$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EB552741007C26DD44D8C729BBDB1C5406F88B63.cer File: EB552741007C26DD44D8C729BBDB1C5406F88B63.cer (raw, json) Hash identifier: n8Cvh9l++SZpQy5A/Z8+5k9DrHXS8wUnuR94vHbQkgI= Subject key identifier: EB:55:27:41:00:7C:26:DD:44:D8:C7:29:BB:DB:1C:54:06:F8:8B:63 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 78845A2A62980886263BC5BF04DB733461D4C332 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/6798DA27B6F9CABE6D9BEA8941E3AEB01306E94DE132B8DCEAB78AA11FDAD969/0/EB552741007C26DD44D8C729BBDB1C5406F88B63.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/6798DA27B6F9CABE6D9BEA8941E3AEB01306E94DE132B8DCEAB78AA11FDAD969/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 04 Feb 2025 20:18:33 +0000 Certificate not after: Tue 03 Feb 2026 20:23:33 +0000 Subordinate resources: AS: 272820 IP: 2803:e490::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:84:5a:2a:62:98:08:86:26:3b:c5:bf:04:db:73:34:61:d4:c3:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 4 20:18:33 2025 GMT Not After : Feb 3 20:23:33 2026 GMT Subject: CN=EB552741007C26DD44D8C729BBDB1C5406F88B63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:12:7d:e5:9a:a9:be:49:ed:10:02:21:c9:9e: 55:5c:1e:b5:73:41:57:30:9f:df:68:35:ac:b4:50: 28:72:c6:b0:ca:56:4e:3c:02:ca:53:6a:b5:e9:71: 8d:73:ee:4e:bd:67:a2:99:30:6b:bf:a5:ea:80:03: 4f:e8:7b:6a:57:32:78:93:94:f9:ac:42:a4:63:b3: f2:3d:68:61:97:0d:bf:6d:b5:37:17:ed:2e:a6:5c: 48:c1:dd:e0:62:63:ec:8b:0c:83:16:ce:83:64:d2: 4e:eb:15:43:a1:8d:00:b3:d4:34:6f:65:27:9f:25: a3:8d:64:0b:55:78:e1:24:9f:ed:90:22:c1:ef:7f: 5c:94:7c:a6:4b:69:90:3f:8f:84:b8:6a:5c:07:d2: c8:03:36:40:b9:05:4f:87:ca:fd:e5:14:77:13:30: 4f:6b:c5:28:b2:34:31:6e:52:fa:18:30:4e:f3:19: 6b:81:f0:9a:f1:35:54:9f:f1:60:ed:78:5a:1c:f9: 33:b8:31:68:7f:b5:9b:07:e7:32:bb:d4:76:31:df: 98:4f:69:0b:71:9d:2c:9c:81:c6:74:f5:90:88:2b: 27:eb:d8:e8:20:87:2e:4b:e8:cb:29:ea:bc:9a:f9: 01:22:fc:76:1c:06:63:4d:1a:85:08:79:c9:8d:4b: 3d:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: EB:55:27:41:00:7C:26:DD:44:D8:C7:29:BB:DB:1C:54:06:F8:8B:63 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6798DA27B6F9CABE6D9BEA8941E3AEB01306E94DE132B8DCEAB78AA11FDAD969/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6798DA27B6F9CABE6D9BEA8941E3AEB01306E94DE132B8DCEAB78AA11FDAD969/0/EB552741007C26DD44D8C729BBDB1C5406F88B63.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:e490::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 272820 Signature Algorithm: sha256WithRSAEncryption 9b:0d:c3:e9:81:bb:b5:aa:1d:95:11:48:54:3c:71:3a:8e:d6: 32:5c:1b:a7:7b:70:3d:9e:3c:89:22:0d:41:2a:36:3c:c7:81: 90:46:ac:f2:8e:67:a7:1a:33:d2:c4:2d:32:dd:46:81:46:c8: 02:df:ac:0f:ff:09:f2:8f:b8:20:13:77:fe:a5:8f:bc:80:ac: 05:a4:06:d1:5a:d6:4c:d2:ba:98:87:25:18:d6:21:26:46:34: bb:f6:4b:db:4a:2d:21:79:7d:a8:84:ef:9a:ba:1d:05:c2:3d: 2e:8c:10:2e:1e:70:2b:95:af:fc:fb:ff:61:dc:94:a4:01:80: 5e:9c:0f:d0:7b:84:9e:91:59:f7:f1:fe:48:17:ac:c6:17:4c: a5:f1:81:e7:35:2c:96:9c:0f:80:8c:96:5c:2f:5c:cb:8d:6f: 54:3b:82:34:3c:b6:58:09:3a:8f:e4:c4:1c:7f:a3:50:75:09: bc:51:c7:7a:dd:a2:a7:55:1b:fd:a0:f8:b8:70:13:9a:45:32: a0:2a:ac:51:fe:87:f1:82:01:f8:96:23:1a:c5:10:77:e4:38: 1d:e0:0a:c1:d8:25:4b:73:3c:3b:b8:eb:b0:a8:1f:cd:fb:a4: ba:78:4d:b7:d7:86:4d:c2:92:a8:f9:36:ae:5b:39:99:02:56: dc:82:ec:69 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUeIRaKmKYCIYmO8W/BNtzNGHUwzIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDQyMDE4MzNaFw0yNjAyMDMyMDIzMzNaMDMxMTAvBgNV BAMTKEVCNTUyNzQxMDA3QzI2REQ0NEQ4QzcyOUJCREIxQzU0MDZGODhCNjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcEn3lmqm+Se0QAiHJnlVcHrVz QVcwn99oNay0UChyxrDKVk48AspTarXpcY1z7k69Z6KZMGu/peqAA0/oe2pXMniT lPmsQqRjs/I9aGGXDb9ttTcX7S6mXEjB3eBiY+yLDIMWzoNk0k7rFUOhjQCz1DRv ZSefJaONZAtVeOEkn+2QIsHvf1yUfKZLaZA/j4S4alwH0sgDNkC5BU+Hyv3lFHcT ME9rxSiyNDFuUvoYME7zGWuB8JrxNVSf8WDteFoc+TO4MWh/tZsH5zK71HYx35hP aQtxnSycgcZ09ZCIKyfr2Ogghy5L6Msp6rya+QEi/HYcBmNNGoUIecmNSz0FAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTrVSdBAHwm3UTY xym72xxUBviLYzAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNjc5OERBMjdCNkY5Q0FCRTZEOUJFQTg5 NDFFM0FFQjAxMzA2RTk0REUxMzJCOERDRUFCNzhBQTExRkRBRDk2OS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy82Nzk4REEyN0I2RjlDQUJFNkQ5QkVBODk0MUUzQUVCMDEzMDZFOTRERTEz MkI4RENFQUI3OEFBMTFGREFEOTY5LzAvRUI1NTI3NDEwMDdDMjZERDQ0RDhDNzI5 QkJEQjFDNTQwNkY4OEI2My5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAPkkDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEKbQwDQYJKoZIhvcNAQELBQADggEBAJsNw+mB u7WqHZURSFQ8cTqO1jJcG6d7cD2ePIkiDUEqNjzHgZBGrPKOZ6caM9LELTLdRoFG yALfrA//CfKPuCATd/6lj7yArAWkBtFa1kzSupiHJRjWISZGNLv2S9tKLSF5faiE 75q6HQXCPS6MEC4ecCuVr/z7/2HclKQBgF6cD9B7hJ6RWffx/kgXrMYXTKXxgec1 LJacD4CMllwvXMuNb1Q7gjQ8tlgJOo/kxBx/o1B1CbxRx3rdoqdVG/2g+LhwE5pF MqAqrFH+h/GCAfiWIxrFEHfkOB3gCsHYJUtzPDu467CoH837pLp4TbfXhk3Ckqj5 Nq5bOZkCVtyC7Gk= -----END CERTIFICATE-----Generated at Tue Nov 4 21:38:42 2025 by rpki-client