$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8731934F50EFF6B6DBAA4DFB4F709849DE02FFB1.cer File: 8731934F50EFF6B6DBAA4DFB4F709849DE02FFB1.cer (raw, json) Hash identifier: lEfEOe8wM1664qDDgFAupNpTTN5ZQ3JkDauNP+ypC6k= Subject key identifier: 87:31:93:4F:50:EF:F6:B6:DB:AA:4D:FB:4F:70:98:49:DE:02:FF:B1 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 20BDC30DC2EF2FD7F9F044D8804AFF10BA1C50BD Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/5ED81E3C41EC842A2DCCA01F3F27C3D303FE9AB92540B9A025C9015D06A59906/0/8731934F50EFF6B6DBAA4DFB4F709849DE02FFB1.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/5ED81E3C41EC842A2DCCA01F3F27C3D303FE9AB92540B9A025C9015D06A59906/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 11:31:44 +0000 Certificate not after: Wed 04 Feb 2026 11:36:44 +0000 Subordinate resources: AS: 267738 IP: 45.167.168.0/22 IP: 2803:6da0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 29 Oct 2025 22:57:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:bd:c3:0d:c2:ef:2f:d7:f9:f0:44:d8:80:4a:ff:10:ba:1c:50:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 11:31:44 2025 GMT Not After : Feb 4 11:36:44 2026 GMT Subject: CN=8731934F50EFF6B6DBAA4DFB4F709849DE02FFB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:e9:9f:00:59:62:21:9b:a4:05:0f:12:e8:ef: 05:ca:2c:66:7a:e9:ad:a1:3d:66:55:da:9f:cb:f5: 0c:45:de:df:8d:5d:1f:e6:c2:3f:77:93:95:f8:d8: 70:1c:fe:1d:bf:76:99:d1:cb:f6:ba:20:96:c3:b1: 2a:1c:12:3c:a6:0f:b8:28:f4:cf:b0:e1:82:8d:7c: ea:16:79:f6:aa:c8:e6:24:a2:0b:1e:4f:f2:ee:47: c7:80:1c:62:de:39:ba:43:1b:9e:af:0c:07:1b:f4: ee:fc:3e:20:bd:cd:db:74:4f:c7:0a:0a:ba:a9:8f: b5:a0:ea:62:83:8b:58:d7:de:90:ae:71:87:8e:7b: 83:f3:7a:2d:52:0e:21:df:5c:8f:8b:96:9f:17:70: af:a7:a0:3a:7f:59:22:0f:12:0e:9b:9a:6e:35:c2: 82:ba:b0:06:30:27:20:65:ea:a2:99:d8:1f:51:ff: a0:03:2f:6f:2c:56:77:80:44:90:34:68:30:f1:36: b6:70:3f:2a:b7:76:5e:30:55:c6:24:b9:1b:28:ab: f4:3d:06:da:77:02:da:90:19:d0:6e:3c:f5:d0:be: 7b:d3:bd:d5:05:70:32:a6:a0:3f:3a:5c:4b:ea:bc: ba:dd:2f:91:89:06:7e:7a:c1:84:66:42:46:79:8e: 61:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 87:31:93:4F:50:EF:F6:B6:DB:AA:4D:FB:4F:70:98:49:DE:02:FF:B1 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/5ED81E3C41EC842A2DCCA01F3F27C3D303FE9AB92540B9A025C9015D06A59906/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/5ED81E3C41EC842A2DCCA01F3F27C3D303FE9AB92540B9A025C9015D06A59906/0/8731934F50EFF6B6DBAA4DFB4F709849DE02FFB1.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.167.168.0/22 IPv6: 2803:6da0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267738 Signature Algorithm: sha256WithRSAEncryption 81:d3:3e:21:18:68:31:74:16:b0:84:d5:c5:73:bc:60:56:54: 60:24:64:09:5a:69:1f:7b:b1:85:a4:a3:7b:37:ae:8c:9c:23: 8c:91:d4:71:d5:2e:c6:bd:c3:9c:e8:da:48:dc:82:69:fc:e5: 32:38:95:ea:4c:3c:8f:c9:ce:e4:29:7a:e5:3b:ac:6b:2b:54: 62:a1:4a:e4:36:a2:3b:6d:f6:7c:80:25:8f:bf:b6:b8:23:e4: 0b:07:0e:76:ef:ea:39:08:b5:ef:c6:83:f6:fd:50:db:eb:bc: d9:86:16:e3:19:42:a0:b2:01:5f:08:db:fd:22:97:54:e2:05: 96:a7:a8:4b:7c:4f:cf:63:b2:e5:41:fe:68:4b:c9:38:d0:d6: 1f:38:93:c8:e0:13:81:92:53:3b:a4:73:d1:8d:13:1d:87:e7: 66:d3:9f:b7:55:ce:89:5a:2b:6b:de:d9:37:ca:e5:53:31:c9: 1b:97:9b:e8:0f:a1:1c:4c:10:1e:9d:e2:a4:0f:2b:d5:76:d9: 59:f6:7d:2a:b4:10:39:11:a2:2c:25:ec:0f:e0:3e:28:1b:e5: d7:b4:17:9b:f8:25:eb:3f:6d:53:80:56:28:3f:34:8a:03:79: c1:16:b5:db:7a:a4:20:51:78:9b:81:2f:66:b7:4e:f7:cb:a2: 64:44:ba:4b -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUIL3DDcLvL9f58ETYgEr/ELocUL0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUxMTMxNDRaFw0yNjAyMDQxMTM2NDRaMDMxMTAvBgNV BAMTKDg3MzE5MzRGNTBFRkY2QjZEQkFBNERGQjRGNzA5ODQ5REUwMkZGQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT6Z8AWWIhm6QFDxLo7wXKLGZ6 6a2hPWZV2p/L9QxF3t+NXR/mwj93k5X42HAc/h2/dpnRy/a6IJbDsSocEjymD7go 9M+w4YKNfOoWefaqyOYkogseT/LuR8eAHGLeObpDG56vDAcb9O78PiC9zdt0T8cK Crqpj7Wg6mKDi1jX3pCucYeOe4Pzei1SDiHfXI+Llp8XcK+noDp/WSIPEg6bmm41 woK6sAYwJyBl6qKZ2B9R/6ADL28sVneARJA0aDDxNrZwPyq3dl4wVcYkuRsoq/Q9 Btp3AtqQGdBuPPXQvnvTvdUFcDKmoD86XEvqvLrdL5GJBn56wYRmQkZ5jmHlAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSHMZNPUO/2ttuq TftPcJhJ3gL/sTAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNUVEODFFM0M0MUVDODQyQTJEQ0NBMDFG M0YyN0MzRDMwM0ZFOUFCOTI1NDBCOUEwMjVDOTAxNUQwNkE1OTkwNi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy81RUQ4MUUzQzQxRUM4NDJBMkRDQ0EwMUYzRjI3QzNEMzAzRkU5QUI5MjU0 MEI5QTAyNUM5MDE1RDA2QTU5OTA2LzAvODczMTkzNEY1MEVGRjZCNkRCQUE0REZC NEY3MDk4NDlERTAyRkZCMS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLaeoMA0EAgAC MAcDBQAoA22gMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQV2jANBgkqhkiG9w0B AQsFAAOCAQEAgdM+IRhoMXQWsITVxXO8YFZUYCRkCVppH3uxhaSjezeujJwjjJHU cdUuxr3DnOjaSNyCafzlMjiV6kw8j8nO5Cl65TusaytUYqFK5DaiO232fIAlj7+2 uCPkCwcOdu/qOQi178aD9v1Q2+u82YYW4xlCoLIBXwjb/SKXVOIFlqeoS3xPz2Oy 5UH+aEvJONDWHziTyOATgZJTO6Rz0Y0THYfnZtOft1XOiVora97ZN8rlUzHJG5eb 6A+hHEwQHp3ipA8r1XbZWfZ9KrQQORGiLCXsD+A+KBvl17QXm/gl6z9tU4BWKD80 igN5wRa123qkIFF4m4EvZrdO98uiZES6Sw== -----END CERTIFICATE-----Generated at Sun Oct 26 12:09:11 2025 by rpki-client