$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69B942F2442A4B878DCF7E43089B60B94955608D.cer File: 69B942F2442A4B878DCF7E43089B60B94955608D.cer (raw, json) Hash identifier: nAfNKbDrJ4Q6qUWdL9cfARsL7cj1D3ZfAtw8DdPZuAE= Subject key identifier: 69:B9:42:F2:44:2A:4B:87:8D:CF:7E:43:08:9B:60:B9:49:55:60:8D Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 0DE4D8E010F9B0554146C17C52CCE46A9F3CEBB6 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/D5C1A3C2200CA4A5B2DCC6EFF63FFA77F83B254BE22B07526DE39ACFE3DE8C5D/0/69B942F2442A4B878DCF7E43089B60B94955608D.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/D5C1A3C2200CA4A5B2DCC6EFF63FFA77F83B254BE22B07526DE39ACFE3DE8C5D/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 02:33:09 +0000 Certificate not after: Wed 04 Feb 2026 02:38:09 +0000 Subordinate resources: AS: 266790 IP: 45.233.100.0/22 IP: 2803:a0a0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 21:38:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:e4:d8:e0:10:f9:b0:55:41:46:c1:7c:52:cc:e4:6a:9f:3c:eb:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 02:33:09 2025 GMT Not After : Feb 4 02:38:09 2026 GMT Subject: CN=69B942F2442A4B878DCF7E43089B60B94955608D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:71:4d:17:49:b1:d0:b3:11:f8:7c:a5:33:c5: d4:df:90:30:e5:46:15:0d:3b:ca:b7:23:f8:c9:52: 56:ec:5f:a1:48:17:bb:2f:fa:a1:d5:d9:75:5f:f5: 8b:90:1f:d4:33:4a:ea:41:c6:6b:02:a7:3d:92:7c: 5d:6f:e2:41:79:66:68:bc:e6:8a:c7:a3:54:bc:9d: 88:b3:ae:f2:46:a2:78:0c:f0:8d:df:aa:ec:0d:38: 99:b5:a7:f5:5a:65:5d:f8:e3:0b:74:53:23:11:e3: 45:b2:92:5d:43:dd:cf:2b:30:ac:37:fa:e9:75:ae: 64:c6:b3:ce:18:c7:fe:b1:6d:ad:53:c4:ec:a1:d0: 43:54:20:f0:96:c2:48:16:bf:f4:c1:8e:5d:b5:67: 57:64:42:f3:67:52:ad:91:9e:dc:ff:33:1e:06:06: 21:71:d2:be:e1:89:18:18:b9:b3:87:d0:f1:fb:ec: 4e:81:0d:06:02:41:fd:1f:85:fd:6d:29:97:b6:0d: b4:c8:99:28:0e:ef:b8:3f:9d:82:57:97:7e:fb:26: 17:94:cd:3d:d9:64:bf:40:ae:39:be:f0:33:db:0f: 46:b0:89:b0:b2:d3:9c:37:68:76:0c:9f:17:ce:d8: 52:af:5e:45:20:6a:4d:bc:7c:e0:71:9b:3c:38:a3: 1d:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 69:B9:42:F2:44:2A:4B:87:8D:CF:7E:43:08:9B:60:B9:49:55:60:8D X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/D5C1A3C2200CA4A5B2DCC6EFF63FFA77F83B254BE22B07526DE39ACFE3DE8C5D/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/D5C1A3C2200CA4A5B2DCC6EFF63FFA77F83B254BE22B07526DE39ACFE3DE8C5D/0/69B942F2442A4B878DCF7E43089B60B94955608D.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.233.100.0/22 IPv6: 2803:a0a0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266790 Signature Algorithm: sha256WithRSAEncryption b8:43:e2:4e:e6:ea:44:34:2c:cf:ef:26:1a:1c:d3:f6:4e:2d: af:21:9d:09:64:52:26:65:23:ac:a7:eb:8c:11:d0:45:a6:0b: b7:b4:95:33:c5:fd:d2:08:7b:f1:79:39:e0:4d:23:a8:42:40: a0:0c:60:fe:ba:fa:f3:8f:57:a5:71:88:10:e5:d9:95:e5:49: c2:c1:1d:0f:44:0c:8e:22:08:69:7c:5f:aa:59:f6:4d:4c:d2: 86:d0:89:02:d9:8b:3b:b6:da:4a:9c:1d:40:64:e2:57:be:cb: 49:3f:97:bc:7b:be:53:4d:d8:8d:df:f2:5c:a9:8f:99:72:c8: 6c:85:9d:65:4c:ee:a9:9e:45:30:28:f2:9f:63:f9:bd:5e:62: b7:bc:46:79:69:16:54:db:4e:56:ac:55:3b:fa:91:02:b4:63: e6:66:f5:47:26:e0:c7:73:74:34:c7:0c:00:81:bb:6e:1c:11: 1f:59:cf:67:17:54:ce:e7:42:21:5f:f1:fe:c8:a9:5e:4e:60: bf:ed:2f:69:1a:b4:d4:27:a1:49:20:6f:ba:4d:10:46:22:82: fe:02:43:71:fd:7d:fb:56:70:ca:80:31:68:c8:82:69:29:60: ed:b3:a9:2d:7e:dc:79:c7:c0:03:e4:d2:0d:f5:11:52:ff:7d: 06:ca:9b:9c -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUDeTY4BD5sFVBRsF8Uszkap8867YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUwMjMzMDlaFw0yNjAyMDQwMjM4MDlaMDMxMTAvBgNV BAMTKDY5Qjk0MkYyNDQyQTRCODc4RENGN0U0MzA4OUI2MEI5NDk1NTYwOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmcU0XSbHQsxH4fKUzxdTfkDDl RhUNO8q3I/jJUlbsX6FIF7sv+qHV2XVf9YuQH9QzSupBxmsCpz2SfF1v4kF5Zmi8 5orHo1S8nYizrvJGongM8I3fquwNOJm1p/VaZV344wt0UyMR40Wykl1D3c8rMKw3 +ul1rmTGs84Yx/6xba1TxOyh0ENUIPCWwkgWv/TBjl21Z1dkQvNnUq2Rntz/Mx4G BiFx0r7hiRgYubOH0PH77E6BDQYCQf0fhf1tKZe2DbTImSgO77g/nYJXl377JheU zT3ZZL9Arjm+8DPbD0awibCy05w3aHYMnxfO2FKvXkUgak28fOBxmzw4ox2JAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRpuULyRCpLh43P fkMIm2C5SVVgjTAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRDVDMUEzQzIyMDBDQTRBNUIyRENDNkVG RjYzRkZBNzdGODNCMjU0QkUyMkIwNzUyNkRFMzlBQ0ZFM0RFOEM1RC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9ENUMxQTNDMjIwMENBNEE1QjJEQ0M2RUZGNjNGRkE3N0Y4M0IyNTRCRTIy QjA3NTI2REUzOUFDRkUzREU4QzVELzAvNjlCOTQyRjI0NDJBNEI4NzhEQ0Y3RTQz MDg5QjYwQjk0OTU1NjA4RC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLelkMA0EAgAC MAcDBQAoA6CgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQSJjANBgkqhkiG9w0B AQsFAAOCAQEAuEPiTubqRDQsz+8mGhzT9k4tryGdCWRSJmUjrKfrjBHQRaYLt7SV M8X90gh78Xk54E0jqEJAoAxg/rr6849XpXGIEOXZleVJwsEdD0QMjiIIaXxfqln2 TUzShtCJAtmLO7baSpwdQGTiV77LST+XvHu+U03Yjd/yXKmPmXLIbIWdZUzuqZ5F MCjyn2P5vV5it7xGeWkWVNtOVqxVO/qRArRj5mb1Rybgx3N0NMcMAIG7bhwRH1nP ZxdUzudCIV/x/sipXk5gv+0vaRq01CehSSBvuk0QRiKC/gJDcf19+1ZwyoAxaMiC aSlg7bOpLX7cecfAA+TSDfURUv99BsqbnA== -----END CERTIFICATE-----Generated at Sun Nov 2 20:46:13 2025 by rpki-client