$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C274FF55FBE54DCF3A4879BE94792462D4B95DA0.cer File: C274FF55FBE54DCF3A4879BE94792462D4B95DA0.cer (raw, json) Hash identifier: 7r1cEF3LoWkAxP+h2KATts1Rz74RbyfQH2sow4dt8Uc= Subject key identifier: C2:74:FF:55:FB:E5:4D:CF:3A:48:79:BE:94:79:24:62:D4:B9:5D:A0 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 09C117FF3182D2C6358780882CBD93B95B33E95D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/5C64BD526ADD57CE18E7AC36EB8088B7B018DB0203C7C50088B832B91A6EE897/0/C274FF55FBE54DCF3A4879BE94792462D4B95DA0.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/5C64BD526ADD57CE18E7AC36EB8088B7B018DB0203C7C50088B832B91A6EE897/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 16:15:07 +0000 Certificate not after: Wed 04 Feb 2026 16:20:07 +0000 Subordinate resources: IP: 181.174.228.0/22 IP: 2803:cb10::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 21:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:c1:17:ff:31:82:d2:c6:35:87:80:88:2c:bd:93:b9:5b:33:e9:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 16:15:07 2025 GMT Not After : Feb 4 16:20:07 2026 GMT Subject: CN=C274FF55FBE54DCF3A4879BE94792462D4B95DA0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:81:6c:80:9b:d4:18:b3:49:fe:0d:5f:a6:d4: d5:3a:16:19:56:04:43:0c:91:a8:07:c0:72:bf:68: 8d:0d:68:b0:eb:a9:2b:53:d8:f7:7e:4b:de:83:5d: 9f:2d:b8:78:d8:b2:8d:b8:af:cc:60:9b:72:0b:f3: f5:e0:93:c9:11:d8:b7:9c:39:8c:a6:7c:49:96:80: d2:cf:50:6c:da:2c:a8:bc:f2:24:5b:55:21:d6:b4: 23:e4:73:6d:6a:dc:46:50:a2:b1:16:02:67:22:c7: d4:6a:b1:ae:29:1b:96:e7:79:fe:c4:1d:c4:a5:1d: f5:17:de:ad:24:fd:bd:3f:19:8a:4f:49:0c:42:2f: c8:61:ce:e6:73:17:5e:8c:20:21:ef:f2:5d:80:fb: c5:c1:2d:31:8b:16:38:73:45:72:fd:b4:74:20:b5: 45:90:fd:de:90:e5:97:18:0f:d0:a7:4b:0a:10:fb: c9:fd:a5:98:7d:c3:93:42:00:f6:60:4b:62:45:9a: 2f:a4:77:f5:9e:11:ac:43:90:83:04:cd:87:7b:bc: f4:9b:00:b0:32:83:37:6d:9d:d2:a8:c9:83:3c:2f: cc:27:0d:58:c8:50:8c:96:e8:ae:ea:fc:7e:f2:ae: bc:30:d4:1a:49:65:a8:00:46:42:ec:97:63:be:3c: ba:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C2:74:FF:55:FB:E5:4D:CF:3A:48:79:BE:94:79:24:62:D4:B9:5D:A0 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/5C64BD526ADD57CE18E7AC36EB8088B7B018DB0203C7C50088B832B91A6EE897/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/5C64BD526ADD57CE18E7AC36EB8088B7B018DB0203C7C50088B832B91A6EE897/0/C274FF55FBE54DCF3A4879BE94792462D4B95DA0.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 181.174.228.0/22 IPv6: 2803:cb10::/32 Signature Algorithm: sha256WithRSAEncryption 8f:d9:bc:ec:0a:0e:74:23:fd:fc:e5:0e:6c:81:a1:9b:be:cc: 81:02:28:1c:45:f9:f8:52:e6:ac:8e:33:91:0a:02:13:84:1d: 9b:22:87:3a:91:85:6e:e8:b0:8b:9e:dc:27:74:99:3a:20:89: 19:e0:98:41:c6:ba:88:8c:fa:d0:c2:ce:20:57:33:ec:81:aa: dc:98:7a:3f:0b:ca:68:36:21:31:25:a6:8b:c4:6f:91:91:25: c0:c8:c6:61:57:26:12:98:d1:8d:97:cb:28:81:08:1f:50:7d: 73:43:d9:ab:f9:01:fc:e5:81:92:5d:5a:af:7f:2f:8a:9b:47: 39:5d:5c:96:b5:2a:86:b5:d7:95:e0:fc:1f:86:eb:44:fc:1c: 9d:1f:61:a6:a5:c2:8f:b7:c9:3b:b9:92:ae:2a:f9:0c:68:ae: f7:73:cb:5b:70:a7:ec:b9:19:91:4b:1f:fb:98:e7:b2:67:e9: 10:27:3b:f9:4c:56:ab:68:72:f5:39:ce:cc:c2:6e:f6:3e:26: 06:6b:10:26:b4:de:47:fb:57:d2:7b:98:72:2d:a4:f8:d4:b0: c5:f0:21:6f:c7:03:4a:fc:4f:d0:53:59:df:f7:a2:17:0c:97: 02:13:08:2b:f1:7c:90:2e:16:f2:2c:27:69:35:3b:1d:23:23: dc:94:0a:a0 -----BEGIN CERTIFICATE----- MIIGiTCCBXGgAwIBAgIUCcEX/zGC0sY1h4CILL2TuVsz6V0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUxNjE1MDdaFw0yNjAyMDQxNjIwMDdaMDMxMTAvBgNV BAMTKEMyNzRGRjU1RkJFNTREQ0YzQTQ4NzlCRTk0NzkyNDYyRDRCOTVEQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzgWyAm9QYs0n+DV+m1NU6FhlW BEMMkagHwHK/aI0NaLDrqStT2Pd+S96DXZ8tuHjYso24r8xgm3IL8/Xgk8kR2Lec OYymfEmWgNLPUGzaLKi88iRbVSHWtCPkc21q3EZQorEWAmcix9Rqsa4pG5bnef7E HcSlHfUX3q0k/b0/GYpPSQxCL8hhzuZzF16MICHv8l2A+8XBLTGLFjhzRXL9tHQg tUWQ/d6Q5ZcYD9CnSwoQ+8n9pZh9w5NCAPZgS2JFmi+kd/WeEaxDkIMEzYd7vPSb ALAygzdtndKoyYM8L8wnDVjIUIyW6K7q/H7yrrww1BpJZagARkLsl2O+PLpbAgMB AAGjggOTMIIDjzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTCdP9V++VNzzpI eb6UeSRi1LldoDAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNUM2NEJENTI2QURENTdDRTE4RTdBQzM2 RUI4MDg4QjdCMDE4REIwMjAzQzdDNTAwODhCODMyQjkxQTZFRTg5Ny8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy81QzY0QkQ1MjZBREQ1N0NFMThFN0FDMzZFQjgwODhCN0IwMThEQjAyMDND N0M1MDA4OEI4MzJCOTFBNkVFODk3LzAvQzI3NEZGNTVGQkU1NERDRjNBNDg3OUJF OTQ3OTI0NjJENEI5NURBMC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCta7kMA0EAgAC MAcDBQAoA8sQMA0GCSqGSIb3DQEBCwUAA4IBAQCP2bzsCg50I/385Q5sgaGbvsyB AigcRfn4UuasjjORCgIThB2bIoc6kYVu6LCLntwndJk6IIkZ4JhBxrqIjPrQws4g VzPsgarcmHo/C8poNiExJaaLxG+RkSXAyMZhVyYSmNGNl8sogQgfUH1zQ9mr+QH8 5YGSXVqvfy+Km0c5XVyWtSqGtdeV4PwfhutE/BydH2GmpcKPt8k7uZKuKvkMaK73 c8tbcKfsuRmRSx/7mOeyZ+kQJzv5TFaraHL1Oc7Mwm72PiYGaxAmtN5H+1fSe5hy LaT41LDF8CFvxwNK/E/QU1nf96IXDJcCEwgr8XyQLhbyLCdpNTsdIyPclAqg -----END CERTIFICATE-----Generated at Sat Nov 1 04:07:48 2025 by rpki-client