$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/512FC9A3066D2E0C294F0E001A94F2F0AED7270C.cer File: 512FC9A3066D2E0C294F0E001A94F2F0AED7270C.cer (raw, json) Hash identifier: HRUmM1VTjXIFIFocvDMysOhH7xZqaJs0nwO1odYtbeY= Subject key identifier: 51:2F:C9:A3:06:6D:2E:0C:29:4F:0E:00:1A:94:F2:F0:AE:D7:27:0C Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 7AE1C9C3F1952790FD8D2197A1071BD0B6366921 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/D6CB5131E6E9F62855DC0EC50655CD810DD985ABBBFFBF4F0C653795F214ED99/0/512FC9A3066D2E0C294F0E001A94F2F0AED7270C.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/D6CB5131E6E9F62855DC0EC50655CD810DD985ABBBFFBF4F0C653795F214ED99/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Thu 06 Feb 2025 00:54:11 +0000 Certificate not after: Thu 05 Feb 2026 00:59:11 +0000 Subordinate resources: AS: 7137 IP: 186.76.0.0/15 IP: 190.212.0.0/16 IP: 200.62.64.0/18 IP: 2803:2d60::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 28 Oct 2025 12:02:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:e1:c9:c3:f1:95:27:90:fd:8d:21:97:a1:07:1b:d0:b6:36:69:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 6 00:54:11 2025 GMT Not After : Feb 5 00:59:11 2026 GMT Subject: CN=512FC9A3066D2E0C294F0E001A94F2F0AED7270C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a9:36:71:b2:1a:c7:d5:7b:d9:68:12:8f:64: 7e:ba:7b:8c:10:bc:0a:02:1b:42:3b:b6:e1:0a:a7: ed:1f:66:0a:dc:e1:5b:b3:d9:eb:44:f5:4e:3f:1d: e6:8f:e9:ae:26:05:15:d2:c1:b5:ad:72:ec:28:d7: a6:cd:ba:de:98:cd:7f:74:cb:cf:6b:1b:b8:52:d7: 44:09:e6:d3:0d:b3:0e:ce:e7:2e:90:62:82:78:65: 69:90:a4:c3:14:8a:5b:9b:5e:6a:f9:24:72:ec:38: b5:b0:ce:ff:59:d5:f1:b9:36:77:b6:28:45:87:46: 50:29:a8:c3:40:ca:4b:e4:a5:44:a1:3b:a3:c6:32: 9d:de:a9:12:66:26:22:1a:07:90:ba:70:19:0b:cd: 49:e8:2d:ff:fb:69:38:7f:fa:15:0e:d7:da:76:cb: a9:ad:0a:6a:a9:26:63:5c:62:1b:81:c2:c2:db:2b: 62:9c:32:ee:1e:bc:2a:9b:fe:1f:d6:e7:aa:db:df: 38:85:46:65:32:f6:38:52:ad:8a:c5:a7:98:3c:81: 07:a7:03:a3:22:e0:6a:e4:4c:dd:fc:66:5d:df:28: 97:c5:09:85:87:7e:5a:58:5f:45:ae:9d:4e:29:09: 7f:98:ab:69:bf:77:a8:8a:25:04:78:e8:56:d8:9a: f0:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 51:2F:C9:A3:06:6D:2E:0C:29:4F:0E:00:1A:94:F2:F0:AE:D7:27:0C X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/D6CB5131E6E9F62855DC0EC50655CD810DD985ABBBFFBF4F0C653795F214ED99/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/D6CB5131E6E9F62855DC0EC50655CD810DD985ABBBFFBF4F0C653795F214ED99/0/512FC9A3066D2E0C294F0E001A94F2F0AED7270C.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 186.76.0.0/15 190.212.0.0/16 200.62.64.0/18 IPv6: 2803:2d60::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 7137 Signature Algorithm: sha256WithRSAEncryption 5e:27:89:f8:ac:f6:41:0b:a1:6d:c7:f2:48:4f:d4:6a:9e:a0: dc:44:c0:4f:95:3e:ae:d0:95:f9:00:ae:9c:8e:75:2e:d2:e3: 36:3e:04:f0:3a:07:80:f5:4a:49:74:ab:54:30:ba:d6:a9:16: 55:b8:24:f6:d7:17:a0:da:b6:e6:79:61:a9:27:84:16:b5:7b: 34:eb:78:b8:4f:ae:61:94:f7:81:b1:be:4c:ff:a9:80:b5:7d: b4:3e:13:74:8a:a1:57:7b:8a:ec:c5:98:bf:de:c2:93:f3:c0: 9a:12:e5:bd:db:04:86:d7:f2:29:3d:7f:b7:86:7a:69:6b:06: ce:c3:41:2c:e5:36:b6:27:b2:9d:c8:12:8d:1d:a5:53:cd:ca: 17:96:51:9a:d0:e3:8a:2c:05:25:e4:81:f1:3b:95:45:01:d5: 86:d4:72:af:ec:e7:83:17:c8:35:d6:fc:49:76:7e:29:f4:c5: a1:72:eb:55:fc:c6:91:8b:dd:2d:4f:f3:31:47:d8:d7:94:41: d1:aa:cc:bc:95:6f:29:2f:10:2a:7c:97:08:a3:87:85:c4:9f: ec:48:05:b7:d4:4a:75:b6:3f:9e:e7:de:a3:4f:93:58:70:d4: 7a:47:37:66:b3:09:10:6d:cd:c7:b7:85:ab:c6:56:fd:dc:73: a9:e5:2b:07 -----BEGIN CERTIFICATE----- MIIGrjCCBZagAwIBAgIUeuHJw/GVJ5D9jSGXoQcb0LY2aSEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDYwMDU0MTFaFw0yNjAyMDUwMDU5MTFaMDMxMTAvBgNV BAMTKDUxMkZDOUEzMDY2RDJFMEMyOTRGMEUwMDFBOTRGMkYwQUVENzI3MEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyqTZxshrH1XvZaBKPZH66e4wQ vAoCG0I7tuEKp+0fZgrc4Vuz2etE9U4/HeaP6a4mBRXSwbWtcuwo16bNut6YzX90 y89rG7hS10QJ5tMNsw7O5y6QYoJ4ZWmQpMMUilubXmr5JHLsOLWwzv9Z1fG5Nne2 KEWHRlApqMNAykvkpUShO6PGMp3eqRJmJiIaB5C6cBkLzUnoLf/7aTh/+hUO19p2 y6mtCmqpJmNcYhuBwsLbK2KcMu4evCqb/h/W56rb3ziFRmUy9jhSrYrFp5g8gQen A6Mi4GrkTN38Zl3fKJfFCYWHflpYX0WunU4pCX+Yq2m/d6iKJQR46FbYmvB5AgMB AAGjggO4MIIDtDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRRL8mjBm0uDClP DgAalPLwrtcnDDAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRDZDQjUxMzFFNkU5RjYyODU1REMwRUM1 MDY1NUNEODEwREQ5ODVBQkJCRkZCRjRGMEM2NTM3OTVGMjE0RUQ5OS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9ENkNCNTEzMUU2RTlGNjI4NTVEQzBFQzUwNjU1Q0Q4MTBERDk4NUFCQkJG RkJGNEYwQzY1Mzc5NUYyMTRFRDk5LzAvNTEyRkM5QTMwNjZEMkUwQzI5NEYwRTAw MUE5NEYyRjBBRUQ3MjcwQy5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDgGCCsGAQUFBwEHAQH/BCkwJzAWBAIAATAQAwMBukwDAwC+1AME Bsg+QDANBAIAAjAHAwUAKAMtYDAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgIb4TAN BgkqhkiG9w0BAQsFAAOCAQEAXieJ+Kz2QQuhbcfySE/Uap6g3ETAT5U+rtCV+QCu nI51LtLjNj4E8DoHgPVKSXSrVDC61qkWVbgk9tcXoNq25nlhqSeEFrV7NOt4uE+u YZT3gbG+TP+pgLV9tD4TdIqhV3uK7MWYv97Ck/PAmhLlvdsEhtfyKT1/t4Z6aWsG zsNBLOU2tieyncgSjR2lU83KF5ZRmtDjiiwFJeSB8TuVRQHVhtRyr+zngxfINdb8 SXZ+KfTFoXLrVfzGkYvdLU/zMUfY15RB0arMvJVvKS8QKnyXCKOHhcSf7EgFt9RK dbY/nufeo0+TWHDUekc3ZrMJEG3Nx7eFq8ZW/dxzqeUrBw== -----END CERTIFICATE-----Generated at Sat Oct 25 04:00:33 2025 by rpki-client