$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F97ECF83D1AD72ADDBE74813CF340F1E5BDA0239.cer File: F97ECF83D1AD72ADDBE74813CF340F1E5BDA0239.cer (raw, json) Hash identifier: Rg+7gZI2xPZafx1nl7BQl9HriReIx7c/LVF0ql6N9R8= Subject key identifier: F9:7E:CF:83:D1:AD:72:AD:DB:E7:48:13:CF:34:0F:1E:5B:DA:02:39 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 183A84B351DE2F5AB39030AF0A6FF97CE3CFC3A6 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/2744BCFE048E0FAE20FABDA7476170B1ED1F86F0D6D5985AA93E11C9CA868B19/0/F97ECF83D1AD72ADDBE74813CF340F1E5BDA0239.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/2744BCFE048E0FAE20FABDA7476170B1ED1F86F0D6D5985AA93E11C9CA868B19/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 10:38:00 +0000 Certificate not after: Wed 04 Feb 2026 10:43:00 +0000 Subordinate resources: AS: 14795 IP: 161.131.0.0/16 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:3a:84:b3:51:de:2f:5a:b3:90:30:af:0a:6f:f9:7c:e3:cf:c3:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 10:38:00 2025 GMT Not After : Feb 4 10:43:00 2026 GMT Subject: CN=F97ECF83D1AD72ADDBE74813CF340F1E5BDA0239 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:55:03:d4:7e:63:8c:95:4c:19:22:eb:dd:98: 28:54:21:9c:bd:6c:0a:30:26:7b:0a:64:a9:8c:03: 17:fe:1f:28:01:c2:3f:a0:17:8a:4e:7f:04:4d:72: ab:33:e8:14:28:e8:8b:a1:fc:9e:e1:43:ba:58:29: 15:ad:9b:7e:42:32:b8:29:3e:c0:3f:6f:62:26:7f: ba:e8:75:45:83:e4:71:fd:66:80:62:2a:9f:55:5d: a7:7c:9f:d1:d5:76:7d:36:b6:56:ab:59:ac:e8:64: 5e:5a:f4:fe:55:bf:35:33:b9:e1:a6:59:bd:73:5d: b8:d2:62:9d:ed:32:93:50:c1:b1:66:cd:b3:a1:cf: 03:4e:7b:4b:3a:eb:db:5f:ce:f6:b7:68:65:4e:27: e4:cc:e4:bb:12:33:c9:53:8d:af:5f:cf:58:49:d3: a2:f8:bf:cd:7a:a3:db:cf:58:73:92:bf:7c:3b:0e: 78:1d:14:63:ba:c7:93:40:69:bc:4c:41:b8:63:39: a1:25:91:37:39:56:65:f1:f2:0c:98:ef:ff:a7:b4: db:8f:a7:62:09:4e:18:b8:c8:d9:74:67:6d:2e:d2: 3e:c2:b5:4f:75:b8:b5:39:b8:3d:fc:6c:7c:aa:aa: 2a:8c:8c:2d:20:67:50:ae:4f:29:95:1a:ce:e0:73: b8:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F9:7E:CF:83:D1:AD:72:AD:DB:E7:48:13:CF:34:0F:1E:5B:DA:02:39 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/2744BCFE048E0FAE20FABDA7476170B1ED1F86F0D6D5985AA93E11C9CA868B19/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/2744BCFE048E0FAE20FABDA7476170B1ED1F86F0D6D5985AA93E11C9CA868B19/0/F97ECF83D1AD72ADDBE74813CF340F1E5BDA0239.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 161.131.0.0/16 sbgp-autonomousSysNum: critical Autonomous System Numbers: 14795 Signature Algorithm: sha256WithRSAEncryption 5c:34:da:a0:fe:99:e5:0b:1c:97:9f:ea:a9:b3:1a:0d:5b:84: 05:6e:ba:85:06:fe:08:2d:5a:0e:3d:33:cf:41:66:71:d5:6d: 57:49:3e:5d:66:fa:53:f9:17:61:e9:04:03:69:97:4d:15:42: 55:0f:67:05:ac:90:a3:95:1c:2d:2e:55:43:76:f9:2b:68:3c: 41:dd:c8:d2:ce:af:46:a8:39:27:50:d0:83:7c:72:87:94:b5: 3d:df:a2:ce:66:48:d5:64:24:2b:48:00:fe:b5:6a:d3:f5:4c: e4:ec:9c:44:5a:8f:60:78:72:dc:5d:a6:dd:8c:21:cc:0f:12: 90:e5:8b:ee:14:a9:27:2f:29:ee:c4:25:19:8a:32:94:74:9c: ac:8e:d2:ab:65:2d:a9:82:24:ac:63:ff:a6:43:4a:81:e6:af: 4a:b9:64:3e:02:3b:3d:9d:db:9e:5a:03:d8:10:ab:ae:43:f7: d7:b7:dc:a9:b9:09:53:ee:59:67:9d:3c:f6:92:42:ed:72:ad: 5e:bc:22:cc:4d:a2:44:ba:9b:b2:ff:d8:6c:92:6e:4f:0b:7b: 15:bf:33:0a:b0:47:10:84:42:e3:f2:28:02:af:6e:d9:d0:04: 29:09:5e:ab:58:40:46:a8:0e:26:4e:40:7a:e9:f4:d8:9e:f1: 71:e4:08:49 -----BEGIN CERTIFICATE----- MIIGlDCCBXygAwIBAgIUGDqEs1HeL1qzkDCvCm/5fOPPw6YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUxMDM4MDBaFw0yNjAyMDQxMDQzMDBaMDMxMTAvBgNV BAMTKEY5N0VDRjgzRDFBRDcyQUREQkU3NDgxM0NGMzQwRjFFNUJEQTAyMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMVQPUfmOMlUwZIuvdmChUIZy9 bAowJnsKZKmMAxf+HygBwj+gF4pOfwRNcqsz6BQo6Iuh/J7hQ7pYKRWtm35CMrgp PsA/b2Imf7rodUWD5HH9ZoBiKp9VXad8n9HVdn02tlarWazoZF5a9P5VvzUzueGm Wb1zXbjSYp3tMpNQwbFmzbOhzwNOe0s669tfzva3aGVOJ+TM5LsSM8lTja9fz1hJ 06L4v816o9vPWHOSv3w7DngdFGO6x5NAabxMQbhjOaElkTc5VmXx8gyY7/+ntNuP p2IJThi4yNl0Z20u0j7CtU91uLU5uD38bHyqqiqMjC0gZ1CuTymVGs7gc7j/AgMB AAGjggOeMIIDmjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT5fs+D0a1yrdvn SBPPNA8eW9oCOTAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMjc0NEJDRkUwNDhFMEZBRTIwRkFCREE3 NDc2MTcwQjFFRDFGODZGMEQ2RDU5ODVBQTkzRTExQzlDQTg2OEIxOS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8yNzQ0QkNGRTA0OEUwRkFFMjBGQUJEQTc0NzYxNzBCMUVEMUY4NkYwRDZE NTk4NUFBOTNFMTFDOUNBODY4QjE5LzAvRjk3RUNGODNEMUFENzJBRERCRTc0ODEz Q0YzNDBGMUU1QkRBMDIzOS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAoYMwGQYIKwYB BQUHAQgBAf8ECjAIoAYwBAICOcswDQYJKoZIhvcNAQELBQADggEBAFw02qD+meUL HJef6qmzGg1bhAVuuoUG/ggtWg49M89BZnHVbVdJPl1m+lP5F2HpBANpl00VQlUP ZwWskKOVHC0uVUN2+StoPEHdyNLOr0aoOSdQ0IN8coeUtT3fos5mSNVkJCtIAP61 atP1TOTsnERaj2B4ctxdpt2MIcwPEpDli+4UqScvKe7EJRmKMpR0nKyO0qtlLamC JKxj/6ZDSoHmr0q5ZD4COz2d255aA9gQq65D99e33Km5CVPuWWedPPaSQu1yrV68 IsxNokS6m7L/2GySbk8LexW/MwqwRxCEQuPyKAKvbtnQBCkJXqtYQEaoDiZOQHrp 9Nie8XHkCEk= -----END CERTIFICATE-----Generated at Wed Nov 5 13:55:31 2025 by rpki-client