$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FEE53CB4FA7FD182123FAFF3B709CF575AA96E5.cer File: 2FEE53CB4FA7FD182123FAFF3B709CF575AA96E5.cer (raw, json) Hash identifier: lOULX2tuiNZWrfGLekyWXotUlyfjaZOpt4iFX/eChuM= Subject key identifier: 2F:EE:53:CB:4F:A7:FD:18:21:23:FA:FF:3B:70:9C:F5:75:AA:96:E5 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 6751BC2DD42164BF0759578813505C58C229050E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/EBAD9EC9BBB7F262F889C919BD540C1E009C0A91E427626EEF5B7E06CCD6B714/0/2FEE53CB4FA7FD182123FAFF3B709CF575AA96E5.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/EBAD9EC9BBB7F262F889C919BD540C1E009C0A91E427626EEF5B7E06CCD6B714/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 04 Feb 2025 22:22:28 +0000 Certificate not after: Tue 03 Feb 2026 22:27:28 +0000 Subordinate resources: AS: 264619 IP: 143.202.96.0/22 IP: 2803:7e40::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 29 Oct 2025 22:57:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:51:bc:2d:d4:21:64:bf:07:59:57:88:13:50:5c:58:c2:29:05:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 4 22:22:28 2025 GMT Not After : Feb 3 22:27:28 2026 GMT Subject: CN=2FEE53CB4FA7FD182123FAFF3B709CF575AA96E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:3f:c8:93:ba:ac:a9:48:26:15:f3:f2:05:87: 91:6a:15:31:14:89:b2:d0:85:3d:37:cd:7c:ed:6d: 8e:48:75:33:e2:2a:c6:69:14:06:d5:9d:ad:96:cc: 95:2f:96:b6:2a:4c:c6:d9:81:80:40:6c:04:e7:5d: 0b:ca:01:ac:56:38:69:7c:e5:e7:49:8b:d6:9c:db: 61:a6:bc:63:3e:a7:7d:32:07:8b:18:dd:3e:0e:6e: 94:ae:f8:e7:dd:81:5b:6b:62:0c:be:3d:4d:30:8d: b9:a1:23:7a:19:36:97:51:5a:32:80:03:83:7a:4d: 56:b9:c6:91:7f:91:d9:8d:65:0e:16:7f:e0:68:50: 80:75:0b:85:9e:33:7a:ef:7b:3c:32:36:e9:89:0c: d0:88:d2:29:a0:29:d8:39:00:80:b4:b5:5a:2d:ec: 91:ce:32:21:38:96:2c:30:a0:33:df:fc:2c:c5:4f: db:28:51:9e:0c:c4:bb:d0:ce:c1:4c:ae:79:cc:92: 54:6e:44:ef:d0:2e:6b:7c:13:e6:6a:b7:af:7a:0a: 88:a6:00:82:33:7a:68:b9:82:ae:1a:df:24:52:d1: 26:a8:a7:71:fd:2e:00:7b:0b:bc:e3:9f:65:b0:75: 98:33:ea:b7:4c:86:96:d6:cc:18:18:3a:ce:52:95: 1a:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2F:EE:53:CB:4F:A7:FD:18:21:23:FA:FF:3B:70:9C:F5:75:AA:96:E5 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/EBAD9EC9BBB7F262F889C919BD540C1E009C0A91E427626EEF5B7E06CCD6B714/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/EBAD9EC9BBB7F262F889C919BD540C1E009C0A91E427626EEF5B7E06CCD6B714/0/2FEE53CB4FA7FD182123FAFF3B709CF575AA96E5.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.202.96.0/22 IPv6: 2803:7e40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264619 Signature Algorithm: sha256WithRSAEncryption 60:7f:b4:56:05:4a:ed:a8:13:58:93:30:16:b8:24:73:10:cf: 95:54:fb:96:a7:50:42:c3:d4:42:53:8e:e9:b4:9f:f6:c0:05: 29:ca:4a:8e:2d:45:6e:c0:88:52:ed:e3:36:2c:1b:0c:8e:e8: 0b:ec:1e:f5:0d:b4:d3:c5:e8:14:fc:15:54:a9:fb:5a:9c:8f: 7a:fa:33:55:6c:08:10:68:b6:c1:20:d6:75:0a:d1:b0:93:4c: f8:e4:b8:ad:9f:81:25:d7:27:54:37:14:3b:41:69:66:c5:3e: ea:98:3b:1a:04:c4:01:fc:40:fc:63:45:5d:1e:d3:fe:dc:9c: b8:dc:af:10:18:c7:21:ce:eb:51:c6:fe:23:5a:7d:7d:1f:97: 85:5c:9c:2b:86:55:ac:f5:3a:8c:e2:bd:57:22:af:9f:cf:a6: 7a:0e:3a:3a:01:91:22:f0:1c:c0:b8:61:71:4d:2e:98:6a:1d: d8:33:a1:fc:47:a3:f4:0d:f4:7c:81:d9:1e:ec:ac:60:70:52: de:a1:a6:4d:b6:a0:d0:d6:a8:a7:93:e5:d9:79:58:bf:69:4d: c4:83:24:0f:3c:77:be:34:da:c3:86:43:b9:5f:2d:b5:a3:39: 1b:76:d9:7e:a8:f9:01:4d:4b:6c:fc:10:69:47:6b:3b:7a:96: 30:cf:8a:95 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUZ1G8LdQhZL8HWVeIE1BcWMIpBQ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDQyMjIyMjhaFw0yNjAyMDMyMjI3MjhaMDMxMTAvBgNV BAMTKDJGRUU1M0NCNEZBN0ZEMTgyMTIzRkFGRjNCNzA5Q0Y1NzVBQTk2RTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQP8iTuqypSCYV8/IFh5FqFTEU ibLQhT03zXztbY5IdTPiKsZpFAbVna2WzJUvlrYqTMbZgYBAbATnXQvKAaxWOGl8 5edJi9ac22GmvGM+p30yB4sY3T4ObpSu+OfdgVtrYgy+PU0wjbmhI3oZNpdRWjKA A4N6TVa5xpF/kdmNZQ4Wf+BoUIB1C4WeM3rvezwyNumJDNCI0imgKdg5AIC0tVot 7JHOMiE4liwwoDPf/CzFT9soUZ4MxLvQzsFMrnnMklRuRO/QLmt8E+Zqt696Coim AIIzemi5gq4a3yRS0Saop3H9LgB7C7zjn2WwdZgz6rdMhpbWzBgYOs5SlRrRAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQv7lPLT6f9GCEj +v87cJz1daqW5TAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRUJBRDlFQzlCQkI3RjI2MkY4ODlDOTE5 QkQ1NDBDMUUwMDlDMEE5MUU0Mjc2MjZFRUY1QjdFMDZDQ0Q2QjcxNC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9FQkFEOUVDOUJCQjdGMjYyRjg4OUM5MTlCRDU0MEMxRTAwOUMwQTkxRTQy NzYyNkVFRjVCN0UwNkNDRDZCNzE0LzAvMkZFRTUzQ0I0RkE3RkQxODIxMjNGQUZG M0I3MDlDRjU3NUFBOTZFNS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCj8pgMA0EAgAC MAcDBQAoA35AMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQJqzANBgkqhkiG9w0B AQsFAAOCAQEAYH+0VgVK7agTWJMwFrgkcxDPlVT7lqdQQsPUQlOO6bSf9sAFKcpK ji1FbsCIUu3jNiwbDI7oC+we9Q2008XoFPwVVKn7WpyPevozVWwIEGi2wSDWdQrR sJNM+OS4rZ+BJdcnVDcUO0FpZsU+6pg7GgTEAfxA/GNFXR7T/tycuNyvEBjHIc7r Ucb+I1p9fR+XhVycK4ZVrPU6jOK9VyKvn8+meg46OgGRIvAcwLhhcU0umGod2DOh /Eej9A30fIHZHuysYHBS3qGmTbag0Naop5Pl2XlYv2lNxIMkDzx3vjTaw4ZDuV8t taM5G3bZfqj5AU1LbPwQaUdrO3qWMM+KlQ== -----END CERTIFICATE-----Generated at Sun Oct 26 09:03:20 2025 by rpki-client