$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D545E92740A89EC715035BA1D28A92E5CD3DF07B.cer File: D545E92740A89EC715035BA1D28A92E5CD3DF07B.cer (raw, json) Hash identifier: XWJDso6ZQZrWoxBn8Uv8aeOOlYDkl+5XN8kjOeNpBes= Subject key identifier: D5:45:E9:27:40:A8:9E:C7:15:03:5B:A1:D2:8A:92:E5:CD:3D:F0:7B Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 557E1112DCE0F6077615C2F7623F260CDC677657 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/4A64D645D387F7BA0707D5FA4C1F0B56F3F629877424D4AE444F9E5F57CA4386/0/D545E92740A89EC715035BA1D28A92E5CD3DF07B.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/4A64D645D387F7BA0707D5FA4C1F0B56F3F629877424D4AE444F9E5F57CA4386/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 18:46:11 +0000 Certificate not after: Wed 04 Feb 2026 18:51:11 +0000 Subordinate resources: AS: 61444 IP: 200.77.184.0/22 IP: 2803:a980::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:7e:11:12:dc:e0:f6:07:76:15:c2:f7:62:3f:26:0c:dc:67:76:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 18:46:11 2025 GMT Not After : Feb 4 18:51:11 2026 GMT Subject: CN=D545E92740A89EC715035BA1D28A92E5CD3DF07B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:40:c9:ff:d0:a6:da:c2:a4:a7:18:14:52:76: aa:f8:11:1f:08:86:34:1b:8e:1f:e1:a8:9f:b9:43: a9:1c:45:a1:7c:13:b0:84:e5:7c:0c:75:74:2d:98: 3b:07:ed:29:e7:a9:0b:17:ee:18:e7:da:3b:f8:f8: c0:b2:9f:28:c7:1d:8e:d9:ce:ae:18:c0:22:fb:79: 83:e3:d0:b2:e6:01:b3:35:d5:9a:82:b0:e5:bb:e0: 84:3e:cc:c6:9f:4c:34:62:5b:91:46:45:48:cd:8a: 93:e7:ff:53:70:0e:ee:c6:36:58:a1:45:24:80:a2: 2f:b1:37:09:e0:7a:13:57:36:7e:db:c5:48:6f:53: d6:72:45:c9:a7:98:8b:6f:54:32:e5:97:20:f3:8a: f1:e7:ca:09:59:38:b9:e0:30:c0:db:9b:9c:79:ba: 28:20:fd:b1:fe:a2:89:a4:79:40:11:4c:ed:2f:e3: 33:5f:02:70:57:61:ea:8a:94:26:b1:99:43:0e:79: ca:00:1a:a3:82:cb:a2:ef:b1:e2:ba:b2:4f:f3:08: 1e:8e:1c:ee:54:75:fe:da:5e:81:be:57:91:c0:d4: cd:ec:c4:4d:a1:51:57:7c:cd:78:ae:6d:15:32:4c: f7:88:d8:73:e2:f7:33:03:79:cd:2c:6c:56:38:f0: 08:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D5:45:E9:27:40:A8:9E:C7:15:03:5B:A1:D2:8A:92:E5:CD:3D:F0:7B X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/4A64D645D387F7BA0707D5FA4C1F0B56F3F629877424D4AE444F9E5F57CA4386/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/4A64D645D387F7BA0707D5FA4C1F0B56F3F629877424D4AE444F9E5F57CA4386/0/D545E92740A89EC715035BA1D28A92E5CD3DF07B.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.77.184.0/22 IPv6: 2803:a980::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 61444 Signature Algorithm: sha256WithRSAEncryption 6d:a6:b0:36:00:46:15:10:c9:7d:8a:e7:13:1a:be:76:22:75: ff:2f:e5:ad:99:32:61:49:cc:dc:e5:51:23:e8:3f:f8:e6:1f: b5:44:5f:8a:c2:13:53:35:05:58:6e:34:75:f8:2a:4d:b0:42: 6c:18:36:2e:95:0b:ae:78:0b:08:e8:64:50:4e:e2:d0:7e:a4: 0d:fe:6c:fb:ad:e7:ff:38:6b:ef:b2:1c:b2:d7:30:86:47:4c: 06:48:7d:1e:71:a2:0c:2f:47:3d:0b:3e:f8:a1:ab:59:34:0a: fd:21:5f:c9:a1:87:ac:cf:38:fa:86:86:93:b3:fc:cf:0d:bc: c0:98:52:91:71:f1:40:fb:e2:0d:54:e7:45:c6:ff:d9:ab:ee: 6e:aa:84:6c:77:1f:0d:8d:0f:ab:76:73:90:76:ad:24:d6:73: 87:09:1a:da:eb:c5:d9:c7:d8:ed:74:fa:bf:cd:42:0f:cb:35: c3:de:4b:1a:5e:6a:e8:b0:27:b7:1d:2c:93:d5:97:d1:f0:65: 0a:4d:3e:52:c1:50:fc:b5:41:71:56:11:2e:f1:03:20:a3:ca: 8c:54:20:3f:5a:4f:76:5f:11:92:1f:d6:f1:bd:4f:37:fc:db: c3:80:dc:21:28:b6:7e:41:d7:ca:d8:f3:51:d7:99:30:c7:1f: e1:31:f1:ed -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUVX4REtzg9gd2FcL3Yj8mDNxndlcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUxODQ2MTFaFw0yNjAyMDQxODUxMTFaMDMxMTAvBgNV BAMTKEQ1NDVFOTI3NDBBODlFQzcxNTAzNUJBMUQyOEE5MkU1Q0QzREYwN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVQMn/0KbawqSnGBRSdqr4ER8I hjQbjh/hqJ+5Q6kcRaF8E7CE5XwMdXQtmDsH7SnnqQsX7hjn2jv4+MCynyjHHY7Z zq4YwCL7eYPj0LLmAbM11ZqCsOW74IQ+zMafTDRiW5FGRUjNipPn/1NwDu7GNlih RSSAoi+xNwngehNXNn7bxUhvU9ZyRcmnmItvVDLllyDzivHnyglZOLngMMDbm5x5 uigg/bH+oomkeUARTO0v4zNfAnBXYeqKlCaxmUMOecoAGqOCy6LvseK6sk/zCB6O HO5Udf7aXoG+V5HA1M3sxE2hUVd8zXiubRUyTPeI2HPi9zMDec0sbFY48AhhAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTVReknQKiexxUD W6HSipLlzT3wezAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNEE2NEQ2NDVEMzg3RjdCQTA3MDdENUZB NEMxRjBCNTZGM0Y2Mjk4Nzc0MjRENEFFNDQ0RjlFNUY1N0NBNDM4Ni8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80QTY0RDY0NUQzODdGN0JBMDcwN0Q1RkE0QzFGMEI1NkYzRjYyOTg3NzQy NEQ0QUU0NDRGOUU1RjU3Q0E0Mzg2LzAvRDU0NUU5Mjc0MEE4OUVDNzE1MDM1QkEx RDI4QTkyRTVDRDNERjA3Qi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCyE24MA0EAgAC MAcDBQAoA6mAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDwBDANBgkqhkiG9w0B AQsFAAOCAQEAbaawNgBGFRDJfYrnExq+diJ1/y/lrZkyYUnM3OVRI+g/+OYftURf isITUzUFWG40dfgqTbBCbBg2LpULrngLCOhkUE7i0H6kDf5s+63n/zhr77Icstcw hkdMBkh9HnGiDC9HPQs++KGrWTQK/SFfyaGHrM84+oaGk7P8zw28wJhSkXHxQPvi DVTnRcb/2avubqqEbHcfDY0Pq3ZzkHatJNZzhwka2uvF2cfY7XT6v81CD8s1w95L Gl5q6LAntx0sk9WX0fBlCk0+UsFQ/LVBcVYRLvEDIKPKjFQgP1pPdl8Rkh/W8b1P N/zbw4DcISi2fkHXytjzUdeZMMcf4THx7Q== -----END CERTIFICATE-----Generated at Wed Nov 5 13:37:02 2025 by rpki-client