$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AC7B8BA3D05E211CF7697DC38DBB7591FCD3075A.cer File: AC7B8BA3D05E211CF7697DC38DBB7591FCD3075A.cer (raw, json) Hash identifier: bZ/5VzJ8vaTgRqlBCto2WKCwgYrEUEiZ50SfZQU/UBY= Subject key identifier: AC:7B:8B:A3:D0:5E:21:1C:F7:69:7D:C3:8D:BB:75:91:FC:D3:07:5A Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 56203CF9FC757A0EB591490FFD99FB97E07A69BD Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/C0CE9AA0BC29760A13F1C1FBADBCAA564D094312E70029DFE6E0D0AFDC88405F/0/AC7B8BA3D05E211CF7697DC38DBB7591FCD3075A.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/C0CE9AA0BC29760A13F1C1FBADBCAA564D094312E70029DFE6E0D0AFDC88405F/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 04 Feb 2025 21:30:07 +0000 Certificate not after: Tue 03 Feb 2026 21:35:07 +0000 Subordinate resources: AS: 264754 IP: 168.194.140.0/22 IP: 2803:3f40::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:20:3c:f9:fc:75:7a:0e:b5:91:49:0f:fd:99:fb:97:e0:7a:69:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 4 21:30:07 2025 GMT Not After : Feb 3 21:35:07 2026 GMT Subject: CN=AC7B8BA3D05E211CF7697DC38DBB7591FCD3075A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:7b:01:e6:8a:19:70:fc:d2:7e:ef:fb:81:86: e4:ba:1c:7d:51:9f:25:e8:47:8a:01:91:43:4d:9d: d0:0f:d9:40:61:f7:78:2e:96:52:da:dd:96:5e:22: 53:89:4f:5e:b2:f9:65:6c:0b:ef:49:9b:7c:0b:13: 9a:67:53:9c:93:d6:3b:94:d0:50:80:36:48:ca:17: af:c5:00:cd:d4:25:27:93:e0:22:9b:f5:a2:ee:e3: 4c:d2:59:31:c5:78:09:dc:dc:3e:3b:a6:e1:63:8c: 39:31:2b:a6:4e:e0:43:3f:27:c8:d8:9a:ef:46:df: 14:7b:4a:45:05:1e:60:12:a3:96:66:4a:1d:d8:c3: 0f:ac:bf:28:34:45:a4:31:27:20:d1:60:3c:a1:73: c0:f4:7d:2b:f5:ab:68:8d:fc:a2:64:d3:84:56:df: b8:30:00:4b:aa:9d:9a:37:67:ed:9e:13:d9:25:c4: 02:b3:78:21:c8:27:71:39:86:f2:8d:a8:8c:9e:f8: f5:ea:64:09:de:1a:a0:2f:64:1a:b8:87:48:26:25: 27:73:c8:2a:1c:53:3d:41:28:7a:69:6a:1d:9e:0c: a5:cb:2a:7c:24:70:2a:0f:be:b7:a8:6a:f7:4c:53: 1f:d6:21:f1:77:99:3f:80:5a:da:3e:c7:a8:18:84: 11:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AC:7B:8B:A3:D0:5E:21:1C:F7:69:7D:C3:8D:BB:75:91:FC:D3:07:5A X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/C0CE9AA0BC29760A13F1C1FBADBCAA564D094312E70029DFE6E0D0AFDC88405F/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/C0CE9AA0BC29760A13F1C1FBADBCAA564D094312E70029DFE6E0D0AFDC88405F/0/AC7B8BA3D05E211CF7697DC38DBB7591FCD3075A.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.194.140.0/22 IPv6: 2803:3f40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264754 Signature Algorithm: sha256WithRSAEncryption ba:98:2b:7e:e6:b9:86:9a:b5:f1:f4:9c:74:d9:2f:c1:3f:4e: bb:bc:0e:5f:c3:09:4a:4e:4f:3a:fc:0a:4e:42:71:27:e0:e6: 5e:06:73:39:d5:d1:d6:8b:ae:3f:b5:0e:33:20:f7:a3:2f:47: 1c:89:bb:a6:0e:58:72:39:0a:0f:64:8b:72:6d:12:9b:ff:c4: 78:b6:93:56:80:43:ab:60:51:5e:58:9b:68:95:93:b0:36:09: eb:ae:92:d6:53:83:13:7f:64:88:d1:1f:d9:13:fd:c4:01:a7: 97:7c:e1:df:fb:18:1f:f3:38:4e:f3:a3:d7:4a:ac:33:f4:be: 0e:c0:69:bb:c3:6b:0b:88:70:c6:b5:ed:bd:97:ff:31:b9:47: 07:67:4a:00:f5:ab:1b:c1:8f:23:de:2e:94:25:d5:f6:8c:a7: 1e:69:27:c2:be:3c:8f:ac:bc:00:56:1f:31:51:12:bc:96:3e: a0:c1:72:d4:33:7b:2f:bb:b9:21:72:9b:f6:36:2d:19:d1:41: 1a:2f:b1:d4:5a:c9:da:57:74:d1:8f:14:a1:27:a8:50:ad:bc: cc:f0:04:3c:ec:37:60:84:1d:02:77:e8:d9:aa:7d:b0:d4:31: 8a:4f:bf:97:de:3a:a0:90:c5:86:67:4b:5a:08:b5:bd:90:dd: 12:35:39:aa -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUViA8+fx1eg61kUkP/Zn7l+B6ab0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDQyMTMwMDdaFw0yNjAyMDMyMTM1MDdaMDMxMTAvBgNV BAMTKEFDN0I4QkEzRDA1RTIxMUNGNzY5N0RDMzhEQkI3NTkxRkNEMzA3NUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMewHmihlw/NJ+7/uBhuS6HH1R nyXoR4oBkUNNndAP2UBh93gullLa3ZZeIlOJT16y+WVsC+9Jm3wLE5pnU5yT1juU 0FCANkjKF6/FAM3UJSeT4CKb9aLu40zSWTHFeAnc3D47puFjjDkxK6ZO4EM/J8jY mu9G3xR7SkUFHmASo5ZmSh3Yww+svyg0RaQxJyDRYDyhc8D0fSv1q2iN/KJk04RW 37gwAEuqnZo3Z+2eE9klxAKzeCHIJ3E5hvKNqIye+PXqZAneGqAvZBq4h0gmJSdz yCocUz1BKHppah2eDKXLKnwkcCoPvreoavdMUx/WIfF3mT+AWto+x6gYhBGTAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSse4uj0F4hHPdp fcONu3WR/NMHWjAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQzBDRTlBQTBCQzI5NzYwQTEzRjFDMUZC QURCQ0FBNTY0RDA5NDMxMkU3MDAyOURGRTZFMEQwQUZEQzg4NDA1Ri8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9DMENFOUFBMEJDMjk3NjBBMTNGMUMxRkJBREJDQUE1NjREMDk0MzEyRTcw MDI5REZFNkUwRDBBRkRDODg0MDVGLzAvQUM3QjhCQTNEMDVFMjExQ0Y3Njk3REMz OERCQjc1OTFGQ0QzMDc1QS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCqMKMMA0EAgAC MAcDBQAoAz9AMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQKMjANBgkqhkiG9w0B AQsFAAOCAQEAupgrfua5hpq18fScdNkvwT9Ou7wOX8MJSk5POvwKTkJxJ+DmXgZz OdXR1ouuP7UOMyD3oy9HHIm7pg5YcjkKD2SLcm0Sm//EeLaTVoBDq2BRXlibaJWT sDYJ666S1lODE39kiNEf2RP9xAGnl3zh3/sYH/M4TvOj10qsM/S+DsBpu8NrC4hw xrXtvZf/MblHB2dKAPWrG8GPI94ulCXV9oynHmknwr48j6y8AFYfMVESvJY+oMFy 1DN7L7u5IXKb9jYtGdFBGi+x1FrJ2ld00Y8UoSeoUK28zPAEPOw3YIQdAnfo2ap9 sNQxik+/l946oJDFhmdLWgi1vZDdEjU5qg== -----END CERTIFICATE-----Generated at Wed Nov 5 05:16:38 2025 by rpki-client