$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/139F22949A3A148A31827A973EA0FF67A3A095E8.cer File: 139F22949A3A148A31827A973EA0FF67A3A095E8.cer (raw, json) Hash identifier: aY1iwe0wmAzpkYBbGOdKQbNnnNX9xXEfT++yEoHQkYU= Subject key identifier: 13:9F:22:94:9A:3A:14:8A:31:82:7A:97:3E:A0:FF:67:A3:A0:95:E8 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 435F48377BC2FC07E998F6AF3BDF7AB9E24C791A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/07E69AF9A14E5B9738D2479D7B88732F71E255B77D7BD2CBD927126EB9322FA9/0/139F22949A3A148A31827A973EA0FF67A3A095E8.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/07E69AF9A14E5B9738D2479D7B88732F71E255B77D7BD2CBD927126EB9322FA9/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 18:12:07 +0000 Certificate not after: Wed 04 Feb 2026 18:17:07 +0000 Subordinate resources: AS: 264658 IP: 167.250.212.0/22 IP: 170.83.236.0/22 IP: 170.231.248.0/22 IP: 2803:4540::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 21:38:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:5f:48:37:7b:c2:fc:07:e9:98:f6:af:3b:df:7a:b9:e2:4c:79:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 18:12:07 2025 GMT Not After : Feb 4 18:17:07 2026 GMT Subject: CN=139F22949A3A148A31827A973EA0FF67A3A095E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b8:9a:a6:78:a9:4c:ea:80:f5:56:be:e4:53: 9c:e3:5a:c9:8a:da:db:16:d9:e3:e1:2a:ab:f0:63: f7:24:dd:c1:c7:9a:45:1f:09:8d:70:26:2a:34:ca: 18:75:7e:88:8e:37:bc:fd:f7:9e:c9:f5:3e:3f:49: 9e:1b:a1:b4:25:7a:61:f3:24:d3:c0:31:90:5a:e1: 4c:e2:e4:90:27:be:88:0a:5f:48:d4:9a:90:a3:11: 12:de:c0:47:0d:60:43:0e:d8:36:bb:25:9a:29:35: fa:49:0b:f1:90:6e:49:cf:3b:0d:3e:cd:05:62:7a: 0b:47:f5:87:a7:8c:c8:2b:a2:a7:e5:c2:25:4f:ec: f3:5c:1d:8e:dd:0d:58:40:ac:12:43:5e:a1:a4:53: 4c:63:c8:6d:54:73:9c:90:e4:5d:44:76:54:0e:01: 93:e2:d7:2e:2c:ec:c2:60:32:f1:c0:93:2c:1a:fc: f4:64:f6:79:aa:b2:a3:dd:8d:52:4a:bd:54:38:1f: c9:d2:3b:1d:a5:86:aa:c0:03:69:46:51:8c:10:78: 5d:61:dd:3e:f6:e5:c3:a3:3f:1f:b3:4a:e4:25:08: 2e:c5:37:3e:c4:07:4c:c5:bf:99:a7:c6:20:20:4f: 5e:19:6b:98:dd:bf:3d:ef:ac:d0:9e:95:2b:2c:e3: ad:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 13:9F:22:94:9A:3A:14:8A:31:82:7A:97:3E:A0:FF:67:A3:A0:95:E8 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/07E69AF9A14E5B9738D2479D7B88732F71E255B77D7BD2CBD927126EB9322FA9/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/07E69AF9A14E5B9738D2479D7B88732F71E255B77D7BD2CBD927126EB9322FA9/0/139F22949A3A148A31827A973EA0FF67A3A095E8.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 167.250.212.0/22 170.83.236.0/22 170.231.248.0/22 IPv6: 2803:4540::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264658 Signature Algorithm: sha256WithRSAEncryption 23:98:c4:ce:3d:33:8f:2b:57:74:e5:3b:40:46:c9:24:74:7d: 4a:2a:a7:cd:7b:bc:ab:47:8a:e2:91:b4:ad:3d:39:4c:ed:a9: 62:1b:5b:fd:c8:3d:45:a8:85:6e:59:57:16:cb:aa:88:1c:43: 63:85:f5:00:ea:01:de:4c:33:f2:f0:af:f1:1d:54:bd:0d:9c: ac:5e:bd:76:b3:03:f2:9b:81:a0:d2:53:68:20:ed:38:e5:0a: 03:59:9d:aa:7f:7c:06:19:fb:75:c0:28:57:38:8a:c2:6c:25: 53:c4:1d:e4:a3:00:65:48:4d:1d:00:fe:4c:67:d4:d1:42:97: fb:cc:9c:d4:e5:b8:6f:9c:6d:bc:72:d1:3d:b5:5e:e0:a7:b2: c0:cf:96:35:fc:d0:23:67:d0:f1:09:cd:62:1f:9c:94:5b:3a: a1:8a:55:86:56:3d:e4:d4:d4:42:9a:39:e8:0d:d4:3d:17:d5: a3:67:35:dc:96:be:58:b9:59:f7:7a:a3:b8:5c:3f:ff:bb:9c: 26:97:80:7a:a3:59:ee:72:ea:d1:9b:a6:8f:03:b5:89:5a:38: 61:10:34:7d:8d:61:e3:48:cf:27:c1:0c:54:e0:17:f2:bd:35: d6:09:96:eb:8a:1c:b8:37:0f:ef:51:91:62:4c:5e:7f:71:f6: c8:74:d2:a0 -----BEGIN CERTIFICATE----- MIIGsTCCBZmgAwIBAgIUQ19IN3vC/AfpmPavO996ueJMeRowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUxODEyMDdaFw0yNjAyMDQxODE3MDdaMDMxMTAvBgNV BAMTKDEzOUYyMjk0OUEzQTE0OEEzMTgyN0E5NzNFQTBGRjY3QTNBMDk1RTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCruJqmeKlM6oD1Vr7kU5zjWsmK 2tsW2ePhKqvwY/ck3cHHmkUfCY1wJio0yhh1foiON7z9957J9T4/SZ4bobQlemHz JNPAMZBa4Uzi5JAnvogKX0jUmpCjERLewEcNYEMO2Da7JZopNfpJC/GQbknPOw0+ zQViegtH9YenjMgroqflwiVP7PNcHY7dDVhArBJDXqGkU0xjyG1Uc5yQ5F1EdlQO AZPi1y4s7MJgMvHAkywa/PRk9nmqsqPdjVJKvVQ4H8nSOx2lhqrAA2lGUYwQeF1h 3T725cOjPx+zSuQlCC7FNz7EB0zFv5mnxiAgT14Za5jdvz3vrNCelSss4637AgMB AAGjggO7MIIDtzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQTnyKUmjoUijGC epc+oP9no6CV6DAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMDdFNjlBRjlBMTRFNUI5NzM4RDI0NzlE N0I4ODczMkY3MUUyNTVCNzdEN0JEMkNCRDkyNzEyNkVCOTMyMkZBOS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8wN0U2OUFGOUExNEU1Qjk3MzhEMjQ3OUQ3Qjg4NzMyRjcxRTI1NUI3N0Q3 QkQyQ0JEOTI3MTI2RUI5MzIyRkE5LzAvMTM5RjIyOTQ5QTNBMTQ4QTMxODI3QTk3 M0VBMEZGNjdBM0EwOTVFOC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCp/rUAwQCqlPs AwQCquf4MA0EAgACMAcDBQAoA0VAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQJ 0jANBgkqhkiG9w0BAQsFAAOCAQEAI5jEzj0zjytXdOU7QEbJJHR9SiqnzXu8q0eK 4pG0rT05TO2pYhtb/cg9RaiFbllXFsuqiBxDY4X1AOoB3kwz8vCv8R1UvQ2crF69 drMD8puBoNJTaCDtOOUKA1mdqn98Bhn7dcAoVziKwmwlU8Qd5KMAZUhNHQD+TGfU 0UKX+8yc1OW4b5xtvHLRPbVe4KeywM+WNfzQI2fQ8QnNYh+clFs6oYpVhlY95NTU Qpo56A3UPRfVo2c13Ja+WLlZ93qjuFw//7ucJpeAeqNZ7nLq0ZumjwO1iVo4YRA0 fY1h40jPJ8EMVOAX8r011gmW64ocuDcP71GRYkxef3H2yHTSoA== -----END CERTIFICATE-----Generated at Mon Nov 3 12:34:54 2025 by rpki-client