$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E957DE90D33B8FE187AF8743E44EAE92B9B7504.cer File: 9E957DE90D33B8FE187AF8743E44EAE92B9B7504.cer (raw, json) Hash identifier: frECax3msHSfKESueHMoL9Vourt4R43wreO5y2x6+w4= Subject key identifier: 9E:95:7D:E9:0D:33:B8:FE:18:7A:F8:74:3E:44:EA:E9:2B:9B:75:04 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 4133BFBC76A7F96FBF85B3DE78880819963CF60B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/E16419A54123693B682D6F3AE48E7B45FF823FF69ACCEA7E34DA171879D87FA3/0/9E957DE90D33B8FE187AF8743E44EAE92B9B7504.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/E16419A54123693B682D6F3AE48E7B45FF823FF69ACCEA7E34DA171879D87FA3/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 04:26:55 +0000 Certificate not after: Wed 04 Feb 2026 04:31:55 +0000 Subordinate resources: AS: 264685 IP: 168.227.96.0/22 IP: 2803:340::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 21:38:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:33:bf:bc:76:a7:f9:6f:bf:85:b3:de:78:88:08:19:96:3c:f6:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 04:26:55 2025 GMT Not After : Feb 4 04:31:55 2026 GMT Subject: CN=9E957DE90D33B8FE187AF8743E44EAE92B9B7504 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:62:2c:32:b7:e7:6b:62:f0:0d:82:d6:c7:cd: 78:2d:81:76:2d:0d:ff:9e:87:f3:19:5b:30:9c:ee: 9c:08:5d:7c:71:f5:5c:26:a0:d3:cb:84:d7:35:63: 2f:dc:f1:7c:ce:99:5f:a7:d3:39:f5:8e:61:a5:4d: 7b:c9:73:e1:98:e6:6d:63:a8:3b:7d:da:00:a3:58: fd:16:6d:02:da:4b:62:69:a1:e6:5d:6d:f8:47:64: e1:b8:8f:de:16:6d:cd:a6:48:ff:eb:9b:76:43:db: c9:fe:80:27:c9:0a:b8:88:2d:e1:71:9a:92:61:fd: 4b:72:40:f4:02:d3:25:6a:4a:d9:d1:a8:8f:c6:0a: 9d:4d:e7:6e:a5:fd:7f:db:a5:c5:90:1a:e9:5e:a0: 39:1e:d0:68:bb:32:d8:9d:dc:e0:2a:19:ab:fc:66: 60:6f:60:92:c6:8c:3d:f1:a6:14:2d:db:97:8a:0d: ee:ef:b2:70:db:27:e5:02:e8:7a:97:7d:ee:13:42: de:e5:22:36:7a:d4:5e:57:f5:9a:e3:d3:d5:01:ef: f2:b8:61:12:cd:6f:49:b8:05:5e:51:3f:86:5a:0b: e9:79:ca:a3:06:e8:af:de:e9:a8:72:71:58:b8:4c: 62:65:49:52:87:94:95:fb:be:03:69:3d:18:5c:36: dc:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9E:95:7D:E9:0D:33:B8:FE:18:7A:F8:74:3E:44:EA:E9:2B:9B:75:04 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/E16419A54123693B682D6F3AE48E7B45FF823FF69ACCEA7E34DA171879D87FA3/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/E16419A54123693B682D6F3AE48E7B45FF823FF69ACCEA7E34DA171879D87FA3/0/9E957DE90D33B8FE187AF8743E44EAE92B9B7504.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.227.96.0/22 IPv6: 2803:340::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264685 Signature Algorithm: sha256WithRSAEncryption 0b:94:05:0f:00:1b:8f:f7:77:48:e0:c4:d0:6e:0a:5c:1e:ce: 68:75:fc:f4:6f:a6:1c:bf:06:89:4e:0b:e0:89:95:92:3b:7e: 01:d6:d8:1b:59:0c:21:d7:1f:59:27:68:b1:d5:04:40:03:95: 72:fd:ea:91:74:2b:d3:db:fd:0c:ae:7c:f4:b9:48:0b:81:79: c0:b2:ab:c6:fd:1c:03:bb:5c:d2:99:b6:4c:26:43:b2:89:4b: 5e:ee:de:11:d2:fd:39:86:52:00:2d:95:51:60:8c:f6:ff:35: 15:ea:33:b8:fe:c2:3e:0a:aa:8e:18:95:10:16:6b:fd:71:f2: f7:f4:07:4f:f6:59:51:d4:a1:e6:8d:42:8d:fa:29:c7:92:19: 90:e6:30:c5:54:8f:40:bf:f2:df:9b:69:f0:c5:02:2c:3b:6d: f3:71:29:1c:5c:60:a2:68:ec:cb:08:f8:53:63:3b:d7:60:6e: 4a:f2:c7:42:41:0a:3a:41:4c:49:c8:d3:cd:4d:85:ab:b5:8c: 37:6d:88:08:8c:21:99:d2:d7:da:c3:b5:f8:4f:f5:18:c5:a3: a6:1a:a9:6d:fe:96:52:2d:88:1a:d3:5c:27:86:c5:15:82:7f: 43:ea:17:b9:ad:33:cb:f5:c1:c3:8b:fe:1d:8f:85:3c:bd:fc: 01:77:17:6d -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUQTO/vHan+W+/hbPeeIgIGZY89gswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUwNDI2NTVaFw0yNjAyMDQwNDMxNTVaMDMxMTAvBgNV BAMTKDlFOTU3REU5MEQzM0I4RkUxODdBRjg3NDNFNDRFQUU5MkI5Qjc1MDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTYiwyt+drYvANgtbHzXgtgXYt Df+eh/MZWzCc7pwIXXxx9VwmoNPLhNc1Yy/c8XzOmV+n0zn1jmGlTXvJc+GY5m1j qDt92gCjWP0WbQLaS2JpoeZdbfhHZOG4j94Wbc2mSP/rm3ZD28n+gCfJCriILeFx mpJh/UtyQPQC0yVqStnRqI/GCp1N526l/X/bpcWQGuleoDke0Gi7Mtid3OAqGav8 ZmBvYJLGjD3xphQt25eKDe7vsnDbJ+UC6HqXfe4TQt7lIjZ61F5X9Zrj09UB7/K4 YRLNb0m4BV5RP4ZaC+l5yqMG6K/e6ahycVi4TGJlSVKHlJX7vgNpPRhcNtxjAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSelX3pDTO4/hh6 +HQ+ROrpK5t1BDAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTE2NDE5QTU0MTIzNjkzQjY4MkQ2RjNB RTQ4RTdCNDVGRjgyM0ZGNjlBQ0NFQTdFMzREQTE3MTg3OUQ4N0ZBMy8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9FMTY0MTlBNTQxMjM2OTNCNjgyRDZGM0FFNDhFN0I0NUZGODIzRkY2OUFD Q0VBN0UzNERBMTcxODc5RDg3RkEzLzAvOUU5NTdERTkwRDMzQjhGRTE4N0FGODc0 M0U0NEVBRTkyQjlCNzUwNC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCqONgMA0EAgAC MAcDBQAoAwNAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQJ7TANBgkqhkiG9w0B AQsFAAOCAQEAC5QFDwAbj/d3SODE0G4KXB7OaHX89G+mHL8GiU4L4ImVkjt+AdbY G1kMIdcfWSdosdUEQAOVcv3qkXQr09v9DK589LlIC4F5wLKrxv0cA7tc0pm2TCZD solLXu7eEdL9OYZSAC2VUWCM9v81FeozuP7CPgqqjhiVEBZr/XHy9/QHT/ZZUdSh 5o1Cjfopx5IZkOYwxVSPQL/y35tp8MUCLDtt83EpHFxgomjsywj4U2M712BuSvLH QkEKOkFMScjTzU2Fq7WMN22ICIwhmdLX2sO1+E/1GMWjphqpbf6WUi2IGtNcJ4bF FYJ/Q+oXua0zy/XBw4v+HY+FPL38AXcXbQ== -----END CERTIFICATE-----Generated at Mon Nov 3 11:12:59 2025 by rpki-client