$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C586A9076CDE73FD896464010A3CE08E4C8FC4C5.cer File: C586A9076CDE73FD896464010A3CE08E4C8FC4C5.cer (raw, json) Hash identifier: 0kVOSUkiZiPbfyuMiWrfhkZmE06S3X2ihq9Poo4LLks= Subject key identifier: C5:86:A9:07:6C:DE:73:FD:89:64:64:01:0A:3C:E0:8E:4C:8F:C4:C5 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 698148714D6F2EFE05703B8BBE140377139AB333 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/C586A9076CDE73FD896464010A3CE08E4C8FC4C5.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Fri 25 Jul 2025 03:55:01 +0000 Certificate not after: Fri 24 Jul 2026 04:00:01 +0000 Subordinate resources: AS: 13999 AS: 28541 AS: 262916 IP: 177.224.0.0/13 IP: 177.240.0.0/13 IP: 181.199.192.0/20 IP: 187.179.160.0 -- 187.179.255.255 IP: 187.191.128.0/17 IP: 187.240.0.0/13 IP: 189.192.0.0/13 IP: 190.110.0.0/19 IP: 200.52.160.0 -- 200.52.223.255 IP: 200.56.128.0/18 IP: 200.66.0.0/18 IP: 200.77.0.0/17 IP: 200.92.0.0/16 IP: 200.94.224.0/20 IP: 201.132.0.0/16 IP: 201.159.192.0 -- 201.159.215.255 IP: 201.164.0.0/15 IP: 201.169.0.0/16 IP: 2806:260::/28 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:81:48:71:4d:6f:2e:fe:05:70:3b:8b:be:14:03:77:13:9a:b3:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Jul 25 03:55:01 2025 GMT Not After : Jul 24 04:00:01 2026 GMT Subject: CN=C586A9076CDE73FD896464010A3CE08E4C8FC4C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:af:8f:70:aa:f5:1a:c0:8a:fb:ba:c0:51:41: 31:6b:12:dd:13:02:6a:62:bf:92:aa:43:0c:fd:09: 97:d5:0e:1a:90:95:35:e3:27:ad:35:ea:ee:47:d8: b0:db:f9:b6:e5:cd:ff:d4:83:02:a2:6d:af:6f:3b: 00:ee:f2:04:dd:b2:2b:4f:ce:99:91:7f:ef:55:e3: 9a:b8:09:87:10:a6:f2:5f:36:1d:6a:a3:51:08:0b: 74:d8:63:2d:a6:b7:21:5f:8e:b8:3b:80:f9:75:f3: 91:e2:41:6f:3b:0f:ab:12:ff:21:8f:fc:6c:b4:a4: 7c:64:a6:96:9e:f5:54:ea:c2:b3:66:3c:f7:6f:9a: 8a:d9:0b:ae:52:ae:c9:10:13:a3:d8:c0:a9:46:5f: a1:7b:9a:1f:d2:3f:b1:33:e1:be:da:31:75:4a:bb: d1:69:27:60:c1:71:df:96:d8:f5:d6:0c:87:2a:21: 06:b2:c9:8d:0c:75:83:46:33:9b:33:63:12:65:7a: 3b:16:6c:b0:c7:e2:42:d3:e5:7d:65:fa:f5:00:f6: 36:41:d9:ed:ac:78:88:be:40:0f:b2:8a:a5:f8:0c: 83:55:02:d3:51:dd:c6:74:82:1b:75:60:c8:ff:be: 2d:70:ed:a9:20:8f:ed:cc:10:54:fd:ac:5e:d6:d4: 35:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C5:86:A9:07:6C:DE:73:FD:89:64:64:01:0A:3C:E0:8E:4C:8F:C4:C5 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/C586A9076CDE73FD896464010A3CE08E4C8FC4C5.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.224.0.0/13 177.240.0.0/13 181.199.192.0/20 187.179.160.0-187.179.255.255 187.191.128.0/17 187.240.0.0/13 189.192.0.0/13 190.110.0.0/19 200.52.160.0-200.52.223.255 200.56.128.0/18 200.66.0.0/18 200.77.0.0/17 200.92.0.0/16 200.94.224.0/20 201.132.0.0/16 201.159.192.0-201.159.215.255 201.164.0.0/15 201.169.0.0/16 IPv6: 2806:260::/28 sbgp-autonomousSysNum: critical Autonomous System Numbers: 13999 28541 262916 Signature Algorithm: sha256WithRSAEncryption 8b:e9:c3:ff:b6:16:71:7a:07:bd:3c:2f:46:63:9c:37:97:96: e6:da:98:92:6e:d3:68:15:f8:66:7d:7c:3c:c6:94:64:ec:b0: 9a:8b:15:f8:da:7b:c4:e9:0a:1e:48:c2:07:e9:6b:a6:87:9f: 04:a1:26:4c:86:bc:70:7b:a8:64:0f:51:d5:97:2c:71:de:e3: 06:72:a9:4b:ff:b5:3e:cb:b3:bd:b0:28:18:3e:50:c7:cd:41: dd:3a:a8:be:2c:21:4b:1d:58:fc:cf:f9:f8:92:88:e7:b4:43: 22:2b:66:e5:c1:29:f4:96:f4:71:c2:49:54:d0:a6:cd:67:4b: 86:0a:6c:e6:a4:33:d2:53:6f:9a:d3:2e:29:de:34:6b:a8:91: 17:4c:d5:ae:4b:53:04:8d:a8:26:cb:8c:bd:46:2e:33:3d:16: 32:30:17:f0:e5:e3:8e:e5:6e:30:79:a7:78:43:df:56:a8:62: f3:a1:b5:10:f7:b5:08:ff:54:df:01:a5:f4:be:d5:ee:7a:45: 70:f8:2b:41:85:8e:1b:12:ed:a2:fe:84:a8:92:df:3d:5d:09: df:37:20:26:12:a1:85:9c:03:96:0e:54:21:92:d3:30:8f:67: ed:5d:b6:e7:b0:ff:f6:da:8a:6b:1c:53:71:00:b3:0e:c3:bd: 01:c2:43:62 -----BEGIN CERTIFICATE----- MIIHJjCCBg6gAwIBAgIUaYFIcU1vLv4FcDuLvhQDdxOaszMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTA3MjUwMzU1MDFaFw0yNjA3MjQwNDAwMDFaMDMxMTAvBgNV BAMTKEM1ODZBOTA3NkNERTczRkQ4OTY0NjQwMTBBM0NFMDhFNEM4RkM0QzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCGr49wqvUawIr7usBRQTFrEt0T Ampiv5KqQwz9CZfVDhqQlTXjJ6016u5H2LDb+bblzf/UgwKiba9vOwDu8gTdsitP zpmRf+9V45q4CYcQpvJfNh1qo1EIC3TYYy2mtyFfjrg7gPl185HiQW87D6sS/yGP /Gy0pHxkppae9VTqwrNmPPdvmorZC65SrskQE6PYwKlGX6F7mh/SP7Ez4b7aMXVK u9FpJ2DBcd+W2PXWDIcqIQayyY0MdYNGM5szYxJlejsWbLDH4kLT5X1l+vUA9jZB 2e2seIi+QA+yiqX4DINVAtNR3cZ0ght1YMj/vi1w7akgj+3MEFT9rF7W1DVXAgMB AAGjggQwMIIELDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTFhqkHbN5z/Ylk ZAEKPOCOTI/ExTAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNTYxNTY4RDhDOUFERERDQTNDRTc3MDM5 NzI3N0Q1Mzk2QjYzMTc0REIwQzdCMDhCNTc4NjMzQkMzMjY3RTE0Ny8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy81NjE1NjhEOEM5QURERENBM0NFNzcwMzk3Mjc3RDUzOTZCNjMxNzREQjBD N0IwOEI1Nzg2MzNCQzMyNjdFMTQ3LzAvQzU4NkE5MDc2Q0RFNzNGRDg5NjQ2NDAx MEEzQ0UwOEU0QzhGQzRDNS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMIGmBggrBgEFBQcBBwEB/wSBljCBkzCBgQQCAAEwewMDA7HgAwMD sfADBAS1x8AwCwMEBbuzoAMDAruwAwQHu7+AAwMDu/ADAwO9wAMEBb5uADAMAwQF yDSgAwQFyDTAAwQGyDiAAwQGyEIAAwQHyE0AAwMAyFwDBATIXuADAwDJhDAMAwQG yZ/AAwQDyZ/QAwMByaQDAwDJqTANBAIAAjAHAwUEKAYCYDAiBggrBgEFBQcBCAEB /wQTMBGgDzANAgI2rwICb30CAwQDBDANBgkqhkiG9w0BAQsFAAOCAQEAi+nD/7YW cXoHvTwvRmOcN5eW5tqYkm7TaBX4Zn18PMaUZOywmosV+Np7xOkKHkjCB+lrpoef BKEmTIa8cHuoZA9R1Zcscd7jBnKpS/+1PsuzvbAoGD5Qx81B3TqoviwhSx1Y/M/5 +JKI57RDIitm5cEp9Jb0ccJJVNCmzWdLhgps5qQz0lNvmtMuKd40a6iRF0zVrktT BI2oJsuMvUYuMz0WMjAX8OXjjuVuMHmneEPfVqhi86G1EPe1CP9U3wGl9L7V7npF cPgrQYWOGxLtov6EqJLfPV0J3zcgJhKhhZwDlg5UIZLTMI9n7V2257D/9tqKaxxT cQCzDsO9AcJDYg== -----END CERTIFICATE-----Generated at Wed Nov 5 05:29:32 2025 by rpki-client