$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AFFC3EBFC444E6025C839618C3C81CC8996599A2.cer File: AFFC3EBFC444E6025C839618C3C81CC8996599A2.cer (raw, json) Hash identifier: Zu0+v3tYdkKFawZJMvcbljrQ+k5XYkuN879bhhhQL0w= Subject key identifier: AF:FC:3E:BF:C4:44:E6:02:5C:83:96:18:C3:C8:1C:C8:99:65:99:A2 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 16978C883E2ACA66D6690A6D6FC11F1887CC7281 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/AFD627C37ADC22DE8C4D189E2D98D4CC80C4EECF1C2920D0F4409019E54F8C4A/0/AFFC3EBFC444E6025C839618C3C81CC8996599A2.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/AFD627C37ADC22DE8C4D189E2D98D4CC80C4EECF1C2920D0F4409019E54F8C4A/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Fri 11 Jul 2025 20:50:01 +0000 Certificate not after: Fri 10 Jul 2026 20:55:01 +0000 Subordinate resources: AS: 274158 IP: 200.33.108.0/24 IP: 2803:d9d0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Jul 2025 04:37:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:97:8c:88:3e:2a:ca:66:d6:69:0a:6d:6f:c1:1f:18:87:cc:72:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Jul 11 20:50:01 2025 GMT Not After : Jul 10 20:55:01 2026 GMT Subject: CN=AFFC3EBFC444E6025C839618C3C81CC8996599A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f1:d2:bc:ed:2c:73:de:a7:e7:6b:64:de:db: 87:7c:e4:3b:90:b2:4b:bb:f2:e6:f8:fa:14:42:a1: fe:0f:45:ef:8a:af:da:c6:6c:0c:42:7c:c1:09:85: 6d:38:76:c2:f2:d7:f4:2c:9d:13:c5:dc:5d:10:00: d3:58:f9:b9:ff:70:d8:c8:2d:c7:2c:13:20:13:74: 80:d8:d2:f4:ae:af:82:62:2a:77:a7:37:bc:a0:00: e6:16:e4:12:59:e1:8c:43:86:bc:4b:5d:19:8e:ca: a0:f9:bb:00:6d:53:2a:67:ff:a7:2a:d3:ab:e2:2a: c3:bf:52:64:9d:e5:04:7e:44:a1:16:82:d3:63:ac: 06:32:3c:33:a6:89:62:4c:23:7f:14:88:f9:43:d2: 36:7a:cd:c8:0f:62:6b:d9:e7:43:15:e6:74:00:32: 6d:dc:56:5a:3d:b3:11:a3:2f:14:a0:c5:b8:2d:c0: 3e:eb:66:1f:9a:e4:b7:f4:32:6d:28:ac:8f:c8:b2: 61:6b:66:b3:83:fa:e1:00:50:cb:84:2f:6d:bb:10: 8e:32:36:d5:dd:35:ba:6d:90:17:11:e1:a7:5c:eb: 2e:df:74:c3:34:2e:b6:c5:8a:39:97:ee:20:27:bb: 26:a0:60:63:b6:ad:73:aa:75:6f:0c:1d:7c:2c:df: 01:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AF:FC:3E:BF:C4:44:E6:02:5C:83:96:18:C3:C8:1C:C8:99:65:99:A2 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/AFD627C37ADC22DE8C4D189E2D98D4CC80C4EECF1C2920D0F4409019E54F8C4A/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/AFD627C37ADC22DE8C4D189E2D98D4CC80C4EECF1C2920D0F4409019E54F8C4A/0/AFFC3EBFC444E6025C839618C3C81CC8996599A2.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.33.108.0/24 IPv6: 2803:d9d0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 274158 Signature Algorithm: sha256WithRSAEncryption b2:00:50:c6:1f:f0:0d:f7:d1:42:7c:70:b9:53:6d:c8:b3:bf: d4:df:ff:c2:e9:40:ad:0c:15:df:6d:e8:eb:45:47:3c:66:19: 08:e4:c7:0a:31:80:31:e0:ec:27:d3:94:4a:a3:db:e5:04:c6: 34:fc:d1:61:1a:93:de:04:cf:64:d1:3e:fd:e9:08:a2:69:ad: cf:03:38:e0:25:a1:f1:d5:b2:e3:a3:8c:f2:61:7d:96:9a:d2: 1b:19:3d:25:45:f5:69:c1:18:76:20:67:f6:1e:b7:84:fe:0e: 6a:99:d0:43:73:00:a6:87:57:9f:c7:42:26:3b:06:da:b0:c9: 99:e8:54:4c:5c:06:15:a8:85:35:b5:11:42:e1:ed:e7:1c:7a: 1a:75:ee:96:5f:53:4f:69:b6:71:c6:47:14:46:cf:31:7e:d0: 6c:b5:d6:29:96:58:a6:d1:31:b5:8e:2f:fb:91:d5:cd:88:ee: b7:ac:31:75:de:82:73:80:f4:1a:74:18:d7:e1:23:4d:9a:22: 86:71:6d:14:4c:51:62:56:50:70:7d:23:21:65:34:26:0b:4d: 07:51:b1:29:bc:f6:d5:4d:bc:c1:58:bf:6d:11:3f:08:93:82: e4:ab:8f:02:90:df:bb:59:73:d9:4c:51:ff:5e:b3:2a:ea:a3: 0a:9d:ac:bd -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUFpeMiD4qymbWaQptb8EfGIfMcoEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTA3MTEyMDUwMDFaFw0yNjA3MTAyMDU1MDFaMDMxMTAvBgNV BAMTKEFGRkMzRUJGQzQ0NEU2MDI1QzgzOTYxOEMzQzgxQ0M4OTk2NTk5QTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA8dK87Sxz3qfna2Te24d85DuQ sku78ub4+hRCof4PRe+Kr9rGbAxCfMEJhW04dsLy1/QsnRPF3F0QANNY+bn/cNjI LccsEyATdIDY0vSur4JiKnenN7ygAOYW5BJZ4YxDhrxLXRmOyqD5uwBtUypn/6cq 06viKsO/UmSd5QR+RKEWgtNjrAYyPDOmiWJMI38UiPlD0jZ6zcgPYmvZ50MV5nQA Mm3cVlo9sxGjLxSgxbgtwD7rZh+a5Lf0Mm0orI/IsmFrZrOD+uEAUMuEL227EI4y NtXdNbptkBcR4adc6y7fdMM0LrbFijmX7iAnuyagYGO2rXOqdW8MHXws3wFXAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSv/D6/xETmAlyD lhjDyBzImWWZojAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQUZENjI3QzM3QURDMjJERThDNEQxODlF MkQ5OEQ0Q0M4MEM0RUVDRjFDMjkyMEQwRjQ0MDkwMTlFNTRGOEM0QS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9BRkQ2MjdDMzdBREMyMkRFOEM0RDE4OUUyRDk4RDRDQzgwQzRFRUNGMUMy OTIwRDBGNDQwOTAxOUU1NEY4QzRBLzAvQUZGQzNFQkZDNDQ0RTYwMjVDODM5NjE4 QzNDODFDQzg5OTY1OTlBMi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAyCFsMA0EAgAC MAcDBQAoA9nQMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQu7jANBgkqhkiG9w0B AQsFAAOCAQEAsgBQxh/wDffRQnxwuVNtyLO/1N//wulArQwV323o60VHPGYZCOTH CjGAMeDsJ9OUSqPb5QTGNPzRYRqT3gTPZNE+/ekIommtzwM44CWh8dWy46OM8mF9 lprSGxk9JUX1acEYdiBn9h63hP4OapnQQ3MApodXn8dCJjsG2rDJmehUTFwGFaiF NbURQuHt5xx6GnXull9TT2m2ccZHFEbPMX7QbLXWKZZYptExtY4v+5HVzYjut6wx dd6Cc4D0GnQY1+EjTZoihnFtFExRYlZQcH0jIWU0JgtNB1GxKbz21U28wVi/bRE/ CJOC5KuPApDfu1lz2UxR/16zKuqjCp2svQ== -----END CERTIFICATE-----Generated at Tue Jul 22 05:14:25 2025 by rpki-client