$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2F7F610DA168FB1B0A47B65FB92BD5365773B03.cer File: D2F7F610DA168FB1B0A47B65FB92BD5365773B03.cer (raw, json) Hash identifier: maQqh2dfWZ5SQ3HFQ5qpV9YrQTb5cVeQ4UGQnU5RedI= Subject key identifier: D2:F7:F6:10:DA:16:8F:B1:B0:A4:7B:65:FB:92:BD:53:65:77:3B:03 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 408085B958B4A0F18D4AD62C819ACF95EA27FE93 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/77EA999F2FFDE6598FEBAB48ADBB1B1BD5B90AE44644D3039F0241CA1BA658DC/0/D2F7F610DA168FB1B0A47B65FB92BD5365773B03.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/77EA999F2FFDE6598FEBAB48ADBB1B1BD5B90AE44644D3039F0241CA1BA658DC/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 21:10:33 +0000 Certificate not after: Wed 04 Feb 2026 21:15:33 +0000 Subordinate resources: AS: 267834 IP: 45.175.139.0/24 IP: 2803:6460::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:80:85:b9:58:b4:a0:f1:8d:4a:d6:2c:81:9a:cf:95:ea:27:fe:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 21:10:33 2025 GMT Not After : Feb 4 21:15:33 2026 GMT Subject: CN=D2F7F610DA168FB1B0A47B65FB92BD5365773B03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:f2:c7:1a:fb:da:8a:b3:bc:1f:ab:8d:ac:3a: f7:6d:80:e3:5f:10:3b:5e:d4:41:20:d9:07:7b:58: a8:15:15:33:1b:9b:77:90:d5:a0:b5:dc:49:ce:59: 6b:6f:9c:85:72:3e:d9:f9:90:14:d8:36:65:3b:e1: 05:56:d6:4d:c9:09:9a:c5:cc:86:f8:ff:66:7e:36: fb:5c:64:ab:2a:32:73:d5:ca:25:f3:50:99:4a:ad: f5:c7:90:6a:74:37:fe:b1:d5:1d:ff:8c:bb:1c:b2: 0b:68:97:03:a2:b4:7e:cd:72:a0:53:43:b9:b6:7b: 79:c3:bf:c9:85:08:aa:0a:31:08:74:92:bb:bd:0b: 10:e6:0b:32:02:46:d5:2c:35:65:45:97:02:0d:1c: 90:60:f6:fc:d0:a8:60:ca:1f:c0:5d:30:40:b8:db: a3:8a:5e:9c:4b:f0:a1:e0:7f:3c:e6:a1:ba:16:37: 62:fd:c2:b6:70:a1:36:3f:af:76:19:16:0a:21:17: a2:e2:7d:82:c5:d4:5b:12:99:3a:80:17:8c:cd:3d: d4:f7:16:c4:f1:0d:db:5b:1b:1b:fa:d0:e8:ac:94: ec:9b:5a:ea:13:8f:df:7a:c9:19:19:1f:95:a5:66: e9:c0:8e:fc:79:79:95:83:c8:82:eb:1d:64:2e:dc: 51:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D2:F7:F6:10:DA:16:8F:B1:B0:A4:7B:65:FB:92:BD:53:65:77:3B:03 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/77EA999F2FFDE6598FEBAB48ADBB1B1BD5B90AE44644D3039F0241CA1BA658DC/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/77EA999F2FFDE6598FEBAB48ADBB1B1BD5B90AE44644D3039F0241CA1BA658DC/0/D2F7F610DA168FB1B0A47B65FB92BD5365773B03.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.175.139.0/24 IPv6: 2803:6460::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267834 Signature Algorithm: sha256WithRSAEncryption 05:f7:a5:bb:9d:38:6e:41:c0:d8:13:fd:7e:f7:bf:18:4d:f3: 6c:a2:4b:48:0b:1c:da:92:71:8e:40:12:60:99:f6:e3:b3:4d: bd:20:37:f6:1e:bf:c8:5f:73:32:03:8d:92:5d:df:57:72:cd: bf:8d:fe:08:8f:8b:af:b6:e6:5a:65:d9:bc:62:59:ce:66:5e: 54:65:d6:8c:09:ff:78:ad:44:08:d7:b6:e7:ed:d8:25:6f:c5: 30:73:9a:fa:dd:8a:db:3e:bb:47:af:a3:9a:8a:55:98:b3:b1: 02:4f:61:a6:f1:ab:da:6f:f4:ae:21:dd:94:45:7c:34:f8:57: 04:11:b4:8a:92:97:77:95:0d:8f:e0:b1:61:cc:c5:a7:29:40: 75:56:2a:49:7b:c2:78:a5:cf:68:3d:18:19:39:1f:5e:38:70: dd:0a:ac:ba:53:df:35:31:92:71:ab:53:47:03:4e:0e:12:08: ea:6f:d8:f9:e3:f0:18:6b:7a:b1:56:fb:69:82:39:ba:fd:03: 00:37:da:60:3e:29:40:65:bf:58:79:5d:82:8e:ad:d2:c4:26: 4b:73:be:09:20:f9:0a:d2:22:10:4a:a8:93:cb:d6:62:9c:f3: a3:5b:d4:f5:99:1d:d2:62:46:e7:a0:e7:65:2c:1c:07:01:d0: 8e:17:0f:f2 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUQICFuVi0oPGNStYsgZrPleon/pMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUyMTEwMzNaFw0yNjAyMDQyMTE1MzNaMDMxMTAvBgNV BAMTKEQyRjdGNjEwREExNjhGQjFCMEE0N0I2NUZCOTJCRDUzNjU3NzNCMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDi8sca+9qKs7wfq42sOvdtgONf EDte1EEg2Qd7WKgVFTMbm3eQ1aC13EnOWWtvnIVyPtn5kBTYNmU74QVW1k3JCZrF zIb4/2Z+NvtcZKsqMnPVyiXzUJlKrfXHkGp0N/6x1R3/jLscsgtolwOitH7NcqBT Q7m2e3nDv8mFCKoKMQh0kru9CxDmCzICRtUsNWVFlwINHJBg9vzQqGDKH8BdMEC4 26OKXpxL8KHgfzzmoboWN2L9wrZwoTY/r3YZFgohF6LifYLF1FsSmTqAF4zNPdT3 FsTxDdtbGxv60OislOybWuoTj996yRkZH5WlZunAjvx5eZWDyILrHWQu3FHBAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTS9/YQ2haPsbCk e2X7kr1TZXc7AzAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNzdFQTk5OUYyRkZERTY1OThGRUJBQjQ4 QURCQjFCMUJENUI5MEFFNDQ2NDREMzAzOUYwMjQxQ0ExQkE2NThEQy8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy83N0VBOTk5RjJGRkRFNjU5OEZFQkFCNDhBREJCMUIxQkQ1QjkwQUU0NDY0 NEQzMDM5RjAyNDFDQTFCQTY1OERDLzAvRDJGN0Y2MTBEQTE2OEZCMUIwQTQ3QjY1 RkI5MkJENTM2NTc3M0IwMy5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQALa+LMA0EAgAC MAcDBQAoA2RgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQWOjANBgkqhkiG9w0B AQsFAAOCAQEABfelu504bkHA2BP9fve/GE3zbKJLSAsc2pJxjkASYJn247NNvSA3 9h6/yF9zMgONkl3fV3LNv43+CI+Lr7bmWmXZvGJZzmZeVGXWjAn/eK1ECNe25+3Y JW/FMHOa+t2K2z67R6+jmopVmLOxAk9hpvGr2m/0riHdlEV8NPhXBBG0ipKXd5UN j+CxYczFpylAdVYqSXvCeKXPaD0YGTkfXjhw3QqsulPfNTGScatTRwNODhII6m/Y +ePwGGt6sVb7aYI5uv0DADfaYD4pQGW/WHldgo6t0sQmS3O+CSD5CtIiEEqok8vW Ypzzo1vU9Zkd0mJG56DnZSwcBwHQjhcP8g== -----END CERTIFICATE-----Generated at Tue Nov 4 21:37:53 2025 by rpki-client