$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08011E07118C784A5542A719E35A9E4F8A67CD38.cer File: 08011E07118C784A5542A719E35A9E4F8A67CD38.cer (raw, json) Hash identifier: T8yKbrnGYL7qgTn+d0oT3/FoVg6Ps0IuLru7O8ItkCo= Subject key identifier: 08:01:1E:07:11:8C:78:4A:55:42:A7:19:E3:5A:9E:4F:8A:67:CD:38 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 629FAF82F1D9329DFEB59673F921C2E102096773 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/78E2368B71E172A1E7282945BC322DFE2F0E30A33C322BC69CCA48A5D1978D79/0/08011E07118C784A5542A719E35A9E4F8A67CD38.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/78E2368B71E172A1E7282945BC322DFE2F0E30A33C322BC69CCA48A5D1978D79/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Fri 23 May 2025 02:55:18 +0000 Certificate not after: Fri 22 May 2026 03:00:18 +0000 Subordinate resources: AS: 28552 AS: 265554 IP: 45.163.120.0/22 IP: 201.159.224.0 -- 201.159.247.255 IP: 2806:306::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 03 Aug 2025 00:41:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:9f:af:82:f1:d9:32:9d:fe:b5:96:73:f9:21:c2:e1:02:09:67:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: May 23 02:55:18 2025 GMT Not After : May 22 03:00:18 2026 GMT Subject: CN=08011E07118C784A5542A719E35A9E4F8A67CD38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:20:85:0d:62:50:89:91:b4:4b:63:e8:e3:fe: f8:55:66:d6:85:b7:4a:17:e5:25:ba:c1:fb:6b:94: 61:bd:93:fb:91:c0:55:ab:c7:44:fa:9a:2c:6d:d6: 0a:85:c7:6e:9a:be:01:c8:de:91:07:d8:4a:6b:83: 96:70:b5:af:c7:39:03:5a:74:a9:da:70:87:01:fb: 40:08:c8:d3:e3:e2:d7:0c:cd:ed:c3:75:c3:8c:57: 41:dd:2b:26:15:49:bd:cb:ac:3a:39:ac:49:61:71: 2b:d5:7b:c9:d1:0b:93:8d:32:85:a3:40:94:66:6b: a1:be:43:41:5d:8e:30:f2:d1:86:50:8c:b1:34:3e: e8:30:66:1f:c5:3f:c5:0a:5e:38:a6:79:77:f1:9c: 46:15:b6:31:8c:2b:3f:36:25:40:8f:34:84:8a:d9: 20:81:b6:3c:39:54:05:85:c8:29:c3:e2:9d:0b:cf: 7b:eb:f6:31:42:50:5c:b4:71:b7:ac:bc:a1:27:5d: 7a:22:ce:ef:33:44:54:04:16:69:c6:ff:e6:0d:81: f2:26:e5:70:12:4b:1b:f1:f3:12:1c:5c:80:4e:26: ae:ff:a2:4d:25:5e:66:b1:f9:f7:a9:ae:02:9e:6d: 4f:79:b6:09:74:58:af:cc:02:3d:96:48:f1:2b:5e: 8e:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 08:01:1E:07:11:8C:78:4A:55:42:A7:19:E3:5A:9E:4F:8A:67:CD:38 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/78E2368B71E172A1E7282945BC322DFE2F0E30A33C322BC69CCA48A5D1978D79/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/78E2368B71E172A1E7282945BC322DFE2F0E30A33C322BC69CCA48A5D1978D79/0/08011E07118C784A5542A719E35A9E4F8A67CD38.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.163.120.0/22 201.159.224.0-201.159.247.255 IPv6: 2806:306::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28552 265554 Signature Algorithm: sha256WithRSAEncryption 05:09:f2:73:0c:82:8b:85:0a:d4:d3:69:5e:1c:54:04:f0:62: bf:5a:5d:24:6a:8e:cd:7d:ec:32:10:b5:5e:16:66:2d:1c:f4: 34:63:04:81:e7:5f:73:f8:97:fc:62:9e:3e:26:6d:91:fe:52: 24:e8:c7:e1:e6:d2:07:2a:68:4e:cc:df:e5:96:59:4e:84:dc: 88:06:63:93:f3:00:e5:2e:c8:cd:3c:2d:31:77:57:f4:bd:bc: 3e:3b:15:77:41:10:25:8f:d9:35:2d:fd:3e:98:2e:1a:4a:8d: b9:13:04:82:45:8d:4b:60:c6:54:b9:cf:22:d6:2d:88:99:e5: 38:0a:49:db:7f:03:d3:c8:45:22:e2:71:7e:0f:89:f7:d6:85: 90:d8:f3:3b:72:b6:a5:db:7f:4f:b9:2d:e7:f4:80:58:3e:85: 53:78:7f:91:87:98:45:bc:8f:2f:80:ba:c5:e7:16:0d:83:36: 3a:61:da:f5:ed:36:da:52:75:4e:73:16:c4:8d:4e:58:aa:d0: ac:52:80:5c:a2:bd:cc:77:5c:57:f1:46:c1:ff:6f:af:43:80: 05:56:58:bc:89:e8:0f:fc:ce:68:60:9e:31:f1:a6:46:c5:c0: ed:e0:64:f2:0b:29:43:b7:80:62:c0:cd:21:9a:20:0b:c1:24: 5a:7d:8d:95 -----BEGIN CERTIFICATE----- MIIGtzCCBZ+gAwIBAgIUYp+vgvHZMp3+tZZz+SHC4QIJZ3MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTA1MjMwMjU1MThaFw0yNjA1MjIwMzAwMThaMDMxMTAvBgNV BAMTKDA4MDExRTA3MTE4Qzc4NEE1NTQyQTcxOUUzNUE5RTRGOEE2N0NEMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtIIUNYlCJkbRLY+jj/vhVZtaF t0oX5SW6wftrlGG9k/uRwFWrx0T6mixt1gqFx26avgHI3pEH2Eprg5Zwta/HOQNa dKnacIcB+0AIyNPj4tcMze3DdcOMV0HdKyYVSb3LrDo5rElhcSvVe8nRC5ONMoWj QJRma6G+Q0FdjjDy0YZQjLE0PugwZh/FP8UKXjimeXfxnEYVtjGMKz82JUCPNISK 2SCBtjw5VAWFyCnD4p0Lz3vr9jFCUFy0cbesvKEnXXoizu8zRFQEFmnG/+YNgfIm 5XASSxvx8xIcXIBOJq7/ok0lXmax+feprgKebU95tgl0WK/MAj2WSPErXo69AgMB AAGjggPBMIIDvTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQIAR4HEYx4SlVC pxnjWp5PimfNODAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNzhFMjM2OEI3MUUxNzJBMUU3MjgyOTQ1 QkMzMjJERkUyRjBFMzBBMzNDMzIyQkM2OUNDQTQ4QTVEMTk3OEQ3OS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy83OEUyMzY4QjcxRTE3MkExRTcyODI5NDVCQzMyMkRGRTJGMEUzMEEzM0Mz MjJCQzY5Q0NBNDhBNUQxOTc4RDc5LzAvMDgwMTFFMDcxMThDNzg0QTU1NDJBNzE5 RTM1QTlFNEY4QTY3Q0QzOC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAaBAIAATAUAwQCLaN4MAwDBAXJ n+ADBAPJn/AwDQQCAAIwBwMFACgGAwYwHgYIKwYBBQUHAQgBAf8EDzANoAswCQIC b4gCAwQNUjANBgkqhkiG9w0BAQsFAAOCAQEABQnycwyCi4UK1NNpXhxUBPBiv1pd JGqOzX3sMhC1XhZmLRz0NGMEgedfc/iX/GKePiZtkf5SJOjH4ebSBypoTszf5ZZZ ToTciAZjk/MA5S7IzTwtMXdX9L28PjsVd0EQJY/ZNS39PpguGkqNuRMEgkWNS2DG VLnPItYtiJnlOApJ238D08hFIuJxfg+J99aFkNjzO3K2pdt/T7kt5/SAWD6FU3h/ kYeYRbyPL4C6xecWDYM2OmHa9e022lJ1TnMWxI1OWKrQrFKAXKK9zHdcV/FGwf9v r0OABVZYvInoD/zOaGCeMfGmRsXA7eBk8gspQ7eAYsDNIZogC8EkWn2NlQ== -----END CERTIFICATE-----Generated at Wed Jul 30 12:24:34 2025 by rpki-client