$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/975BBA86138B6A2DC834A2B1778C6E08EBF42F28.cer File: 975BBA86138B6A2DC834A2B1778C6E08EBF42F28.cer (raw, json) Hash identifier: N6A7/3nMjAOBntvxFmXhEeNR/QYIQNTewvspsrlT6WQ= Subject key identifier: 97:5B:BA:86:13:8B:6A:2D:C8:34:A2:B1:77:8C:6E:08:EB:F4:2F:28 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 2E680C8FA45B86CF9B835FE5896F62C75F501E10 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/975BBA86138B6A2DC834A2B1778C6E08EBF42F28.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 12 Aug 2025 08:05:01 +0000 Certificate not after: Tue 11 Aug 2026 08:10:01 +0000 Subordinate resources: IP: 190.112.192.0/22 IP: 190.112.200.0/22 IP: 200.35.152.0/22 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 29 Oct 2025 22:57:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:68:0c:8f:a4:5b:86:cf:9b:83:5f:e5:89:6f:62:c7:5f:50:1e:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Aug 12 08:05:01 2025 GMT Not After : Aug 11 08:10:01 2026 GMT Subject: CN=975BBA86138B6A2DC834A2B1778C6E08EBF42F28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:52:c6:32:5a:9c:ce:fe:0c:43:96:cd:30:79: ff:dd:de:40:af:65:a7:b5:95:d7:e0:91:ae:0a:49: 25:4d:e6:2a:a7:25:3c:2e:63:fc:b5:a2:15:d3:2a: e4:b8:c5:69:a4:95:9f:18:b9:87:9a:70:df:fe:40: 6e:1c:e1:cd:53:53:b8:10:f6:bb:85:11:90:91:b4: 4a:0d:5f:b6:b7:c0:10:5e:dc:4b:eb:1f:b8:a2:72: f0:b1:dd:35:c1:fa:9a:e8:f3:9c:38:54:5d:69:d3: aa:20:00:7b:25:a9:95:22:eb:3e:ab:fc:c8:80:75: 9b:e6:3d:35:1d:0b:94:2c:69:dd:3e:19:e3:97:f3: 18:09:dc:58:ce:54:65:92:72:5a:5e:3c:0e:b5:1d: 63:4d:f4:9c:f9:0c:1e:25:8a:fc:29:73:11:29:80: 00:db:29:b2:ef:0c:04:11:c9:8d:2f:ff:7c:01:bb: 90:69:50:96:08:ae:46:dd:cb:fb:7d:58:e8:07:5a: 69:b5:82:41:c4:7a:3f:70:d4:f7:a6:f5:fa:73:26: d7:7a:48:d6:a6:a1:ff:2e:e0:ae:7e:3b:b6:3a:d4: 7f:31:4e:2a:78:5b:ae:d2:d1:59:9b:87:92:57:f3: 2c:4a:fb:c6:2d:7a:4b:36:55:ec:83:8b:5f:c0:13: c5:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 97:5B:BA:86:13:8B:6A:2D:C8:34:A2:B1:77:8C:6E:08:EB:F4:2F:28 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/975BBA86138B6A2DC834A2B1778C6E08EBF42F28.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 190.112.192.0/22 190.112.200.0/22 200.35.152.0/22 Signature Algorithm: sha256WithRSAEncryption 31:3f:72:34:9a:76:be:fc:95:6d:09:71:9c:90:8b:84:0f:eb: 18:34:7c:05:23:01:f7:c2:08:bc:0c:23:dc:2a:0e:04:ce:c3: 68:ca:f2:2d:74:a7:61:8c:88:0c:91:15:38:ef:3c:af:15:8d: c7:9f:34:f5:d1:1e:59:7c:62:a7:93:1c:93:22:1b:1a:2e:15: af:9c:4a:b8:6a:7d:71:90:32:f9:22:1a:9b:83:1f:5a:65:c8: f8:6c:02:6f:e7:cf:3c:66:bc:9f:8c:14:3b:d1:69:a2:00:53: 0e:c5:d4:a3:f8:b0:9f:4c:fa:20:5a:2d:33:3f:62:55:e2:be: 74:58:91:47:38:b8:49:f7:32:50:66:0d:6d:38:8f:2d:20:9b: 2e:10:81:3c:71:e0:bd:d1:70:a0:8f:c6:60:f9:ee:ed:8a:fb: 1e:34:27:e3:4d:a2:72:0a:91:d2:a5:df:a9:f9:1f:44:94:e3: 85:ee:e3:15:7c:d3:87:dd:b5:73:26:be:1b:a4:4e:9b:e7:aa: 5b:72:95:00:39:d3:47:dc:c6:8d:2c:5e:6f:69:8e:b6:bf:87: 19:4f:16:41:65:45:40:ea:75:48:3a:c9:ef:65:a7:b5:90:ab: ad:b8:57:94:84:d8:9b:77:d4:fe:7a:33:ca:72:5b:2f:7d:54: b7:80:9e:e2 -----BEGIN CERTIFICATE----- MIIGhjCCBW6gAwIBAgIULmgMj6Rbhs+bg1/liW9ix19QHhAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTA4MTIwODA1MDFaFw0yNjA4MTEwODEwMDFaMDMxMTAvBgNV BAMTKDk3NUJCQTg2MTM4QjZBMkRDODM0QTJCMTc3OEM2RTA4RUJGNDJGMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOUsYyWpzO/gxDls0wef/d3kCv Zae1ldfgka4KSSVN5iqnJTwuY/y1ohXTKuS4xWmklZ8YuYeacN/+QG4c4c1TU7gQ 9ruFEZCRtEoNX7a3wBBe3EvrH7iicvCx3TXB+pro85w4VF1p06ogAHslqZUi6z6r /MiAdZvmPTUdC5Qsad0+GeOX8xgJ3FjOVGWSclpePA61HWNN9Jz5DB4livwpcxEp gADbKbLvDAQRyY0v/3wBu5BpUJYIrkbdy/t9WOgHWmm1gkHEej9w1Pem9fpzJtd6 SNamof8u4K5+O7Y61H8xTip4W67S0Vmbh5JX8yxK+8Yteks2VeyDi1/AE8X7AgMB AAGjggOQMIIDjDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSXW7qGE4tqLcg0 orF3jG4I6/QvKDAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMDVGREY2NEI2MTdGQ0UwRTQ1MTVFQkZB ODBFNDFEOEY2QkY1RDhDRkU3OEYyQkVBM0E3QzkzRTQzRjBFNUQ0MC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8wNUZERjY0QjYxN0ZDRTBFNDUxNUVCRkE4MEU0MUQ4RjZCRjVEOENGRTc4 RjJCRUEzQTdDOTNFNDNGMEU1RDQwLzAvOTc1QkJBODYxMzhCNkEyREM4MzRBMkIx Nzc4QzZFMDhFQkY0MkYyOC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCvnDAAwQCvnDI AwQCyCOYMA0GCSqGSIb3DQEBCwUAA4IBAQAxP3I0mna+/JVtCXGckIuED+sYNHwF IwH3wgi8DCPcKg4EzsNoyvItdKdhjIgMkRU47zyvFY3HnzT10R5ZfGKnkxyTIhsa LhWvnEq4an1xkDL5Ihqbgx9aZcj4bAJv5888ZryfjBQ70WmiAFMOxdSj+LCfTPog Wi0zP2JV4r50WJFHOLhJ9zJQZg1tOI8tIJsuEIE8ceC90XCgj8Zg+e7tivseNCfj TaJyCpHSpd+p+R9ElOOF7uMVfNOH3bVzJr4bpE6b56pbcpUAOdNH3MaNLF5vaY62 v4cZTxZBZUVA6nVIOsnvZae1kKutuFeUhNibd9T+ejPKclsvfVS3gJ7i -----END CERTIFICATE-----Generated at Sun Oct 26 09:06:35 2025 by rpki-client