$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC121F7A2F5847D63452275EE667C5A03D867975.cer File: CC121F7A2F5847D63452275EE667C5A03D867975.cer (raw, json) Hash identifier: TeATPfAEmZp3TIEsVayvVBIjAxjxMhAmaM2pT7/VxKE= Subject key identifier: CC:12:1F:7A:2F:58:47:D6:34:52:27:5E:E6:67:C5:A0:3D:86:79:75 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 176F3415FC4694D30750739E684A00E8235881B1 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/3DBFA546559EED721228136CCC045DF7B5CEF9846B4845F524250BB65E772EED/0/CC121F7A2F5847D63452275EE667C5A03D867975.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/3DBFA546559EED721228136CCC045DF7B5CEF9846B4845F524250BB65E772EED/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Fri 11 Jul 2025 20:10:01 +0000 Certificate not after: Fri 10 Jul 2026 20:15:01 +0000 Subordinate resources: IP: 170.238.64.0/23 IP: 2801:1f8::/44 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:6f:34:15:fc:46:94:d3:07:50:73:9e:68:4a:00:e8:23:58:81:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Jul 11 20:10:01 2025 GMT Not After : Jul 10 20:15:01 2026 GMT Subject: CN=CC121F7A2F5847D63452275EE667C5A03D867975 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e3:38:33:23:2f:04:5e:80:cc:b2:a0:28:e9: 23:90:bb:77:d5:d2:18:1f:d4:42:7e:04:90:80:a5: dd:0d:3d:1c:0e:a5:a6:a5:bd:8f:8b:3f:3a:45:d3: 50:ee:86:0a:c7:9a:ab:1d:aa:24:55:69:be:dc:59: 27:5b:a0:a1:09:5f:1d:1d:82:f2:4e:15:70:88:04: 29:46:dd:41:cc:81:c3:4b:b3:c6:f8:e3:2c:b3:53: e6:aa:68:6a:c2:d2:42:84:9c:5d:48:a3:7a:a1:cf: 99:ff:4a:5a:e8:28:e5:24:81:86:9c:c2:61:0c:13: 33:b2:5d:88:f5:ab:ba:53:f0:d6:4f:7b:e9:04:e4: be:4b:ad:98:a7:df:c4:d2:a7:e1:8a:c1:7e:7c:db: 4a:46:ce:3b:05:db:fc:66:36:9a:41:72:bb:21:11: c9:71:45:5e:be:86:db:fb:4a:b5:f6:23:54:eb:e6: bb:30:a0:ee:1b:a5:e5:8a:b9:28:ed:45:b8:23:9f: 9d:55:04:7f:73:72:e4:08:72:b4:bb:a6:66:11:22: 80:34:09:46:e3:ee:b4:d5:20:eb:68:94:9c:ff:88: 54:cb:88:ee:d4:f7:43:df:03:a8:c0:1b:4d:59:98: d5:bb:3a:44:83:15:c7:b1:a2:50:ad:70:59:01:c3: c1:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CC:12:1F:7A:2F:58:47:D6:34:52:27:5E:E6:67:C5:A0:3D:86:79:75 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/3DBFA546559EED721228136CCC045DF7B5CEF9846B4845F524250BB65E772EED/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/3DBFA546559EED721228136CCC045DF7B5CEF9846B4845F524250BB65E772EED/0/CC121F7A2F5847D63452275EE667C5A03D867975.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.238.64.0/23 IPv6: 2801:1f8::/44 Signature Algorithm: sha256WithRSAEncryption b0:4b:f3:16:48:73:f8:05:9c:38:32:97:2e:59:6b:68:7f:a1: 70:d1:ca:d3:0e:87:0e:75:b9:54:cc:d9:6f:60:87:bb:a4:83: 71:66:3d:98:c8:f2:a0:b9:d9:6b:4d:70:b5:80:81:91:36:9e: 07:e4:f5:2e:c1:f8:76:14:77:3d:85:cd:17:63:95:3b:7b:56: 51:e1:81:29:97:af:25:6c:1e:ac:2b:8d:89:a8:27:4d:c8:af: 17:bd:15:1b:8f:13:f4:df:fc:44:25:48:a1:15:17:07:ac:13: c7:d1:52:97:fc:88:21:2f:e2:69:8f:c2:26:04:1a:e9:e1:a1: 53:4c:0e:a1:86:9c:3e:19:ea:f4:3c:0d:ea:ca:a7:c7:6f:b1: 71:d6:7e:1d:a1:5b:93:cf:58:40:57:b0:11:97:f0:ba:c1:fd: a3:de:30:ff:4c:34:f1:c6:fa:aa:6d:f8:69:8d:97:f6:c1:d2: d3:04:f6:72:75:37:31:91:72:80:c5:3f:fa:ff:ae:dc:c6:80: 87:17:74:fc:f6:67:a4:6b:fd:2b:5e:f6:1e:4c:93:42:2f:93: 65:17:19:a8:1f:8d:1e:e6:5d:11:a8:45:99:4e:08:c9:6a:4e: f3:d5:a7:27:79:db:4f:47:3a:67:49:a4:f9:b2:a6:fa:9a:87: b4:9f:b9:67 -----BEGIN CERTIFICATE----- MIIGizCCBXOgAwIBAgIUF280FfxGlNMHUHOeaEoA6CNYgbEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTA3MTEyMDEwMDFaFw0yNjA3MTAyMDE1MDFaMDMxMTAvBgNV BAMTKENDMTIxRjdBMkY1ODQ3RDYzNDUyMjc1RUU2NjdDNUEwM0Q4Njc5NzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC34zgzIy8EXoDMsqAo6SOQu3fV 0hgf1EJ+BJCApd0NPRwOpaalvY+LPzpF01DuhgrHmqsdqiRVab7cWSdboKEJXx0d gvJOFXCIBClG3UHMgcNLs8b44yyzU+aqaGrC0kKEnF1Io3qhz5n/SlroKOUkgYac wmEMEzOyXYj1q7pT8NZPe+kE5L5LrZin38TSp+GKwX5820pGzjsF2/xmNppBcrsh EclxRV6+htv7SrX2I1Tr5rswoO4bpeWKuSjtRbgjn51VBH9zcuQIcrS7pmYRIoA0 CUbj7rTVIOtolJz/iFTLiO7U90PfA6jAG01ZmNW7OkSDFcexolCtcFkBw8GvAgMB AAGjggOVMIIDkTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTMEh96L1hH1jRS J17mZ8WgPYZ5dTAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvM0RCRkE1NDY1NTlFRUQ3MjEyMjgxMzZD Q0MwNDVERjdCNUNFRjk4NDZCNDg0NUY1MjQyNTBCQjY1RTc3MkVFRC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8zREJGQTU0NjU1OUVFRDcyMTIyODEzNkNDQzA0NURGN0I1Q0VGOTg0NkI0 ODQ1RjUyNDI1MEJCNjVFNzcyRUVELzAvQ0MxMjFGN0EyRjU4NDdENjM0NTIyNzVF RTY2N0M1QTAzRDg2Nzk3NS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBqu5AMA8EAgAC MAkDBwQoAQH4AAAwDQYJKoZIhvcNAQELBQADggEBALBL8xZIc/gFnDgyly5Za2h/ oXDRytMOhw51uVTM2W9gh7ukg3FmPZjI8qC52WtNcLWAgZE2ngfk9S7B+HYUdz2F zRdjlTt7VlHhgSmXryVsHqwrjYmoJ03Irxe9FRuPE/Tf/EQlSKEVFwesE8fRUpf8 iCEv4mmPwiYEGunhoVNMDqGGnD4Z6vQ8DerKp8dvsXHWfh2hW5PPWEBXsBGX8LrB /aPeMP9MNPHG+qpt+GmNl/bB0tME9nJ1NzGRcoDFP/r/rtzGgIcXdPz2Z6Rr/Ste 9h5Mk0Ivk2UXGagfjR7mXRGoRZlOCMlqTvPVpyd5209HOmdJpPmypvqah7SfuWc= -----END CERTIFICATE-----Generated at Tue Nov 4 19:02:56 2025 by rpki-client