$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A61B23F86A21FE9CCB4CE1E9BC92C2B210FE7FC8.cer File: A61B23F86A21FE9CCB4CE1E9BC92C2B210FE7FC8.cer (raw, json) Hash identifier: czZ+VFPiLsT3FudNIntL59435nDm61xGpiJjUR1IMH4= Subject key identifier: A6:1B:23:F8:6A:21:FE:9C:CB:4C:E1:E9:BC:92:C2:B2:10:FE:7F:C8 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 15178DAAD346B760425DF9542F92AD56E7FFD49A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/C9A64611A248C351E224B4309AD36E950C94FBDEAF1044FB52D1AC9322E53924/0/A61B23F86A21FE9CCB4CE1E9BC92C2B210FE7FC8.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/C9A64611A248C351E224B4309AD36E950C94FBDEAF1044FB52D1AC9322E53924/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 04 Feb 2025 23:01:36 +0000 Certificate not after: Tue 03 Feb 2026 23:06:36 +0000 Subordinate resources: AS: 52352 IP: 179.51.224.0/20 IP: 190.15.80.0/20 IP: 2803:e480::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:17:8d:aa:d3:46:b7:60:42:5d:f9:54:2f:92:ad:56:e7:ff:d4:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 4 23:01:36 2025 GMT Not After : Feb 3 23:06:36 2026 GMT Subject: CN=A61B23F86A21FE9CCB4CE1E9BC92C2B210FE7FC8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:1e:19:55:14:21:e2:5d:c3:20:8f:7c:d4:6a: 21:02:14:c3:57:54:1b:ff:38:a7:65:1c:d6:24:99: 05:ad:7f:08:07:d9:eb:2f:0a:a8:69:17:dc:98:0b: ff:73:b4:24:2b:be:6f:34:39:c3:77:9c:75:7c:69: 77:73:ef:e1:d7:d7:a9:a8:3e:e8:13:f0:7a:50:46: e0:56:70:9b:b0:b6:6f:fa:ba:e5:f9:fd:6b:54:bc: 74:d2:c2:28:64:3e:9f:1d:0d:fb:e5:de:42:25:cf: 6b:ff:02:63:a1:87:43:5f:7c:9e:79:db:d7:9b:a4: fe:fe:a0:5e:e8:76:c7:07:08:d9:dd:31:7e:b4:81: 36:9c:a8:61:c1:5a:62:c8:e5:16:91:62:46:55:58: 6b:79:73:0b:d1:b7:f8:b8:df:9e:20:27:f5:34:5b: d7:4d:af:e9:51:ff:00:31:45:dd:79:6d:29:f2:80: 36:73:e1:91:bc:8b:a2:db:0c:06:b7:c6:17:cd:d3: 5c:06:6d:5c:6e:de:ae:59:31:57:8e:b7:63:e6:27: 35:e5:81:46:89:d7:9d:4c:53:61:df:14:4f:2b:a5: 5d:2b:fa:83:80:a9:71:00:04:ee:b1:35:46:53:4d: 7b:a8:b7:c6:d4:17:9c:20:56:70:72:3e:bd:f1:12: 6d:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A6:1B:23:F8:6A:21:FE:9C:CB:4C:E1:E9:BC:92:C2:B2:10:FE:7F:C8 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/C9A64611A248C351E224B4309AD36E950C94FBDEAF1044FB52D1AC9322E53924/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/C9A64611A248C351E224B4309AD36E950C94FBDEAF1044FB52D1AC9322E53924/0/A61B23F86A21FE9CCB4CE1E9BC92C2B210FE7FC8.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 179.51.224.0/20 190.15.80.0/20 IPv6: 2803:e480::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52352 Signature Algorithm: sha256WithRSAEncryption 10:26:74:4f:78:94:0a:0c:80:d5:63:53:f8:bf:8d:10:33:f6: 08:87:d9:91:44:e7:e5:3e:68:d2:05:ee:7c:c4:9b:2f:7f:54: 7a:89:63:1e:26:97:ca:ab:18:c5:e4:76:66:24:6c:dd:b2:e4: 47:18:3e:3d:aa:4c:e1:8a:5e:b5:a7:50:16:fe:7a:1e:af:53: 65:b0:6a:0e:6d:ac:a4:e7:1a:35:98:da:e4:60:06:34:76:51: eb:68:fa:4f:21:18:d0:88:61:ff:7b:b4:a1:9e:58:81:cf:e3: b3:aa:48:a0:bc:53:ad:2b:00:dd:b5:58:50:b8:65:a3:b4:5d: 33:0c:6b:cd:18:4f:00:f5:87:54:a7:1c:dd:ef:b7:37:83:8a: 65:31:eb:8e:6e:ef:eb:0b:34:ff:3f:91:05:24:08:69:33:37: 41:bd:06:59:60:4a:24:60:d8:55:38:b3:b5:e5:84:0d:a8:95: 53:54:72:52:33:5e:7e:49:92:5d:48:b8:2d:81:4b:bd:1c:b6: 75:b7:5a:6b:8e:69:46:e3:c2:44:b2:0f:fa:c0:45:2a:64:09: 1c:82:3c:cd:df:08:50:8f:28:79:1a:de:3c:22:5a:dc:ae:d1: f8:3f:09:c1:b4:49:e5:5a:17:6e:09:b4:95:02:a0:4c:a2:3c: ef:ac:8a:49 -----BEGIN CERTIFICATE----- MIIGqzCCBZOgAwIBAgIUFReNqtNGt2BCXflUL5KtVuf/1JowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDQyMzAxMzZaFw0yNjAyMDMyMzA2MzZaMDMxMTAvBgNV BAMTKEE2MUIyM0Y4NkEyMUZFOUNDQjRDRTFFOUJDOTJDMkIyMTBGRTdGQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJHhlVFCHiXcMgj3zUaiECFMNX VBv/OKdlHNYkmQWtfwgH2esvCqhpF9yYC/9ztCQrvm80OcN3nHV8aXdz7+HX16mo PugT8HpQRuBWcJuwtm/6uuX5/WtUvHTSwihkPp8dDfvl3kIlz2v/AmOhh0NffJ55 29ebpP7+oF7odscHCNndMX60gTacqGHBWmLI5RaRYkZVWGt5cwvRt/i4354gJ/U0 W9dNr+lR/wAxRd15bSnygDZz4ZG8i6LbDAa3xhfN01wGbVxu3q5ZMVeOt2PmJzXl gUaJ151MU2HfFE8rpV0r+oOAqXEABO6xNUZTTXuot8bUF5wgVnByPr3xEm1bAgMB AAGjggO1MIIDsTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSmGyP4aiH+nMtM 4em8ksKyEP5/yDAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQzlBNjQ2MTFBMjQ4QzM1MUUyMjRCNDMw OUFEMzZFOTUwQzk0RkJERUFGMTA0NEZCNTJEMUFDOTMyMkU1MzkyNC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9DOUE2NDYxMUEyNDhDMzUxRTIyNEI0MzA5QUQzNkU5NTBDOTRGQkRFQUYx MDQ0RkI1MkQxQUM5MzIyRTUzOTI0LzAvQTYxQjIzRjg2QTIxRkU5Q0NCNENFMUU5 QkM5MkMyQjIxMEZFN0ZDOC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQEszPgAwQEvg9Q MA0EAgACMAcDBQAoA+SAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDMgDANBgkq hkiG9w0BAQsFAAOCAQEAECZ0T3iUCgyA1WNT+L+NEDP2CIfZkUTn5T5o0gXufMSb L39UeoljHiaXyqsYxeR2ZiRs3bLkRxg+PapM4YpetadQFv56Hq9TZbBqDm2spOca NZja5GAGNHZR62j6TyEY0Ihh/3u0oZ5Ygc/js6pIoLxTrSsA3bVYULhlo7RdMwxr zRhPAPWHVKcc3e+3N4OKZTHrjm7v6ws0/z+RBSQIaTM3Qb0GWWBKJGDYVTizteWE DaiVU1RyUjNefkmSXUi4LYFLvRy2dbdaa45pRuPCRLIP+sBFKmQJHII8zd8IUI8o eRrePCJa3K7R+D8JwbRJ5VoXbgm0lQKgTKI876yKSQ== -----END CERTIFICATE-----Generated at Wed Nov 5 12:04:20 2025 by rpki-client