$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer File: 8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer (raw, json) Hash identifier: 6K+3Xela3Q1LjP+6mAHIOW7esyvswythtpKL/KoydLc= Subject key identifier: 8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 169BA3018E690DF295ADF18757810AFE4297BB2B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 04:30:35 +0000 Certificate not after: Wed 04 Feb 2026 04:35:35 +0000 Subordinate resources: AS: 52323 AS: 269752 IP: 181.16.128.0/17 IP: 2800:600::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 29 Oct 2025 22:57:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:9b:a3:01:8e:69:0d:f2:95:ad:f1:87:57:81:0a:fe:42:97:bb:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 04:30:35 2025 GMT Not After : Feb 4 04:35:35 2026 GMT Subject: CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:73:0c:58:f9:37:a9:b2:0e:65:41:64:4d:0b: d5:1b:31:c0:3a:64:76:a1:26:0d:e8:60:14:c7:2f: 74:6c:c0:a1:f4:6d:c4:c5:ed:df:ed:a3:58:b8:79: 7e:df:17:94:7e:cb:04:52:70:87:9d:99:dd:83:59: 25:5a:47:5e:f7:e2:b1:c9:88:35:2b:39:6f:4a:c0: 94:2a:c3:c3:4f:89:22:85:cf:fb:62:38:f8:59:6b: 2f:18:33:5c:08:e3:30:9e:ce:eb:e1:be:3f:c8:d7: 86:9d:27:ff:6a:63:50:a2:e8:4e:a2:d9:a1:77:d9: 38:e1:be:5a:f0:11:c9:42:df:31:e5:f2:75:18:9e: 37:2d:b8:f9:e9:b6:36:f6:07:9c:32:6a:1b:d7:10: 09:67:c5:15:5a:14:aa:c3:18:fa:ae:b9:fb:3e:78: 33:1a:5c:df:0e:f8:38:62:bc:77:21:f8:46:70:f9: aa:55:3e:1d:62:a6:41:09:95:db:39:c7:ae:70:71: 41:cc:c2:20:95:29:ed:43:09:5b:40:15:dd:27:d3: 47:5a:72:03:cc:cf:03:2e:7c:39:b6:3d:1a:4e:50: 27:b9:65:6a:35:1c:f3:a8:b1:51:87:cd:ff:08:3c: af:3c:3c:99:bc:e2:00:93:41:d7:7b:9d:16:31:56: a3:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 181.16.128.0/17 IPv6: 2800:600::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52323 269752 Signature Algorithm: sha256WithRSAEncryption a1:76:93:6c:d5:2e:71:18:b0:c0:f5:e7:c9:f0:00:d9:df:ec: 77:8b:04:fb:e6:18:0e:16:d6:1b:43:44:25:07:ba:e9:bc:03: 06:db:0c:7a:8b:ca:29:3a:6c:66:d2:b8:57:89:3b:65:da:e9: 85:6d:fe:27:04:2b:ae:bb:ca:e8:5c:71:37:5e:d1:c0:41:d3: cf:4e:1f:5d:79:9d:e3:d3:3a:50:e0:04:8b:f7:60:6f:06:57: 03:d3:d6:08:b3:4b:b9:2f:5d:f4:63:a4:01:3d:8a:43:a2:a3: 6a:30:e4:11:71:64:b8:26:50:64:8d:b4:9f:9d:dd:8a:d8:85: 45:86:a8:60:e5:64:1d:44:4b:a6:5a:52:f0:c5:b6:86:25:e6: 27:c3:74:37:f7:d1:82:34:a9:77:bd:85:18:ba:ab:97:9e:b2: b6:4c:03:3c:65:96:81:4e:d0:cc:53:4d:00:14:24:d3:14:1e: bd:ae:c7:d7:62:e4:f7:cf:14:e8:9d:b3:94:c3:54:74:dd:00: 07:e7:f2:66:7a:e1:21:3b:04:d4:b0:96:ac:03:28:ac:f2:9f: cd:e0:af:5d:61:1b:4a:d3:fb:db:7f:95:23:b1:c3:51:3c:bc: e4:16:34:57:be:37:90:a1:19:49:28:b4:97:fa:ce:c6:e1:84: 7c:ef:c7:3d -----BEGIN CERTIFICATE----- MIIGqjCCBZKgAwIBAgIUFpujAY5pDfKVrfGHV4EK/kKXuyswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUwNDMwMzVaFw0yNjAyMDQwNDM1MzVaMDMxMTAvBgNV BAMTKDhFNkI1RjU2QkZCRTY5Rjc0Q0U3QjAxMzNFQkU5MTg4MDBENTU2NjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBcwxY+Tepsg5lQWRNC9UbMcA6 ZHahJg3oYBTHL3RswKH0bcTF7d/to1i4eX7fF5R+ywRScIedmd2DWSVaR1734rHJ iDUrOW9KwJQqw8NPiSKFz/tiOPhZay8YM1wI4zCezuvhvj/I14adJ/9qY1Ci6E6i 2aF32TjhvlrwEclC3zHl8nUYnjctuPnptjb2B5wyahvXEAlnxRVaFKrDGPquufs+ eDMaXN8O+DhivHch+EZw+apVPh1ipkEJlds5x65wcUHMwiCVKe1DCVtAFd0n00da cgPMzwMufDm2PRpOUCe5ZWo1HPOosVGHzf8IPK88PJm84gCTQdd7nRYxVqPlAgMB AAGjggO0MIIDsDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSOa19Wv75p90zn sBM+vpGIANVWYjAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTYxMjQ5NEFBNEEzOTRDQ0U4NzBGRkJD QUI3RENFQTU4NDRCQUY1MUMyNzMxNkM0NTI5MkIzOTU4NDlFMEJDQy8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9FNjEyNDk0QUE0QTM5NENDRTg3MEZGQkNBQjdEQ0VBNTg0NEJBRjUxQzI3 MzE2QzQ1MjkyQjM5NTg0OUUwQkNDLzAvOEU2QjVGNTZCRkJFNjlGNzRDRTdCMDEz M0VCRTkxODgwMEQ1NTY2Mi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQHtRCAMA0EAgAC MAcDBQAoAAYAMB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwDMYwIDBB24MA0GCSqG SIb3DQEBCwUAA4IBAQChdpNs1S5xGLDA9efJ8ADZ3+x3iwT75hgOFtYbQ0QlB7rp vAMG2wx6i8opOmxm0rhXiTtl2umFbf4nBCuuu8roXHE3XtHAQdPPTh9deZ3j0zpQ 4ASL92BvBlcD09YIs0u5L130Y6QBPYpDoqNqMOQRcWS4JlBkjbSfnd2K2IVFhqhg 5WQdREumWlLwxbaGJeYnw3Q399GCNKl3vYUYuquXnrK2TAM8ZZaBTtDMU00AFCTT FB69rsfXYuT3zxTonbOUw1R03QAH5/JmeuEhOwTUsJasAyis8p/N4K9dYRtK0/vb f5UjscNRPLzkFjRXvjeQoRlJKLSX+s7G4YR878c9 -----END CERTIFICATE-----Generated at Sun Oct 26 09:06:30 2025 by rpki-client