$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer File: 6B07BD31AD3335573775A9552187C8DA46C5971C.cer (raw, json) Hash identifier: I1LbHYlVM6sW64cxXzIV0FjB2wsbONfMmXkdqwpv8Es= Subject key identifier: 6B:07:BD:31:AD:33:35:57:37:75:A9:55:21:87:C8:DA:46:C5:97:1C Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 4D300799201A535F92606E3D20E76F2690FF0B48 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 04 Feb 2025 22:06:16 +0000 Certificate not after: Tue 03 Feb 2026 22:11:16 +0000 Subordinate resources: AS: 28114 AS: 270103 IP: 168.195.108.0/22 IP: 181.118.0.0/19 IP: 186.183.0.0/17 IP: 190.12.160.0/19 IP: 190.115.32.0/19 IP: 200.114.120.0/21 IP: 2803:2600::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 21:38:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:30:07:99:20:1a:53:5f:92:60:6e:3d:20:e7:6f:26:90:ff:0b:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 4 22:06:16 2025 GMT Not After : Feb 3 22:11:16 2026 GMT Subject: CN=6B07BD31AD3335573775A9552187C8DA46C5971C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:48:d4:d8:01:f3:7f:15:4e:b4:3f:25:82:78: 6f:5b:37:a0:23:ab:92:d1:bd:46:2d:ab:a5:6f:c4: 79:b4:8b:f5:4a:c4:05:d3:05:4e:a5:23:aa:11:c8: 60:3c:d6:1c:bf:37:e1:9a:b0:8f:7c:fa:ec:8d:9c: 21:ea:76:dc:b9:97:95:23:bf:de:63:23:40:ca:e1: 09:a7:00:b8:29:49:af:e5:3d:87:5f:7d:9b:6a:e6: 67:2e:98:8a:3b:1e:83:ba:46:ed:c6:67:24:63:10: 00:4f:10:a7:f5:18:0d:a4:56:82:e3:fe:d1:d2:05: a6:b3:66:1c:04:82:53:2e:e4:38:6e:e5:d5:45:49: ee:9f:7c:ef:b4:49:42:09:1f:8b:56:4f:57:16:10: 70:50:3d:e6:ab:e1:69:9e:14:4f:32:03:67:f9:35: 72:16:44:bf:dc:60:31:a6:77:ba:db:da:c7:db:33: a0:d1:7b:df:b8:f0:ca:0b:2f:79:86:32:9e:75:9d: 35:a1:4d:17:29:f6:ad:e9:0c:76:a9:f4:85:02:c3: 6a:f4:b5:26:d3:4a:16:bd:5c:2c:12:a6:e6:57:3a: 5c:7a:75:7b:01:3b:e7:68:a2:05:1e:78:2a:57:4d: bd:b6:e6:56:10:e6:17:75:0e:38:40:13:44:d2:39: 51:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 6B:07:BD:31:AD:33:35:57:37:75:A9:55:21:87:C8:DA:46:C5:97:1C X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.195.108.0/22 181.118.0.0/19 186.183.0.0/17 190.12.160.0/19 190.115.32.0/19 200.114.120.0/21 IPv6: 2803:2600::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28114 270103 Signature Algorithm: sha256WithRSAEncryption ac:c6:8b:87:13:5f:65:85:db:94:f8:d1:d7:1e:9b:70:e7:56: 39:ad:d4:58:d3:d4:37:dc:ab:84:d4:89:27:f6:b0:12:f4:2a: 65:4e:3a:a8:0e:54:ee:0f:a8:b4:57:91:81:a2:4d:f2:1e:2b: b0:f7:a8:7c:fc:8e:37:1d:5f:2e:89:41:2d:cc:9b:bc:0f:d0: 89:2a:f0:4d:9c:5a:93:4a:cd:a3:35:f5:76:37:7f:30:fc:99: f5:3a:03:71:3d:6d:10:b1:6b:f0:61:94:2c:33:71:02:95:12: 77:60:15:d9:eb:4c:ba:c4:9b:76:85:4d:f1:86:94:fe:47:e2: 1b:62:f9:19:1e:31:e6:5d:9e:31:1a:47:43:5a:26:84:2f:68: 1a:92:dd:05:bc:45:7b:f8:50:d0:83:e4:b9:8a:7e:31:d5:e7: e0:b1:f1:6c:40:55:ae:c4:de:25:cc:75:7c:3d:be:0b:48:c1: 05:f3:ce:bf:b1:75:19:3d:f7:e5:72:61:f9:51:d8:e0:5c:24: 0b:01:81:08:69:61:21:de:28:34:a4:ec:5e:e0:d0:87:a9:22: a7:ee:ce:76:70:d5:fb:33:e3:2c:3d:ef:8c:30:73:33:de:11: b7:d5:3e:b4:42:7f:bd:93:0f:e9:43:a8:5c:f4:cc:0a:fa:0d: 32:ab:ee:7b -----BEGIN CERTIFICATE----- MIIGxzCCBa+gAwIBAgIUTTAHmSAaU1+SYG49IOdvJpD/C0gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDQyMjA2MTZaFw0yNjAyMDMyMjExMTZaMDMxMTAvBgNV BAMTKDZCMDdCRDMxQUQzMzM1NTczNzc1QTk1NTIxODdDOERBNDZDNTk3MUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgSNTYAfN/FU60PyWCeG9bN6Aj q5LRvUYtq6VvxHm0i/VKxAXTBU6lI6oRyGA81hy/N+GasI98+uyNnCHqdty5l5Uj v95jI0DK4QmnALgpSa/lPYdffZtq5mcumIo7HoO6Ru3GZyRjEABPEKf1GA2kVoLj /tHSBaazZhwEglMu5Dhu5dVFSe6ffO+0SUIJH4tWT1cWEHBQPear4WmeFE8yA2f5 NXIWRL/cYDGmd7rb2sfbM6DRe9+48MoLL3mGMp51nTWhTRcp9q3pDHap9IUCw2r0 tSbTSha9XCwSpuZXOlx6dXsBO+doogUeeCpXTb225lYQ5hd1DjhAE0TSOVE9AgMB AAGjggPRMIIDzTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRrB70xrTM1Vzd1 qVUhh8jaRsWXHDAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMzM3MzZENUQ1RTM5Mzg3NTQ1N0Q4ODU3 NkU0N0IwOEE3MEFBOTVFQ0U0RkRERTVGNkMwN0YxNkM4RjdFNTUzRS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8zMzczNkQ1RDVFMzkzODc1NDU3RDg4NTc2RTQ3QjA4QTcwQUE5NUVDRTRG RERFNUY2QzA3RjE2QzhGN0U1NTNFLzAvNkIwN0JEMzFBRDMzMzU1NzM3NzVBOTU1 MjE4N0M4REE0NkM1OTcxQy5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQCqMNsAwQFtXYA AwQHurcAAwQFvgygAwQFvnMgAwQDyHJ4MA0EAgACMAcDBQAoAyYAMB4GCCsGAQUF BwEIAQH/BA8wDaALMAkCAm3SAgMEHxcwDQYJKoZIhvcNAQELBQADggEBAKzGi4cT X2WF25T40dcem3DnVjmt1FjT1Dfcq4TUiSf2sBL0KmVOOqgOVO4PqLRXkYGiTfIe K7D3qHz8jjcdXy6JQS3Mm7wP0Ikq8E2cWpNKzaM19XY3fzD8mfU6A3E9bRCxa/Bh lCwzcQKVEndgFdnrTLrEm3aFTfGGlP5H4hti+RkeMeZdnjEaR0NaJoQvaBqS3QW8 RXv4UNCD5LmKfjHV5+Cx8WxAVa7E3iXMdXw9vgtIwQXzzr+xdRk99+VyYflR2OBc JAsBgQhpYSHeKDSk7F7g0IepIqfuznZw1fsz4yw974wwczPeEbfVPrRCf72TD+lD qFz0zAr6DTKr7ns= -----END CERTIFICATE-----Generated at Sun Nov 2 10:40:59 2025 by rpki-client