$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B7A6CEE70D63D95CB10C03D66656FE5FBC42F8B2.cer File: B7A6CEE70D63D95CB10C03D66656FE5FBC42F8B2.cer (raw, json) Hash identifier: YGM7ObopBtIq4tO106GeWDIs0wN09q3n247003JfVXs= Subject key identifier: B7:A6:CE:E7:0D:63:D9:5C:B1:0C:03:D6:66:56:FE:5F:BC:42:F8:B2 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 118C707A80B9094989FAD3144ED46D54EDB6E71E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/07D39DCDD6D9E96335C50A32743BFE126267F5A35B10588C2C72A2414EFE881F/0/B7A6CEE70D63D95CB10C03D66656FE5FBC42F8B2.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/07D39DCDD6D9E96335C50A32743BFE126267F5A35B10588C2C72A2414EFE881F/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Fri 10 Oct 2025 15:35:01 +0000 Certificate not after: Fri 09 Oct 2026 15:40:01 +0000 Subordinate resources: AS: 272912 IP: 148.227.167.0/24 IP: 2803:ce90::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:8c:70:7a:80:b9:09:49:89:fa:d3:14:4e:d4:6d:54:ed:b6:e7:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Oct 10 15:35:01 2025 GMT Not After : Oct 9 15:40:01 2026 GMT Subject: CN=B7A6CEE70D63D95CB10C03D66656FE5FBC42F8B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:c5:1c:21:6b:c8:03:df:68:1e:b4:bd:a7:45: 55:e5:a5:92:ae:ff:bc:b0:81:11:96:50:4b:7e:b4: 0c:a3:04:11:a8:91:57:7c:f8:c8:cf:91:58:bc:4b: a6:36:b7:20:a8:a3:da:6e:96:7f:ae:26:a8:66:1e: b5:21:d7:8e:02:c1:7c:3e:b6:21:a6:45:de:2d:e5: c4:a6:29:68:a5:ad:a0:96:47:17:9a:79:2b:8b:63: b7:0b:4a:40:ef:4d:70:38:07:f3:0e:f7:1d:1c:21: 40:e6:a6:95:ee:6b:e7:ff:d0:de:fd:a1:11:be:cd: 81:05:bd:66:d9:68:f5:94:cb:ea:90:a8:04:ee:d9: f2:e8:81:79:b7:a8:ed:8c:0a:de:bb:7a:76:fa:1b: d7:17:3a:00:b6:66:76:6f:2e:da:69:82:38:a6:ca: 90:15:09:25:0a:24:e2:bf:15:2f:09:ea:c8:f1:f4: ec:64:52:31:42:27:fb:78:a4:ba:9e:f0:0b:14:0e: c6:ed:fc:6b:24:72:38:7b:2b:5a:9a:28:55:08:bd: ea:f8:8c:5e:62:71:d5:17:40:ba:2c:50:fe:54:8f: 9c:cd:36:71:e7:86:8c:a7:39:cc:40:18:07:18:a1: 53:da:90:7e:c9:88:11:78:35:46:07:cf:50:6e:05: 6d:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B7:A6:CE:E7:0D:63:D9:5C:B1:0C:03:D6:66:56:FE:5F:BC:42:F8:B2 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/07D39DCDD6D9E96335C50A32743BFE126267F5A35B10588C2C72A2414EFE881F/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/07D39DCDD6D9E96335C50A32743BFE126267F5A35B10588C2C72A2414EFE881F/0/B7A6CEE70D63D95CB10C03D66656FE5FBC42F8B2.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 148.227.167.0/24 IPv6: 2803:ce90::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 272912 Signature Algorithm: sha256WithRSAEncryption 58:76:38:a0:0d:51:40:a5:88:8b:97:23:54:af:54:f5:fc:f8: c2:58:f4:3e:36:f1:b7:0a:3e:fe:16:ec:a5:17:de:49:fb:18: cf:5f:9c:8b:e2:59:69:33:b0:e2:05:31:5e:c8:72:8f:6d:f4: 8b:06:7e:ef:8f:76:28:18:c8:80:f5:ac:f7:50:7e:b4:81:f1: da:fb:60:ea:ff:05:6a:c1:84:76:df:56:07:82:e9:7e:6d:37: 71:78:79:a6:73:1c:04:ca:ad:87:d2:09:83:46:ba:12:39:df: 4e:8c:31:32:85:4f:36:6d:af:97:a8:23:ea:47:1a:9f:7d:3a: 36:89:51:27:7c:16:21:9f:d1:9a:55:9d:85:f8:ea:26:72:a3: e9:a4:e3:16:a1:99:b0:35:f9:c2:ee:a8:bb:93:e6:6c:b5:8f: 19:aa:d5:89:d3:f8:a4:b9:eb:c6:95:9b:58:3f:34:18:af:c4: c3:3e:17:34:31:af:65:c6:0d:d5:d6:04:df:97:a2:85:20:d8: b7:15:a4:cf:f8:f3:be:f8:48:5d:64:b7:4f:23:9b:2a:a5:d7: d0:dd:73:e2:49:3a:05:fe:4c:57:a2:7b:29:52:88:07:f3:64: cc:13:51:03:f7:ef:f9:cf:82:8f:ab:88:c3:d1:64:72:e0:ab: dd:a8:7e:7f -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUEYxweoC5CUmJ+tMUTtRtVO225x4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTEwMTAxNTM1MDFaFw0yNjEwMDkxNTQwMDFaMDMxMTAvBgNV BAMTKEI3QTZDRUU3MEQ2M0Q5NUNCMTBDMDNENjY2NTZGRTVGQkM0MkY4QjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRxRwha8gD32getL2nRVXlpZKu /7ywgRGWUEt+tAyjBBGokVd8+MjPkVi8S6Y2tyCoo9puln+uJqhmHrUh144CwXw+ tiGmRd4t5cSmKWilraCWRxeaeSuLY7cLSkDvTXA4B/MO9x0cIUDmppXua+f/0N79 oRG+zYEFvWbZaPWUy+qQqATu2fLogXm3qO2MCt67enb6G9cXOgC2ZnZvLtppgjim ypAVCSUKJOK/FS8J6sjx9OxkUjFCJ/t4pLqe8AsUDsbt/Gskcjh7K1qaKFUIver4 jF5icdUXQLosUP5Uj5zNNnHnhoynOcxAGAcYoVPakH7JiBF4NUYHz1BuBW2xAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS3ps7nDWPZXLEM A9ZmVv5fvEL4sjAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMDdEMzlEQ0RENkQ5RTk2MzM1QzUwQTMy NzQzQkZFMTI2MjY3RjVBMzVCMTA1ODhDMkM3MkEyNDE0RUZFODgxRi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8wN0QzOURDREQ2RDlFOTYzMzVDNTBBMzI3NDNCRkUxMjYyNjdGNUEzNUIx MDU4OEMyQzcyQTI0MTRFRkU4ODFGLzAvQjdBNkNFRTcwRDYzRDk1Q0IxMEMwM0Q2 NjY1NkZFNUZCQzQyRjhCMi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAlOOnMA0EAgAC MAcDBQAoA86QMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQqEDANBgkqhkiG9w0B AQsFAAOCAQEAWHY4oA1RQKWIi5cjVK9U9fz4wlj0Pjbxtwo+/hbspRfeSfsYz1+c i+JZaTOw4gUxXshyj230iwZ+7492KBjIgPWs91B+tIHx2vtg6v8FasGEdt9WB4Lp fm03cXh5pnMcBMqth9IJg0a6EjnfTowxMoVPNm2vl6gj6kcan306NolRJ3wWIZ/R mlWdhfjqJnKj6aTjFqGZsDX5wu6ou5PmbLWPGarVidP4pLnrxpWbWD80GK/Ewz4X NDGvZcYN1dYE35eihSDYtxWkz/jzvvhIXWS3TyObKqXX0N1z4kk6Bf5MV6J7KVKI B/NkzBNRA/fv+c+Cj6uIw9FkcuCr3ah+fw== -----END CERTIFICATE-----Generated at Tue Nov 4 18:58:03 2025 by rpki-client