$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0B8AC92CFBA0AF5ADE74587FB67774AAB82C4463.cer File: 0B8AC92CFBA0AF5ADE74587FB67774AAB82C4463.cer (raw, json) Hash identifier: y3Tvt1ZZmzWK9gvrp+sNsPsftjiBWp/XPZ5hUwVkALM= Subject key identifier: 0B:8A:C9:2C:FB:A0:AF:5A:DE:74:58:7F:B6:77:74:AA:B8:2C:44:63 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 575076D62D4806F7350EFC97826B791358A9E491 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/2353C53CD7C88C7D1437D00591FF34FC1DC1E219737B14E6386A048F7C7FD43F/0/0B8AC92CFBA0AF5ADE74587FB67774AAB82C4463.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/2353C53CD7C88C7D1437D00591FF34FC1DC1E219737B14E6386A048F7C7FD43F/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 20:14:54 +0000 Certificate not after: Wed 04 Feb 2026 20:19:54 +0000 Subordinate resources: AS: 264750 IP: 143.137.80.0/22 IP: 168.232.108.0/22 IP: 170.82.24.0/22 IP: 170.239.164.0/22 IP: 170.244.80.0/22 IP: 2803:3640::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 27 Oct 2025 11:10:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:50:76:d6:2d:48:06:f7:35:0e:fc:97:82:6b:79:13:58:a9:e4:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 20:14:54 2025 GMT Not After : Feb 4 20:19:54 2026 GMT Subject: CN=0B8AC92CFBA0AF5ADE74587FB67774AAB82C4463 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:7a:d3:f3:34:f0:2c:b1:e4:c9:ab:6b:22:dc: 83:b6:7b:e0:cb:86:63:87:39:ad:c7:cb:88:58:ce: a0:40:da:18:a8:4f:33:5a:4e:47:06:22:67:9d:54: 02:50:34:67:dc:2c:40:7f:28:c8:60:03:76:72:5e: ff:2e:64:84:67:61:a3:e5:5a:c9:60:e6:43:78:25: f4:cd:e8:b5:83:08:fb:54:5d:3c:1c:44:72:fa:2b: 92:86:c1:8c:17:fb:67:e1:4b:e5:60:b7:35:a7:0e: 32:ff:93:b1:50:7e:65:4b:4f:b8:66:a1:ec:96:7b: b3:d0:25:8e:8c:3a:83:cf:78:f5:9a:77:d9:b9:51: 56:05:77:fb:f5:30:c2:c3:5d:6a:1c:1b:34:70:96: 0e:60:28:27:3e:57:f2:03:e0:6f:d5:a1:bf:25:7f: 2c:e0:ed:bc:c4:10:d4:d5:4a:0b:a6:b4:98:f9:6e: 60:6e:0d:e3:84:d2:18:6e:25:24:e5:9c:d2:3c:e8: c0:b9:5a:01:75:2a:4f:59:5b:b9:0a:a7:6f:03:62: a5:ec:c0:eb:c9:4c:c1:cf:c3:06:99:c9:3e:7b:34: a4:c2:40:ca:59:ac:fa:3f:92:a8:0b:e8:04:62:49: 8f:89:8a:fa:b8:0d:81:ec:6f:f2:a5:8c:42:67:f0: 53:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 0B:8A:C9:2C:FB:A0:AF:5A:DE:74:58:7F:B6:77:74:AA:B8:2C:44:63 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/2353C53CD7C88C7D1437D00591FF34FC1DC1E219737B14E6386A048F7C7FD43F/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/2353C53CD7C88C7D1437D00591FF34FC1DC1E219737B14E6386A048F7C7FD43F/0/0B8AC92CFBA0AF5ADE74587FB67774AAB82C4463.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.137.80.0/22 168.232.108.0/22 170.82.24.0/22 170.239.164.0/22 170.244.80.0/22 IPv6: 2803:3640::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264750 Signature Algorithm: sha256WithRSAEncryption 66:9d:9e:c8:d7:36:fb:16:e2:57:41:7d:99:cf:9f:60:ea:d0: 51:3e:ab:a8:d4:15:fd:5a:7e:fa:e6:2b:08:6b:b9:55:dc:5e: 79:7b:1c:c2:16:9c:d9:bf:a4:ec:7c:21:76:70:34:76:da:50: eb:f9:61:c7:22:4a:4a:06:a7:81:ef:fc:9b:7f:3e:9d:d1:b7: 54:e4:c2:97:04:84:a4:7d:61:66:a8:30:e9:f0:20:a6:4d:04: e1:0a:7f:5f:cb:37:16:0a:a2:6e:88:8a:a5:f4:45:19:aa:79: 63:0c:07:eb:8d:a6:50:6c:48:ac:22:55:e1:9b:60:c7:db:6a: a5:8a:e5:e6:0c:36:fb:bc:07:10:c9:93:13:70:8e:35:a0:b9: d4:7e:40:52:36:b2:8b:ef:42:59:b7:95:98:ad:8f:5b:60:3c: c3:54:64:17:2d:d0:8e:60:a4:5e:fb:c0:f9:b5:59:ac:c3:8a: 3e:fe:fe:5c:19:4e:29:ee:a3:39:71:a4:bf:da:17:53:1b:94: d7:a4:f9:15:9a:01:d8:28:f2:25:d0:41:4c:26:b8:61:21:70: 49:56:89:36:41:84:85:73:70:cc:e6:7f:16:0c:e0:53:2b:72: 10:09:1d:f7:29:66:75:9c:8f:2d:ed:d2:96:6a:c7:d7:5a:89: 0c:a9:ed:f7 -----BEGIN CERTIFICATE----- MIIGvTCCBaWgAwIBAgIUV1B21i1IBvc1DvyXgmt5E1ip5JEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUyMDE0NTRaFw0yNjAyMDQyMDE5NTRaMDMxMTAvBgNV BAMTKDBCOEFDOTJDRkJBMEFGNUFERTc0NTg3RkI2Nzc3NEFBQjgyQzQ0NjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCketPzNPAsseTJq2si3IO2e+DL hmOHOa3Hy4hYzqBA2hioTzNaTkcGImedVAJQNGfcLEB/KMhgA3ZyXv8uZIRnYaPl Wslg5kN4JfTN6LWDCPtUXTwcRHL6K5KGwYwX+2fhS+VgtzWnDjL/k7FQfmVLT7hm oeyWe7PQJY6MOoPPePWad9m5UVYFd/v1MMLDXWocGzRwlg5gKCc+V/ID4G/Vob8l fyzg7bzEENTVSgumtJj5bmBuDeOE0hhuJSTlnNI86MC5WgF1Kk9ZW7kKp28DYqXs wOvJTMHPwwaZyT57NKTCQMpZrPo/kqgL6ARiSY+Jivq4DYHsb/KljEJn8FN9AgMB AAGjggPHMIIDwzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQLisks+6CvWt50 WH+2d3SquCxEYzAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMjM1M0M1M0NEN0M4OEM3RDE0MzdEMDA1 OTFGRjM0RkMxREMxRTIxOTczN0IxNEU2Mzg2QTA0OEY3QzdGRDQzRi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8yMzUzQzUzQ0Q3Qzg4QzdEMTQzN0QwMDU5MUZGMzRGQzFEQzFFMjE5NzM3 QjE0RTYzODZBMDQ4RjdDN0ZENDNGLzAvMEI4QUM5MkNGQkEwQUY1QURFNzQ1ODdG QjY3Nzc0QUFCODJDNDQ2My5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQCj4lQAwQCqOhs AwQCqlIYAwQCqu+kAwQCqvRQMA0EAgACMAcDBQAoAzZAMBoGCCsGAQUFBwEIAQH/ BAswCaAHMAUCAwQKLjANBgkqhkiG9w0BAQsFAAOCAQEAZp2eyNc2+xbiV0F9mc+f YOrQUT6rqNQV/Vp++uYrCGu5VdxeeXscwhac2b+k7HwhdnA0dtpQ6/lhxyJKSgan ge/8m38+ndG3VOTClwSEpH1hZqgw6fAgpk0E4Qp/X8s3FgqiboiKpfRFGap5YwwH 642mUGxIrCJV4Ztgx9tqpYrl5gw2+7wHEMmTE3CONaC51H5AUjayi+9CWbeVmK2P W2A8w1RkFy3QjmCkXvvA+bVZrMOKPv7+XBlOKe6jOXGkv9oXUxuU16T5FZoB2Cjy JdBBTCa4YSFwSVaJNkGEhXNwzOZ/FgzgUytyEAkd9ylmdZyPLe3SlmrH11qJDKnt 9w== -----END CERTIFICATE-----Generated at Thu Oct 23 22:16:27 2025 by rpki-client