$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4BE45DC748EE7774D4EF8F672A9497EE7DF030F7.cer File: 4BE45DC748EE7774D4EF8F672A9497EE7DF030F7.cer (raw, json) Hash identifier: fjikqUhkDtLz3sIO7VrkpDKYFmmdVTQzudlqZ/nuFSI= Subject key identifier: 4B:E4:5D:C7:48:EE:77:74:D4:EF:8F:67:2A:94:97:EE:7D:F0:30:F7 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 0A2AD63A93A857F112AFA7F44E15350792226025 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/575F6B0BBCD2EC32963FB15D589D41C6E7541303570CC4399BF72073702BC884/0/4BE45DC748EE7774D4EF8F672A9497EE7DF030F7.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/575F6B0BBCD2EC32963FB15D589D41C6E7541303570CC4399BF72073702BC884/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Mon 21 Jul 2025 16:20:02 +0000 Certificate not after: Mon 20 Jul 2026 16:25:02 +0000 Subordinate resources: AS: 264751 IP: 170.254.60.0/22 IP: 186.121.168.0/21 IP: 2803:1f40::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 30 Jul 2025 15:27:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:2a:d6:3a:93:a8:57:f1:12:af:a7:f4:4e:15:35:07:92:22:60:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Jul 21 16:20:02 2025 GMT Not After : Jul 20 16:25:02 2026 GMT Subject: CN=4BE45DC748EE7774D4EF8F672A9497EE7DF030F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:0c:f2:5b:20:2a:4e:99:d1:3f:30:4e:e1:d8: b7:a0:b7:b3:51:52:14:f5:25:a9:9a:65:55:cb:3a: 1a:cc:b2:c8:0a:90:c9:f4:a8:d9:31:16:42:25:28: f8:fe:e3:71:7e:b6:32:a3:2c:e9:c4:c0:0d:a5:47: ab:a1:d5:da:4a:58:19:06:3a:55:14:95:cd:41:ca: cf:67:4b:5e:22:5a:b0:05:91:77:a6:0d:4a:c4:7b: 10:b7:db:72:98:29:3a:23:c8:cf:a2:da:25:9e:de: ea:64:7a:79:6e:49:ed:80:26:a6:37:0b:47:16:27: 59:6a:db:70:19:15:23:aa:86:bb:57:c5:57:9e:31: dc:bb:9c:83:46:ea:8e:b0:b3:3a:64:6c:b1:95:27: 81:b3:ed:67:10:be:a5:5e:79:21:fa:f1:da:0b:cc: a7:31:95:ab:cb:d2:fa:6c:f1:a6:e7:13:50:fb:9a: dd:31:4c:78:fe:00:c5:cd:44:ed:64:fa:7f:21:63: 8a:90:ef:52:bc:bf:37:1e:e4:ab:b9:58:20:6e:e4: 9e:c9:77:ee:ab:fc:be:f3:58:73:2a:e2:be:6b:dd: f0:40:45:ed:73:30:f0:bb:ad:6a:43:46:02:11:7a: 37:37:6c:a2:ab:27:6a:85:71:51:84:0a:94:7f:51: 2e:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4B:E4:5D:C7:48:EE:77:74:D4:EF:8F:67:2A:94:97:EE:7D:F0:30:F7 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/575F6B0BBCD2EC32963FB15D589D41C6E7541303570CC4399BF72073702BC884/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/575F6B0BBCD2EC32963FB15D589D41C6E7541303570CC4399BF72073702BC884/0/4BE45DC748EE7774D4EF8F672A9497EE7DF030F7.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.254.60.0/22 186.121.168.0/21 IPv6: 2803:1f40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264751 Signature Algorithm: sha256WithRSAEncryption 2d:46:22:b5:4a:50:0c:f3:3f:a9:79:f1:e7:10:7b:73:e1:c3: 60:c9:76:72:93:6e:e1:6f:df:4e:62:94:02:6c:fc:ed:19:61: 91:77:85:00:ac:1e:31:e4:72:d3:c7:6a:0a:6b:c3:ea:3d:44: 12:6b:46:69:99:00:12:4c:8b:db:cd:da:ea:f3:53:df:ba:94: 58:08:66:37:c6:70:44:ce:0b:85:a5:67:e6:fb:50:1b:ed:aa: 80:c9:cf:16:82:98:8b:9d:3b:a1:b8:d3:74:22:26:c4:b5:0e: b1:e0:0c:b5:b0:91:42:b4:6c:a2:97:1b:9f:5d:9c:91:89:64: 8b:c4:f4:9a:af:13:26:8b:8d:45:2b:21:bd:96:74:bd:88:74: 1f:45:22:00:f2:a0:0c:2e:61:3b:f0:3c:49:d8:5f:2f:f9:52: 1b:5a:26:f9:54:c6:4b:99:e4:d5:09:52:fc:19:1d:7f:81:6f: 6e:f1:f3:26:2b:0c:a0:d2:fb:8e:ce:28:da:5c:7e:ac:5b:87: f8:41:ff:82:21:e2:03:52:3d:55:b5:e9:78:a0:ec:67:91:ef: 82:55:77:ad:d1:76:f3:31:4e:40:14:c6:1e:a0:d5:d6:d1:89: 7c:50:19:2c:80:9f:80:7a:92:ce:a7:c4:dd:db:c8:5f:17:a3: cd:bc:1b:ed -----BEGIN CERTIFICATE----- MIIGqzCCBZOgAwIBAgIUCirWOpOoV/ESr6f0ThU1B5IiYCUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTA3MjExNjIwMDJaFw0yNjA3MjAxNjI1MDJaMDMxMTAvBgNV BAMTKDRCRTQ1REM3NDhFRTc3NzRENEVGOEY2NzJBOTQ5N0VFN0RGMDMwRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCODPJbICpOmdE/ME7h2Legt7NR UhT1JamaZVXLOhrMssgKkMn0qNkxFkIlKPj+43F+tjKjLOnEwA2lR6uh1dpKWBkG OlUUlc1Bys9nS14iWrAFkXemDUrEexC323KYKTojyM+i2iWe3upkenluSe2AJqY3 C0cWJ1lq23AZFSOqhrtXxVeeMdy7nING6o6wszpkbLGVJ4Gz7WcQvqVeeSH68doL zKcxlavL0vps8abnE1D7mt0xTHj+AMXNRO1k+n8hY4qQ71K8vzce5Ku5WCBu5J7J d+6r/L7zWHMq4r5r3fBARe1zMPC7rWpDRgIRejc3bKKrJ2qFcVGECpR/US7RAgMB AAGjggO1MIIDsTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRL5F3HSO53dNTv j2cqlJfuffAw9zAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNTc1RjZCMEJCQ0QyRUMzMjk2M0ZCMTVE NTg5RDQxQzZFNzU0MTMwMzU3MENDNDM5OUJGNzIwNzM3MDJCQzg4NC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy81NzVGNkIwQkJDRDJFQzMyOTYzRkIxNUQ1ODlENDFDNkU3NTQxMzAzNTcw Q0M0Mzk5QkY3MjA3MzcwMkJDODg0LzAvNEJFNDVEQzc0OEVFNzc3NEQ0RUY4RjY3 MkE5NDk3RUU3REYwMzBGNy5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCqv48AwQDunmo MA0EAgACMAcDBQAoAx9AMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQKLzANBgkq hkiG9w0BAQsFAAOCAQEALUYitUpQDPM/qXnx5xB7c+HDYMl2cpNu4W/fTmKUAmz8 7RlhkXeFAKweMeRy08dqCmvD6j1EEmtGaZkAEkyL283a6vNT37qUWAhmN8ZwRM4L haVn5vtQG+2qgMnPFoKYi507objTdCImxLUOseAMtbCRQrRsopcbn12ckYlki8T0 mq8TJouNRSshvZZ0vYh0H0UiAPKgDC5hO/A8SdhfL/lSG1om+VTGS5nk1QlS/Bkd f4FvbvHzJisMoNL7js4o2lx+rFuH+EH/giHiA1I9VbXpeKDsZ5HvglV3rdF28zFO QBTGHqDV1tGJfFAZLICfgHqSzqfE3dvIXxejzbwb7Q== -----END CERTIFICATE-----Generated at Sat Jul 26 00:40:01 2025 by rpki-client