$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/977DAB0EC7A954C08AF09602FA1EA52D5912541B.cer File: 977DAB0EC7A954C08AF09602FA1EA52D5912541B.cer (raw, json) Hash identifier: JyqJMgmr7+VzP9Yyf+fW/bq/9cZ0D8Ao2TEG98bZ/Qo= Subject key identifier: 97:7D:AB:0E:C7:A9:54:C0:8A:F0:96:02:FA:1E:A5:2D:59:12:54:1B Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 5BD157FAEC5BAEEBCABF52562C2E1390419130B1 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/BFC6EA414BF9B1570594B2D4DADB3465358B3410C9DD1F22B003862330C090F9/0/977DAB0EC7A954C08AF09602FA1EA52D5912541B.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/BFC6EA414BF9B1570594B2D4DADB3465358B3410C9DD1F22B003862330C090F9/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 17:33:00 +0000 Certificate not after: Wed 04 Feb 2026 17:38:00 +0000 Subordinate resources: AS: 265639 IP: 170.246.88.0/22 IP: 2803:6c0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:d1:57:fa:ec:5b:ae:eb:ca:bf:52:56:2c:2e:13:90:41:91:30:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 17:33:00 2025 GMT Not After : Feb 4 17:38:00 2026 GMT Subject: CN=977DAB0EC7A954C08AF09602FA1EA52D5912541B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:3b:e2:8a:46:e5:99:c8:4d:ec:02:68:c3:f2: 01:ff:b8:e4:63:f0:8e:80:e0:f2:22:de:b9:c6:db: 28:a0:8d:75:81:c9:c9:53:ca:26:17:2d:3f:07:fc: b0:fa:6c:e7:f5:d1:61:00:67:2d:d5:d2:b2:e3:35: 26:74:e9:95:9f:02:70:b2:9e:f6:8c:ac:85:d0:50: 57:85:4c:df:73:6e:ec:28:2b:8d:dc:6a:42:bd:3a: cc:d7:c2:1b:1f:fe:5e:94:4f:25:1c:2b:17:42:e3: 6a:64:76:44:4f:f2:2f:ee:f5:8d:54:2c:bd:48:f4: 21:a2:86:c6:04:ac:29:51:62:2e:f3:f2:8e:85:4d: f2:e6:38:97:bb:3e:e7:47:2b:73:c3:22:16:6c:ee: f5:97:3f:82:17:e7:81:05:ae:a9:db:1b:97:e6:a0: 02:d1:8d:b4:05:1a:f1:49:61:3c:d0:c4:ea:8b:2a: 5c:b5:50:1b:25:84:fc:af:8d:52:bf:15:e0:e9:0c: 23:0f:f2:94:03:69:6a:f5:f1:4c:b0:74:98:c3:db: cd:78:52:72:5f:55:1c:fe:81:cf:cb:d7:6d:ec:7b: b8:8c:ff:cd:ba:71:bd:ff:07:0f:7c:1a:8e:52:82: e0:04:59:75:c1:0a:c5:8b:7f:32:67:7b:0b:37:dd: ac:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 97:7D:AB:0E:C7:A9:54:C0:8A:F0:96:02:FA:1E:A5:2D:59:12:54:1B X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/BFC6EA414BF9B1570594B2D4DADB3465358B3410C9DD1F22B003862330C090F9/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/BFC6EA414BF9B1570594B2D4DADB3465358B3410C9DD1F22B003862330C090F9/0/977DAB0EC7A954C08AF09602FA1EA52D5912541B.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.246.88.0/22 IPv6: 2803:6c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265639 Signature Algorithm: sha256WithRSAEncryption 8b:19:a7:95:92:02:65:6b:7f:38:8d:ae:b5:ca:01:82:10:68: a0:85:ac:46:76:ad:1c:84:a3:cb:61:7f:8f:7a:b3:f2:db:8f: c8:9f:06:e4:93:53:30:a7:9f:0f:37:20:01:7e:68:63:02:76: 25:b3:25:a4:1b:10:9f:c9:32:45:3a:44:e8:8a:fe:b9:eb:91: 45:59:9d:df:32:9f:67:8b:15:94:0d:d9:20:b7:1f:a3:61:ce: 3c:46:0d:35:b6:31:6e:ea:23:b4:b3:b4:bb:9d:56:d6:f4:e0: 3c:09:40:19:d6:f7:80:a3:f8:d0:ac:e0:f4:d8:81:c7:1d:b9: c5:c2:0a:5e:6f:22:97:98:a6:e6:a0:46:3b:41:f8:78:3a:dc: eb:29:3b:98:f9:dd:37:e8:e3:79:63:11:d7:03:bc:30:bc:df: f8:1c:a5:aa:0c:26:7a:5e:43:3c:72:36:45:42:9a:41:b3:97: ae:52:3e:59:dc:ef:14:ad:84:6e:84:90:a3:99:d0:bc:29:97: 2c:8e:09:b1:78:d7:b6:1f:58:c7:7a:49:b9:17:b5:06:8c:4b: 1c:4c:3d:2e:2b:85:30:f4:99:3f:87:7a:07:53:34:e2:cc:1a: fa:b4:dd:03:2a:86:63:64:0b:be:70:cb:11:eb:cc:cf:9b:65: 47:a9:2d:e4 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUW9FX+uxbruvKv1JWLC4TkEGRMLEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUxNzMzMDBaFw0yNjAyMDQxNzM4MDBaMDMxMTAvBgNV BAMTKDk3N0RBQjBFQzdBOTU0QzA4QUYwOTYwMkZBMUVBNTJENTkxMjU0MUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+O+KKRuWZyE3sAmjD8gH/uORj 8I6A4PIi3rnG2yigjXWByclTyiYXLT8H/LD6bOf10WEAZy3V0rLjNSZ06ZWfAnCy nvaMrIXQUFeFTN9zbuwoK43cakK9OszXwhsf/l6UTyUcKxdC42pkdkRP8i/u9Y1U LL1I9CGihsYErClRYi7z8o6FTfLmOJe7PudHK3PDIhZs7vWXP4IX54EFrqnbG5fm oALRjbQFGvFJYTzQxOqLKly1UBslhPyvjVK/FeDpDCMP8pQDaWr18UywdJjD2814 UnJfVRz+gc/L123se7iM/826cb3/Bw98Go5SguAEWXXBCsWLfzJnews33awjAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSXfasOx6lUwIrw lgL6HqUtWRJUGzAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQkZDNkVBNDE0QkY5QjE1NzA1OTRCMkQ0 REFEQjM0NjUzNThCMzQxMEM5REQxRjIyQjAwMzg2MjMzMEMwOTBGOS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9CRkM2RUE0MTRCRjlCMTU3MDU5NEIyRDREQURCMzQ2NTM1OEIzNDEwQzlE RDFGMjJCMDAzODYyMzMwQzA5MEY5LzAvOTc3REFCMEVDN0E5NTRDMDhBRjA5NjAy RkExRUE1MkQ1OTEyNTQxQi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCqvZYMA0EAgAC MAcDBQAoAwbAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQNpzANBgkqhkiG9w0B AQsFAAOCAQEAixmnlZICZWt/OI2utcoBghBooIWsRnatHISjy2F/j3qz8tuPyJ8G 5JNTMKefDzcgAX5oYwJ2JbMlpBsQn8kyRTpE6Ir+ueuRRVmd3zKfZ4sVlA3ZILcf o2HOPEYNNbYxbuojtLO0u51W1vTgPAlAGdb3gKP40Kzg9NiBxx25xcIKXm8il5im 5qBGO0H4eDrc6yk7mPndN+jjeWMR1wO8MLzf+Bylqgwmel5DPHI2RUKaQbOXrlI+ WdzvFK2EboSQo5nQvCmXLI4JsXjXth9Yx3pJuRe1BoxLHEw9LiuFMPSZP4d6B1M0 4swa+rTdAyqGY2QLvnDLEevMz5tlR6kt5A== -----END CERTIFICATE-----Generated at Tue Nov 4 21:39:14 2025 by rpki-client