$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A7E0186B5A1E853E4311E72DBCD1C1D38AFD3A71.cer File: A7E0186B5A1E853E4311E72DBCD1C1D38AFD3A71.cer (raw, json) Hash identifier: eEMzq2w1Os/4WpP63HRQ0JZeLKD+I9132mv+Dd3chk8= Subject key identifier: A7:E0:18:6B:5A:1E:85:3E:43:11:E7:2D:BC:D1:C1:D3:8A:FD:3A:71 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 554119CFE7C28323B2B8C17D67B92BCBA1412006 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/1DC8EDF28060A53C3F9F5C5B7DECA0B2CF5347172DFCE8B577E7837F51872C7C/0/A7E0186B5A1E853E4311E72DBCD1C1D38AFD3A71.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/1DC8EDF28060A53C3F9F5C5B7DECA0B2CF5347172DFCE8B577E7837F51872C7C/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 22 Jul 2025 06:00:39 +0000 Certificate not after: Tue 21 Jul 2026 06:05:39 +0000 Subordinate resources: IP: 187.102.224.0/22 IP: 2806:3b6::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 03 Aug 2025 00:41:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:41:19:cf:e7:c2:83:23:b2:b8:c1:7d:67:b9:2b:cb:a1:41:20:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Jul 22 06:00:39 2025 GMT Not After : Jul 21 06:05:39 2026 GMT Subject: CN=A7E0186B5A1E853E4311E72DBCD1C1D38AFD3A71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:37:19:79:ad:40:be:cc:b8:9d:cc:2d:84:7e: f9:0a:7e:3a:5d:1e:52:3c:da:fd:79:0b:d6:57:e2: 70:f5:94:e7:97:e7:2f:38:d7:28:8f:d1:c0:ba:bb: ed:df:3c:1e:3b:0b:b2:60:10:f9:3f:42:4e:22:65: c5:da:95:72:91:02:11:e7:8b:7c:04:cb:98:9f:22: 0d:9c:5f:c4:0f:45:39:9c:0a:23:af:d1:70:52:ed: c0:df:64:18:77:4f:da:8a:b5:40:16:a8:8d:8d:6c: 24:cd:b5:d8:7f:e7:5c:26:ee:1e:f7:d5:3f:8a:f4: 27:77:c0:9e:0f:a2:fe:02:72:8d:db:e2:87:c1:7d: c9:5d:60:0f:4a:d7:7e:58:55:b7:a0:03:74:dc:ca: 6a:f6:f1:52:7b:a9:6a:9e:49:f6:b0:b5:4c:cb:0a: 92:bb:1b:f7:8a:2b:83:57:79:1a:39:8d:e2:bf:bf: 2d:eb:f9:c8:59:7c:ec:ce:ad:5e:76:e3:c8:8e:b1: b5:19:3d:d3:7e:29:44:6e:73:52:18:9d:6f:62:b9: 50:bb:f1:6a:9a:d7:81:eb:f0:7d:3e:d7:7a:fd:83: 83:4a:34:8f:a7:8b:17:ae:2b:2f:9c:32:e1:f3:9a: 19:93:ce:31:84:27:af:13:c1:1d:d2:73:3f:75:ca: 03:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A7:E0:18:6B:5A:1E:85:3E:43:11:E7:2D:BC:D1:C1:D3:8A:FD:3A:71 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1DC8EDF28060A53C3F9F5C5B7DECA0B2CF5347172DFCE8B577E7837F51872C7C/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1DC8EDF28060A53C3F9F5C5B7DECA0B2CF5347172DFCE8B577E7837F51872C7C/0/A7E0186B5A1E853E4311E72DBCD1C1D38AFD3A71.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 187.102.224.0/22 IPv6: 2806:3b6::/32 Signature Algorithm: sha256WithRSAEncryption bd:5c:7c:6e:1d:cf:f8:32:da:75:ff:94:c5:b4:42:8c:bd:f2: 56:37:ba:da:3f:4f:38:bd:f8:bb:7e:95:77:71:bf:94:83:75: 53:0f:53:e3:50:c9:fc:64:52:f2:90:86:97:a7:ed:4d:0c:85: f6:3f:b4:e8:56:a1:66:a0:10:83:95:0e:43:eb:8b:15:16:9b: b2:2a:0f:05:db:0a:5c:96:9a:ec:30:a4:3c:ae:ee:1c:97:05: 6a:80:43:f0:cd:d6:26:34:a2:ae:88:10:69:35:86:b4:e7:57: 67:86:09:84:3d:33:05:03:56:15:8d:eb:fb:b7:29:ef:ba:ab: 0e:f4:e1:9c:00:dc:9d:15:c1:54:0a:ff:18:85:7b:f3:bb:64: b3:fd:9c:04:62:fe:9e:1b:8e:c4:5c:d0:c4:07:45:e9:d1:01: c4:a1:c4:d0:96:b5:4e:44:e4:f6:2a:fc:16:18:01:f4:40:40: db:df:7b:31:51:45:11:b7:f4:84:0a:fe:c4:66:e7:0c:62:a6: 33:71:25:24:33:36:52:2e:a0:a0:64:5c:9a:b1:cd:76:c8:95: 00:25:a1:0f:f8:94:a8:a7:5a:a1:6f:cc:3a:4b:09:9f:ee:70: ed:a6:a7:1c:fc:cd:87:5b:ac:d9:17:a4:36:08:78:ea:f2:5e: 69:4f:83:d0 -----BEGIN CERTIFICATE----- MIIGiTCCBXGgAwIBAgIUVUEZz+fCgyOyuMF9Z7kry6FBIAYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTA3MjIwNjAwMzlaFw0yNjA3MjEwNjA1MzlaMDMxMTAvBgNV BAMTKEE3RTAxODZCNUExRTg1M0U0MzExRTcyREJDRDFDMUQzOEFGRDNBNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJNxl5rUC+zLidzC2EfvkKfjpd HlI82v15C9ZX4nD1lOeX5y841yiP0cC6u+3fPB47C7JgEPk/Qk4iZcXalXKRAhHn i3wEy5ifIg2cX8QPRTmcCiOv0XBS7cDfZBh3T9qKtUAWqI2NbCTNtdh/51wm7h73 1T+K9Cd3wJ4Pov4Cco3b4ofBfcldYA9K135YVbegA3Tcymr28VJ7qWqeSfawtUzL CpK7G/eKK4NXeRo5jeK/vy3r+chZfOzOrV5248iOsbUZPdN+KURuc1IYnW9iuVC7 8Wqa14Hr8H0+13r9g4NKNI+nixeuKy+cMuHzmhmTzjGEJ68TwR3Scz91ygPpAgMB AAGjggOTMIIDjzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSn4BhrWh6FPkMR 5y280cHTiv06cTAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMURDOEVERjI4MDYwQTUzQzNGOUY1QzVC N0RFQ0EwQjJDRjUzNDcxNzJERkNFOEI1NzdFNzgzN0Y1MTg3MkM3Qy8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8xREM4RURGMjgwNjBBNTNDM0Y5RjVDNUI3REVDQTBCMkNGNTM0NzE3MkRG Q0U4QjU3N0U3ODM3RjUxODcyQzdDLzAvQTdFMDE4NkI1QTFFODUzRTQzMTFFNzJE QkNEMUMxRDM4QUZEM0E3MS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCu2bgMA0EAgAC MAcDBQAoBgO2MA0GCSqGSIb3DQEBCwUAA4IBAQC9XHxuHc/4Mtp1/5TFtEKMvfJW N7raP084vfi7fpV3cb+Ug3VTD1PjUMn8ZFLykIaXp+1NDIX2P7ToVqFmoBCDlQ5D 64sVFpuyKg8F2wpclprsMKQ8ru4clwVqgEPwzdYmNKKuiBBpNYa051dnhgmEPTMF A1YVjev7tynvuqsO9OGcANydFcFUCv8YhXvzu2Sz/ZwEYv6eG47EXNDEB0Xp0QHE ocTQlrVOROT2KvwWGAH0QEDb33sxUUURt/SECv7EZucMYqYzcSUkMzZSLqCgZFya sc12yJUAJaEP+JSop1qhb8w6Swmf7nDtpqcc/M2HW6zZF6Q2CHjq8l5pT4PQ -----END CERTIFICATE-----Generated at Wed Jul 30 14:11:40 2025 by rpki-client