$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A1E327225027297E52F4D3DA0FC282D0C4BD353B.cer File: A1E327225027297E52F4D3DA0FC282D0C4BD353B.cer (raw, json) Hash identifier: B0k0flrbyRcBr4RDOVTuf4EZCakwKnU8tLSvr7Q/hDs= Subject key identifier: A1:E3:27:22:50:27:29:7E:52:F4:D3:DA:0F:C2:82:D0:C4:BD:35:3B Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 4FB7E0E68D5E7DE5E01F44BF1EFEC6BF7FFEB8B6 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/E0C7538EE576CE1CC9BC4F07F488976E87D72ABA96F6E3A57A9EFD2EED4455FC/0/A1E327225027297E52F4D3DA0FC282D0C4BD353B.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/E0C7538EE576CE1CC9BC4F07F488976E87D72ABA96F6E3A57A9EFD2EED4455FC/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Thu 11 Sep 2025 17:55:30 +0000 Certificate not after: Thu 10 Sep 2026 18:00:30 +0000 Subordinate resources: AS: 64160 IP: 148.224.24.0/22 IP: 181.233.124.0/22 IP: 2803:e510::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:b7:e0:e6:8d:5e:7d:e5:e0:1f:44:bf:1e:fe:c6:bf:7f:fe:b8:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Sep 11 17:55:30 2025 GMT Not After : Sep 10 18:00:30 2026 GMT Subject: CN=A1E327225027297E52F4D3DA0FC282D0C4BD353B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:9e:7e:7c:49:d5:58:52:7d:9e:48:04:b7:3b: 11:33:c0:76:a8:fe:5f:83:93:ff:d9:fd:0a:42:1f: 6a:0c:43:c2:2f:f2:bd:5d:8d:57:b5:d5:a3:02:31: aa:09:b6:bc:db:1b:fd:8a:87:c8:cf:9e:da:0b:7d: 52:40:29:d4:43:22:fd:52:31:e5:3d:07:80:3f:23: 80:c0:c3:84:cb:a4:db:49:42:7e:67:b0:ab:4a:17: c2:a7:84:31:20:c5:21:24:bf:aa:98:e2:7e:68:7d: 42:d6:a2:75:0d:3d:15:3f:87:35:9a:46:1e:ae:68: 9d:cd:a1:29:dd:01:10:38:6b:1c:7c:e3:75:f0:11: 3f:cf:20:7c:1a:f4:24:71:d0:3d:97:15:ef:90:2e: 16:84:f5:07:5d:e4:d0:31:d6:1f:bd:25:57:ce:b7: 6e:a2:ab:41:54:b7:bf:f9:59:a8:2c:b5:62:fa:f6: e0:54:69:ed:5b:1f:c4:80:d4:94:ea:47:e3:80:7c: 7b:3a:1f:de:b7:9e:19:46:ae:dd:89:95:7d:e7:be: 88:98:2b:dd:90:3f:d5:81:1e:58:ff:c7:99:d6:0d: 4e:e9:82:6d:25:f1:15:22:3a:cf:18:77:5b:af:11: 16:f9:d4:4a:f8:52:9d:37:d8:e3:a2:57:18:28:e0: 94:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A1:E3:27:22:50:27:29:7E:52:F4:D3:DA:0F:C2:82:D0:C4:BD:35:3B X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/E0C7538EE576CE1CC9BC4F07F488976E87D72ABA96F6E3A57A9EFD2EED4455FC/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/E0C7538EE576CE1CC9BC4F07F488976E87D72ABA96F6E3A57A9EFD2EED4455FC/0/A1E327225027297E52F4D3DA0FC282D0C4BD353B.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 148.224.24.0/22 181.233.124.0/22 IPv6: 2803:e510::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 64160 Signature Algorithm: sha256WithRSAEncryption 22:05:43:0f:53:89:0d:d4:ae:ef:f6:11:45:23:17:d6:ff:e6: c2:4b:d9:7b:7d:04:24:18:1c:cc:64:d6:4a:9c:04:95:79:37: 7e:20:d5:68:51:38:2b:19:03:6d:0a:b6:77:0b:b1:5e:81:06: c0:5f:7c:c5:5e:0f:1f:02:1f:1d:d6:08:59:ba:64:64:d6:c7: c8:19:ed:d8:9b:d6:12:c4:d0:1e:04:6f:70:a1:ee:b9:d6:87: 6f:70:25:f8:fc:ae:b0:59:36:58:32:5b:ba:69:3e:f1:46:4c: 3a:c4:8f:71:cf:e7:e9:0f:d7:6d:5e:1f:9a:c5:b4:95:01:75: b7:f7:3f:ef:ba:84:e4:a8:59:44:35:bd:48:14:f0:50:83:a4: 18:ec:f1:eb:79:b8:ae:2b:c1:0f:4d:87:36:f0:68:8f:49:25: c8:a2:be:cd:06:9b:91:59:38:8d:84:34:3f:c2:21:86:2c:01: 2f:c1:71:b4:11:d3:6e:67:af:3d:49:19:ea:79:f3:63:f3:cf: 04:02:a9:39:6c:8a:6e:4f:37:c0:fb:be:ce:a2:8a:20:64:af: fa:14:ec:19:3b:cf:7a:ea:38:7c:1e:da:07:61:ca:4a:e4:8c: b9:6e:38:43:20:1c:a5:e7:c7:f5:de:d5:da:40:2d:ba:c9:ba: c7:18:82:28 -----BEGIN CERTIFICATE----- MIIGqzCCBZOgAwIBAgIUT7fg5o1efeXgH0S/Hv7Gv3/+uLYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTA5MTExNzU1MzBaFw0yNjA5MTAxODAwMzBaMDMxMTAvBgNV BAMTKEExRTMyNzIyNTAyNzI5N0U1MkY0RDNEQTBGQzI4MkQwQzRCRDM1M0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnnn58SdVYUn2eSAS3OxEzwHao /l+Dk//Z/QpCH2oMQ8Iv8r1djVe11aMCMaoJtrzbG/2Kh8jPntoLfVJAKdRDIv1S MeU9B4A/I4DAw4TLpNtJQn5nsKtKF8KnhDEgxSEkv6qY4n5ofULWonUNPRU/hzWa Rh6uaJ3NoSndARA4axx843XwET/PIHwa9CRx0D2XFe+QLhaE9Qdd5NAx1h+9JVfO t26iq0FUt7/5WagstWL69uBUae1bH8SA1JTqR+OAfHs6H963nhlGrt2JlX3nvoiY K92QP9WBHlj/x5nWDU7pgm0l8RUiOs8Yd1uvERb51Er4Up032OOiVxgo4JRPAgMB AAGjggO1MIIDsTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSh4yciUCcpflL0 09oPwoLQxL01OzAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTBDNzUzOEVFNTc2Q0UxQ0M5QkM0RjA3 RjQ4ODk3NkU4N0Q3MkFCQTk2RjZFM0E1N0E5RUZEMkVFRDQ0NTVGQy8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9FMEM3NTM4RUU1NzZDRTFDQzlCQzRGMDdGNDg4OTc2RTg3RDcyQUJBOTZG NkUzQTU3QTlFRkQyRUVENDQ1NUZDLzAvQTFFMzI3MjI1MDI3Mjk3RTUyRjREM0RB MEZDMjgyRDBDNEJEMzUzQi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQClOAYAwQCtel8 MA0EAgACMAcDBQAoA+UQMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwD6oDANBgkq hkiG9w0BAQsFAAOCAQEAIgVDD1OJDdSu7/YRRSMX1v/mwkvZe30EJBgczGTWSpwE lXk3fiDVaFE4KxkDbQq2dwuxXoEGwF98xV4PHwIfHdYIWbpkZNbHyBnt2JvWEsTQ HgRvcKHuudaHb3Al+PyusFk2WDJbumk+8UZMOsSPcc/n6Q/XbV4fmsW0lQF1t/c/ 77qE5KhZRDW9SBTwUIOkGOzx63m4rivBD02HNvBoj0klyKK+zQabkVk4jYQ0P8Ih hiwBL8FxtBHTbmevPUkZ6nnzY/PPBAKpOWyKbk83wPu+zqKKIGSv+hTsGTvPeuo4 fB7aB2HKSuSMuW44QyAcpefH9d7V2kAtusm6xxiCKA== -----END CERTIFICATE-----Generated at Tue Nov 4 21:38:24 2025 by rpki-client