$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/637F3C6F4A4FAEC438B0EA735882742F9E106F8B.cer File: 637F3C6F4A4FAEC438B0EA735882742F9E106F8B.cer (raw, json) Hash identifier: APgO+5rRJh0uko+AgrBG9NjnEhFUyFkjNtQeRBuDKCU= Subject key identifier: 63:7F:3C:6F:4A:4F:AE:C4:38:B0:EA:73:58:82:74:2F:9E:10:6F:8B Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 5F00C287D1375188EE9A65D282191717AB9BCD3C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/76326EE858E2FE109424F3675E35EC58EFEA663CABC2C593B0A012FB5A986C03/0/637F3C6F4A4FAEC438B0EA735882742F9E106F8B.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/76326EE858E2FE109424F3675E35EC58EFEA663CABC2C593B0A012FB5A986C03/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 04 Feb 2025 20:04:30 +0000 Certificate not after: Tue 03 Feb 2026 20:09:30 +0000 Subordinate resources: AS: 266684 IP: 45.228.220.0/22 IP: 2803:2520::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 29 Oct 2025 22:57:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:00:c2:87:d1:37:51:88:ee:9a:65:d2:82:19:17:17:ab:9b:cd:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 4 20:04:30 2025 GMT Not After : Feb 3 20:09:30 2026 GMT Subject: CN=637F3C6F4A4FAEC438B0EA735882742F9E106F8B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:1f:29:15:5c:65:85:3e:85:5e:75:08:c0:53: 90:a9:20:3d:22:dc:43:fd:07:ca:df:58:bb:63:2b: 4e:39:39:b7:9b:bc:ad:54:47:67:86:65:1f:05:83: 3e:93:c3:7e:a4:2d:80:b9:51:de:2a:82:1f:6d:09: 69:35:b3:4d:de:59:ed:1a:59:1a:29:e2:1b:ad:25: a6:6b:00:00:04:33:43:18:fe:e2:8e:b7:40:1b:89: 53:de:87:fb:5b:5f:18:9e:56:8a:5a:93:98:71:58: 66:f7:6b:08:44:d7:ab:be:9d:f2:c2:e9:1b:19:b8: 19:66:06:74:b3:ab:f1:7c:0d:48:00:c0:ed:d5:3b: 49:04:90:6b:a9:d0:81:33:dc:5f:e9:e0:fa:d6:20: da:7d:ea:12:e5:16:d3:9b:9b:d8:6b:60:46:51:e7: 4d:38:c9:ea:e5:d9:87:80:20:48:cc:bd:32:c4:90: d3:b2:de:ec:69:e1:1c:3c:3a:56:80:7e:ab:58:17: e2:80:3f:24:2c:97:0a:07:d8:4a:65:e4:fd:94:4a: 2b:94:a3:b2:65:73:a8:4b:48:28:ca:90:75:f3:90: 85:05:7b:25:ab:7b:da:08:ed:c3:1f:5a:df:bb:33: 37:49:be:33:09:b3:e1:d2:c5:93:c0:1f:6f:c1:28: 95:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 63:7F:3C:6F:4A:4F:AE:C4:38:B0:EA:73:58:82:74:2F:9E:10:6F:8B X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/76326EE858E2FE109424F3675E35EC58EFEA663CABC2C593B0A012FB5A986C03/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/76326EE858E2FE109424F3675E35EC58EFEA663CABC2C593B0A012FB5A986C03/0/637F3C6F4A4FAEC438B0EA735882742F9E106F8B.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.228.220.0/22 IPv6: 2803:2520::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266684 Signature Algorithm: sha256WithRSAEncryption 2e:c3:69:d5:95:db:9a:e8:9a:08:46:09:1a:34:b5:8a:c4:8e: dd:74:7d:ab:16:a6:c3:ec:27:c8:a9:58:d4:61:4b:15:32:50: 81:a8:f6:3a:d6:3a:88:83:e7:41:ad:ff:42:5d:60:cd:3f:b2: 1b:23:b3:c6:ba:d1:aa:83:0f:ac:a2:e7:c6:22:d5:56:37:1f: 3e:69:6f:48:09:6f:69:97:f3:44:a0:15:45:06:71:61:45:ec: d2:8c:6c:95:eb:d0:aa:05:1b:4d:34:9d:78:64:01:c4:b1:a8: 06:47:62:4b:af:74:50:81:de:ca:05:c3:f8:64:17:ab:76:98: 99:29:ac:00:6c:e8:ad:3c:f9:01:4b:2e:23:17:d3:c9:bb:70: 95:ca:4e:2e:15:9e:e5:a2:e6:2e:cf:5f:85:63:bb:8d:fa:46: 77:87:00:cd:36:44:d7:16:9b:57:54:ef:8f:62:61:94:3b:50: c1:ff:e2:0e:46:c1:c5:4c:45:42:44:d3:b0:b9:12:ee:82:84: 53:7f:3d:1c:90:98:0c:86:1e:f2:aa:b0:fa:ac:ce:7a:2f:e4: 0b:51:f3:2f:d7:c7:ba:5d:b9:4a:20:a1:9b:0c:5c:3b:c5:ca: b7:89:90:3b:2c:ca:c9:69:52:17:23:31:99:74:65:3c:6f:8c: 32:7d:ea:97 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUXwDCh9E3UYjummXSghkXF6ubzTwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDQyMDA0MzBaFw0yNjAyMDMyMDA5MzBaMDMxMTAvBgNV BAMTKDYzN0YzQzZGNEE0RkFFQzQzOEIwRUE3MzU4ODI3NDJGOUUxMDZGOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuHykVXGWFPoVedQjAU5CpID0i 3EP9B8rfWLtjK045ObebvK1UR2eGZR8Fgz6Tw36kLYC5Ud4qgh9tCWk1s03eWe0a WRop4hutJaZrAAAEM0MY/uKOt0AbiVPeh/tbXxieVopak5hxWGb3awhE16u+nfLC 6RsZuBlmBnSzq/F8DUgAwO3VO0kEkGup0IEz3F/p4PrWINp96hLlFtObm9hrYEZR 5004yerl2YeAIEjMvTLEkNOy3uxp4Rw8OlaAfqtYF+KAPyQslwoH2Epl5P2USiuU o7Jlc6hLSCjKkHXzkIUFeyWre9oI7cMfWt+7MzdJvjMJs+HSxZPAH2/BKJWRAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRjfzxvSk+uxDiw 6nNYgnQvnhBvizAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNzYzMjZFRTg1OEUyRkUxMDk0MjRGMzY3 NUUzNUVDNThFRkVBNjYzQ0FCQzJDNTkzQjBBMDEyRkI1QTk4NkMwMy8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy83NjMyNkVFODU4RTJGRTEwOTQyNEYzNjc1RTM1RUM1OEVGRUE2NjNDQUJD MkM1OTNCMEEwMTJGQjVBOTg2QzAzLzAvNjM3RjNDNkY0QTRGQUVDNDM4QjBFQTcz NTg4Mjc0MkY5RTEwNkY4Qi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLeTcMA0EAgAC MAcDBQAoAyUgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQRvDANBgkqhkiG9w0B AQsFAAOCAQEALsNp1ZXbmuiaCEYJGjS1isSO3XR9qxamw+wnyKlY1GFLFTJQgaj2 OtY6iIPnQa3/Ql1gzT+yGyOzxrrRqoMPrKLnxiLVVjcfPmlvSAlvaZfzRKAVRQZx YUXs0oxslevQqgUbTTSdeGQBxLGoBkdiS690UIHeygXD+GQXq3aYmSmsAGzorTz5 AUsuIxfTybtwlcpOLhWe5aLmLs9fhWO7jfpGd4cAzTZE1xabV1Tvj2JhlDtQwf/i DkbBxUxFQkTTsLkS7oKEU389HJCYDIYe8qqw+qzOei/kC1HzL9fHul25SiChmwxc O8XKt4mQOyzKyWlSFyMxmXRlPG+MMn3qlw== -----END CERTIFICATE-----Generated at Sun Oct 26 09:06:48 2025 by rpki-client