$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/538C5308A8AF2D420CB9AC8163C606D43D3A8156.cer File: 538C5308A8AF2D420CB9AC8163C606D43D3A8156.cer (raw, json) Hash identifier: yrbU0n85m6cnEVjQK0XqrAV6SyVIvz+J02BqF90Tp+0= Subject key identifier: 53:8C:53:08:A8:AF:2D:42:0C:B9:AC:81:63:C6:06:D4:3D:3A:81:56 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 2AA568CE3A6367EF5FEABD5CDB1C833F313C28E0 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/EA11F9305826D36334E44D131363BECE159F5BF052B21D453723D35551A40CB9/0/538C5308A8AF2D420CB9AC8163C606D43D3A8156.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/EA11F9305826D36334E44D131363BECE159F5BF052B21D453723D35551A40CB9/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 13:33:08 +0000 Certificate not after: Wed 04 Feb 2026 13:38:08 +0000 Subordinate resources: AS: 266682 IP: 45.228.76.0/22 IP: 2803:4520::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 27 Oct 2025 11:10:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:a5:68:ce:3a:63:67:ef:5f:ea:bd:5c:db:1c:83:3f:31:3c:28:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 13:33:08 2025 GMT Not After : Feb 4 13:38:08 2026 GMT Subject: CN=538C5308A8AF2D420CB9AC8163C606D43D3A8156 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:74:f0:1c:6f:0b:d7:1e:83:4e:4e:44:ac:13: 74:5f:04:07:5c:73:ca:8f:95:cc:ef:18:81:89:ae: 25:2b:77:d5:58:73:3c:7a:36:32:a5:9b:f2:eb:f8: 56:0e:11:d1:60:9e:7b:1a:40:a1:34:cc:63:c6:16: 28:e9:da:7c:5c:cf:a8:a2:cd:1d:fc:fb:41:e4:c9: e3:15:f6:b1:53:9a:12:de:1f:4a:a1:b8:40:46:e0: 23:db:47:ce:78:60:27:9b:31:84:06:d5:ba:a3:74: 20:ff:65:92:f8:56:f0:f1:62:1b:f3:a7:c2:ab:14: be:3e:84:7e:6d:75:76:a3:a1:93:c8:55:07:3f:90: cd:aa:0e:67:41:0c:02:81:6b:dc:f5:e7:8b:df:6a: dd:ab:de:0d:16:4a:ec:57:dd:3d:20:f2:ed:87:70: 4d:90:75:35:34:4c:df:80:a1:ac:80:5b:31:b9:d3: f9:12:b2:a8:0c:0d:94:0b:eb:48:95:ed:72:bb:d0: d1:bd:a0:e2:c9:c2:13:68:50:77:84:e7:39:1f:13: 73:55:34:28:c4:e2:19:00:e6:32:ff:05:a7:b5:b5: 00:2e:42:64:1a:72:e3:70:06:1b:5b:5e:2e:3b:de: ba:85:8d:3e:4b:20:0a:77:99:74:29:ae:a0:70:a2: b0:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 53:8C:53:08:A8:AF:2D:42:0C:B9:AC:81:63:C6:06:D4:3D:3A:81:56 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/EA11F9305826D36334E44D131363BECE159F5BF052B21D453723D35551A40CB9/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/EA11F9305826D36334E44D131363BECE159F5BF052B21D453723D35551A40CB9/0/538C5308A8AF2D420CB9AC8163C606D43D3A8156.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.228.76.0/22 IPv6: 2803:4520::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266682 Signature Algorithm: sha256WithRSAEncryption 2b:c9:ea:76:4e:64:4f:a5:f2:dc:c3:e4:45:fa:05:77:93:e1: d9:89:09:4c:7a:2e:de:f8:34:7c:81:9a:68:1d:ff:8b:bd:55: b9:98:51:f0:3f:e2:49:5b:81:7e:af:e1:7f:6d:1c:6b:a6:be: 9c:0b:93:39:6b:df:53:2d:9f:b9:b8:19:78:cb:ea:56:2f:89: 4c:9c:46:19:d0:8a:a9:42:05:af:91:d8:75:7c:14:7f:2c:74: 93:ee:c5:57:c0:04:00:cd:3e:ed:83:5f:93:77:22:c9:f9:c8: 25:d7:03:98:43:2c:83:4a:2a:ee:2a:77:79:64:e1:98:06:9f: ec:0f:c5:b2:39:db:9d:fd:aa:67:20:aa:00:fe:43:6e:24:bf: 1c:55:57:aa:82:36:8e:70:dd:7d:02:ea:0b:8a:c3:a4:f0:59: de:2c:ec:dd:dd:2b:37:28:93:39:1b:5c:25:43:57:c8:09:98: c2:1a:5b:0f:15:bc:3a:99:27:de:42:2d:41:69:7d:dd:78:05: f5:ef:71:3c:25:a8:86:04:5c:1f:d3:b0:54:1f:5e:68:8d:d4: c5:8c:ca:04:d4:d0:c0:b4:df:48:21:87:00:52:d3:90:52:9d: ba:bc:d3:7f:4e:b5:d5:6c:c7:f2:6b:ef:ec:35:47:3b:50:c6: 0e:37:84:32 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUKqVozjpjZ+9f6r1c2xyDPzE8KOAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUxMzMzMDhaFw0yNjAyMDQxMzM4MDhaMDMxMTAvBgNV BAMTKDUzOEM1MzA4QThBRjJENDIwQ0I5QUM4MTYzQzYwNkQ0M0QzQTgxNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcdPAcbwvXHoNOTkSsE3RfBAdc c8qPlczvGIGJriUrd9VYczx6NjKlm/Lr+FYOEdFgnnsaQKE0zGPGFijp2nxcz6ii zR38+0HkyeMV9rFTmhLeH0qhuEBG4CPbR854YCebMYQG1bqjdCD/ZZL4VvDxYhvz p8KrFL4+hH5tdXajoZPIVQc/kM2qDmdBDAKBa9z154vfat2r3g0WSuxX3T0g8u2H cE2QdTU0TN+AoayAWzG50/kSsqgMDZQL60iV7XK70NG9oOLJwhNoUHeE5zkfE3NV NCjE4hkA5jL/Bae1tQAuQmQacuNwBhtbXi473rqFjT5LIAp3mXQprqBworCpAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRTjFMIqK8tQgy5 rIFjxgbUPTqBVjAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRUExMUY5MzA1ODI2RDM2MzM0RTQ0RDEz MTM2M0JFQ0UxNTlGNUJGMDUyQjIxRDQ1MzcyM0QzNTU1MUE0MENCOS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9FQTExRjkzMDU4MjZEMzYzMzRFNDREMTMxMzYzQkVDRTE1OUY1QkYwNTJC MjFENDUzNzIzRDM1NTUxQTQwQ0I5LzAvNTM4QzUzMDhBOEFGMkQ0MjBDQjlBQzgx NjNDNjA2RDQzRDNBODE1Ni5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLeRMMA0EAgAC MAcDBQAoA0UgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQRujANBgkqhkiG9w0B AQsFAAOCAQEAK8nqdk5kT6Xy3MPkRfoFd5Ph2YkJTHou3vg0fIGaaB3/i71VuZhR 8D/iSVuBfq/hf20ca6a+nAuTOWvfUy2fubgZeMvqVi+JTJxGGdCKqUIFr5HYdXwU fyx0k+7FV8AEAM0+7YNfk3ciyfnIJdcDmEMsg0oq7ip3eWThmAaf7A/Fsjnbnf2q ZyCqAP5DbiS/HFVXqoI2jnDdfQLqC4rDpPBZ3izs3d0rNyiTORtcJUNXyAmYwhpb DxW8Opkn3kItQWl93XgF9e9xPCWohgRcH9OwVB9eaI3UxYzKBNTQwLTfSCGHAFLT kFKdurzTf0611WzH8mvv7DVHO1DGDjeEMg== -----END CERTIFICATE-----Generated at Fri Oct 24 03:41:47 2025 by rpki-client