$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCDD50591AFBE01DD1E89006B709D14B69D79567.cer File: BCDD50591AFBE01DD1E89006B709D14B69D79567.cer (raw, json) Hash identifier: R6x0ljWgpvz2MqZfXIMAnREwkJ+xmn3LdlcDYy0/rIk= Subject key identifier: BC:DD:50:59:1A:FB:E0:1D:D1:E8:90:06:B7:09:D1:4B:69:D7:95:67 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 3CC737325CE06804F562FFD842E9DBD435CAB254 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/0B542E8C503E74431FD217F5A298A2E53346830CE5559179E9872984FD99DAF3/0/BCDD50591AFBE01DD1E89006B709D14B69D79567.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/0B542E8C503E74431FD217F5A298A2E53346830CE5559179E9872984FD99DAF3/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 20:52:48 +0000 Certificate not after: Wed 27 Jan 2027 20:57:48 +0000 Subordinate resources: AS: 263244 IP: 131.72.132.0/22 IP: 138.99.184.0/22 IP: 170.247.140.0/22 IP: 186.0.180.0/22 IP: 190.106.32.0/21 IP: 2800:cb0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:c7:37:32:5c:e0:68:04:f5:62:ff:d8:42:e9:db:d4:35:ca:b2:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 20:52:48 2026 GMT Not After : Jan 27 20:57:48 2027 GMT Subject: CN=BCDD50591AFBE01DD1E89006B709D14B69D79567 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:98:99:d4:f6:71:10:d4:6c:be:45:f9:8d:2f: b3:7e:b2:92:91:ca:cd:0c:1a:f7:2d:0a:86:eb:10: e1:7f:03:7d:b1:09:ee:1f:27:da:8c:0f:f5:af:0a: dc:e0:8b:cd:67:9d:36:95:7e:9c:ca:f8:f4:b3:9c: d8:1e:47:66:8f:75:87:14:ca:17:38:4e:ac:af:f8: 7f:8f:1e:3b:11:c1:f5:9e:a4:2d:21:fc:23:ee:a0: 66:56:e8:62:63:b9:ae:1d:c1:d4:0f:57:70:6f:19: 89:73:22:40:9a:08:6b:56:a8:e1:de:ca:5c:f4:13: 8d:cb:f3:45:2f:bc:a2:81:37:4e:8e:64:2d:95:43: 0b:1a:95:98:54:4f:29:c0:63:a9:7d:76:d8:2d:cb: 58:a0:c4:75:ca:ad:be:b8:ea:3d:e4:95:16:a5:b2: 6f:6a:ce:e8:68:b6:90:24:d1:7e:a2:8d:a4:89:92: db:ee:f0:5d:38:ae:c2:42:13:3f:48:75:08:3d:97: 22:5a:7b:b1:7e:ca:1c:54:3b:65:30:d3:5f:d2:73: 7a:db:ff:b2:eb:a3:b5:1f:55:a0:2c:ad:08:da:e2: 0d:70:4b:11:bb:d8:7b:f4:06:2e:65:86:af:6e:6a: a4:2c:00:b7:ef:8c:e5:5d:9f:2f:84:ab:d1:10:20: 9a:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BC:DD:50:59:1A:FB:E0:1D:D1:E8:90:06:B7:09:D1:4B:69:D7:95:67 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0B542E8C503E74431FD217F5A298A2E53346830CE5559179E9872984FD99DAF3/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0B542E8C503E74431FD217F5A298A2E53346830CE5559179E9872984FD99DAF3/0/BCDD50591AFBE01DD1E89006B709D14B69D79567.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.72.132.0/22 138.99.184.0/22 170.247.140.0/22 186.0.180.0/22 190.106.32.0/21 IPv6: 2800:cb0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263244 Signature Algorithm: sha256WithRSAEncryption 7e:f2:6a:6a:9c:70:8f:6b:65:cd:db:11:05:13:50:2f:10:69: 63:b8:4a:fb:aa:ee:6e:d1:42:b2:02:8c:b4:2d:e4:ec:bb:8b: 64:9d:85:ed:9b:1b:50:1a:c7:d6:1e:68:68:4a:eb:d9:e2:0d: d1:f8:bb:d6:2c:7f:bb:09:4d:ef:c3:7d:0c:f5:ee:9c:e5:42: 8a:fd:d7:77:79:75:31:05:f1:0b:31:a9:cd:8c:95:00:ae:7a: 1a:fa:00:7b:39:3c:57:55:85:17:7b:d5:26:c4:93:34:a7:eb: ee:c1:03:95:46:71:95:dd:a9:8c:5c:f1:1e:cb:cd:6e:cd:f2: b0:3b:f9:6a:b9:65:27:fc:35:69:82:ce:72:b3:4b:43:e7:52: cb:72:44:b3:6d:3c:ab:7b:1e:76:28:6a:8e:7d:12:a8:56:42: 5b:41:f7:fb:6e:f9:5f:51:0a:96:2b:2a:0d:11:94:ea:4d:43: ab:00:18:17:71:97:9a:58:23:ac:62:31:3a:76:07:50:cd:0f: a4:91:9b:31:d7:cf:9e:f5:14:6c:f9:6d:2f:b4:b5:4b:f1:73: 6f:20:94:62:08:42:6d:e0:55:91:22:5d:96:bd:cf:10:79:32: 67:f7:43:e2:d3:77:5c:5d:9b:95:d0:27:37:3c:ae:f0:f9:29: 5f:77:bb:fa -----BEGIN CERTIFICATE----- MIIGvTCCBaWgAwIBAgIUPMc3MlzgaAT1Yv/YQunb1DXKslQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgyMDUyNDhaFw0yNzAxMjcyMDU3NDhaMDMxMTAvBgNV BAMTKEJDREQ1MDU5MUFGQkUwMUREMUU4OTAwNkI3MDlEMTRCNjlENzk1NjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgmJnU9nEQ1Gy+RfmNL7N+spKR ys0MGvctCobrEOF/A32xCe4fJ9qMD/WvCtzgi81nnTaVfpzK+PSznNgeR2aPdYcU yhc4Tqyv+H+PHjsRwfWepC0h/CPuoGZW6GJjua4dwdQPV3BvGYlzIkCaCGtWqOHe ylz0E43L80UvvKKBN06OZC2VQwsalZhUTynAY6l9dtgty1igxHXKrb646j3klRal sm9qzuhotpAk0X6ijaSJktvu8F04rsJCEz9IdQg9lyJae7F+yhxUO2Uw01/Sc3rb /7Lro7UfVaAsrQja4g1wSxG72Hv0Bi5lhq9uaqQsALfvjOVdny+Eq9EQIJqXAgMB AAGjggPHMIIDwzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS83VBZGvvgHdHo kAa3CdFLadeVZzAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMEI1NDJFOEM1MDNFNzQ0MzFGRDIxN0Y1 QTI5OEEyRTUzMzQ2ODMwQ0U1NTU5MTc5RTk4NzI5ODRGRDk5REFGMy8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8wQjU0MkU4QzUwM0U3NDQzMUZEMjE3RjVBMjk4QTJFNTMzNDY4MzBDRTU1 NTkxNzlFOTg3Mjk4NEZEOTlEQUYzLzAvQkNERDUwNTkxQUZCRTAxREQxRTg5MDA2 QjcwOUQxNEI2OUQ3OTU2Ny5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQCg0iEAwQCimO4 AwQCqveMAwQCugC0AwQDvmogMA0EAgACMAcDBQAoAAywMBoGCCsGAQUFBwEIAQH/ BAswCaAHMAUCAwQETDANBgkqhkiG9w0BAQsFAAOCAQEAfvJqapxwj2tlzdsRBRNQ LxBpY7hK+6rubtFCsgKMtC3k7LuLZJ2F7ZsbUBrH1h5oaErr2eIN0fi71ix/uwlN 78N9DPXunOVCiv3Xd3l1MQXxCzGpzYyVAK56GvoAezk8V1WFF3vVJsSTNKfr7sED lUZxld2pjFzxHsvNbs3ysDv5arllJ/w1aYLOcrNLQ+dSy3JEs208q3sedihqjn0S qFZCW0H3+275X1EKlisqDRGU6k1DqwAYF3GXmlgjrGIxOnYHUM0PpJGbMdfPnvUU bPltL7S1S/FzbyCUYghCbeBVkSJdlr3PEHkyZ/dD4tN3XF2bldAnNzyu8PkpX3e7 +g== -----END CERTIFICATE-----Generated at Mon Mar 2 15:03:14 2026 by rpki-client