$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44F097D1B0DF1D2B00D714F0E6C761BF12CC23F6.cer File: 44F097D1B0DF1D2B00D714F0E6C761BF12CC23F6.cer (raw, json) Hash identifier: CffIGKg9x1J2HIYal+Uh+DCnK/p7lGAyCwaTrssUIX8= Subject key identifier: 44:F0:97:D1:B0:DF:1D:2B:00:D7:14:F0:E6:C7:61:BF:12:CC:23:F6 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 5DBA9F8530509B86186689A8F042043ED44848B1 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/8DA876A95E4C3C1B90C882840AA7165106F5F8EE4B1219C7E14789DC0ABF614D/0/44F097D1B0DF1D2B00D714F0E6C761BF12CC23F6.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/8DA876A95E4C3C1B90C882840AA7165106F5F8EE4B1219C7E14789DC0ABF614D/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 04 Feb 2025 18:53:58 +0000 Certificate not after: Tue 03 Feb 2026 18:58:58 +0000 Subordinate resources: AS: 271867 IP: 200.36.208.0/22 IP: 2803:c10::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 21:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:ba:9f:85:30:50:9b:86:18:66:89:a8:f0:42:04:3e:d4:48:48:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 4 18:53:58 2025 GMT Not After : Feb 3 18:58:58 2026 GMT Subject: CN=44F097D1B0DF1D2B00D714F0E6C761BF12CC23F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b4:fc:54:24:09:ed:53:6a:31:fa:c7:e1:cf: 24:de:ed:59:93:74:ac:b6:33:7e:a6:b1:ee:31:26: a6:f4:11:30:fb:8e:d0:98:c5:80:ab:ac:05:82:c2: 8d:2c:cb:fb:29:7f:dd:70:c8:02:00:7f:04:a0:2a: 81:ed:ac:91:65:0a:cb:6a:55:1b:be:a6:8e:28:4a: 66:00:25:84:d6:cd:2b:6e:11:2f:75:28:6b:4f:31: 80:12:6d:5a:48:a8:02:a3:f0:ff:88:6e:e5:fc:3d: b0:0d:a1:54:37:f1:8a:f1:40:70:4a:b9:b9:4f:05: e3:da:1d:7b:36:82:e4:01:7f:4d:92:94:3b:d2:7d: 7b:fc:29:fb:2c:3d:c3:03:24:7d:aa:47:2b:b7:51: b9:fa:ec:e5:9f:f3:17:02:73:39:7c:79:af:bc:f6: 6f:bf:8f:18:09:b4:8e:63:f7:eb:6a:d3:cb:0c:df: 8f:d7:f4:8f:10:52:63:66:4a:a2:c1:cd:38:36:a9: 03:8e:5c:a7:2e:32:ff:79:0d:70:f4:f8:e6:e5:44: 90:76:84:aa:75:99:e7:d6:e0:32:90:b0:ac:c2:ba: fe:5f:10:86:cc:d4:0c:0a:9a:1e:27:df:86:cf:bc: 8a:d8:5c:e5:2a:3e:df:b4:70:6a:4d:de:08:88:9c: 43:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 44:F0:97:D1:B0:DF:1D:2B:00:D7:14:F0:E6:C7:61:BF:12:CC:23:F6 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/8DA876A95E4C3C1B90C882840AA7165106F5F8EE4B1219C7E14789DC0ABF614D/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/8DA876A95E4C3C1B90C882840AA7165106F5F8EE4B1219C7E14789DC0ABF614D/0/44F097D1B0DF1D2B00D714F0E6C761BF12CC23F6.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.36.208.0/22 IPv6: 2803:c10::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 271867 Signature Algorithm: sha256WithRSAEncryption e1:db:2f:fe:f3:1f:ce:8c:da:ec:a9:b1:df:43:ea:87:2d:e1: 23:eb:e9:ee:6a:5a:33:1e:0f:a9:f5:69:b0:d2:c5:3c:be:32: 5c:db:f7:95:d3:b5:2b:ff:24:96:d2:6d:18:81:ed:17:f6:a6: b4:ae:66:d7:68:af:34:8d:8c:2a:80:da:25:86:76:d0:bb:cc: 11:58:86:a6:85:d4:bc:8d:1f:33:15:0b:0d:26:52:57:e3:89: 1d:d2:6f:48:61:41:b5:1d:bf:a7:36:c3:19:84:3c:44:a3:a4: df:5d:29:8f:ce:28:03:9e:28:1f:e7:29:a0:ff:be:e2:ce:0a: 2b:09:ca:b1:79:83:03:ac:36:7a:89:cf:f2:e2:22:75:7a:36: 1c:e8:bb:8c:8b:e4:7a:34:34:c2:3b:5d:d9:6d:a0:2f:37:64: 6c:fc:42:b5:64:8f:e3:ab:f8:73:fa:57:17:2d:b1:0f:4d:62: 36:5f:00:60:72:0e:db:d9:8b:78:07:0a:fe:cd:3d:3f:9e:aa: 82:9e:7f:94:c6:69:88:44:63:e5:39:cd:d3:14:21:8f:2a:82: 55:78:b1:84:a9:d1:6f:37:23:de:d0:ef:7c:c0:54:ec:af:2b: a6:f9:53:bb:d2:53:cf:7b:a4:e1:1f:76:34:cc:40:e2:ff:2d: 3c:39:2e:da -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUXbqfhTBQm4YYZomo8EIEPtRISLEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDQxODUzNThaFw0yNjAyMDMxODU4NThaMDMxMTAvBgNV BAMTKDQ0RjA5N0QxQjBERjFEMkIwMEQ3MTRGMEU2Qzc2MUJGMTJDQzIzRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCutPxUJAntU2ox+sfhzyTe7VmT dKy2M36mse4xJqb0ETD7jtCYxYCrrAWCwo0sy/spf91wyAIAfwSgKoHtrJFlCstq VRu+po4oSmYAJYTWzStuES91KGtPMYASbVpIqAKj8P+IbuX8PbANoVQ38YrxQHBK ublPBePaHXs2guQBf02SlDvSfXv8KfssPcMDJH2qRyu3Ubn67OWf8xcCczl8ea+8 9m+/jxgJtI5j9+tq08sM34/X9I8QUmNmSqLBzTg2qQOOXKcuMv95DXD0+OblRJB2 hKp1mefW4DKQsKzCuv5fEIbM1AwKmh4n34bPvIrYXOUqPt+0cGpN3giInENfAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRE8JfRsN8dKwDX FPDmx2G/Eswj9jAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvOERBODc2QTk1RTRDM0MxQjkwQzg4Mjg0 MEFBNzE2NTEwNkY1RjhFRTRCMTIxOUM3RTE0Nzg5REMwQUJGNjE0RC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy84REE4NzZBOTVFNEMzQzFCOTBDODgyODQwQUE3MTY1MTA2RjVGOEVFNEIx MjE5QzdFMTQ3ODlEQzBBQkY2MTRELzAvNDRGMDk3RDFCMERGMUQyQjAwRDcxNEYw RTZDNzYxQkYxMkNDMjNGNi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCyCTQMA0EAgAC MAcDBQAoAwwQMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQl+zANBgkqhkiG9w0B AQsFAAOCAQEA4dsv/vMfzoza7Kmx30Pqhy3hI+vp7mpaMx4PqfVpsNLFPL4yXNv3 ldO1K/8kltJtGIHtF/amtK5m12ivNI2MKoDaJYZ20LvMEViGpoXUvI0fMxULDSZS V+OJHdJvSGFBtR2/pzbDGYQ8RKOk310pj84oA54oH+cpoP++4s4KKwnKsXmDA6w2 eonP8uIidXo2HOi7jIvkejQ0wjtd2W2gLzdkbPxCtWSP46v4c/pXFy2xD01iNl8A YHIO29mLeAcK/s09P56qgp5/lMZpiERj5TnN0xQhjyqCVXixhKnRbzcj3tDvfMBU 7K8rpvlTu9JTz3uk4R92NMxA4v8tPDku2g== -----END CERTIFICATE-----Generated at Sat Nov 1 04:50:40 2025 by rpki-client