunXKC vYZ74I4M2J5p7168t+bUhRC4n5NEeEoeTmkULH++9CG+qKNdL96S -----END CERTIFICATE-----Generated at Tue Nov 4 21:37:53 2025 by rpki-client