$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E8046FCFA090ED30A80016F0BC46AB289E25831A.cer File: E8046FCFA090ED30A80016F0BC46AB289E25831A.cer (raw, json) Hash identifier: 2Hx47mHpRaiKFoR4TzL17rnrxFZYuUBe9T41Rwc8bHk= Subject key identifier: E8:04:6F:CF:A0:90:ED:30:A8:00:16:F0:BC:46:AB:28:9E:25:83:1A Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 7CF8599DD51C1D019D67342B1B3786CDB03DB7B3 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/9704764EDAA01E892295FC92039FDAA0387F0376CF0BD5FD8604F1A365D9CFFF/0/E8046FCFA090ED30A80016F0BC46AB289E25831A.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/9704764EDAA01E892295FC92039FDAA0387F0376CF0BD5FD8604F1A365D9CFFF/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Thu 15 May 2025 14:18:22 +0000 Certificate not after: Thu 14 May 2026 14:23:22 +0000 Subordinate resources: AS: 266903 IP: 45.162.0.0/22 IP: 2801:1f4::/40 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 21:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:f8:59:9d:d5:1c:1d:01:9d:67:34:2b:1b:37:86:cd:b0:3d:b7:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: May 15 14:18:22 2025 GMT Not After : May 14 14:23:22 2026 GMT Subject: CN=E8046FCFA090ED30A80016F0BC46AB289E25831A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:34:1a:47:d8:23:38:3c:f7:05:12:1f:4f:59: 84:94:c2:97:ee:ff:7c:a4:02:d6:a9:f5:11:b9:ac: 08:85:5f:ab:46:9d:fa:de:a0:f6:3d:d4:26:00:2f: 9f:e2:5d:56:32:2c:a2:d0:26:d8:0c:c9:47:b4:e2: ed:39:2f:e9:02:ae:8d:b6:96:91:82:94:e4:6f:6b: 5f:41:a4:ce:50:66:0a:40:b6:05:eb:f1:80:2d:c3: 10:38:2d:62:ed:9a:5c:50:7e:cb:64:fd:35:71:30: fb:b9:23:e9:d8:e7:68:e7:12:11:0e:50:68:60:32: 97:7a:33:e7:b3:15:55:5d:0e:06:a9:2e:3c:8f:2c: e9:ef:cb:a2:89:78:bb:02:46:c4:fc:77:53:c0:8c: ac:4c:48:54:81:8b:16:3b:20:27:a5:1d:4a:bb:89: 78:1d:2d:0f:cf:48:b7:df:5d:28:a9:0c:27:cf:de: cd:ce:8d:d4:7f:fd:03:a1:fa:1a:4e:29:07:dd:01: 28:67:22:9a:7b:21:d1:7e:46:eb:c2:fe:f8:02:a6: 3c:b0:73:b6:01:a1:df:e3:80:7c:b8:fd:fc:95:cd: 5d:b1:6a:90:d2:0e:c5:a2:2c:1a:b8:2a:cf:9b:cd: 08:b9:d9:d2:b5:9e:72:c2:a4:3e:f3:f8:c2:6a:79: cb:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E8:04:6F:CF:A0:90:ED:30:A8:00:16:F0:BC:46:AB:28:9E:25:83:1A X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/9704764EDAA01E892295FC92039FDAA0387F0376CF0BD5FD8604F1A365D9CFFF/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/9704764EDAA01E892295FC92039FDAA0387F0376CF0BD5FD8604F1A365D9CFFF/0/E8046FCFA090ED30A80016F0BC46AB289E25831A.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.162.0.0/22 IPv6: 2801:1f4::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266903 Signature Algorithm: sha256WithRSAEncryption 25:79:af:b6:5a:94:80:d0:4a:1f:21:9c:bf:23:50:14:bd:5d: 1e:ba:16:6c:1c:72:bd:9d:19:6e:be:68:1d:46:5c:b4:00:1a: bd:45:c2:db:27:0c:75:1f:de:10:40:ea:41:e9:b5:88:01:bb: 95:b1:cf:ce:65:8a:d2:6a:db:44:8a:20:9e:82:d6:e8:1f:c8: 67:c0:0a:ea:e9:f5:68:0b:f4:b7:9c:a2:0e:ec:ed:75:f1:a6: b3:b5:eb:87:ec:d2:49:93:ed:ca:15:9e:08:31:1f:c5:64:b6: ff:b7:bd:e6:8f:f4:87:c8:d3:ae:f9:51:70:fd:80:ea:a5:2c: 5d:3c:ea:26:3a:34:41:2e:e4:7f:78:d8:f2:fa:16:ec:90:02: c0:23:a6:43:8d:67:ea:c3:93:3d:cb:8b:33:b5:d0:f4:15:a8: 54:e4:de:4b:01:cd:63:98:d8:96:92:d5:b8:78:43:86:d7:10: 23:7e:9d:fd:cc:a3:d0:8e:54:31:1b:bc:fe:33:4a:88:8a:5f: 60:c7:72:1c:08:47:e6:de:84:3e:37:e1:0c:dd:0e:14:8a:32: 4b:90:16:e2:0b:cc:a3:46:32:ac:cb:2f:07:2a:10:41:09:d7: 17:da:c8:d1:b4:b2:00:c6:4a:0f:57:b3:d7:18:4f:10:80:55: 34:82:97:e8 -----BEGIN CERTIFICATE----- MIIGpjCCBY6gAwIBAgIUfPhZndUcHQGdZzQrGzeGzbA9t7MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTA1MTUxNDE4MjJaFw0yNjA1MTQxNDIzMjJaMDMxMTAvBgNV BAMTKEU4MDQ2RkNGQTA5MEVEMzBBODAwMTZGMEJDNDZBQjI4OUUyNTgzMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVNBpH2CM4PPcFEh9PWYSUwpfu /3ykAtap9RG5rAiFX6tGnfreoPY91CYAL5/iXVYyLKLQJtgMyUe04u05L+kCro22 lpGClORva19BpM5QZgpAtgXr8YAtwxA4LWLtmlxQfstk/TVxMPu5I+nY52jnEhEO UGhgMpd6M+ezFVVdDgapLjyPLOnvy6KJeLsCRsT8d1PAjKxMSFSBixY7ICelHUq7 iXgdLQ/PSLffXSipDCfP3s3OjdR//QOh+hpOKQfdAShnIpp7IdF+RuvC/vgCpjyw c7YBod/jgHy4/fyVzV2xapDSDsWiLBq4Ks+bzQi52dK1nnLCpD7z+MJqecuTAgMB AAGjggOwMIIDrDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBToBG/PoJDtMKgA FvC8RqsoniWDGjAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvOTcwNDc2NEVEQUEwMUU4OTIyOTVGQzky MDM5RkRBQTAzODdGMDM3NkNGMEJENUZEODYwNEYxQTM2NUQ5Q0ZGRi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy85NzA0NzY0RURBQTAxRTg5MjI5NUZDOTIwMzlGREFBMDM4N0YwMzc2Q0Yw QkQ1RkQ4NjA0RjFBMzY1RDlDRkZGLzAvRTgwNDZGQ0ZBMDkwRUQzMEE4MDAxNkYw QkM0NkFCMjg5RTI1ODMxQS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQCLaIAMA4EAgAC MAgDBgAoAQH0ADAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEEpcwDQYJKoZIhvcN AQELBQADggEBACV5r7ZalIDQSh8hnL8jUBS9XR66Fmwccr2dGW6+aB1GXLQAGr1F wtsnDHUf3hBA6kHptYgBu5Wxz85litJq20SKIJ6C1ugfyGfACurp9WgL9Lecog7s 7XXxprO164fs0kmT7coVnggxH8Vktv+3veaP9IfI0675UXD9gOqlLF086iY6NEEu 5H942PL6FuyQAsAjpkONZ+rDkz3LizO10PQVqFTk3ksBzWOY2JaS1bh4Q4bXECN+ nf3Mo9COVDEbvP4zSoiKX2DHchwIR+behD434QzdDhSKMkuQFuILzKNGMqzLLwcq EEEJ1xfayNG0sgDGSg9Xs9cYTxCAVTSCl+g= -----END CERTIFICATE-----Generated at Sat Nov 1 19:53:49 2025 by rpki-client