$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89C823AD60CBA4B07B9092FB3D0BF1A0B8C15ABE.cer File: 89C823AD60CBA4B07B9092FB3D0BF1A0B8C15ABE.cer (raw, json) Hash identifier: 50L8etzCWf6YZ+nLPP+SjW6UxIHo+jmhQjYstyVuFZk= Subject key identifier: 89:C8:23:AD:60:CB:A4:B0:7B:90:92:FB:3D:0B:F1:A0:B8:C1:5A:BE Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 39DEB7A7E88E1F5BA52C087B5C483B843EB66457 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/32172A23BE77A860A2249F55413A16450A59671EF9A2F812A942EC07D9D05C0F/0/89C823AD60CBA4B07B9092FB3D0BF1A0B8C15ABE.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/32172A23BE77A860A2249F55413A16450A59671EF9A2F812A942EC07D9D05C0F/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 00:23:31 +0000 Certificate not after: Wed 04 Feb 2026 00:28:31 +0000 Subordinate resources: AS: 61456 IP: 131.108.80.0/22 IP: 2803:8380::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:de:b7:a7:e8:8e:1f:5b:a5:2c:08:7b:5c:48:3b:84:3e:b6:64:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 00:23:31 2025 GMT Not After : Feb 4 00:28:31 2026 GMT Subject: CN=89C823AD60CBA4B07B9092FB3D0BF1A0B8C15ABE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:67:49:1c:51:63:06:fd:af:9b:b9:0e:2e:53: 73:66:c8:dc:26:b9:88:ec:d7:8c:33:cc:eb:5b:82: 0a:d3:69:49:6a:f6:3b:43:c7:0f:ca:eb:06:1f:60: 3c:1d:0d:ec:03:7d:8d:e3:72:fe:1a:4b:d9:61:69: f7:b3:e0:31:cc:43:55:57:8a:61:99:05:0e:67:21: e8:46:cc:f9:19:1e:e4:b8:e0:5f:51:30:32:7a:c2: cf:c9:56:ff:c4:4d:97:1f:81:9b:a5:ec:af:56:8e: b0:b9:aa:df:25:57:71:e6:e9:2f:9e:01:d6:79:83: 82:03:3b:14:66:16:50:a7:54:c9:bc:d3:f7:62:20: 41:6d:f9:97:cf:b9:31:7f:65:e4:3c:29:76:e5:06: 38:42:cd:e3:a9:63:b3:ac:07:46:ce:9d:00:8a:5c: ff:75:98:bc:c0:aa:dd:39:a0:02:77:e7:11:91:a1: c7:30:5a:4c:97:4b:b5:90:76:f3:64:fc:fc:7b:03: 70:b9:aa:b5:34:9d:65:df:e8:33:00:ba:4a:a8:de: 2f:2a:6e:f1:ce:a3:c9:58:08:eb:d2:8f:78:5d:e1: f8:61:6f:21:8d:7a:b7:a0:ea:72:85:22:85:de:a2: 0e:2a:8a:6e:c0:3c:e5:90:3b:6b:10:98:ba:f3:a5: e4:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 89:C8:23:AD:60:CB:A4:B0:7B:90:92:FB:3D:0B:F1:A0:B8:C1:5A:BE X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/32172A23BE77A860A2249F55413A16450A59671EF9A2F812A942EC07D9D05C0F/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/32172A23BE77A860A2249F55413A16450A59671EF9A2F812A942EC07D9D05C0F/0/89C823AD60CBA4B07B9092FB3D0BF1A0B8C15ABE.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.108.80.0/22 IPv6: 2803:8380::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 61456 Signature Algorithm: sha256WithRSAEncryption 28:e1:3d:d1:73:b3:97:22:72:3a:45:e2:19:ef:f3:60:7c:93: 89:95:60:64:0c:34:87:22:d2:d1:25:22:b1:d9:6e:72:52:ef: 23:26:55:5a:e4:34:90:4a:b4:ad:16:50:9f:95:b7:9e:c0:50: 69:48:58:77:47:cb:13:4d:f2:48:ba:50:9b:13:5e:dd:37:a6: 61:f6:fa:4c:0c:b8:da:78:4d:0f:57:35:c5:67:84:c3:fe:64: 74:d6:dc:fa:34:9c:83:8c:44:24:8d:cc:00:18:2f:1e:df:e2: 0b:d7:0a:23:85:45:2f:9f:ca:31:47:48:b6:6e:fd:03:70:7f: 1a:66:ec:4a:a6:a9:32:42:29:cf:9a:b5:3e:2d:f7:f7:84:57: 57:61:09:3e:4a:0e:c2:df:6c:d4:b6:b7:99:c0:32:2b:79:2b: e0:06:d5:92:66:56:19:e9:77:66:91:3c:8d:7a:21:d6:85:3c: 56:7c:91:e0:8a:1d:22:26:16:ff:a7:64:63:cd:a3:ed:42:c3: 18:63:c7:f8:d1:c2:95:9b:e4:6b:2f:89:5e:16:66:a6:4b:a3: 7b:ed:95:c7:40:8c:3b:7a:23:a1:3c:38:aa:01:d3:1f:9e:0a: 8b:4d:2b:61:32:02:d6:3d:5e:ee:c9:35:e9:a0:ae:f5:2f:9f: 7d:21:5f:5c -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUOd63p+iOH1ulLAh7XEg7hD62ZFcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUwMDIzMzFaFw0yNjAyMDQwMDI4MzFaMDMxMTAvBgNV BAMTKDg5QzgyM0FENjBDQkE0QjA3QjkwOTJGQjNEMEJGMUEwQjhDMTVBQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzZ0kcUWMG/a+buQ4uU3NmyNwm uYjs14wzzOtbggrTaUlq9jtDxw/K6wYfYDwdDewDfY3jcv4aS9lhafez4DHMQ1VX imGZBQ5nIehGzPkZHuS44F9RMDJ6ws/JVv/ETZcfgZul7K9WjrC5qt8lV3Hm6S+e AdZ5g4IDOxRmFlCnVMm80/diIEFt+ZfPuTF/ZeQ8KXblBjhCzeOpY7OsB0bOnQCK XP91mLzAqt05oAJ35xGRoccwWkyXS7WQdvNk/Px7A3C5qrU0nWXf6DMAukqo3i8q bvHOo8lYCOvSj3hd4fhhbyGNereg6nKFIoXeog4qim7APOWQO2sQmLrzpeRbAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSJyCOtYMuksHuQ kvs9C/GguMFavjAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMzIxNzJBMjNCRTc3QTg2MEEyMjQ5RjU1 NDEzQTE2NDUwQTU5NjcxRUY5QTJGODEyQTk0MkVDMDdEOUQwNUMwRi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8zMjE3MkEyM0JFNzdBODYwQTIyNDlGNTU0MTNBMTY0NTBBNTk2NzFFRjlB MkY4MTJBOTQyRUMwN0Q5RDA1QzBGLzAvODlDODIzQUQ2MENCQTRCMDdCOTA5MkZC M0QwQkYxQTBCOEMxNUFCRS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCg2xQMA0EAgAC MAcDBQAoA4OAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDwEDANBgkqhkiG9w0B AQsFAAOCAQEAKOE90XOzlyJyOkXiGe/zYHyTiZVgZAw0hyLS0SUisdluclLvIyZV WuQ0kEq0rRZQn5W3nsBQaUhYd0fLE03ySLpQmxNe3TemYfb6TAy42nhND1c1xWeE w/5kdNbc+jScg4xEJI3MABgvHt/iC9cKI4VFL5/KMUdItm79A3B/GmbsSqapMkIp z5q1Pi3394RXV2EJPkoOwt9s1La3mcAyK3kr4AbVkmZWGel3ZpE8jXoh1oU8VnyR 4IodIiYW/6dkY82j7ULDGGPH+NHClZvkay+JXhZmpkuje+2Vx0CMO3ojoTw4qgHT H54Ki00rYTIC1j1e7sk16aCu9S+ffSFfXA== -----END CERTIFICATE-----Generated at Wed Nov 5 22:46:36 2025 by rpki-client