$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9EFB791A145582344954DF95067EBE4F7C567ECB.cer File: 9EFB791A145582344954DF95067EBE4F7C567ECB.cer (raw, json) Hash identifier: kHfrhokcAZQJb6fgLNpHM5sArlUiKLjY9Hr8eKCHZJ4= Subject key identifier: 9E:FB:79:1A:14:55:82:34:49:54:DF:95:06:7E:BE:4F:7C:56:7E:CB Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 78AB29457A3923E1CD9364D8E50A44DB5877F0BF Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/4922D158785AAB1704F70753BD4D5AFF990EA9B94829B1FDDE1D86BEB6680C5F/0/9EFB791A145582344954DF95067EBE4F7C567ECB.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/4922D158785AAB1704F70753BD4D5AFF990EA9B94829B1FDDE1D86BEB6680C5F/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Thu 06 Feb 2025 00:09:26 +0000 Certificate not after: Thu 05 Feb 2026 00:14:26 +0000 Subordinate resources: AS: 52330 IP: 168.227.104.0/22 IP: 190.184.200.0/21 IP: 2803:8340::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:ab:29:45:7a:39:23:e1:cd:93:64:d8:e5:0a:44:db:58:77:f0:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 6 00:09:26 2025 GMT Not After : Feb 5 00:14:26 2026 GMT Subject: CN=9EFB791A145582344954DF95067EBE4F7C567ECB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c7:e4:79:49:fc:7c:4d:b3:de:33:be:8d:3e: 56:b0:18:d6:ac:73:9b:af:35:41:62:ea:22:c3:46: 25:c9:d0:5b:bb:6e:2c:5a:7c:54:71:c8:ab:2c:e9: 3c:75:99:56:17:94:0f:3b:be:99:86:95:87:77:a9: 1e:9a:69:83:ca:36:5b:8f:fd:70:32:d9:46:e5:22: 2c:fa:ad:64:11:21:4d:32:c4:0b:74:1b:9a:78:2e: 50:5c:00:d6:65:8f:1a:79:06:66:6c:15:70:ff:a7: f0:fe:aa:ec:59:8a:0c:30:da:9d:0f:7e:4a:96:e6: 20:68:5a:e2:7e:ed:1f:fd:14:3d:ec:f7:16:00:9e: 84:ef:4d:02:8a:a0:8c:c9:d1:8f:46:62:f9:5c:25: 73:a9:73:d6:14:17:c2:ab:c5:4f:ab:01:41:2c:29: 61:79:91:0a:46:54:38:a4:f7:65:ff:44:b8:f2:f1: de:44:ad:bd:09:c4:55:5f:24:62:50:6e:a8:c3:2e: ef:a3:22:fb:ff:87:20:e5:67:91:66:f1:f9:af:c0: 64:95:4b:d2:6f:fc:47:1f:00:68:d6:20:4a:66:01: 2c:9c:a8:9f:ba:8b:35:c9:35:60:7a:64:f5:84:b8: 07:cd:7d:b0:ad:2b:16:9b:11:7a:c9:91:ea:0f:f0: 8e:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9E:FB:79:1A:14:55:82:34:49:54:DF:95:06:7E:BE:4F:7C:56:7E:CB X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/4922D158785AAB1704F70753BD4D5AFF990EA9B94829B1FDDE1D86BEB6680C5F/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/4922D158785AAB1704F70753BD4D5AFF990EA9B94829B1FDDE1D86BEB6680C5F/0/9EFB791A145582344954DF95067EBE4F7C567ECB.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.227.104.0/22 190.184.200.0/21 IPv6: 2803:8340::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52330 Signature Algorithm: sha256WithRSAEncryption 79:3f:fe:92:ea:3f:5e:21:61:a4:99:36:81:19:be:88:5c:5a: e4:11:75:57:86:79:c9:36:ba:89:c8:0b:99:15:52:a2:f5:dd: 00:37:38:ec:de:45:a4:e7:2e:96:6f:89:18:f4:e3:61:f0:74: a8:55:4c:d0:0c:9c:45:0c:e5:aa:29:63:16:9b:1b:a5:b6:8c: 0e:47:23:93:3a:f8:f5:68:93:e0:51:76:78:0f:4f:d9:99:5b: a6:4d:72:10:36:d4:7a:5a:67:f8:87:9d:bc:46:c6:4f:f0:c9: 04:49:69:de:ba:7a:5d:ab:92:f8:6d:e7:c8:85:7b:c4:a6:7a: 37:4d:83:7f:6f:0d:57:e4:8f:8c:34:93:a6:ba:51:32:10:fd: a1:27:70:c9:2a:34:a7:da:57:80:ee:f7:0c:c8:2e:f7:43:96: c2:d5:41:6f:12:7d:40:6b:a5:5a:b6:b2:4a:02:45:77:c8:34: fe:7a:64:71:c7:46:e4:b9:dd:5f:7d:bd:63:b2:0a:5f:98:b7: be:28:e5:a7:7c:98:c6:c3:e8:fb:f8:e9:6c:d5:32:5c:c2:41: 0c:77:e3:1b:d5:1c:a7:4e:8f:a1:38:0c:6a:b2:2e:73:7f:0c: e9:c0:8a:86:a4:68:f0:01:a1:b4:58:e7:bb:00:62:6c:ed:fd: 43:bf:3d:4e -----BEGIN CERTIFICATE----- MIIGqzCCBZOgAwIBAgIUeKspRXo5I+HNk2TY5QpE21h38L8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDYwMDA5MjZaFw0yNjAyMDUwMDE0MjZaMDMxMTAvBgNV BAMTKDlFRkI3OTFBMTQ1NTgyMzQ0OTU0REY5NTA2N0VCRTRGN0M1NjdFQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvx+R5Sfx8TbPeM76NPlawGNas c5uvNUFi6iLDRiXJ0Fu7bixafFRxyKss6Tx1mVYXlA87vpmGlYd3qR6aaYPKNluP /XAy2UblIiz6rWQRIU0yxAt0G5p4LlBcANZljxp5BmZsFXD/p/D+quxZigww2p0P fkqW5iBoWuJ+7R/9FD3s9xYAnoTvTQKKoIzJ0Y9GYvlcJXOpc9YUF8KrxU+rAUEs KWF5kQpGVDik92X/RLjy8d5Erb0JxFVfJGJQbqjDLu+jIvv/hyDlZ5Fm8fmvwGSV S9Jv/EcfAGjWIEpmASycqJ+6izXJNWB6ZPWEuAfNfbCtKxabEXrJkeoP8I4bAgMB AAGjggO1MIIDsTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSe+3kaFFWCNElU 35UGfr5PfFZ+yzAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNDkyMkQxNTg3ODVBQUIxNzA0RjcwNzUz QkQ0RDVBRkY5OTBFQTlCOTQ4MjlCMUZEREUxRDg2QkVCNjY4MEM1Ri8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OTIyRDE1ODc4NUFBQjE3MDRGNzA3NTNCRDRENUFGRjk5MEVBOUI5NDgy OUIxRkRERTFEODZCRUI2NjgwQzVGLzAvOUVGQjc5MUExNDU1ODIzNDQ5NTRERjk1 MDY3RUJFNEY3QzU2N0VDQi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCqONoAwQDvrjI MA0EAgACMAcDBQAoA4NAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDMajANBgkq hkiG9w0BAQsFAAOCAQEAeT/+kuo/XiFhpJk2gRm+iFxa5BF1V4Z5yTa6icgLmRVS ovXdADc47N5FpOculm+JGPTjYfB0qFVM0AycRQzlqiljFpsbpbaMDkcjkzr49WiT 4FF2eA9P2Zlbpk1yEDbUelpn+IedvEbGT/DJBElp3rp6XauS+G3nyIV7xKZ6N02D f28NV+SPjDSTprpRMhD9oSdwySo0p9pXgO73DMgu90OWwtVBbxJ9QGulWraySgJF d8g0/npkccdG5LndX329Y7IKX5i3vijlp3yYxsPo+/jpbNUyXMJBDHfjG9Ucp06P oTgMarIuc38M6cCKhqRo8AGhtFjnuwBibO39Q789Tg== -----END CERTIFICATE-----Generated at Tue Nov 4 21:38:13 2025 by rpki-client