$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09EE930BD4EA7403B65EC54BAD159FF4B5138CA7.cer File: 09EE930BD4EA7403B65EC54BAD159FF4B5138CA7.cer (raw, json) Hash identifier: N9B+TZd9xRIeF3tML1+qqPyUTBw1e8iA4BUECwrLvdo= Subject key identifier: 09:EE:93:0B:D4:EA:74:03:B6:5E:C5:4B:AD:15:9F:F4:B5:13:8C:A7 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 39FF9E4D6CD09A64ED646E29D80475CFAB4A86E1 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/B327F6B0AE80E3692582D2FF7C5C2F4A6FE7C1E457E68513205D50D783F507C2/0/09EE930BD4EA7403B65EC54BAD159FF4B5138CA7.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/B327F6B0AE80E3692582D2FF7C5C2F4A6FE7C1E457E68513205D50D783F507C2/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 20:39:48 +0000 Certificate not after: Wed 04 Feb 2026 20:44:48 +0000 Subordinate resources: AS: 264848 IP: 45.235.88.0/22 IP: 2801:11:7000::/48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 27 Oct 2025 11:10:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:ff:9e:4d:6c:d0:9a:64:ed:64:6e:29:d8:04:75:cf:ab:4a:86:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 20:39:48 2025 GMT Not After : Feb 4 20:44:48 2026 GMT Subject: CN=09EE930BD4EA7403B65EC54BAD159FF4B5138CA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ea:e2:7a:7b:b4:79:49:dc:e8:9d:b5:ce:22: ca:ee:53:b9:50:7d:8f:e8:6b:bd:1f:c6:1e:e8:e1: b6:40:e2:67:e5:c2:a9:94:ef:cf:a8:03:38:67:6c: ef:21:97:cf:54:b0:d8:37:72:59:4c:c8:d4:95:25: ec:a9:97:5d:f9:3a:fc:52:ba:23:35:7d:45:49:92: 98:75:a8:b6:48:99:63:d3:4d:cd:78:eb:d5:1e:33: be:05:2d:87:41:94:b8:b0:90:97:28:77:13:00:ab: 7b:e1:2d:9b:2d:48:a4:7a:ec:a8:8f:0b:fc:b2:29: a3:f3:1a:55:03:09:e2:b2:f0:d1:d8:03:71:7b:9f: 4b:d7:d7:69:dc:db:c5:ba:cc:9c:3d:3c:25:c1:41: 68:dc:0f:88:57:2c:c3:1b:e8:92:12:32:25:b1:e0: 19:5b:cc:d2:9d:7e:f6:c6:52:59:13:69:fe:88:29: 98:2c:2f:cf:0e:e9:57:e9:41:d5:ce:ab:bb:dd:d6: d3:89:7d:77:40:b6:79:62:f6:f8:cd:7b:3a:bb:2c: a4:33:5f:6d:aa:ca:dd:de:4b:d8:9e:f5:6a:94:8b: 4e:35:ab:2f:ae:35:13:e4:c6:6d:37:6b:0e:7c:43: f5:33:f1:c6:da:68:13:27:f1:4f:24:8c:e6:34:56: 25:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 09:EE:93:0B:D4:EA:74:03:B6:5E:C5:4B:AD:15:9F:F4:B5:13:8C:A7 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/B327F6B0AE80E3692582D2FF7C5C2F4A6FE7C1E457E68513205D50D783F507C2/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/B327F6B0AE80E3692582D2FF7C5C2F4A6FE7C1E457E68513205D50D783F507C2/0/09EE930BD4EA7403B65EC54BAD159FF4B5138CA7.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.235.88.0/22 IPv6: 2801:11:7000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264848 Signature Algorithm: sha256WithRSAEncryption 1e:59:72:c2:54:d7:d5:f2:5d:35:c3:de:7f:fb:dd:db:d9:62: eb:ef:36:da:c5:cf:3c:ab:51:c7:c1:2c:79:18:f5:6d:d2:b4: 73:d6:fe:4f:04:36:3b:45:49:86:ee:24:22:e1:71:bd:8e:f9: 7e:56:8c:53:da:ca:c1:e0:bc:ed:04:5e:9d:a9:ec:f5:0e:88: 1f:5e:28:a4:ab:21:16:05:b3:da:7f:1f:56:d2:03:2a:5a:fd: 63:8c:cc:ee:56:46:8a:ea:c0:ae:13:d8:9d:28:5f:02:63:2e: 79:b0:ad:fe:a3:59:0b:d4:6a:fd:f4:a6:fa:cd:be:12:30:39: fa:f8:74:0e:07:c9:f6:78:19:51:45:9b:11:f1:14:01:03:11: a0:3e:93:c7:09:03:a4:18:b1:91:25:53:e9:c9:5f:c3:38:ac: a3:ee:1f:f4:d6:ca:10:ae:81:6e:85:0a:a3:29:14:c2:e7:bc: b6:98:ff:72:0b:6a:82:4e:f1:73:d7:35:46:ce:7b:78:29:9b: a5:b7:f8:96:32:39:b3:47:4a:d4:6b:4c:ad:78:20:ee:cb:2a: 41:db:38:c2:0c:97:a4:6f:47:3a:32:ec:03:43:ed:7a:94:7f: 78:a0:0f:78:90:c9:6f:f0:cf:c9:fe:e0:3a:42:b6:b3:ed:ca: 95:b1:5a:97 -----BEGIN CERTIFICATE----- MIIGpzCCBY+gAwIBAgIUOf+eTWzQmmTtZG4p2AR1z6tKhuEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUyMDM5NDhaFw0yNjAyMDQyMDQ0NDhaMDMxMTAvBgNV BAMTKDA5RUU5MzBCRDRFQTc0MDNCNjVFQzU0QkFEMTU5RkY0QjUxMzhDQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/6uJ6e7R5SdzonbXOIsruU7lQ fY/oa70fxh7o4bZA4mflwqmU78+oAzhnbO8hl89UsNg3cllMyNSVJeypl135OvxS uiM1fUVJkph1qLZImWPTTc1469UeM74FLYdBlLiwkJcodxMAq3vhLZstSKR67KiP C/yyKaPzGlUDCeKy8NHYA3F7n0vX12nc28W6zJw9PCXBQWjcD4hXLMMb6JISMiWx 4BlbzNKdfvbGUlkTaf6IKZgsL88O6VfpQdXOq7vd1tOJfXdAtnli9vjNezq7LKQz X22qyt3eS9ie9WqUi041qy+uNRPkxm03aw58Q/Uz8cbaaBMn8U8kjOY0ViUDAgMB AAGjggOxMIIDrTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQJ7pML1Op0A7Ze xUutFZ/0tROMpzAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQjMyN0Y2QjBBRTgwRTM2OTI1ODJEMkZG N0M1QzJGNEE2RkU3QzFFNDU3RTY4NTEzMjA1RDUwRDc4M0Y1MDdDMi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9CMzI3RjZCMEFFODBFMzY5MjU4MkQyRkY3QzVDMkY0QTZGRTdDMUU0NTdF Njg1MTMyMDVENTBENzgzRjUwN0MyLzAvMDlFRTkzMEJENEVBNzQwM0I2NUVDNTRC QUQxNTlGRjRCNTEzOENBNy5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCLetYMA8EAgAC MAkDBwAoAQARcAAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAqQMA0GCSqGSIb3 DQEBCwUAA4IBAQAeWXLCVNfV8l01w95/+93b2WLr7zbaxc88q1HHwSx5GPVt0rRz 1v5PBDY7RUmG7iQi4XG9jvl+VoxT2srB4LztBF6dqez1DogfXiikqyEWBbPafx9W 0gMqWv1jjMzuVkaK6sCuE9idKF8CYy55sK3+o1kL1Gr99Kb6zb4SMDn6+HQOB8n2 eBlRRZsR8RQBAxGgPpPHCQOkGLGRJVPpyV/DOKyj7h/01soQroFuhQqjKRTC57y2 mP9yC2qCTvFz1zVGznt4KZult/iWMjmzR0rUa0yteCDuyypB2zjCDJekb0c6MuwD Q+16lH94oA94kMlv8M/J/uA6Qraz7cqVsVqX -----END CERTIFICATE-----Generated at Fri Oct 24 05:56:12 2025 by rpki-client