$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer File: CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer (raw, json) Hash identifier: TEWswX+XF/np4dlUoKTfk/GVM9RBEriwneRmZS46DZY= Subject key identifier: CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 41DF5FB928A58DA206FF6B44C999A3C979F127B6 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 13:47:01 +0000 Certificate not after: Wed 04 Feb 2026 13:52:01 +0000 Subordinate resources: AS: 6535 AS: 27978 IP: 181.72.0.0/14 IP: 186.34.0.0 -- 186.36.255.255 IP: 190.54.0.0/16 IP: 190.208.0.0/15 IP: 200.9.151.0/24 IP: 200.29.128.0/18 IP: 200.31.32.0/19 IP: 200.32.160.0/19 IP: 2800:3b0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 28 Oct 2025 12:02:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:df:5f:b9:28:a5:8d:a2:06:ff:6b:44:c9:99:a3:c9:79:f1:27:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 13:47:01 2025 GMT Not After : Feb 4 13:52:01 2026 GMT Subject: CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:14:90:68:ac:bc:01:97:84:a6:35:49:9a:70: 79:88:77:0d:64:bb:86:5c:81:89:3b:9b:d1:7b:1e: 1b:af:12:0f:56:14:ff:dd:95:d2:d2:0a:01:0c:43: f8:45:b4:57:df:2b:28:dc:b9:7c:b1:8a:70:b6:e3: 13:a4:e0:f5:6f:9f:f1:82:c4:5e:2c:b1:2c:37:a5: 9c:4a:03:60:5a:8f:cd:b1:ce:ab:79:25:0b:b0:0b: 0d:36:ec:3e:82:16:51:e2:f0:2c:e0:7a:2a:0b:f1: 06:7f:7b:86:e6:af:51:af:eb:80:70:ed:dc:44:e7: 35:4a:82:7a:e7:53:8c:ea:72:60:a8:86:fb:22:bc: 7c:c1:7c:3b:a2:6c:fa:c8:4c:af:c1:71:60:8c:6d: 6e:0b:a6:79:12:b4:74:04:7b:fa:25:88:16:bc:72: 76:a0:bc:e2:cb:90:15:2b:18:93:5b:0e:67:87:b3: fd:b8:5b:63:51:82:c7:82:05:ab:dc:34:b4:2b:6f: 09:81:05:9d:c1:1f:4e:02:2d:03:c5:fb:fd:be:79: 40:a9:3d:28:87:ff:57:64:50:94:65:82:2b:4c:fc: 77:63:74:7e:62:48:f6:9f:7a:76:e8:9c:d6:54:10: 61:a8:d5:f5:a1:64:88:d3:00:c5:a7:49:00:7a:d9: 18:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 181.72.0.0/14 186.34.0.0-186.36.255.255 190.54.0.0/16 190.208.0.0/15 200.9.151.0/24 200.29.128.0/18 200.31.32.0/19 200.32.160.0/19 IPv6: 2800:3b0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 6535 27978 Signature Algorithm: sha256WithRSAEncryption a8:89:35:21:1d:0b:4e:e9:a7:8f:9d:5b:50:c1:69:80:0b:69: de:6f:35:3c:d4:05:98:e1:12:3f:a3:cb:83:5c:04:86:34:d2: c2:fb:5c:56:a0:e2:2d:1e:94:42:6c:35:65:8d:b9:e0:ee:94: 05:39:4d:73:11:1f:6c:1a:05:ba:c0:cb:8f:52:cc:ef:0d:06: 15:aa:19:84:dd:24:34:4f:80:46:42:01:f7:fe:a0:d9:8a:89: ec:12:b9:18:f7:b9:d9:87:37:e2:a6:fc:b6:a7:74:6e:ea:20: c1:e9:23:43:3d:dc:ad:27:9b:7b:51:7f:e1:6b:91:fc:60:99: 1b:64:35:21:79:5f:ea:b3:31:0e:07:e7:a9:12:7b:28:b0:0f: 94:cc:5d:93:26:b1:e1:5c:ea:f7:89:c7:51:dd:1d:40:74:02: a8:2d:e3:a2:4d:1b:0e:a9:91:ca:60:d8:d5:3c:bc:f7:2b:d0: 77:b2:c7:ad:0e:32:2f:c8:a4:72:4b:64:08:57:97:8b:71:41: 43:03:ec:4c:c0:ee:7e:9a:d1:47:4c:00:22:e7:b7:74:ea:90: 9f:ba:f0:ac:0d:54:08:22:89:aa:b8:80:41:31:bd:c2:d1:60: 15:a5:66:7b:42:1a:27:a5:de:bc:36:5a:04:4d:45:c7:5b:fa: 4d:06:b9:ac -----BEGIN CERTIFICATE----- MIIG1TCCBb2gAwIBAgIUQd9fuSiljaIG/2tEyZmjyXnxJ7YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUxMzQ3MDFaFw0yNjAyMDQxMzUyMDFaMDMxMTAvBgNV BAMTKENBQ0FENzBDRjU4QjE3MkU2RDMxOUE4M0Q5N0VFMzdEQjVCNDNFOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfFJBorLwBl4SmNUmacHmIdw1k u4ZcgYk7m9F7HhuvEg9WFP/dldLSCgEMQ/hFtFffKyjcuXyxinC24xOk4PVvn/GC xF4ssSw3pZxKA2Baj82xzqt5JQuwCw027D6CFlHi8CzgeioL8QZ/e4bmr1Gv64Bw 7dxE5zVKgnrnU4zqcmCohvsivHzBfDuibPrITK/BcWCMbW4LpnkStHQEe/oliBa8 cnagvOLLkBUrGJNbDmeHs/24W2NRgseCBavcNLQrbwmBBZ3BH04CLQPF+/2+eUCp PSiH/1dkUJRlgitM/HdjdH5iSPafenbonNZUEGGo1fWhZIjTAMWnSQB62RiBAgMB AAGjggPfMIID2zAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTKytcM9YsXLm0x moPZfuN9tbQ+izAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMTcwNzg0MERDRjU5QTgzM0Y1Rjk3MzVB QkI3REFCOUEzMUJDM0EzNkEzODg3MTlCMjM4RTc5Q0JEMjg1ODY5Qi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8xNzA3ODQwRENGNTlBODMzRjVGOTczNUFCQjdEQUI5QTMxQkMzQTM2QTM4 ODcxOUIyMzhFNzlDQkQyODU4NjlCLzAvQ0FDQUQ3MENGNThCMTcyRTZEMzE5QTgz RDk3RUUzN0RCNUI0M0U4Qi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFsGCCsGAQUFBwEHAQH/BEwwSjA5BAIAATAzAwMCtUgwCgMDAboi AwMAuiQDAwC+NgMDAb7QAwQAyAmXAwQGyB2AAwQFyB8gAwQFyCCgMA0EAgACMAcD BQAoAAOwMB0GCCsGAQUFBwEIAQH/BA4wDKAKMAgCAhmHAgJtSjANBgkqhkiG9w0B AQsFAAOCAQEAqIk1IR0LTumnj51bUMFpgAtp3m81PNQFmOESP6PLg1wEhjTSwvtc VqDiLR6UQmw1ZY254O6UBTlNcxEfbBoFusDLj1LM7w0GFaoZhN0kNE+ARkIB9/6g 2YqJ7BK5GPe52Yc34qb8tqd0buogwekjQz3crSebe1F/4WuR/GCZG2Q1IXlf6rMx DgfnqRJ7KLAPlMxdkyax4Vzq94nHUd0dQHQCqC3jok0bDqmRymDY1Ty89yvQd7LH rQ4yL8ikcktkCFeXi3FBQwPsTMDufprRR0wAIue3dOqQn7rwrA1UCCKJqriAQTG9 wtFgFaVme0IaJ6XevDZaBE1Fx1v6TQa5rA== -----END CERTIFICATE-----Generated at Sat Oct 25 10:53:46 2025 by rpki-client