$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21B4A6594D293307A54FC67EA972CF9E807930DF.cer File: 21B4A6594D293307A54FC67EA972CF9E807930DF.cer (raw, json) Hash identifier: exqJYG8Q+uFbWtGIRWGHDXGjMiFnMxft+ck47rYMVa4= Subject key identifier: 21:B4:A6:59:4D:29:33:07:A5:4F:C6:7E:A9:72:CF:9E:80:79:30:DF Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 0933757F1D4E08C3A5DDD2C18B5E42B6CD1346F3 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/C71E9B6EEE78F12B15E3BEBF954942DBC0CDCA94DA317B83F0CD62B2FDB26ECE/0/21B4A6594D293307A54FC67EA972CF9E807930DF.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/C71E9B6EEE78F12B15E3BEBF954942DBC0CDCA94DA317B83F0CD62B2FDB26ECE/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 16:07:41 +0000 Certificate not after: Wed 04 Feb 2026 16:12:41 +0000 Subordinate resources: AS: 27839 AS: 52340 IP: 132.251.224.0/19 IP: 181.114.64.0/19 IP: 181.177.128.0/18 IP: 190.11.64.0/19 IP: 190.106.240.0/20 IP: 190.107.32.0/19 IP: 200.58.64.0/19 IP: 201.150.160.0/19 IP: 2803:9400::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 29 Oct 2025 22:57:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:33:75:7f:1d:4e:08:c3:a5:dd:d2:c1:8b:5e:42:b6:cd:13:46:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 16:07:41 2025 GMT Not After : Feb 4 16:12:41 2026 GMT Subject: CN=21B4A6594D293307A54FC67EA972CF9E807930DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:73:d9:91:80:91:e9:f4:a2:6a:94:5e:8e:4f: 2f:73:f1:ef:71:81:a6:c3:f6:69:fe:0d:f5:70:3f: 5b:32:27:68:7e:fb:9e:05:46:c3:98:87:23:8e:eb: b4:32:ae:92:bc:01:ca:ff:e3:ae:f7:51:17:fe:3c: f4:de:cd:43:51:ed:fc:e6:4e:64:0f:04:9c:d3:30: d2:a5:21:77:39:98:c0:98:b8:7b:eb:63:f8:5e:d4: 28:58:26:1b:7a:55:38:26:8c:53:f5:05:6d:75:ef: b9:3a:5b:da:e7:58:76:3a:1d:22:87:f8:f3:c8:ab: f1:a5:3e:e1:96:dd:57:94:eb:52:b2:38:28:a8:2e: 29:dd:e3:d3:c0:ae:e1:ed:ea:e2:96:d5:ab:31:99: 3c:25:78:d9:29:80:60:de:c4:d9:15:87:b7:8a:e6: 50:64:4d:fc:3a:71:a7:bb:24:cb:f0:ec:d5:91:fc: 8b:31:72:2d:2c:d1:7e:c5:fb:4c:f2:12:cc:ec:17: f8:ac:99:4d:de:c8:3b:49:48:c1:e3:1f:f1:c7:3d: 70:c3:a3:75:d7:d5:05:cd:f6:17:db:5e:20:e3:d3: 0a:45:56:67:de:01:74:64:c0:76:51:59:32:35:58: e2:53:99:a1:e1:40:a9:e3:a7:be:49:29:8c:63:f2: 75:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 21:B4:A6:59:4D:29:33:07:A5:4F:C6:7E:A9:72:CF:9E:80:79:30:DF X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/C71E9B6EEE78F12B15E3BEBF954942DBC0CDCA94DA317B83F0CD62B2FDB26ECE/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/C71E9B6EEE78F12B15E3BEBF954942DBC0CDCA94DA317B83F0CD62B2FDB26ECE/0/21B4A6594D293307A54FC67EA972CF9E807930DF.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 132.251.224.0/19 181.114.64.0/19 181.177.128.0/18 190.11.64.0/19 190.106.240.0/20 190.107.32.0/19 200.58.64.0/19 201.150.160.0/19 IPv6: 2803:9400::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 27839 52340 Signature Algorithm: sha256WithRSAEncryption 95:d0:47:ec:3e:1d:ef:0a:c9:42:1b:13:6c:bc:61:a5:be:be: 4c:fd:33:a5:4a:21:83:83:2e:0d:b3:d2:b6:6a:3c:17:39:5c: 8e:8c:6d:53:14:f5:45:ae:eb:a9:d2:81:04:73:48:ba:39:b8: a5:2d:49:36:1a:c0:ef:60:00:76:16:45:b9:33:ee:72:63:84: 4b:3b:c7:69:7f:93:20:23:df:26:fa:ba:93:9f:ea:1d:0d:ec: 64:bd:11:db:38:c5:54:4b:e4:57:e4:99:58:dc:97:58:b3:e8: 16:41:34:1d:bb:74:80:e5:c2:ca:99:d0:d5:c2:26:87:40:1f: c4:86:90:35:b7:5f:71:dc:63:fa:d4:0d:ec:1f:e4:af:41:66: 61:2c:33:98:9a:43:b5:0d:a6:e0:84:50:48:0f:52:6e:e4:fb: e7:51:c7:4b:59:d9:7a:4a:24:a6:80:c6:b0:f0:53:18:5f:95: b3:ba:4d:98:c0:ae:b4:47:bf:8d:b5:8a:41:8c:aa:77:c3:d4: 6e:d9:b3:ab:72:78:19:65:15:1e:8a:f3:18:a0:2f:35:fb:d7: 91:b7:64:7f:b2:d2:84:0b:58:b6:4e:d0:bf:61:27:70:6b:6f: a2:4a:6e:f6:33:a6:da:8d:6e:c3:f4:38:de:9c:bf:ec:29:89: 75:81:5c:e5 -----BEGIN CERTIFICATE----- MIIG0zCCBbugAwIBAgIUCTN1fx1OCMOl3dLBi15Cts0TRvMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUxNjA3NDFaFw0yNjAyMDQxNjEyNDFaMDMxMTAvBgNV BAMTKDIxQjRBNjU5NEQyOTMzMDdBNTRGQzY3RUE5NzJDRjlFODA3OTMwREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCc9mRgJHp9KJqlF6OTy9z8e9x gabD9mn+DfVwP1syJ2h++54FRsOYhyOO67QyrpK8Acr/4673URf+PPTezUNR7fzm TmQPBJzTMNKlIXc5mMCYuHvrY/he1ChYJht6VTgmjFP1BW1177k6W9rnWHY6HSKH +PPIq/GlPuGW3VeU61KyOCioLind49PAruHt6uKW1asxmTwleNkpgGDexNkVh7eK 5lBkTfw6cae7JMvw7NWR/Isxci0s0X7F+0zyEszsF/ismU3eyDtJSMHjH/HHPXDD o3XX1QXN9hfbXiDj0wpFVmfeAXRkwHZRWTI1WOJTmaHhQKnjp75JKYxj8nWVAgMB AAGjggPdMIID2TAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQhtKZZTSkzB6VP xn6pcs+egHkw3zAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQzcxRTlCNkVFRTc4RjEyQjE1RTNCRUJG OTU0OTQyREJDMENEQ0E5NERBMzE3QjgzRjBDRDYyQjJGREIyNkVDRS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9DNzFFOUI2RUVFNzhGMTJCMTVFM0JFQkY5NTQ5NDJEQkMwQ0RDQTk0REEz MTdCODNGMENENjJCMkZEQjI2RUNFLzAvMjFCNEE2NTk0RDI5MzMwN0E1NEZDNjdF QTk3MkNGOUU4MDc5MzBERi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFgGCCsGAQUFBwEHAQH/BEkwRzA2BAIAATAwAwQFhPvgAwQFtXJA AwQGtbGAAwQFvgtAAwQEvmrwAwQFvmsgAwQFyDpAAwQFyZagMA0EAgACMAcDBQAo A5QAMB4GCCsGAQUFBwEIAQH/BA8wDaALMAkCAmy/AgMAzHQwDQYJKoZIhvcNAQEL BQADggEBAJXQR+w+He8KyUIbE2y8YaW+vkz9M6VKIYODLg2z0rZqPBc5XI6MbVMU 9UWu66nSgQRzSLo5uKUtSTYawO9gAHYWRbkz7nJjhEs7x2l/kyAj3yb6upOf6h0N 7GS9Eds4xVRL5FfkmVjcl1iz6BZBNB27dIDlwsqZ0NXCJodAH8SGkDW3X3HcY/rU Dewf5K9BZmEsM5iaQ7UNpuCEUEgPUm7k++dRx0tZ2XpKJKaAxrDwUxhflbO6TZjA rrRHv421ikGMqnfD1G7Zs6tyeBllFR6K8xigLzX715G3ZH+y0oQLWLZO0L9hJ3Br b6JKbvYzptqNbsP0ON6cv+wpiXWBXOU= -----END CERTIFICATE-----Generated at Sun Oct 26 09:05:57 2025 by rpki-client