$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/70AA6E04C5764B26B4887EF1675B2E9C4EF84863.cer File: 70AA6E04C5764B26B4887EF1675B2E9C4EF84863.cer (raw, json) Hash identifier: PGVcHtwuyRL7AMfML08r5xdK1SV9885ziyT8hsvkz98= Subject key identifier: 70:AA:6E:04:C5:76:4B:26:B4:88:7E:F1:67:5B:2E:9C:4E:F8:48:63 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 111CA9C88FB1EEBCE75BA1547A137AD9FB1F63AC Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/91F567FEDE79E51A1AC53027E7D2AFF210379EB44F0F42B253ED4465152E33FD/0/70AA6E04C5764B26B4887EF1675B2E9C4EF84863.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/91F567FEDE79E51A1AC53027E7D2AFF210379EB44F0F42B253ED4465152E33FD/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 16 Sep 2025 03:31:00 +0000 Certificate not after: Tue 15 Sep 2026 03:36:00 +0000 Subordinate resources: AS: 272937 IP: 45.172.179.0/24 IP: 2803:3190::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 11 Nov 2025 05:17:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:1c:a9:c8:8f:b1:ee:bc:e7:5b:a1:54:7a:13:7a:d9:fb:1f:63:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Sep 16 03:31:00 2025 GMT Not After : Sep 15 03:36:00 2026 GMT Subject: CN=70AA6E04C5764B26B4887EF1675B2E9C4EF84863 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:23:59:83:db:a6:ee:cb:8e:7b:f8:08:1b:d9: 14:ed:36:27:5d:19:ae:d8:9d:27:8b:43:4d:a4:6a: 27:c1:e1:fe:eb:8c:bf:a9:5b:09:45:bd:a3:29:8b: 31:52:26:37:66:ad:83:43:96:2b:73:fb:8b:07:47: df:4f:57:b5:e6:3c:88:9d:6c:f4:71:f9:e5:0f:ab: ce:7f:36:77:86:64:67:7b:b9:4b:d2:9d:e6:c0:0a: 6b:a7:5d:55:2a:6c:7a:99:16:9c:cf:72:7c:c1:87: 40:b8:45:39:1f:d7:7e:1f:5c:a7:80:d8:8e:4f:8f: 28:92:0a:69:2f:cf:f0:4c:66:4c:74:29:ed:c3:10: a7:c4:d7:48:04:61:fb:02:cd:02:e8:2e:a2:11:4a: b6:f6:6d:76:e6:27:c4:dd:74:84:49:54:dc:4c:d9: 8c:d5:15:b3:5d:68:36:4c:6a:89:5c:67:c3:56:63: e6:f9:e8:60:71:c9:61:fb:ce:69:28:fc:2b:40:56: 8f:a0:df:91:65:c0:31:ac:22:7b:7e:8c:aa:64:2d: d8:b5:26:a0:a2:bd:b0:68:d4:0d:02:42:95:35:f7: 78:cb:9d:f7:f4:42:93:a9:a6:a8:3c:e1:a2:c8:2e: 63:2c:7a:50:45:72:15:1e:a8:77:23:4c:70:1c:f3: dd:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 70:AA:6E:04:C5:76:4B:26:B4:88:7E:F1:67:5B:2E:9C:4E:F8:48:63 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/91F567FEDE79E51A1AC53027E7D2AFF210379EB44F0F42B253ED4465152E33FD/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/91F567FEDE79E51A1AC53027E7D2AFF210379EB44F0F42B253ED4465152E33FD/0/70AA6E04C5764B26B4887EF1675B2E9C4EF84863.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.172.179.0/24 IPv6: 2803:3190::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 272937 Signature Algorithm: sha256WithRSAEncryption 75:1a:31:2a:0f:90:53:51:62:c8:ab:2a:e4:71:6b:31:e7:af: 96:ea:12:1e:d1:3d:d9:fb:20:fd:0a:38:07:16:0b:dd:ad:aa: d3:66:65:07:8f:37:07:57:b4:71:e7:5e:0f:0f:76:1f:d0:7c: db:6f:c6:06:ff:c9:ea:c2:8c:40:f6:95:82:56:9b:5c:1d:67: 1b:9d:f8:8f:06:05:aa:1d:c9:c9:b9:03:1c:73:bd:46:50:8e: 7a:8d:cc:07:89:d8:26:e9:c7:11:b6:ad:1c:f9:77:f2:7a:a1: d8:10:37:cc:65:a0:05:03:33:d4:3c:6d:ea:ad:0a:19:87:4e: 2d:74:31:99:ba:d5:7f:76:64:ff:e5:14:9b:8e:ef:0a:07:60: 8b:0b:26:95:dd:8c:c3:61:ca:bf:3b:96:21:74:89:0f:2d:3d: 78:13:07:e3:19:e2:5e:7c:3c:db:27:9e:2c:fe:f6:15:a6:ef: fc:58:c6:34:5c:9c:0c:5f:8b:60:fa:8e:87:f8:24:a8:bf:23: f1:31:d0:de:ab:44:02:99:00:65:c5:a7:31:c2:e5:31:18:14: 89:f9:21:36:01:4b:80:f5:10:f5:66:76:60:60:2d:2d:3a:d6: e7:95:be:c6:5a:5b:e3:ca:53:21:2d:c7:65:51:26:04:c1:68: d5:7b:99:fe -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUERypyI+x7rznW6FUehN62fsfY6wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTA5MTYwMzMxMDBaFw0yNjA5MTUwMzM2MDBaMDMxMTAvBgNV BAMTKDcwQUE2RTA0QzU3NjRCMjZCNDg4N0VGMTY3NUIyRTlDNEVGODQ4NjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLI1mD26buy457+Agb2RTtNidd Ga7YnSeLQ02kaifB4f7rjL+pWwlFvaMpizFSJjdmrYNDlitz+4sHR99PV7XmPIid bPRx+eUPq85/NneGZGd7uUvSnebACmunXVUqbHqZFpzPcnzBh0C4RTkf134fXKeA 2I5PjyiSCmkvz/BMZkx0Ke3DEKfE10gEYfsCzQLoLqIRSrb2bXbmJ8TddIRJVNxM 2YzVFbNdaDZMaolcZ8NWY+b56GBxyWH7zmko/CtAVo+g35FlwDGsInt+jKpkLdi1 JqCivbBo1A0CQpU193jLnff0QpOppqg84aLILmMselBFchUeqHcjTHAc893TAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRwqm4ExXZLJrSI fvFnWy6cTvhIYzAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvOTFGNTY3RkVERTc5RTUxQTFBQzUzMDI3 RTdEMkFGRjIxMDM3OUVCNDRGMEY0MkIyNTNFRDQ0NjUxNTJFMzNGRC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy85MUY1NjdGRURFNzlFNTFBMUFDNTMwMjdFN0QyQUZGMjEwMzc5RUI0NEYw RjQyQjI1M0VENDQ2NTE1MkUzM0ZELzAvNzBBQTZFMDRDNTc2NEIyNkI0ODg3RUYx Njc1QjJFOUM0RUY4NDg2My5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQALayzMA0EAgAC MAcDBQAoAzGQMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQqKTANBgkqhkiG9w0B AQsFAAOCAQEAdRoxKg+QU1FiyKsq5HFrMeevluoSHtE92fsg/Qo4BxYL3a2q02Zl B483B1e0cedeDw92H9B822/GBv/J6sKMQPaVglabXB1nG534jwYFqh3JybkDHHO9 RlCOeo3MB4nYJunHEbatHPl38nqh2BA3zGWgBQMz1Dxt6q0KGYdOLXQxmbrVf3Zk /+UUm47vCgdgiwsmld2Mw2HKvzuWIXSJDy09eBMH4xniXnw82yeeLP72Fabv/FjG NFycDF+LYPqOh/gkqL8j8THQ3qtEApkAZcWnMcLlMRgUifkhNgFLgPUQ9WZ2YGAt LTrW55W+xlpb48pTIS3HZVEmBMFo1XuZ/g== -----END CERTIFICATE-----Generated at Thu Nov 6 21:32:08 2025 by rpki-client