$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D262F2FD5EF5D8E2C8BA9E70A940AAAF7C822F9D.cer File: D262F2FD5EF5D8E2C8BA9E70A940AAAF7C822F9D.cer (raw, json) Hash identifier: DM3jCPVoTsNKCpLU46fclX1lrzbTQvsDPvDljGKYBjA= Subject key identifier: D2:62:F2:FD:5E:F5:D8:E2:C8:BA:9E:70:A9:40:AA:AF:7C:82:2F:9D Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 31B2EC9E677E32E8D1ACC90250C31248952AEB12 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/BBD6BE8166B61450C019664938FE6B78290AC1C3C29398708D26BF9A6D39C22C/0/D262F2FD5EF5D8E2C8BA9E70A940AAAF7C822F9D.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/BBD6BE8166B61450C019664938FE6B78290AC1C3C29398708D26BF9A6D39C22C/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 10:15:03 +0000 Certificate not after: Wed 04 Feb 2026 10:20:03 +0000 Subordinate resources: IP: 186.1.248.0/21 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:b2:ec:9e:67:7e:32:e8:d1:ac:c9:02:50:c3:12:48:95:2a:eb:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 10:15:03 2025 GMT Not After : Feb 4 10:20:03 2026 GMT Subject: CN=D262F2FD5EF5D8E2C8BA9E70A940AAAF7C822F9D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d0:68:43:b4:6d:96:bb:f0:0a:21:0c:6c:e6: b0:ac:a5:61:e5:1b:1d:1e:88:7b:9d:47:d4:98:09: a9:dc:c0:ea:b8:a4:55:e5:08:4d:87:ef:33:db:63: 4b:ba:41:d9:2a:4e:80:f6:cc:33:42:e5:e0:d7:8c: 2d:85:08:b7:5a:22:72:0e:24:65:f8:32:27:de:c6: 35:f8:b9:61:f4:b8:02:46:7b:62:ae:46:b4:d8:a8: c7:ef:0a:a7:1d:7f:f1:3b:69:b1:af:a7:39:49:21: a5:41:4d:30:ac:18:d4:96:18:bc:64:46:6d:a9:b7: a0:be:66:84:c4:09:ea:83:68:0c:29:bd:53:a1:03: 43:b4:20:54:6b:47:64:bd:92:2c:a4:af:b4:d7:5f: 2f:0a:35:2b:94:02:dd:21:37:12:f7:f7:e1:8e:38: bb:a5:df:84:fb:19:73:9c:c1:01:c9:d9:10:64:97: 27:27:86:1c:59:b9:0d:a6:c2:66:54:f5:2b:12:98: d5:23:38:06:df:49:7e:4b:37:7d:f3:9a:26:8f:ac: 5d:21:55:f8:0a:45:4c:bc:49:b6:a2:03:36:ed:3e: 22:aa:8a:85:5a:ab:ea:a5:bb:e4:e2:61:7e:24:6d: f8:8a:48:f2:da:bc:4d:18:b7:f5:cb:74:61:0c:e3: b8:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D2:62:F2:FD:5E:F5:D8:E2:C8:BA:9E:70:A9:40:AA:AF:7C:82:2F:9D X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/BBD6BE8166B61450C019664938FE6B78290AC1C3C29398708D26BF9A6D39C22C/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/BBD6BE8166B61450C019664938FE6B78290AC1C3C29398708D26BF9A6D39C22C/0/D262F2FD5EF5D8E2C8BA9E70A940AAAF7C822F9D.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 186.1.248.0/21 Signature Algorithm: sha256WithRSAEncryption 44:d3:93:5b:86:b9:cf:45:d1:ff:c2:10:92:eb:f1:6c:48:04: 72:4d:4f:49:06:f7:d8:7c:c5:2e:40:03:f1:5a:07:de:6b:46: 63:f2:db:91:17:9c:af:b3:14:e8:f4:59:c9:4d:51:cd:3b:1f: 9a:86:62:2f:4b:45:78:7c:92:c5:6d:62:83:19:48:a9:50:91: 5a:58:dd:40:fb:e4:ee:85:b0:69:c1:c1:18:aa:7d:35:66:0b: a7:2b:24:e3:a1:aa:6b:b4:d3:23:0e:05:d1:66:ac:c3:78:6e: bf:37:ce:60:62:71:9d:69:8d:31:dd:bf:3d:ff:1f:bb:9e:7c: 78:6b:4a:71:d1:72:85:0c:e7:14:d4:d1:eb:73:bc:33:83:0e: 00:40:e4:4b:72:ed:13:d1:90:46:bc:ab:97:93:54:0b:34:8c: 3f:f2:61:d1:28:37:ab:e6:6f:b7:66:15:a0:dd:67:37:8c:85: 71:1f:6f:71:a7:f8:f2:70:b3:ed:ae:92:4b:46:59:b1:bf:22: b9:af:ce:88:4b:9f:c6:24:3c:67:13:66:2f:fe:cb:2c:a0:38: 67:0c:30:ac:8c:e5:a9:2e:f6:10:a0:67:39:f4:da:47:77:28: c9:58:72:ce:4f:fd:3b:f8:ab:23:6c:22:8b:c8:28:ad:6f:58: 25:9b:4f:70 -----BEGIN CERTIFICATE----- MIIGejCCBWKgAwIBAgIUMbLsnmd+MujRrMkCUMMSSJUq6xIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUxMDE1MDNaFw0yNjAyMDQxMDIwMDNaMDMxMTAvBgNV BAMTKEQyNjJGMkZENUVGNUQ4RTJDOEJBOUU3MEE5NDBBQUFGN0M4MjJGOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ0GhDtG2Wu/AKIQxs5rCspWHl Gx0eiHudR9SYCancwOq4pFXlCE2H7zPbY0u6QdkqToD2zDNC5eDXjC2FCLdaInIO JGX4MifexjX4uWH0uAJGe2KuRrTYqMfvCqcdf/E7abGvpzlJIaVBTTCsGNSWGLxk Rm2pt6C+ZoTECeqDaAwpvVOhA0O0IFRrR2S9kiykr7TXXy8KNSuUAt0hNxL39+GO OLul34T7GXOcwQHJ2RBklycnhhxZuQ2mwmZU9SsSmNUjOAbfSX5LN33zmiaPrF0h VfgKRUy8SbaiAzbtPiKqioVaq+qlu+TiYX4kbfiKSPLavE0Yt/XLdGEM47gBAgMB AAGjggOEMIIDgDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTSYvL9XvXY4si6 nnCpQKqvfIIvnTAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQkJENkJFODE2NkI2MTQ1MEMwMTk2NjQ5 MzhGRTZCNzgyOTBBQzFDM0MyOTM5ODcwOEQyNkJGOUE2RDM5QzIyQy8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9CQkQ2QkU4MTY2QjYxNDUwQzAxOTY2NDkzOEZFNkI3ODI5MEFDMUMzQzI5 Mzk4NzA4RDI2QkY5QTZEMzlDMjJDLzAvRDI2MkYyRkQ1RUY1RDhFMkM4QkE5RTcw QTk0MEFBQUY3QzgyMkY5RC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDugH4MA0GCSqG SIb3DQEBCwUAA4IBAQBE05NbhrnPRdH/whCS6/FsSARyTU9JBvfYfMUuQAPxWgfe a0Zj8tuRF5yvsxTo9FnJTVHNOx+ahmIvS0V4fJLFbWKDGUipUJFaWN1A++TuhbBp wcEYqn01ZgunKyTjoaprtNMjDgXRZqzDeG6/N85gYnGdaY0x3b89/x+7nnx4a0px 0XKFDOcU1NHrc7wzgw4AQORLcu0T0ZBGvKuXk1QLNIw/8mHRKDer5m+3ZhWg3Wc3 jIVxH29xp/jycLPtrpJLRlmxvyK5r86IS5/GJDxnE2Yv/sssoDhnDDCsjOWpLvYQ oGc59NpHdyjJWHLOT/07+KsjbCKLyCitb1glm09w -----END CERTIFICATE-----Generated at Tue Nov 4 21:39:44 2025 by rpki-client