$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC17BDE9178A893A0E44505700003A43E9C81665.cer File: DC17BDE9178A893A0E44505700003A43E9C81665.cer (raw, json) Hash identifier: FxY1XD+AykOj/qOz976+/0aV9L5IeX/BLeIQj041vP4= Subject key identifier: DC:17:BD:E9:17:8A:89:3A:0E:44:50:57:00:00:3A:43:E9:C8:16:65 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 4E8BAD3AD3C135E3DFCB359E044AF797D8A7CADB Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/75859C85FD10CCA9A24A8B24EA8EF3324B8C37F6E01CE243E6BF656F9A2EF744/0/DC17BDE9178A893A0E44505700003A43E9C81665.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/75859C85FD10CCA9A24A8B24EA8EF3324B8C37F6E01CE243E6BF656F9A2EF744/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 23:08:30 +0000 Certificate not after: Wed 04 Feb 2026 23:13:30 +0000 Subordinate resources: IP: 131.108.4.0/22 IP: 2803:bd80::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:8b:ad:3a:d3:c1:35:e3:df:cb:35:9e:04:4a:f7:97:d8:a7:ca:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 23:08:30 2025 GMT Not After : Feb 4 23:13:30 2026 GMT Subject: CN=DC17BDE9178A893A0E44505700003A43E9C81665 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:cc:99:07:2e:e4:29:43:52:cb:4f:a8:13:13: 7e:8b:67:cc:1e:a5:c5:33:45:42:82:17:aa:b0:7d: f1:e8:67:48:5a:d5:da:5d:d3:e6:a6:cc:33:e0:63: 34:32:e2:15:35:76:56:c1:8e:ed:a1:56:38:cf:3c: 77:12:78:bd:a9:cd:ec:a1:38:1d:eb:d1:da:94:6a: 28:3a:2b:ba:5c:72:9f:2f:ef:0c:80:81:3d:22:b2: 24:61:22:42:e9:46:a1:3c:b7:34:07:75:1e:4f:1d: 5a:45:57:f0:12:3c:48:8b:4e:bc:7e:9d:78:f0:8d: f9:62:df:b9:87:91:47:fb:42:5b:dd:04:51:b9:da: c9:ff:50:7b:43:c3:94:0f:a6:92:ad:01:73:ad:00: 78:06:cc:f0:e2:c3:20:0a:ce:9e:6a:2e:40:6c:65: 3c:23:73:3a:97:32:90:e8:ca:45:b0:39:ff:58:61: dd:9f:47:f6:c7:b4:a8:91:92:1b:0b:ad:a4:44:19: fa:d4:3e:5a:73:43:d3:68:30:32:6b:08:74:d7:85: fa:8d:b9:bf:b2:5a:ce:5f:27:52:3d:2a:44:9d:62: 70:82:9f:24:fa:76:ed:42:8b:2c:08:b5:a5:13:3b: 9a:f8:5b:06:42:34:d4:a5:21:24:5f:08:2f:23:3d: 6e:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DC:17:BD:E9:17:8A:89:3A:0E:44:50:57:00:00:3A:43:E9:C8:16:65 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/75859C85FD10CCA9A24A8B24EA8EF3324B8C37F6E01CE243E6BF656F9A2EF744/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/75859C85FD10CCA9A24A8B24EA8EF3324B8C37F6E01CE243E6BF656F9A2EF744/0/DC17BDE9178A893A0E44505700003A43E9C81665.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.108.4.0/22 IPv6: 2803:bd80::/32 Signature Algorithm: sha256WithRSAEncryption 68:4e:95:c9:53:d4:ed:2f:c5:eb:16:51:c2:87:14:37:8b:f5: 50:a6:e6:5a:a2:05:bd:9f:2a:f9:19:60:b4:0e:c0:16:43:34: aa:26:7a:23:56:33:3e:1e:95:bb:a2:90:fe:73:e8:2f:f8:8d: 0e:f8:be:af:2c:49:24:6b:f1:a3:45:86:57:b6:0f:e7:ab:9a: 92:ea:f2:c2:03:9b:c8:7e:06:0b:5b:7a:f9:4e:07:a4:eb:c1: 2f:ec:80:cd:d3:76:21:18:af:9a:6d:b3:1a:7b:ae:93:1f:84: 87:9d:57:6f:62:ea:84:c2:db:8b:59:42:e1:a7:30:58:d2:ee: c7:4f:5c:f8:c2:ae:84:ed:01:c3:b8:33:12:c8:1c:01:ba:84: 24:3f:d5:b7:4c:49:c9:a6:8d:72:0c:bf:75:45:eb:96:cd:d9: 45:47:cc:94:94:17:03:4f:a3:ee:61:29:2b:a7:1a:84:38:65: 2b:29:90:b4:e0:54:3d:10:9f:83:3b:a3:f2:d1:ee:32:0c:bb: 41:16:fd:1f:d9:26:7e:dd:37:33:1b:54:87:8c:bf:a8:79:8e: 6d:e3:43:81:96:92:a1:f5:58:0e:12:31:12:f6:2c:1e:c0:45: 06:20:c7:03:0a:b4:6d:25:87:26:c4:d6:57:b3:b0:cb:7c:ea: 2d:ff:9f:94 -----BEGIN CERTIFICATE----- MIIGiTCCBXGgAwIBAgIUToutOtPBNePfyzWeBEr3l9inytswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUyMzA4MzBaFw0yNjAyMDQyMzEzMzBaMDMxMTAvBgNV BAMTKERDMTdCREU5MTc4QTg5M0EwRTQ0NTA1NzAwMDAzQTQzRTlDODE2NjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWzJkHLuQpQ1LLT6gTE36LZ8we pcUzRUKCF6qwffHoZ0ha1dpd0+amzDPgYzQy4hU1dlbBju2hVjjPPHcSeL2pzeyh OB3r0dqUaig6K7pccp8v7wyAgT0isiRhIkLpRqE8tzQHdR5PHVpFV/ASPEiLTrx+ nXjwjfli37mHkUf7QlvdBFG52sn/UHtDw5QPppKtAXOtAHgGzPDiwyAKzp5qLkBs ZTwjczqXMpDoykWwOf9YYd2fR/bHtKiRkhsLraREGfrUPlpzQ9NoMDJrCHTXhfqN ub+yWs5fJ1I9KkSdYnCCnyT6du1CiywItaUTO5r4WwZCNNSlISRfCC8jPW65AgMB AAGjggOTMIIDjzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTcF73pF4qJOg5E UFcAADpD6cgWZTAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNzU4NTlDODVGRDEwQ0NBOUEyNEE4QjI0 RUE4RUYzMzI0QjhDMzdGNkUwMUNFMjQzRTZCRjY1NkY5QTJFRjc0NC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy83NTg1OUM4NUZEMTBDQ0E5QTI0QThCMjRFQThFRjMzMjRCOEMzN0Y2RTAx Q0UyNDNFNkJGNjU2RjlBMkVGNzQ0LzAvREMxN0JERTkxNzhBODkzQTBFNDQ1MDU3 MDAwMDNBNDNFOUM4MTY2NS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCg2wEMA0EAgAC MAcDBQAoA72AMA0GCSqGSIb3DQEBCwUAA4IBAQBoTpXJU9TtL8XrFlHChxQ3i/VQ puZaogW9nyr5GWC0DsAWQzSqJnojVjM+HpW7opD+c+gv+I0O+L6vLEkka/GjRYZX tg/nq5qS6vLCA5vIfgYLW3r5Tgek68Ev7IDN03YhGK+abbMae66TH4SHnVdvYuqE wtuLWULhpzBY0u7HT1z4wq6E7QHDuDMSyBwBuoQkP9W3TEnJpo1yDL91ReuWzdlF R8yUlBcDT6PuYSkrpxqEOGUrKZC04FQ9EJ+DO6Py0e4yDLtBFv0f2SZ+3TczG1SH jL+oeY5t40OBlpKh9VgOEjES9iwewEUGIMcDCrRtJYcmxNZXs7DLfOot/5+U -----END CERTIFICATE-----Generated at Tue Nov 4 21:39:33 2025 by rpki-client