$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78DB9B853B894970FDA0B31FC3D80A965749E569.cer File: 78DB9B853B894970FDA0B31FC3D80A965749E569.cer (raw, json) Hash identifier: uGquKWtJqVdnbOIB7nBwb1hEzuaI9RJMHdpQQ/EvfE8= Subject key identifier: 78:DB:9B:85:3B:89:49:70:FD:A0:B3:1F:C3:D8:0A:96:57:49:E5:69 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 68DDAA93B88B0963172D32ACFD112F725DC11AB5 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/5976D519B5A542B2BCBF2249EB926C15B1C77C2DA9F38290FF163291DA390DB8/0/78DB9B853B894970FDA0B31FC3D80A965749E569.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/5976D519B5A542B2BCBF2249EB926C15B1C77C2DA9F38290FF163291DA390DB8/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Thu 06 Feb 2025 02:29:53 +0000 Certificate not after: Thu 05 Feb 2026 02:34:53 +0000 Subordinate resources: AS: 267734 IP: 45.165.112.0/22 IP: 2803:f9a0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 27 Oct 2025 11:10:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:dd:aa:93:b8:8b:09:63:17:2d:32:ac:fd:11:2f:72:5d:c1:1a:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 6 02:29:53 2025 GMT Not After : Feb 5 02:34:53 2026 GMT Subject: CN=78DB9B853B894970FDA0B31FC3D80A965749E569 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f4:99:c2:ba:17:94:f5:12:cf:2a:0e:01:87: 81:d2:2a:55:d7:ba:6a:d0:51:d2:6c:6a:a8:59:aa: d7:b6:f5:fc:3e:67:d8:f5:b2:2a:80:e3:12:ba:c2: cf:ff:3a:9c:19:dc:86:f7:a3:02:22:79:4b:43:c2: a7:fe:10:ab:52:ec:9c:8e:79:d7:3d:72:5e:82:8d: 32:54:c7:7d:9b:32:de:fe:a9:a1:9d:8c:aa:ed:b7: f5:fb:aa:f5:07:44:f6:cd:50:d7:4f:72:e9:86:00: 04:96:ff:42:33:42:b1:5f:aa:ac:8c:17:29:73:4b: e5:b2:7e:e5:37:ca:ea:3f:4d:e6:3a:48:d5:49:d0: a7:c3:f7:bc:6d:f5:5f:d0:d0:21:26:00:ce:f0:d9: e6:ca:8b:14:82:e2:73:72:59:a0:04:77:d8:2e:ac: 65:ae:fe:5c:37:d1:34:c0:82:fe:86:d0:66:ac:8f: bb:b0:55:11:27:87:8f:6f:a3:bf:69:a5:ab:80:44: 40:ed:20:c8:90:02:6f:6a:5b:5c:7a:66:5e:e0:47: 0d:22:c1:52:6e:d1:c6:08:4c:07:c1:60:42:ff:25: 4a:55:3e:86:d2:c0:b7:1b:9c:bb:12:ff:0f:43:1d: e3:64:97:c2:ee:56:34:ca:49:ec:f3:fe:ce:47:35: 5e:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 78:DB:9B:85:3B:89:49:70:FD:A0:B3:1F:C3:D8:0A:96:57:49:E5:69 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/5976D519B5A542B2BCBF2249EB926C15B1C77C2DA9F38290FF163291DA390DB8/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/5976D519B5A542B2BCBF2249EB926C15B1C77C2DA9F38290FF163291DA390DB8/0/78DB9B853B894970FDA0B31FC3D80A965749E569.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.165.112.0/22 IPv6: 2803:f9a0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267734 Signature Algorithm: sha256WithRSAEncryption c0:1f:14:cb:fc:06:ef:13:b2:1a:34:c0:9b:92:7b:20:e7:b3: 7d:61:02:7f:f8:78:83:6f:43:91:c7:df:c6:c8:f0:6c:67:12: 79:01:cf:82:66:9e:e2:f3:b2:bb:4f:d5:17:49:9a:ec:cc:3c: 2d:fa:60:94:88:af:50:c6:74:5c:05:61:5e:36:08:89:ba:1e: dd:a9:08:4a:d8:90:e8:f8:a7:36:cb:03:ef:12:05:40:73:12: 8d:ac:8d:ce:6b:9d:9f:ab:1d:5a:81:ad:ed:d6:e8:8d:22:43: b8:a9:11:ab:52:ff:d7:7d:41:23:8f:e7:07:a8:56:cf:b0:68: 8a:70:88:68:5e:17:69:74:4c:32:16:ce:ab:f3:41:25:d5:57: 4d:e1:c0:a5:ed:f7:1c:1c:a0:d6:02:7b:e1:4f:27:c9:00:eb: ab:4c:1d:23:0d:25:bf:b1:b9:3d:3d:f3:d9:aa:b7:35:bc:a3: dd:1f:b1:9e:d3:ca:20:a6:07:6a:86:0d:10:52:fe:fb:79:14: 14:6d:f6:94:fd:f7:d3:b6:87:5c:dc:3d:b1:cc:1c:a3:d6:12: a6:93:6f:d2:79:12:79:82:7d:ee:29:75:2c:47:bb:40:0d:b6: 03:27:f1:21:ed:52:b6:4a:ff:a6:07:3b:21:25:8c:d0:a5:f3: d3:7b:62:67 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUaN2qk7iLCWMXLTKs/REvcl3BGrUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDYwMjI5NTNaFw0yNjAyMDUwMjM0NTNaMDMxMTAvBgNV BAMTKDc4REI5Qjg1M0I4OTQ5NzBGREEwQjMxRkMzRDgwQTk2NTc0OUU1NjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ9JnCuheU9RLPKg4Bh4HSKlXX umrQUdJsaqhZqte29fw+Z9j1siqA4xK6ws//OpwZ3Ib3owIieUtDwqf+EKtS7JyO edc9cl6CjTJUx32bMt7+qaGdjKrtt/X7qvUHRPbNUNdPcumGAASW/0IzQrFfqqyM FylzS+WyfuU3yuo/TeY6SNVJ0KfD97xt9V/Q0CEmAM7w2ebKixSC4nNyWaAEd9gu rGWu/lw30TTAgv6G0Gasj7uwVREnh49vo79ppauAREDtIMiQAm9qW1x6Zl7gRw0i wVJu0cYITAfBYEL/JUpVPobSwLcbnLsS/w9DHeNkl8LuVjTKSezz/s5HNV7rAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR425uFO4lJcP2g sx/D2AqWV0nlaTAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNTk3NkQ1MTlCNUE1NDJCMkJDQkYyMjQ5 RUI5MjZDMTVCMUM3N0MyREE5RjM4MjkwRkYxNjMyOTFEQTM5MERCOC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy81OTc2RDUxOUI1QTU0MkIyQkNCRjIyNDlFQjkyNkMxNUIxQzc3QzJEQTlG MzgyOTBGRjE2MzI5MURBMzkwREI4LzAvNzhEQjlCODUzQjg5NDk3MEZEQTBCMzFG QzNEODBBOTY1NzQ5RTU2OS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLaVwMA0EAgAC MAcDBQAoA/mgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQV1jANBgkqhkiG9w0B AQsFAAOCAQEAwB8Uy/wG7xOyGjTAm5J7IOezfWECf/h4g29DkcffxsjwbGcSeQHP gmae4vOyu0/VF0ma7Mw8LfpglIivUMZ0XAVhXjYIiboe3akIStiQ6PinNssD7xIF QHMSjayNzmudn6sdWoGt7dbojSJDuKkRq1L/131BI4/nB6hWz7BoinCIaF4XaXRM MhbOq/NBJdVXTeHApe33HByg1gJ74U8nyQDrq0wdIw0lv7G5PT3z2aq3Nbyj3R+x ntPKIKYHaoYNEFL++3kUFG32lP3307aHXNw9scwco9YSppNv0nkSeYJ97il1LEe7 QA22AyfxIe1Stkr/pgc7ISWM0KXz03tiZw== -----END CERTIFICATE-----Generated at Thu Oct 23 09:04:59 2025 by rpki-client