$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4BA24B565BA24009748E46515F9138A6540E41B4.cer File: 4BA24B565BA24009748E46515F9138A6540E41B4.cer (raw, json) Hash identifier: j4oDMNz3wfA/UurI4BLKwJnw8EypNu/LCRce8KeKhB4= Subject key identifier: 4B:A2:4B:56:5B:A2:40:09:74:8E:46:51:5F:91:38:A6:54:0E:41:B4 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 36F9937CD1911D8988EE08CC08E0B7A73D97F051 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/941B7C60A272BAD46642782C82EE9C025DAA3B3668A17CFBD609BA65E67E1F5B/0/4BA24B565BA24009748E46515F9138A6540E41B4.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/941B7C60A272BAD46642782C82EE9C025DAA3B3668A17CFBD609BA65E67E1F5B/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 02 Jul 2025 17:55:49 +0000 Certificate not after: Wed 01 Jul 2026 18:00:49 +0000 Subordinate resources: AS: 274151 IP: 148.224.60.0/24 IP: 177.67.16.0/21 IP: 2803:a9d0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 29 Oct 2025 22:57:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:f9:93:7c:d1:91:1d:89:88:ee:08:cc:08:e0:b7:a7:3d:97:f0:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Jul 2 17:55:49 2025 GMT Not After : Jul 1 18:00:49 2026 GMT Subject: CN=4BA24B565BA24009748E46515F9138A6540E41B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:c1:08:3b:1a:f5:84:b5:53:32:7d:5b:7d:55: c9:74:33:df:c3:3d:33:0b:81:4d:95:e5:f6:b1:3e: 6c:74:29:90:2e:1c:4f:e4:2d:e6:3c:b9:a6:6c:a1: ab:4d:c6:6c:e0:49:93:b8:1c:45:a4:59:32:ad:c7: 04:f4:74:fe:24:89:6a:09:27:79:5d:78:f0:2b:7d: 09:12:ee:99:88:08:48:da:5a:95:11:4c:ea:1f:9d: 42:b9:1a:e7:aa:76:fe:41:98:3c:5f:42:74:75:65: 55:f3:df:22:e9:be:c9:95:08:4d:8e:8d:9a:ed:3a: d9:9f:c0:77:c6:f4:5a:25:f8:17:53:95:33:c1:7d: f6:e2:91:5c:16:97:78:4d:7a:5f:4f:cd:f0:a7:29: e5:fb:fc:4b:1d:70:aa:ee:7b:bc:58:13:f1:41:4d: be:e8:f1:c1:30:79:3f:46:20:df:74:b6:53:f5:fa: 92:59:b0:6a:4b:76:9a:bd:04:da:ad:5b:c4:34:63: b9:3c:f9:f8:74:78:72:43:dd:2e:c4:0d:99:7e:62: c4:2b:07:fe:9b:6a:07:80:3f:10:de:e0:99:05:43: 5b:da:3d:d3:ae:be:ba:de:fd:e8:a3:71:9a:77:ba: 7f:19:0a:42:87:50:c9:b0:ae:07:2d:54:0e:9e:1a: c3:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4B:A2:4B:56:5B:A2:40:09:74:8E:46:51:5F:91:38:A6:54:0E:41:B4 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/941B7C60A272BAD46642782C82EE9C025DAA3B3668A17CFBD609BA65E67E1F5B/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/941B7C60A272BAD46642782C82EE9C025DAA3B3668A17CFBD609BA65E67E1F5B/0/4BA24B565BA24009748E46515F9138A6540E41B4.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 148.224.60.0/24 177.67.16.0/21 IPv6: 2803:a9d0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 274151 Signature Algorithm: sha256WithRSAEncryption 7b:f8:e8:96:c6:8e:fb:95:78:8b:18:ca:66:15:ce:fc:ca:b8: c0:61:99:b5:33:48:26:2b:60:f0:b9:ef:12:34:d1:82:4e:61: 4f:a4:aa:bf:09:8f:f1:02:82:26:3a:50:1e:af:3c:d8:d6:f4: 60:a0:d3:4b:d1:f8:74:8c:45:e2:30:ec:c3:d3:b7:db:f4:a6: 00:90:33:f9:b0:30:40:7e:87:a6:d8:1b:fa:02:57:d5:71:0f: 4f:ea:9d:0b:6a:87:b9:d4:12:a5:0d:c4:06:75:a6:16:69:3a: 0a:bd:9b:e4:55:37:61:0c:39:d1:2a:b8:2a:e7:97:6d:e3:13: 44:59:ee:a6:75:db:63:18:ae:9a:f3:cf:b4:0d:e5:cb:53:b6: a5:cb:9f:25:a6:94:22:ad:69:c1:4b:31:77:c6:be:ae:8b:55: e3:a8:24:66:34:2f:a6:38:e2:24:1f:2b:e9:7b:78:70:33:46: 4c:a7:2a:25:d6:e8:64:ad:2b:64:62:16:66:e3:82:5b:77:c5: 45:ed:5d:d4:b4:ff:74:7f:9f:10:ca:fe:88:ec:a8:e5:2a:73: 7e:d7:e1:ec:bf:21:99:b2:3e:97:d9:14:67:ce:2f:ae:7f:09: 12:a9:16:16:2d:98:20:f5:f8:87:1e:de:64:9a:3f:64:89:a1: 80:b2:8c:9f -----BEGIN CERTIFICATE----- MIIGqzCCBZOgAwIBAgIUNvmTfNGRHYmI7gjMCOC3pz2X8FEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTA3MDIxNzU1NDlaFw0yNjA3MDExODAwNDlaMDMxMTAvBgNV BAMTKDRCQTI0QjU2NUJBMjQwMDk3NDhFNDY1MTVGOTEzOEE2NTQwRTQxQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDewQg7GvWEtVMyfVt9Vcl0M9/D PTMLgU2V5faxPmx0KZAuHE/kLeY8uaZsoatNxmzgSZO4HEWkWTKtxwT0dP4kiWoJ J3ldePArfQkS7pmICEjaWpURTOofnUK5Gueqdv5BmDxfQnR1ZVXz3yLpvsmVCE2O jZrtOtmfwHfG9Fol+BdTlTPBffbikVwWl3hNel9PzfCnKeX7/EsdcKrue7xYE/FB Tb7o8cEweT9GIN90tlP1+pJZsGpLdpq9BNqtW8Q0Y7k8+fh0eHJD3S7EDZl+YsQr B/6bageAPxDe4JkFQ1vaPdOuvrre/eijcZp3un8ZCkKHUMmwrgctVA6eGsMdAgMB AAGjggO1MIIDsTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRLoktWW6JACXSO RlFfkTimVA5BtDAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvOTQxQjdDNjBBMjcyQkFENDY2NDI3ODJD ODJFRTlDMDI1REFBM0IzNjY4QTE3Q0ZCRDYwOUJBNjVFNjdFMUY1Qi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy85NDFCN0M2MEEyNzJCQUQ0NjY0Mjc4MkM4MkVFOUMwMjVEQUEzQjM2NjhB MTdDRkJENjA5QkE2NUU2N0UxRjVCLzAvNEJBMjRCNTY1QkEyNDAwOTc0OEU0NjUx NUY5MTM4QTY1NDBFNDFCNC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAlOA8AwQDsUMQ MA0EAgACMAcDBQAoA6nQMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQu5zANBgkq hkiG9w0BAQsFAAOCAQEAe/jolsaO+5V4ixjKZhXO/Mq4wGGZtTNIJitg8LnvEjTR gk5hT6SqvwmP8QKCJjpQHq882Nb0YKDTS9H4dIxF4jDsw9O32/SmAJAz+bAwQH6H ptgb+gJX1XEPT+qdC2qHudQSpQ3EBnWmFmk6Cr2b5FU3YQw50Sq4KueXbeMTRFnu pnXbYxiumvPPtA3ly1O2pcufJaaUIq1pwUsxd8a+rotV46gkZjQvpjjiJB8r6Xt4 cDNGTKcqJdboZK0rZGIWZuOCW3fFRe1d1LT/dH+fEMr+iOyo5Spzftfh7L8hmbI+ l9kUZ84vrn8JEqkWFi2YIPX4hx7eZJo/ZImhgLKMnw== -----END CERTIFICATE-----Generated at Sun Oct 26 09:06:30 2025 by rpki-client