$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B.cer File: D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B.cer (raw, json) Hash identifier: g0VmU1r5x5m8Xk6g/Jk9Db0XeOXmfq6J23206rRrKdE= Subject key identifier: D7:A4:86:F4:E8:E3:2E:BB:7C:A3:2A:25:A9:EF:E1:07:EF:5F:B2:5B Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 33F704D760823640401B30BCDF9353060971D2B4 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/3650D59C14D282419C1FFC6D534AD0B46006980772355A21D5871025F82C9883/0/D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/3650D59C14D282419C1FFC6D534AD0B46006980772355A21D5871025F82C9883/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 02:47:53 +0000 Certificate not after: Wed 04 Feb 2026 02:52:53 +0000 Subordinate resources: AS: 52241 AS: 52366 IP: 190.99.96.0/20 IP: 2803:b200::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:f7:04:d7:60:82:36:40:40:1b:30:bc:df:93:53:06:09:71:d2:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 02:47:53 2025 GMT Not After : Feb 4 02:52:53 2026 GMT Subject: CN=D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:62:16:4b:93:7b:23:a1:3c:11:e3:26:1c:d5: 57:c1:e9:b7:15:ee:dd:f2:9d:4e:ae:56:13:6e:ca: f7:52:8f:34:1a:a6:b1:d0:a8:9e:26:84:33:00:56: 75:d2:ef:57:ac:6d:35:e4:0c:1f:25:a6:6d:92:6d: ee:52:fc:84:0d:4a:13:8a:13:85:c6:c5:2c:1f:1a: 23:f0:34:68:9e:c3:9e:61:81:0f:16:76:30:45:f6: 5b:e7:87:ac:c4:74:91:f0:75:e3:de:2d:0c:69:54: a0:d1:6f:d0:8a:8a:54:8c:2f:26:9d:e8:b2:89:57: 44:f0:bc:ab:1b:89:b7:10:24:09:48:a2:33:4e:62: d0:61:36:69:85:dc:e1:7f:2a:d1:eb:30:22:72:da: 5c:9e:35:52:7b:41:45:d3:45:47:65:49:3f:52:38: 54:55:44:57:e0:6e:e1:ea:59:6e:a0:59:6b:90:08: fc:a9:4e:4a:75:6b:6b:b0:65:ae:15:fb:4a:37:7c: 30:3f:b0:0f:d0:8a:36:23:35:f5:9f:14:b6:95:dc: db:d4:9a:ea:60:ca:0a:66:2a:a2:3b:32:1f:00:2e: 10:85:47:dd:c8:d7:f1:51:37:0b:ef:96:ad:bc:24: 87:a6:ee:70:e6:7f:16:b3:b2:cf:ba:3d:a4:40:30: 83:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D7:A4:86:F4:E8:E3:2E:BB:7C:A3:2A:25:A9:EF:E1:07:EF:5F:B2:5B X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/3650D59C14D282419C1FFC6D534AD0B46006980772355A21D5871025F82C9883/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/3650D59C14D282419C1FFC6D534AD0B46006980772355A21D5871025F82C9883/0/D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 190.99.96.0/20 IPv6: 2803:b200::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52241 52366 Signature Algorithm: sha256WithRSAEncryption c0:42:97:e4:49:f8:b8:19:5c:cc:29:91:9a:9d:5e:b6:c7:01: ac:b6:4f:93:4a:e7:68:dd:42:94:6d:91:1c:ce:c0:ae:bf:0e: 32:b1:91:f7:23:2d:fd:b7:97:27:a2:6b:f2:17:0d:93:f1:dc: eb:19:5d:50:7f:0b:59:92:cf:e8:5c:ee:9d:00:63:b0:67:50: 84:f2:dd:fc:01:2d:29:64:5a:b7:1b:ad:ec:a0:89:7e:04:39: dc:ff:c6:4e:dd:59:c7:fb:a2:c5:25:7f:c1:d6:32:21:cf:d7: bd:47:86:4f:58:a6:09:2f:48:23:3d:c1:d5:3b:dc:f1:aa:4a: 50:da:01:50:ef:d9:56:cb:dd:6c:b3:31:3f:a1:e9:90:4a:96: eb:ce:d9:bc:13:9a:83:73:e6:f6:ed:95:ef:0e:6e:36:45:32: 34:79:97:2e:26:39:95:e6:89:c7:59:b9:6a:44:dd:71:0f:8f: 7a:b7:5f:31:38:70:8b:d1:72:d9:58:6e:e4:fc:24:42:69:46: 41:97:b2:9c:60:9d:1e:77:5b:a8:8a:a0:a2:41:8e:2e:17:ce: b1:79:4d:66:a5:00:b3:c4:19:81:06:cc:54:9b:0a:d8:bb:65: af:e0:34:dc:b3:3f:e5:40:77:e9:1d:a1:99:63:4e:bc:4c:15: 67:57:51:90 -----BEGIN CERTIFICATE----- MIIGqjCCBZKgAwIBAgIUM/cE12CCNkBAGzC835NTBglx0rQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUwMjQ3NTNaFw0yNjAyMDQwMjUyNTNaMDMxMTAvBgNV BAMTKEQ3QTQ4NkY0RThFMzJFQkI3Q0EzMkEyNUE5RUZFMTA3RUY1RkIyNUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoYhZLk3sjoTwR4yYc1VfB6bcV 7t3ynU6uVhNuyvdSjzQaprHQqJ4mhDMAVnXS71esbTXkDB8lpm2Sbe5S/IQNShOK E4XGxSwfGiPwNGiew55hgQ8WdjBF9lvnh6zEdJHwdePeLQxpVKDRb9CKilSMLyad 6LKJV0TwvKsbibcQJAlIojNOYtBhNmmF3OF/KtHrMCJy2lyeNVJ7QUXTRUdlST9S OFRVRFfgbuHqWW6gWWuQCPypTkp1a2uwZa4V+0o3fDA/sA/QijYjNfWfFLaV3NvU mupgygpmKqI7Mh8ALhCFR93I1/FRNwvvlq28JIem7nDmfxazss+6PaRAMIP5AgMB AAGjggO0MIIDsDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTXpIb06OMuu3yj KiWp7+EH71+yWzAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMzY1MEQ1OUMxNEQyODI0MTlDMUZGQzZE NTM0QUQwQjQ2MDA2OTgwNzcyMzU1QTIxRDU4NzEwMjVGODJDOTg4My8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8zNjUwRDU5QzE0RDI4MjQxOUMxRkZDNkQ1MzRBRDBCNDYwMDY5ODA3NzIz NTVBMjFENTg3MTAyNUY4MkM5ODgzLzAvRDdBNDg2RjRFOEUzMkVCQjdDQTMyQTI1 QTlFRkUxMDdFRjVGQjI1Qi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQEvmNgMA0EAgAC MAcDBQAoA7IAMB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwDMEQIDAMyOMA0GCSqG SIb3DQEBCwUAA4IBAQDAQpfkSfi4GVzMKZGanV62xwGstk+TSudo3UKUbZEczsCu vw4ysZH3Iy39t5cnomvyFw2T8dzrGV1QfwtZks/oXO6dAGOwZ1CE8t38AS0pZFq3 G63soIl+BDnc/8ZO3VnH+6LFJX/B1jIhz9e9R4ZPWKYJL0gjPcHVO9zxqkpQ2gFQ 79lWy91sszE/oemQSpbrztm8E5qDc+b27ZXvDm42RTI0eZcuJjmV5onHWblqRN1x D496t18xOHCL0XLZWG7k/CRCaUZBl7KcYJ0ed1uoiqCiQY4uF86xeU1mpQCzxBmB BsxUmwrYu2Wv4DTcsz/lQHfpHaGZY068TBVnV1GQ -----END CERTIFICATE-----Generated at Tue Nov 4 21:37:22 2025 by rpki-client