$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8B75AED69EDD3EDCFF669A1AD71F8B9BC53040BE.cer File: 8B75AED69EDD3EDCFF669A1AD71F8B9BC53040BE.cer (raw, json) Hash identifier: sjgu8g+JMeN2zhR1KwQlHX9tzNideK63kRM+IfajACY= Subject key identifier: 8B:75:AE:D6:9E:DD:3E:DC:FF:66:9A:1A:D7:1F:8B:9B:C5:30:40:BE Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 24685B1C32A2B0079BA4D99B36F03F8AA0C6FEAD Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/E92083FBD424D98BB7C69E11CFACDAC1AD2C342444BDF1C410A335BD5BC8602C/0/8B75AED69EDD3EDCFF669A1AD71F8B9BC53040BE.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/E92083FBD424D98BB7C69E11CFACDAC1AD2C342444BDF1C410A335BD5BC8602C/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 23:06:10 +0000 Certificate not after: Wed 04 Feb 2026 23:11:10 +0000 Subordinate resources: AS: 263759 IP: 190.122.188.0/22 IP: 2803:4300::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 29 Oct 2025 22:57:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:68:5b:1c:32:a2:b0:07:9b:a4:d9:9b:36:f0:3f:8a:a0:c6:fe:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 23:06:10 2025 GMT Not After : Feb 4 23:11:10 2026 GMT Subject: CN=8B75AED69EDD3EDCFF669A1AD71F8B9BC53040BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:4b:96:44:ac:bd:ee:4f:ed:91:e8:55:5a:4d: 89:fa:70:1f:39:bc:f0:6d:be:d9:2c:66:ac:1d:49: 36:eb:b4:2a:9c:41:0f:ef:a7:81:fd:dd:4e:6d:de: 58:5d:ab:e8:99:bd:a4:e0:93:7f:46:01:28:cb:a6: b6:09:43:39:ba:c0:de:a7:e2:c7:86:7a:4e:7e:b1: 8e:6f:85:a7:ba:ce:97:c2:ba:32:a6:6d:49:05:56: f0:b2:2c:29:f3:bf:a6:1c:e5:81:01:9a:51:57:4a: b6:37:f6:56:1b:16:71:86:b1:1a:3e:f6:ea:45:fd: 0a:f2:b0:e0:38:99:ec:15:bd:0b:b6:94:e0:ef:62: 3d:73:ce:a2:4a:61:e1:50:1b:aa:9d:12:a4:c7:28: 7c:4e:db:55:4a:93:20:d1:63:05:d0:72:c6:2b:d3: a3:22:17:96:56:76:f5:a2:ff:d8:b9:f6:2f:e3:e5: 06:f0:f8:65:e9:82:5d:89:15:fb:da:aa:0c:55:33: 9f:ff:db:b3:67:b2:86:65:17:ab:2b:c1:ef:6a:6c: 3e:1c:70:e5:88:77:4e:7b:7d:9f:3d:c0:cf:e4:ca: 9b:74:e1:8e:90:30:7c:e4:3b:dd:c0:f9:f7:0d:f5: 79:a3:85:f9:b5:8a:7b:6c:50:f1:95:74:75:31:95: 9c:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8B:75:AE:D6:9E:DD:3E:DC:FF:66:9A:1A:D7:1F:8B:9B:C5:30:40:BE X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/E92083FBD424D98BB7C69E11CFACDAC1AD2C342444BDF1C410A335BD5BC8602C/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/E92083FBD424D98BB7C69E11CFACDAC1AD2C342444BDF1C410A335BD5BC8602C/0/8B75AED69EDD3EDCFF669A1AD71F8B9BC53040BE.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 190.122.188.0/22 IPv6: 2803:4300::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263759 Signature Algorithm: sha256WithRSAEncryption 0c:a1:bc:27:3b:41:75:c2:2d:e6:b1:c7:90:86:64:1e:de:76: 9f:ee:01:27:3a:02:9f:e6:6e:91:b5:66:6d:0a:6e:32:0e:e7: df:aa:06:cf:f6:e4:7a:1a:82:6c:a4:5e:ea:1a:a6:34:e7:f0: 4d:c2:a3:fe:37:a6:71:f1:75:b7:e1:48:f0:0d:65:22:44:15: a4:2e:0b:0a:45:d4:41:e1:ad:5d:d3:47:2c:fb:2a:fa:f1:b6: 8a:d4:d8:1d:a7:16:00:fe:f2:78:8b:b4:46:b3:ee:0f:76:8a: a4:35:79:fd:79:ef:5e:4b:36:d5:a3:83:8c:0e:5a:5d:cf:eb: d9:f3:0b:78:91:60:4c:a3:36:8e:4b:82:3b:ff:30:b8:f1:7e: f2:2c:18:d8:72:0a:2e:5c:db:24:f8:d5:d1:57:45:23:af:56: 63:1a:ec:25:9b:71:b4:91:59:9f:a6:ff:75:45:a9:fc:fe:c6: 92:61:51:49:8b:34:80:09:bf:ed:fc:1e:bd:4d:71:a5:e2:b6: 34:24:76:08:21:18:19:9b:2f:b6:36:4e:be:19:1d:79:f9:6c: 9e:30:27:c3:5b:1d:22:e2:67:a3:2c:ac:31:de:28:29:3f:6b: c1:de:cc:76:4e:e3:96:dd:08:1e:0d:36:fe:4f:40:36:db:09: 67:70:ea:3c -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUJGhbHDKisAebpNmbNvA/iqDG/q0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUyMzA2MTBaFw0yNjAyMDQyMzExMTBaMDMxMTAvBgNV BAMTKDhCNzVBRUQ2OUVERDNFRENGRjY2OUExQUQ3MUY4QjlCQzUzMDQwQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUS5ZErL3uT+2R6FVaTYn6cB85 vPBtvtksZqwdSTbrtCqcQQ/vp4H93U5t3lhdq+iZvaTgk39GASjLprYJQzm6wN6n 4seGek5+sY5vhae6zpfCujKmbUkFVvCyLCnzv6Yc5YEBmlFXSrY39lYbFnGGsRo+ 9upF/QrysOA4mewVvQu2lODvYj1zzqJKYeFQG6qdEqTHKHxO21VKkyDRYwXQcsYr 06MiF5ZWdvWi/9i59i/j5Qbw+GXpgl2JFfvaqgxVM5//27NnsoZlF6srwe9qbD4c cOWId057fZ89wM/kypt04Y6QMHzkO93A+fcN9Xmjhfm1intsUPGVdHUxlZxdAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSLda7Wnt0+3P9m mhrXH4ubxTBAvjAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTkyMDgzRkJENDI0RDk4QkI3QzY5RTEx Q0ZBQ0RBQzFBRDJDMzQyNDQ0QkRGMUM0MTBBMzM1QkQ1QkM4NjAyQy8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9FOTIwODNGQkQ0MjREOThCQjdDNjlFMTFDRkFDREFDMUFEMkMzNDI0NDRC REYxQzQxMEEzMzVCRDVCQzg2MDJDLzAvOEI3NUFFRDY5RUREM0VEQ0ZGNjY5QTFB RDcxRjhCOUJDNTMwNDBCRS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCvnq8MA0EAgAC MAcDBQAoA0MAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQGTzANBgkqhkiG9w0B AQsFAAOCAQEADKG8JztBdcIt5rHHkIZkHt52n+4BJzoCn+ZukbVmbQpuMg7n36oG z/bkehqCbKRe6hqmNOfwTcKj/jemcfF1t+FI8A1lIkQVpC4LCkXUQeGtXdNHLPsq +vG2itTYHacWAP7yeIu0RrPuD3aKpDV5/XnvXks21aODjA5aXc/r2fMLeJFgTKM2 jkuCO/8wuPF+8iwY2HIKLlzbJPjV0VdFI69WYxrsJZtxtJFZn6b/dUWp/P7GkmFR SYs0gAm/7fwevU1xpeK2NCR2CCEYGZsvtjZOvhkdeflsnjAnw1sdIuJnoyysMd4o KT9rwd7Mdk7jlt0IHg02/k9ANtsJZ3DqPA== -----END CERTIFICATE-----Generated at Sun Oct 26 18:34:09 2025 by rpki-client