$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3B26F6DCE0D551DF8808E116531308AEF126A54.cer File: B3B26F6DCE0D551DF8808E116531308AEF126A54.cer (raw, json) Hash identifier: rnUJnHJ+tF/x+01m/7IU40vfyf3EAmM9SMKTkTqd1vw= Subject key identifier: B3:B2:6F:6D:CE:0D:55:1D:F8:80:8E:11:65:31:30:8A:EF:12:6A:54 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 05D0255039A31484DF5AC661BA4CEDE5B6BFE758 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/0DD292B211724DECDC303751DB85B62ACD69B3210F8A70B4BD72E6FD73412E0A/0/B3B26F6DCE0D551DF8808E116531308AEF126A54.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/0DD292B211724DECDC303751DB85B62ACD69B3210F8A70B4BD72E6FD73412E0A/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 04 Feb 2025 18:54:20 +0000 Certificate not after: Tue 03 Feb 2026 18:59:20 +0000 Subordinate resources: AS: 267929 IP: 45.179.244.0/22 IP: 2803:7e60::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 29 Oct 2025 22:57:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:d0:25:50:39:a3:14:84:df:5a:c6:61:ba:4c:ed:e5:b6:bf:e7:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 4 18:54:20 2025 GMT Not After : Feb 3 18:59:20 2026 GMT Subject: CN=B3B26F6DCE0D551DF8808E116531308AEF126A54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:49:82:ed:04:a3:8a:67:9a:88:76:e7:e1:d7: 08:63:9a:a4:37:75:b7:97:99:07:40:cf:29:a7:5a: f4:f1:c8:ba:f9:bd:a7:13:df:38:f0:ea:7f:0e:3b: ed:09:43:3f:3b:dd:53:f2:4a:4d:e2:63:65:96:a4: 87:4b:80:2c:9f:f1:58:e2:88:b1:e4:02:b5:40:9e: f0:3e:8a:48:dc:16:4b:1c:d1:e8:6d:53:89:d3:65: 7c:31:e5:4d:30:ee:05:28:79:a3:43:6e:03:5f:f4: 94:44:53:bc:62:a9:a0:2a:ad:f7:5b:55:89:70:38: 6a:aa:bf:6b:72:a4:7d:40:02:5a:da:a8:26:14:f5: 5c:51:19:72:1b:dd:ae:dc:c9:60:69:d0:5d:58:c7: 08:77:95:bb:57:cd:94:de:97:40:4a:92:1b:1f:35: b9:cc:56:de:d8:53:0c:2f:46:8e:1d:07:d2:00:4c: a6:a6:14:c9:15:16:87:ed:47:56:d5:9e:b9:68:f4: 4f:37:da:81:3f:83:91:b9:88:ff:6e:94:31:ae:6c: fc:09:b1:5b:c0:89:8d:52:c1:a9:5b:3e:6c:6a:e9: 70:d0:cb:06:99:08:1f:50:6f:83:3a:7c:66:90:74: fd:37:94:f9:a2:17:4f:84:44:32:7f:5f:14:a4:60: d5:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B3:B2:6F:6D:CE:0D:55:1D:F8:80:8E:11:65:31:30:8A:EF:12:6A:54 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0DD292B211724DECDC303751DB85B62ACD69B3210F8A70B4BD72E6FD73412E0A/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0DD292B211724DECDC303751DB85B62ACD69B3210F8A70B4BD72E6FD73412E0A/0/B3B26F6DCE0D551DF8808E116531308AEF126A54.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.179.244.0/22 IPv6: 2803:7e60::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267929 Signature Algorithm: sha256WithRSAEncryption 1c:fd:d8:57:79:7b:23:68:6c:89:da:ee:a0:2d:ed:44:1e:b8: 13:cc:50:9d:71:22:4c:2f:e8:99:a1:1c:4f:dc:bd:d7:26:5c: cf:df:eb:38:bd:cb:2b:31:63:d5:0a:3f:45:d9:4c:59:4b:83: ee:6e:64:2a:a0:3f:65:01:76:fe:83:a8:f1:45:bb:58:5b:d3: a4:97:9d:2a:54:3c:75:e3:cc:a2:3f:31:f1:77:e2:ee:62:65: c2:d0:f2:d8:8e:ba:1d:52:c9:94:d8:af:c6:75:b9:63:0c:54: 0e:6f:94:61:ce:bc:fd:c3:9f:66:18:d9:e8:8d:b2:8f:55:de: dc:6f:74:f5:7a:e5:2a:6c:5d:fa:3b:29:13:6b:ee:25:ed:0e: 39:ca:c3:92:7e:54:bb:ae:d0:38:ac:f2:03:3d:c6:87:f7:09: 52:76:20:40:fc:60:51:b5:79:62:87:50:82:fc:9c:61:38:eb: c1:f7:ea:a6:5d:a0:9e:31:a7:4a:6a:01:48:5f:27:16:af:18: d9:61:72:e2:2c:85:2d:5f:68:67:b3:56:54:ec:b4:b8:64:01: 9f:c9:ef:3d:6f:4e:f2:a6:da:22:1a:d9:15:c7:e7:63:e3:58: a6:da:07:07:d0:a2:9f:81:6b:5f:e0:30:8e:1b:4b:86:d6:aa: e5:84:6c:35 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUBdAlUDmjFITfWsZhukzt5ba/51gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDQxODU0MjBaFw0yNjAyMDMxODU5MjBaMDMxMTAvBgNV BAMTKEIzQjI2RjZEQ0UwRDU1MURGODgwOEUxMTY1MzEzMDhBRUYxMjZBNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDySYLtBKOKZ5qIdufh1whjmqQ3 dbeXmQdAzymnWvTxyLr5vacT3zjw6n8OO+0JQz873VPySk3iY2WWpIdLgCyf8Vji iLHkArVAnvA+ikjcFksc0ehtU4nTZXwx5U0w7gUoeaNDbgNf9JREU7xiqaAqrfdb VYlwOGqqv2typH1AAlraqCYU9VxRGXIb3a7cyWBp0F1Yxwh3lbtXzZTel0BKkhsf NbnMVt7YUwwvRo4dB9IATKamFMkVFoftR1bVnrlo9E832oE/g5G5iP9ulDGubPwJ sVvAiY1SwalbPmxq6XDQywaZCB9Qb4M6fGaQdP03lPmiF0+ERDJ/XxSkYNWxAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSzsm9tzg1VHfiA jhFlMTCK7xJqVDAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMEREMjkyQjIxMTcyNERFQ0RDMzAzNzUx REI4NUI2MkFDRDY5QjMyMTBGOEE3MEI0QkQ3MkU2RkQ3MzQxMkUwQS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8wREQyOTJCMjExNzI0REVDREMzMDM3NTFEQjg1QjYyQUNENjlCMzIxMEY4 QTcwQjRCRDcyRTZGRDczNDEyRTBBLzAvQjNCMjZGNkRDRTBENTUxREY4ODA4RTEx NjUzMTMwOEFFRjEyNkE1NC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLbP0MA0EAgAC MAcDBQAoA35gMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQWmTANBgkqhkiG9w0B AQsFAAOCAQEAHP3YV3l7I2hsidruoC3tRB64E8xQnXEiTC/omaEcT9y91yZcz9/r OL3LKzFj1Qo/RdlMWUuD7m5kKqA/ZQF2/oOo8UW7WFvTpJedKlQ8dePMoj8x8Xfi 7mJlwtDy2I66HVLJlNivxnW5YwxUDm+UYc68/cOfZhjZ6I2yj1Xe3G909XrlKmxd +jspE2vuJe0OOcrDkn5Uu67QOKzyAz3Gh/cJUnYgQPxgUbV5YodQgvycYTjrwffq pl2gnjGnSmoBSF8nFq8Y2WFy4iyFLV9oZ7NWVOy0uGQBn8nvPW9O8qbaIhrZFcfn Y+NYptoHB9Cin4FrX+AwjhtLhtaq5YRsNQ== -----END CERTIFICATE-----Generated at Sun Oct 26 09:06:54 2025 by rpki-client