$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78533EB3FC1F0B8C193CBD87000A8F6754AAFE91.cer File: 78533EB3FC1F0B8C193CBD87000A8F6754AAFE91.cer (raw, json) Hash identifier: PuUVLJBE9Qg3IU55UKaUTtiPcTqV+sK3MyWrlkvPuvc= Subject key identifier: 78:53:3E:B3:FC:1F:0B:8C:19:3C:BD:87:00:0A:8F:67:54:AA:FE:91 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 23C97030503E5FD703E84ABD0F430FDE5CA1022D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/9F9F582B5E6E3D9ADB07291B00AB30EF4C84E211575C500C933DD3766C6B0D85/0/78533EB3FC1F0B8C193CBD87000A8F6754AAFE91.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/9F9F582B5E6E3D9ADB07291B00AB30EF4C84E211575C500C933DD3766C6B0D85/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 06:15:16 +0000 Certificate not after: Wed 04 Feb 2026 06:20:16 +0000 Subordinate resources: AS: 27920 IP: 181.115.0.0/17 IP: 190.105.128.0/20 IP: 190.107.128.0/19 IP: 200.107.120.0/21 IP: 201.190.0.0/18 IP: 2803:4600::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 05 Jun 2025 09:59:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:c9:70:30:50:3e:5f:d7:03:e8:4a:bd:0f:43:0f:de:5c:a1:02:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 06:15:16 2025 GMT Not After : Feb 4 06:20:16 2026 GMT Subject: CN=78533EB3FC1F0B8C193CBD87000A8F6754AAFE91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:33:f1:65:6a:0f:18:4e:00:81:3b:a0:74:33: 14:2c:83:1e:70:78:7d:bf:df:a3:b6:4d:37:62:02: 3f:56:b6:66:99:ee:31:ee:8d:f0:bb:e0:ae:a8:28: 1a:8c:aa:9c:de:fa:5f:14:8c:23:f9:fc:27:51:66: dd:b8:cf:2e:67:43:48:cd:aa:e3:59:79:19:91:c6: 84:28:b3:ff:eb:bc:52:59:ee:32:02:4c:51:c7:ea: ae:f5:d9:14:06:c6:e5:3b:ff:a8:6d:01:a9:46:e8: b3:07:40:8b:d2:0d:7a:49:a3:80:a0:44:8f:ed:66: 68:df:72:e5:0b:93:ba:cc:80:d8:95:34:fa:94:39: 41:f4:e0:e7:ed:30:4d:e4:5d:f3:79:a7:4e:8b:9a: 93:e1:be:94:53:8d:43:ee:2d:79:19:2d:dc:4c:5a: fe:41:99:86:dd:7b:6d:1b:63:46:74:df:4d:56:31: fa:a7:52:d2:94:80:74:89:f9:5a:cf:cb:d2:84:4e: 4e:48:dc:8b:7c:e2:56:15:a9:f2:aa:d3:86:c9:89: 05:91:08:b9:b9:ec:e9:d7:53:3f:1a:88:63:98:9e: 93:8b:9f:cb:fa:55:c7:80:29:b0:6c:55:cd:98:bf: 38:d8:23:14:f8:43:bc:a8:39:91:88:d2:4c:f8:e1: 67:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 78:53:3E:B3:FC:1F:0B:8C:19:3C:BD:87:00:0A:8F:67:54:AA:FE:91 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/9F9F582B5E6E3D9ADB07291B00AB30EF4C84E211575C500C933DD3766C6B0D85/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/9F9F582B5E6E3D9ADB07291B00AB30EF4C84E211575C500C933DD3766C6B0D85/0/78533EB3FC1F0B8C193CBD87000A8F6754AAFE91.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 181.115.0.0/17 190.105.128.0/20 190.107.128.0/19 200.107.120.0/21 201.190.0.0/18 IPv6: 2803:4600::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 27920 Signature Algorithm: sha256WithRSAEncryption 49:f6:b0:ef:e4:cc:a8:c7:7c:ed:2a:cd:96:65:67:47:36:31: 18:b6:a0:d6:08:9c:06:dc:25:cf:c2:b2:f6:af:14:ce:8a:78: c0:66:60:12:f1:27:3d:ac:9d:be:69:87:49:fc:0a:45:bb:61: 27:d8:34:d3:b1:ef:54:1e:82:a5:e8:4e:04:77:d0:7e:e1:8f: a7:33:c0:a3:d3:45:6b:b9:56:f0:ec:90:f2:ac:05:ea:ff:23: d2:7b:6f:f8:f5:86:1e:69:df:14:a6:03:56:b7:a3:f9:92:8b: 4d:92:3a:9e:1d:69:38:84:c2:e2:af:ca:30:9f:60:1e:4d:32: e7:4f:2a:05:30:ab:9c:28:b2:41:b3:8c:cf:d8:50:0b:ef:9b: 32:8a:a5:56:65:5e:bc:b9:c5:6a:e8:2d:09:77:8d:5a:f2:d3: 4e:bd:3d:50:56:a7:2d:76:f2:b2:34:47:09:1d:27:06:e8:f2: 09:bf:9f:6e:ad:81:cc:20:7b:3a:3c:85:cc:8d:22:ce:09:c5: 79:16:e8:bf:f8:e2:e1:ef:85:9b:2b:45:0c:b6:da:b4:d3:b8: a1:57:09:d9:81:b1:e0:3d:75:db:9b:ae:18:fc:43:86:7d:be: c0:49:c3:f6:12:cc:62:72:e0:11:80:3f:20:50:d9:fc:a8:2e: 52:ea:72:7f -----BEGIN CERTIFICATE----- MIIGvDCCBaSgAwIBAgIUI8lwMFA+X9cD6Eq9D0MP3lyhAi0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUwNjE1MTZaFw0yNjAyMDQwNjIwMTZaMDMxMTAvBgNV BAMTKDc4NTMzRUIzRkMxRjBCOEMxOTNDQkQ4NzAwMEE4RjY3NTRBQUZFOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmM/Flag8YTgCBO6B0MxQsgx5w eH2/36O2TTdiAj9WtmaZ7jHujfC74K6oKBqMqpze+l8UjCP5/CdRZt24zy5nQ0jN quNZeRmRxoQos//rvFJZ7jICTFHH6q712RQGxuU7/6htAalG6LMHQIvSDXpJo4Cg RI/tZmjfcuULk7rMgNiVNPqUOUH04OftME3kXfN5p06LmpPhvpRTjUPuLXkZLdxM Wv5BmYbde20bY0Z0301WMfqnUtKUgHSJ+VrPy9KETk5I3It84lYVqfKq04bJiQWR CLm57OnXUz8aiGOYnpOLn8v6VceAKbBsVc2YvzjYIxT4Q7yoOZGI0kz44WeRAgMB AAGjggPGMIIDwjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR4Uz6z/B8LjBk8 vYcACo9nVKr+kTAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvOUY5RjU4MkI1RTZFM0Q5QURCMDcyOTFC MDBBQjMwRUY0Qzg0RTIxMTU3NUM1MDBDOTMzREQzNzY2QzZCMEQ4NS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy85RjlGNTgyQjVFNkUzRDlBREIwNzI5MUIwMEFCMzBFRjRDODRFMjExNTc1 QzUwMEM5MzNERDM3NjZDNkIwRDg1LzAvNzg1MzNFQjNGQzFGMEI4QzE5M0NCRDg3 MDAwQThGNjc1NEFBRkU5MS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQHtXMAAwQEvmmA AwQFvmuAAwQDyGt4AwQGyb4AMA0EAgACMAcDBQAoA0YAMBkGCCsGAQUFBwEIAQH/ BAowCKAGMAQCAm0QMA0GCSqGSIb3DQEBCwUAA4IBAQBJ9rDv5Myox3ztKs2WZWdH NjEYtqDWCJwG3CXPwrL2rxTOinjAZmAS8Sc9rJ2+aYdJ/ApFu2En2DTTse9UHoKl 6E4Ed9B+4Y+nM8Cj00VruVbw7JDyrAXq/yPSe2/49YYead8UpgNWt6P5kotNkjqe HWk4hMLir8own2AeTTLnTyoFMKucKLJBs4zP2FAL75syiqVWZV68ucVq6C0Jd41a 8tNOvT1QVqctdvKyNEcJHScG6PIJv59urYHMIHs6PIXMjSLOCcV5Fui/+OLh74Wb K0UMttq007ihVwnZgbHgPXXbm64Y/EOGfb7AScP2EsxicuARgD8gUNn8qC5S6nJ/ -----END CERTIFICATE-----Generated at Sun Jun 1 08:35:29 2025 by rpki-client