$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798.cer File: A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798.cer (raw, json) Hash identifier: kjgTfAbC1k0NeQog7WH50VhQfYJguUaJL7YhKzcTcxw= Subject key identifier: A2:E7:6E:96:CF:04:A7:A0:B9:2B:21:9E:6E:C3:BB:1E:FF:9F:17:98 Authority key identifier: 05:BA:F2:93:9E:37:DD:DE:17:93:A8:03:16:2A:35:59:4A:CB:B4:05 Certificate issuer: /CN=05BAF2939E37DDDE1793A803162A35594ACBB405 Certificate serial: 53B2452FE676DE18A10A1B2804DA3393AE394137 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer Manifest: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.mft caRepository: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/ Notify URL: https://rpki-rrdp.us-east-2.amazonaws.com/rrdp/c474d778-43cb-4c30-ad6a-39968cbc94bc/notification.xml Certificate not before: Thu 17 Jul 2025 17:48:05 +0000 Certificate not after: Thu 16 Jul 2026 17:53:05 +0000 Subordinate resources: IP: 2803:4ed0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 28 Jul 2025 22:47:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:b2:45:2f:e6:76:de:18:a1:0a:1b:28:04:da:33:93:ae:39:41:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05BAF2939E37DDDE1793A803162A35594ACBB405 Validity Not Before: Jul 17 17:48:05 2025 GMT Not After : Jul 16 17:53:05 2026 GMT Subject: CN=A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:62:1d:ef:63:58:39:28:f6:42:80:f3:22:1d: af:a2:e7:0a:6c:45:9a:ad:fc:51:36:af:43:2b:e7: c4:d5:5f:93:6c:c7:89:bb:00:27:94:3c:e9:62:dc: a8:7c:52:76:95:f7:81:61:c6:f5:b5:1d:8d:3d:d3: 62:ee:7c:f7:69:89:1a:3a:9c:5e:aa:c6:78:ea:60: d1:80:83:11:d8:93:9e:73:70:d2:af:e1:14:9a:dd: 15:1a:6f:37:ce:f6:38:10:4f:2f:a0:93:97:1d:2c: 0d:70:fe:0f:b5:be:bd:aa:9b:b5:b8:81:dc:02:e9: 07:6a:73:c6:01:cf:84:aa:98:93:6f:73:b5:db:7a: d1:c1:97:bd:8b:0d:2f:40:b7:0c:b3:b7:45:00:0b: 5b:93:db:4b:ec:f6:64:94:9c:19:d2:0f:a4:41:d0: 15:44:c2:49:bc:1a:88:a0:97:13:fe:c3:ca:f5:ef: 03:a7:5b:1c:76:1a:3f:7c:d9:df:aa:3f:06:1f:48: ef:d9:55:63:0f:f8:96:85:97:3d:37:9f:5c:d9:81: 25:39:96:65:ca:f2:f8:a7:70:82:36:8a:4f:8f:1a: 08:3d:7b:2f:f7:ff:e0:f3:5a:a2:dc:6c:df:fe:7b: cd:c0:74:e2:64:a5:e2:89:65:0b:9b:b8:6b:b5:87: 6b:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A2:E7:6E:96:CF:04:A7:A0:B9:2B:21:9E:6E:C3:BB:1E:FF:9F:17:98 X509v3 Authority Key Identifier: keyid:05:BA:F2:93:9E:37:DD:DE:17:93:A8:03:16:2A:35:59:4A:CB:B4:05 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/ RPKI Manifest - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.mft RPKI Notify - URI:https://rpki-rrdp.us-east-2.amazonaws.com/rrdp/c474d778-43cb-4c30-ad6a-39968cbc94bc/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:4ed0::/32 Signature Algorithm: sha256WithRSAEncryption 33:d0:4f:41:0d:ee:e2:0b:9d:e2:d5:37:3f:55:d0:32:f4:06: f1:ac:3a:db:94:a3:6c:d1:37:67:69:d6:cb:72:61:d2:22:d2: 1a:52:15:16:d2:c7:fb:8a:d9:c2:8a:92:3d:48:25:16:c3:c6: 50:75:2d:92:75:e5:a1:af:50:db:6b:65:d9:92:17:80:4a:97: 4f:a4:39:af:fe:ae:90:3c:1d:8f:a7:d2:72:65:85:fd:69:20: db:48:b6:d2:ce:76:36:b0:25:e7:e7:ee:51:77:9d:f7:c4:a9: 35:f1:fc:d9:0f:c5:dd:05:11:a7:75:cd:80:07:b6:d3:df:29: f1:e1:b6:2a:5e:4a:41:e3:f5:e0:75:bb:00:75:33:cf:75:a5: e4:8f:50:02:d3:7e:62:81:8b:1c:a9:cc:b9:ee:45:d4:fe:4f: 62:67:23:51:a1:36:9d:42:9c:b7:64:fd:57:e9:89:fa:5d:c0: 21:79:5e:58:0a:c3:33:9c:86:29:e6:f4:cc:44:60:40:e2:f0: 9c:05:3d:23:0a:ac:9f:74:54:fc:d4:04:41:27:54:08:1d:7e: c4:f4:be:8b:b0:de:b9:81:be:85:7c:05:57:a3:07:21:a9:dc: 14:36:4e:27:6e:aa:e4:0c:23:8e:5f:ab:66:b6:57:76:b9:57: 2b:0d:ed:76 -----BEGIN CERTIFICATE----- MIIGeDCCBWCgAwIBAgIUU7JFL+Z23hihChsoBNozk645QTcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDVCQUYyOTM5RTM3RERERTE3OTNBODAzMTYyQTM1NTk0 QUNCQjQwNTAeFw0yNTA3MTcxNzQ4MDVaFw0yNjA3MTYxNzUzMDVaMDMxMTAvBgNV BAMTKEEyRTc2RTk2Q0YwNEE3QTBCOTJCMjE5RTZFQzNCQjFFRkY5RjE3OTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNYh3vY1g5KPZCgPMiHa+i5wps RZqt/FE2r0Mr58TVX5Nsx4m7ACeUPOli3Kh8UnaV94FhxvW1HY0902LufPdpiRo6 nF6qxnjqYNGAgxHYk55zcNKv4RSa3RUabzfO9jgQTy+gk5cdLA1w/g+1vr2qm7W4 gdwC6Qdqc8YBz4SqmJNvc7XbetHBl72LDS9Atwyzt0UAC1uT20vs9mSUnBnSD6RB 0BVEwkm8GoiglxP+w8r17wOnWxx2Gj982d+qPwYfSO/ZVWMP+JaFlz03n1zZgSU5 lmXK8vincII2ik+PGgg9ey/3/+DzWqLcbN/+e83AdOJkpeKJZQubuGu1h2tnAgMB AAGjggOCMIIDfjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSi526WzwSnoLkr IZ5uw7se/58XmDAfBgNVHSMEGDAWgBQFuvKTnjfd3heTqAMWKjVZSsu0BTAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ExNTMxQjI0QkY1MEM0NjFD N0Y1NzRDRDY1MjY3QThCMERDMzI1REFBQTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMv MC8wNUJBRjI5MzlFMzdERERFMTc5M0E4MDMxNjJBMzU1OTRBQ0JCNDA1LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wLzA1 QkFGMjkzOUUzN0REREUxNzkzQTgwMzE2MkEzNTU5NEFDQkI0MDUuY2VyMIIBbgYI KwYBBQUHAQsEggFgMIIBXDBjBggrBgEFBQcwBYZXcnN5bmM6Ly9ycGtpLXJzeW5j LnVzLWVhc3QtMi5hbWF6b25hd3MuY29tL3ZvbHVtZS9jNDc0ZDc3OC00M2NiLTRj MzAtYWQ2YS0zOTk2OGNiYzk0YmMvMIGCBggrBgEFBQcwCoZ2cnN5bmM6Ly9ycGtp LXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29tL3ZvbHVtZS9jNDc0ZDc3OC00 M2NiLTRjMzAtYWQ2YS0zOTk2OGNiYzk0YmMvY1d5M0xPWHNQcGp5Ni1wNGpsVlFS UkRNZC1jLm1mdDBwBggrBgEFBQcwDYZkaHR0cHM6Ly9ycGtpLXJyZHAudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vcnJkcC9jNDc0ZDc3OC00M2NiLTRjMzAtYWQ2YS0z OTk2OGNiYzk0YmMvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKANO0DANBgkqhkiG 9w0BAQsFAAOCAQEAM9BPQQ3u4gud4tU3P1XQMvQG8aw625SjbNE3Z2nWy3Jh0iLS GlIVFtLH+4rZwoqSPUglFsPGUHUtknXloa9Q22tl2ZIXgEqXT6Q5r/6ukDwdj6fS cmWF/Wkg20i20s52NrAl5+fuUXed98SpNfH82Q/F3QURp3XNgAe2098p8eG2Kl5K QeP14HW7AHUzz3Wl5I9QAtN+YoGLHKnMue5F1P5PYmcjUaE2nUKct2T9V+mJ+l3A IXleWArDM5yGKeb0zERgQOLwnAU9Iwqsn3RU/NQEQSdUCB1+xPS+i7DeuYG+hXwF V6MHIancFDZOJ26q5Awjjl+rZrZXdrlXKw3tdg== -----END CERTIFICATE-----Generated at Thu Jul 24 05:00:57 2025 by rpki-client