$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EBF9DA4E99FCBA97C1C50D8C0AB5C3B9B9D633A5.cer File: EBF9DA4E99FCBA97C1C50D8C0AB5C3B9B9D633A5.cer (raw, json) Hash identifier: 0kNBYofFHWnqhLQcatwNbB5C5DJyRVrY6UwFo/pm15s= Subject key identifier: EB:F9:DA:4E:99:FC:BA:97:C1:C5:0D:8C:0A:B5:C3:B9:B9:D6:33:A5 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 7AF550F65615A5C6EF1F456CE36C20E8CAB8CFBC Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/0F40A126CF82DF22205AC496FD742AAFAB2AE1BCA4729D3543BD598841370390/0/EBF9DA4E99FCBA97C1C50D8C0AB5C3B9B9D633A5.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/0F40A126CF82DF22205AC496FD742AAFAB2AE1BCA4729D3543BD598841370390/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 10:18:35 +0000 Certificate not after: Wed 04 Feb 2026 10:23:35 +0000 Subordinate resources: AS: 23487 IP: 190.63.0.0/16 IP: 190.111.64.0/19 IP: 200.25.192.0/19 IP: 2800:430::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:f5:50:f6:56:15:a5:c6:ef:1f:45:6c:e3:6c:20:e8:ca:b8:cf:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 10:18:35 2025 GMT Not After : Feb 4 10:23:35 2026 GMT Subject: CN=EBF9DA4E99FCBA97C1C50D8C0AB5C3B9B9D633A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:4c:ca:49:fb:09:ee:0c:76:bf:60:59:fe:d8: 6c:35:29:b1:26:aa:c6:31:1f:43:8e:ec:a9:1c:4e: 25:8d:11:50:e0:e6:04:38:55:58:2f:ed:b4:59:df: 85:95:a6:2f:6a:62:72:42:2e:cc:4c:53:7b:0a:0e: 80:e4:d0:ba:04:73:e8:ee:f9:a7:c8:4d:68:ef:63: 60:37:e7:bb:b6:1f:1f:57:70:9b:7e:5c:fa:8f:20: fd:4d:86:b2:3f:85:16:c8:d4:e5:e2:da:05:f0:72: 57:d4:df:16:5b:a8:c7:2f:4e:22:24:42:ae:84:94: d2:78:f0:89:cf:6e:eb:d0:95:42:f2:8f:f2:3c:96: da:f6:24:5f:9a:55:98:ad:7f:d0:1e:42:9f:a7:6d: cd:64:07:80:a3:4d:3e:41:36:64:60:6c:ca:68:93: fc:0b:9c:35:59:00:92:b2:d6:88:64:30:8c:a2:7b: cb:94:2f:c1:62:cf:ac:02:34:46:49:77:a0:3e:c8: 55:08:db:76:25:ab:7c:b2:ff:b7:7c:45:94:94:fd: 70:05:d3:b8:c8:b7:46:4c:6d:f6:25:c8:33:0c:59: 09:b8:40:0d:7d:4e:7e:68:83:24:0a:fd:80:b2:81: 68:bd:bc:fc:6a:84:40:9d:a2:28:e3:b1:2b:f0:ca: 89:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: EB:F9:DA:4E:99:FC:BA:97:C1:C5:0D:8C:0A:B5:C3:B9:B9:D6:33:A5 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0F40A126CF82DF22205AC496FD742AAFAB2AE1BCA4729D3543BD598841370390/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0F40A126CF82DF22205AC496FD742AAFAB2AE1BCA4729D3543BD598841370390/0/EBF9DA4E99FCBA97C1C50D8C0AB5C3B9B9D633A5.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 190.63.0.0/16 190.111.64.0/19 200.25.192.0/19 IPv6: 2800:430::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 23487 Signature Algorithm: sha256WithRSAEncryption c5:ae:32:aa:69:b4:8c:26:a3:3a:96:7a:3d:30:41:ae:5a:31: 20:4c:a6:94:5e:af:cb:dd:64:d3:1a:f4:3c:80:34:68:2c:8a: 29:0e:ee:94:b8:cd:78:47:e4:16:fa:f0:70:8d:a2:c9:b3:14: 72:5f:0b:14:82:44:48:6a:5b:1d:b5:59:ce:a3:87:e6:da:7d: d8:bd:83:2e:0b:a0:dd:59:ed:43:17:b4:97:bf:72:d9:15:6a: da:e0:fc:d3:66:92:ad:9f:54:e8:da:98:fd:dd:f7:9b:93:13: 71:ca:9f:e1:a5:8a:cb:e1:8c:d5:8e:72:48:6a:98:df:7f:52: df:43:67:59:a7:5b:a1:1c:0c:ff:75:2c:a8:55:25:f5:3a:1c: 5f:6a:dc:af:2a:73:06:72:f3:e5:ef:ac:00:b3:72:79:8d:53: c7:ad:20:ae:8c:6e:53:0b:85:71:6a:0c:35:c1:1e:1b:69:33: fd:0d:6d:4e:4a:da:8f:fd:ea:99:e3:c6:c3:93:fa:9f:9d:df: 70:ad:f1:77:70:8a:57:56:e8:0c:56:52:d6:46:20:3d:cf:2a: ac:cd:57:0a:bf:e7:65:79:19:2a:a5:57:1c:c0:b7:45:33:93: ba:7c:e5:3d:a7:d9:a4:02:98:a2:f9:7f:4d:76:19:65:3d:69: d1:76:d8:c8 -----BEGIN CERTIFICATE----- MIIGrzCCBZegAwIBAgIUevVQ9lYVpcbvH0Vs42wg6Mq4z7wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUxMDE4MzVaFw0yNjAyMDQxMDIzMzVaMDMxMTAvBgNV BAMTKEVCRjlEQTRFOTlGQ0JBOTdDMUM1MEQ4QzBBQjVDM0I5QjlENjMzQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfTMpJ+wnuDHa/YFn+2Gw1KbEm qsYxH0OO7KkcTiWNEVDg5gQ4VVgv7bRZ34WVpi9qYnJCLsxMU3sKDoDk0LoEc+ju +afITWjvY2A357u2Hx9XcJt+XPqPIP1NhrI/hRbI1OXi2gXwclfU3xZbqMcvTiIk Qq6ElNJ48InPbuvQlULyj/I8ltr2JF+aVZitf9AeQp+nbc1kB4CjTT5BNmRgbMpo k/wLnDVZAJKy1ohkMIyie8uUL8Fiz6wCNEZJd6A+yFUI23Ylq3yy/7d8RZSU/XAF 07jIt0ZMbfYlyDMMWQm4QA19Tn5ogyQK/YCygWi9vPxqhECdoijjsSvwyok/AgMB AAGjggO5MIIDtTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTr+dpOmfy6l8HF DYwKtcO5udYzpTAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMEY0MEExMjZDRjgyREYyMjIwNUFDNDk2 RkQ3NDJBQUZBQjJBRTFCQ0E0NzI5RDM1NDNCRDU5ODg0MTM3MDM5MC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8wRjQwQTEyNkNGODJERjIyMjA1QUM0OTZGRDc0MkFBRkFCMkFFMUJDQTQ3 MjlEMzU0M0JENTk4ODQxMzcwMzkwLzAvRUJGOURBNEU5OUZDQkE5N0MxQzUwRDhD MEFCNUMzQjlCOUQ2MzNBNS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAXBAIAATARAwMAvj8DBAW+b0AD BAXIGcAwDQQCAAIwBwMFACgABDAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICW78w DQYJKoZIhvcNAQELBQADggEBAMWuMqpptIwmozqWej0wQa5aMSBMppRer8vdZNMa 9DyANGgsiikO7pS4zXhH5Bb68HCNosmzFHJfCxSCREhqWx21Wc6jh+bafdi9gy4L oN1Z7UMXtJe/ctkVatrg/NNmkq2fVOjamP3d95uTE3HKn+GlisvhjNWOckhqmN9/ Ut9DZ1mnW6EcDP91LKhVJfU6HF9q3K8qcwZy8+XvrACzcnmNU8etIK6MblMLhXFq DDXBHhtpM/0NbU5K2o/96pnjxsOT+p+d33Ct8XdwildW6AxWUtZGID3PKqzNVwq/ 52V5GSqlVxzAt0Uzk7p85T2n2aQCmKL5f012GWU9adF22Mg= -----END CERTIFICATE-----Generated at Wed Nov 5 12:07:10 2025 by rpki-client