$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B19DCDB64E506EAC5C80E9A6A0E22F0DF25D723C.cer File: B19DCDB64E506EAC5C80E9A6A0E22F0DF25D723C.cer (raw, json) Hash identifier: cB4kd2QLnNx/LaAp+QpyPIZVv704/KlTruBkY7JoJxc= Subject key identifier: B1:9D:CD:B6:4E:50:6E:AC:5C:80:E9:A6:A0:E2:2F:0D:F2:5D:72:3C Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 6B180FD616EDD459A03614A410ECFF8007BA17FB Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/D932B69CBE34140327D3802970BFFFBE9112C0C84B4AD58C28D44E1578550061/0/B19DCDB64E506EAC5C80E9A6A0E22F0DF25D723C.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/D932B69CBE34140327D3802970BFFFBE9112C0C84B4AD58C28D44E1578550061/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 03 Jun 2025 14:20:01 +0000 Certificate not after: Tue 02 Jun 2026 14:25:01 +0000 Subordinate resources: AS: 269980 AS: 274059 IP: 138.117.40.0/22 IP: 170.254.0.0/22 IP: 2803:1a50::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 25 Jun 2025 11:30:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:18:0f:d6:16:ed:d4:59:a0:36:14:a4:10:ec:ff:80:07:ba:17:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Jun 3 14:20:01 2025 GMT Not After : Jun 2 14:25:01 2026 GMT Subject: CN=B19DCDB64E506EAC5C80E9A6A0E22F0DF25D723C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:3d:e7:53:a0:4c:80:89:32:39:d0:aa:41:ec: 8e:c1:eb:77:3c:e1:0f:11:d8:80:dd:0d:b0:ec:65: d8:60:ad:4e:85:56:d5:c2:30:d2:12:56:8f:ea:6d: 84:38:e4:37:fd:0e:44:14:e7:a4:04:fe:38:6c:50: 21:06:06:c0:f0:85:87:d8:ea:50:24:f1:45:0e:22: c7:07:5f:56:bd:1f:da:60:1a:9c:d7:d7:f2:07:e6: 1a:01:04:c8:d7:60:39:74:0f:6a:b9:7d:7b:6c:63: c7:f0:b2:c9:02:03:c5:a0:45:63:7f:fe:bd:ba:d4: da:4b:06:fe:fc:2e:7d:63:e1:6c:38:cb:9c:a0:de: f8:b8:3f:b1:65:96:5a:fd:5e:8a:9a:c8:b9:7c:62: 89:fc:09:b6:aa:b7:bc:47:e5:0c:be:b5:e6:fa:df: 69:c0:30:fa:8b:69:f0:cb:6c:b5:c5:3b:5a:6d:1a: e7:d4:94:10:41:1d:d8:0a:b9:9c:6f:26:7d:c6:47: 7f:54:cf:3f:68:99:92:b8:bc:29:06:82:fc:97:06: 18:a7:02:a6:7f:82:c9:3a:f6:ac:7c:e8:59:08:30: 9a:b2:cf:75:6e:d8:0a:e3:b4:4e:72:0e:77:57:d8: fc:a2:93:a1:53:e8:05:0b:4c:95:a4:b5:dd:ff:88: 0e:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B1:9D:CD:B6:4E:50:6E:AC:5C:80:E9:A6:A0:E2:2F:0D:F2:5D:72:3C X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/D932B69CBE34140327D3802970BFFFBE9112C0C84B4AD58C28D44E1578550061/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/D932B69CBE34140327D3802970BFFFBE9112C0C84B4AD58C28D44E1578550061/0/B19DCDB64E506EAC5C80E9A6A0E22F0DF25D723C.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.117.40.0/22 170.254.0.0/22 IPv6: 2803:1a50::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 269980 274059 Signature Algorithm: sha256WithRSAEncryption 3b:05:5d:37:63:79:fd:ae:bc:03:6c:4f:fa:5a:c1:f5:21:80: d1:4f:fb:dd:a3:22:d3:06:90:4b:dd:45:91:65:df:ee:75:61: 30:a5:90:db:c5:30:af:17:0a:d7:1d:67:fc:36:12:2e:b7:2f: db:07:48:11:6b:91:37:9b:0d:29:c7:91:74:a0:45:d2:10:c3: 55:b0:bb:ff:0f:69:fc:a2:0c:e5:e2:e7:42:b9:43:22:e9:e5: 18:ac:c7:96:a4:fb:b5:6e:aa:42:e8:cb:c5:b0:d7:be:b3:ff: 44:33:cb:6c:da:7b:67:0b:c6:30:ee:5a:4e:03:b0:20:75:8f: 76:56:0a:0b:44:5d:ca:92:3b:8f:dc:f8:b8:9e:96:58:df:cb: 7e:ac:77:52:5f:76:ac:54:39:b2:9b:a9:ba:47:ea:b0:83:b0: bf:1b:8b:fd:dd:4d:a2:b3:86:80:d0:25:57:94:ac:63:12:fe: 6f:07:3e:6e:b1:40:cc:e6:ab:10:8f:71:c7:e6:0f:7d:36:6c: 62:f1:f7:2c:9f:ff:aa:96:f6:bf:32:5c:8b:03:fe:47:34:2e: 07:b2:c8:7f:cc:fc:f9:a7:a5:57:f9:95:74:1c:4b:06:12:bd: f0:f1:5c:93:4b:57:7d:f4:21:89:52:70:7c:ea:21:a9:2e:58: ac:a6:ff:7c -----BEGIN CERTIFICATE----- MIIGsDCCBZigAwIBAgIUaxgP1hbt1FmgNhSkEOz/gAe6F/swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTA2MDMxNDIwMDFaFw0yNjA2MDIxNDI1MDFaMDMxMTAvBgNV BAMTKEIxOURDREI2NEU1MDZFQUM1QzgwRTlBNkEwRTIyRjBERjI1RDcyM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVPedToEyAiTI50KpB7I7B63c8 4Q8R2IDdDbDsZdhgrU6FVtXCMNISVo/qbYQ45Df9DkQU56QE/jhsUCEGBsDwhYfY 6lAk8UUOIscHX1a9H9pgGpzX1/IH5hoBBMjXYDl0D2q5fXtsY8fwsskCA8WgRWN/ /r261NpLBv78Ln1j4Ww4y5yg3vi4P7Flllr9XoqayLl8Yon8Cbaqt7xH5Qy+teb6 32nAMPqLafDLbLXFO1ptGufUlBBBHdgKuZxvJn3GR39Uzz9omZK4vCkGgvyXBhin AqZ/gsk69qx86FkIMJqyz3Vu2ArjtE5yDndX2Pyik6FT6AULTJWktd3/iA7BAgMB AAGjggO6MIIDtjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSxnc22TlBurFyA 6aag4i8N8l1yPDAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRDkzMkI2OUNCRTM0MTQwMzI3RDM4MDI5 NzBCRkZGQkU5MTEyQzBDODRCNEFENThDMjhENDRFMTU3ODU1MDA2MS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9EOTMyQjY5Q0JFMzQxNDAzMjdEMzgwMjk3MEJGRkZCRTkxMTJDMEM4NEI0 QUQ1OEMyOEQ0NEUxNTc4NTUwMDYxLzAvQjE5RENEQjY0RTUwNkVBQzVDODBFOUE2 QTBFMjJGMERGMjVENzIzQy5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCinUoAwQCqv4A MA0EAgACMAcDBQAoAxpQMB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwQenAIDBC6L MA0GCSqGSIb3DQEBCwUAA4IBAQA7BV03Y3n9rrwDbE/6WsH1IYDRT/vdoyLTBpBL 3UWRZd/udWEwpZDbxTCvFwrXHWf8NhIuty/bB0gRa5E3mw0px5F0oEXSEMNVsLv/ D2n8ogzl4udCuUMi6eUYrMeWpPu1bqpC6MvFsNe+s/9EM8ts2ntnC8Yw7lpOA7Ag dY92VgoLRF3KkjuP3Pi4npZY38t+rHdSX3asVDmym6m6R+qwg7C/G4v93U2is4aA 0CVXlKxjEv5vBz5usUDM5qsQj3HH5g99Nmxi8fcsn/+qlva/MlyLA/5HNC4Hssh/ zPz5p6VX+ZV0HEsGEr3w8VyTS1d99CGJUnB86iGpLlispv98 -----END CERTIFICATE-----Generated at Sat Jun 21 06:52:59 2025 by rpki-client