$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/921EE12BA5D853FB5CAD767EF47D2E0E62A2D437.cer File: 921EE12BA5D853FB5CAD767EF47D2E0E62A2D437.cer (raw, json) Hash identifier: 6TgWiuMuMkUgf55xuywpboXIhatGYvWNWmbyoeRryfw= Subject key identifier: 92:1E:E1:2B:A5:D8:53:FB:5C:AD:76:7E:F4:7D:2E:0E:62:A2:D4:37 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 6DCD575A2296A1B786B1929E1CEE9F7E30633C29 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/5CEE6A499802F08368698010BB5F172F52680D2631E4BE244AE1DC14BF8F267B/0/921EE12BA5D853FB5CAD767EF47D2E0E62A2D437.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/5CEE6A499802F08368698010BB5F172F52680D2631E4BE244AE1DC14BF8F267B/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 26 Aug 2025 12:38:25 +0000 Certificate not after: Tue 25 Aug 2026 12:43:25 +0000 Subordinate resources: AS: 271879 IP: 200.36.159.0/24 IP: 2803:5c10::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 21 Sep 2025 20:18:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:cd:57:5a:22:96:a1:b7:86:b1:92:9e:1c:ee:9f:7e:30:63:3c:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Aug 26 12:38:25 2025 GMT Not After : Aug 25 12:43:25 2026 GMT Subject: CN=921EE12BA5D853FB5CAD767EF47D2E0E62A2D437 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:9e:46:2a:6d:95:7c:fd:c4:ac:86:f9:95:5d: 30:b7:6a:65:f7:11:9f:e8:b4:79:08:cd:e8:49:22: 7e:4c:7e:24:c7:e8:24:3d:2c:cd:e2:09:7f:2e:c4: 12:b4:2c:87:cb:b5:7f:d4:05:ba:5b:a8:cb:f1:0c: b1:91:a7:df:c0:20:f3:ae:4c:65:15:04:d1:56:1b: 06:e5:b9:de:c9:7b:67:48:96:03:33:fc:8a:c4:5b: cf:1a:ba:24:58:4e:bc:0d:41:93:6f:7e:a4:d3:9b: 34:f8:7e:89:0a:c0:6f:27:59:05:55:be:72:f2:6a: 33:92:86:f4:c6:74:b0:5c:0a:27:8b:42:56:08:a8: f9:80:7d:8e:a3:c1:5a:4b:e7:7e:6b:50:61:71:cf: a3:ad:f0:9f:75:aa:94:9e:2e:02:0b:ce:d1:0b:c4: 84:4a:2d:fd:1b:91:5c:1c:dc:24:95:d2:d9:aa:6c: b5:b6:f4:49:ed:44:d4:8e:3b:60:7a:8b:ff:fd:3a: ad:b8:16:3e:16:29:d9:60:e6:da:a6:e1:e6:41:ab: ba:52:03:f0:10:05:24:b8:3b:bc:5f:7a:c7:a6:a9: a6:ec:c3:8e:75:56:f9:98:37:68:d2:07:27:37:03: 4d:01:2a:db:e1:4b:10:60:9d:ef:b2:46:ec:a0:0c: 29:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 92:1E:E1:2B:A5:D8:53:FB:5C:AD:76:7E:F4:7D:2E:0E:62:A2:D4:37 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/5CEE6A499802F08368698010BB5F172F52680D2631E4BE244AE1DC14BF8F267B/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/5CEE6A499802F08368698010BB5F172F52680D2631E4BE244AE1DC14BF8F267B/0/921EE12BA5D853FB5CAD767EF47D2E0E62A2D437.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.36.159.0/24 IPv6: 2803:5c10::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 271879 Signature Algorithm: sha256WithRSAEncryption cd:88:c6:01:53:f4:82:35:03:6d:24:10:fb:74:b1:01:f8:6d: 4f:ee:00:2a:55:24:f1:36:fd:cc:f7:ba:39:08:43:06:78:03: e4:31:24:28:55:b1:22:a7:d5:9b:4c:6c:99:c6:e6:52:15:d8: b3:28:1a:d6:78:aa:76:7f:80:0d:7e:05:68:fb:ae:60:cb:20: e1:ea:b9:13:7e:a9:0e:9e:16:41:6a:fd:87:63:9a:d1:ea:0a: 36:25:ff:f4:16:2d:d9:93:1b:c8:86:4e:7d:7f:c8:6b:fb:9b: 9d:48:2b:21:79:41:aa:f6:23:30:52:ba:95:42:a2:28:55:25: fd:ef:08:d5:86:03:7c:9a:f4:a7:7a:3e:2d:81:6a:24:fe:66: 8f:8c:cd:5b:69:4e:71:a7:24:bd:fc:69:bf:ef:e5:d9:7e:fe: 01:dd:03:b5:b5:f4:2a:bb:c3:51:c2:0f:3d:3a:f3:ea:50:79: 36:5e:29:7a:10:82:5e:ea:3d:43:a2:0d:39:72:8a:4e:9c:8b: 6f:d4:63:75:63:65:8e:26:9b:fc:b7:eb:74:87:45:dc:20:34: 8c:cd:33:31:c9:97:b8:96:a9:99:b4:0d:c5:09:85:1a:74:1e: da:db:ec:7c:f8:db:66:41:db:29:ad:22:a7:ed:35:0c:38:b5: 84:9b:12:68 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUbc1XWiKWobeGsZKeHO6ffjBjPCkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTA4MjYxMjM4MjVaFw0yNjA4MjUxMjQzMjVaMDMxMTAvBgNV BAMTKDkyMUVFMTJCQTVEODUzRkI1Q0FENzY3RUY0N0QyRTBFNjJBMkQ0MzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJnkYqbZV8/cSshvmVXTC3amX3 EZ/otHkIzehJIn5MfiTH6CQ9LM3iCX8uxBK0LIfLtX/UBbpbqMvxDLGRp9/AIPOu TGUVBNFWGwblud7Je2dIlgMz/IrEW88auiRYTrwNQZNvfqTTmzT4fokKwG8nWQVV vnLyajOShvTGdLBcCieLQlYIqPmAfY6jwVpL535rUGFxz6Ot8J91qpSeLgILztEL xIRKLf0bkVwc3CSV0tmqbLW29EntRNSOO2B6i//9Oq24Fj4WKdlg5tqm4eZBq7pS A/AQBSS4O7xfesemqabsw451VvmYN2jSByc3A00BKtvhSxBgne+yRuygDCmlAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSSHuErpdhT+1yt dn70fS4OYqLUNzAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNUNFRTZBNDk5ODAyRjA4MzY4Njk4MDEw QkI1RjE3MkY1MjY4MEQyNjMxRTRCRTI0NEFFMURDMTRCRjhGMjY3Qi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy81Q0VFNkE0OTk4MDJGMDgzNjg2OTgwMTBCQjVGMTcyRjUyNjgwRDI2MzFF NEJFMjQ0QUUxREMxNEJGOEYyNjdCLzAvOTIxRUUxMkJBNUQ4NTNGQjVDQUQ3NjdF RjQ3RDJFMEU2MkEyRDQzNy5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAyCSfMA0EAgAC MAcDBQAoA1wQMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQmBzANBgkqhkiG9w0B AQsFAAOCAQEAzYjGAVP0gjUDbSQQ+3SxAfhtT+4AKlUk8Tb9zPe6OQhDBngD5DEk KFWxIqfVm0xsmcbmUhXYsyga1niqdn+ADX4FaPuuYMsg4eq5E36pDp4WQWr9h2Oa 0eoKNiX/9BYt2ZMbyIZOfX/Ia/ubnUgrIXlBqvYjMFK6lUKiKFUl/e8I1YYDfJr0 p3o+LYFqJP5mj4zNW2lOcackvfxpv+/l2X7+Ad0DtbX0KrvDUcIPPTrz6lB5Nl4p ehCCXuo9Q6INOXKKTpyLb9RjdWNljiab/LfrdIdF3CA0jM0zMcmXuJapmbQNxQmF GnQe2tvsfPjbZkHbKa0ip+01DDi1hJsSaA== -----END CERTIFICATE-----Generated at Thu Sep 18 17:12:54 2025 by rpki-client