$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.cer File: CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.cer (raw, json) Hash identifier: 9yin52abL6Soqju7hcpUg9cEHzUfw39F4p/CBQAx9P8= Subject key identifier: CE:FF:58:50:7A:F1:A0:6A:EF:DA:67:DD:8D:65:12:5C:36:4A:4D:EC Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 50D4D4C3D69E14C5EF1F0E52DFAF229A3BC44F44 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/B5DC9768EA0AACF46DC911E81D0D9D049927D24AACAF0685CB367D54CEE2BD95/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/B5DC9768EA0AACF46DC911E81D0D9D049927D24AACAF0685CB367D54CEE2BD95/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 12:09:25 +0000 Certificate not after: Wed 04 Feb 2026 12:14:25 +0000 Subordinate resources: AS: 264844 IP: 170.244.88.0/22 IP: 191.97.16.0/22 IP: 2803:8280::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 31 Oct 2025 11:37:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:d4:d4:c3:d6:9e:14:c5:ef:1f:0e:52:df:af:22:9a:3b:c4:4f:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 12:09:25 2025 GMT Not After : Feb 4 12:14:25 2026 GMT Subject: CN=CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:61:57:ca:c5:f4:6d:af:37:2d:dd:b4:4e:ea: ca:11:95:ec:30:9f:0a:c4:9a:32:19:f8:58:91:c0: 89:cc:b7:84:2d:57:db:81:33:95:f8:2e:f2:c7:8d: 45:58:e1:c9:6c:a6:69:7d:35:4e:3d:39:ab:63:18: 0c:23:38:63:bb:c5:a4:dd:78:35:20:c0:f3:ed:4a: ca:f9:e8:b9:8d:c6:0b:38:4b:31:88:a6:7a:69:da: 39:9c:e4:df:df:ca:45:73:d7:74:23:b1:09:7d:15: bb:96:b7:75:6d:69:7c:f6:96:c7:1d:33:91:11:08: ff:73:d1:67:ae:f4:48:00:e3:d0:df:a1:d7:1c:57: 8c:20:27:53:cd:05:0b:72:9e:48:9c:78:d3:e0:ce: 17:b5:9f:b5:48:78:81:ea:18:24:fc:78:6e:88:2d: d8:44:61:ae:e5:5f:2a:47:1e:df:ef:b5:74:3a:28: b7:6f:55:cb:3c:f3:63:9b:30:77:5b:28:b9:82:5f: 13:b5:9b:2f:81:d1:77:44:8c:40:d9:16:d8:05:33: df:a1:03:28:e7:6d:20:f9:98:49:c4:68:bd:4e:93: ef:f1:ed:ed:e4:86:b3:c3:76:90:1f:ad:42:16:5b: b6:c2:12:e7:61:b5:12:49:fa:2a:83:e5:7c:72:15: 3c:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CE:FF:58:50:7A:F1:A0:6A:EF:DA:67:DD:8D:65:12:5C:36:4A:4D:EC X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/B5DC9768EA0AACF46DC911E81D0D9D049927D24AACAF0685CB367D54CEE2BD95/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/B5DC9768EA0AACF46DC911E81D0D9D049927D24AACAF0685CB367D54CEE2BD95/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.244.88.0/22 191.97.16.0/22 IPv6: 2803:8280::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264844 Signature Algorithm: sha256WithRSAEncryption 97:ea:97:b2:87:52:f9:a3:0f:e7:c0:0f:26:25:f4:e4:57:fd: 8b:a3:d0:5f:ef:dc:93:81:68:c0:e7:73:a9:18:c1:14:dd:b9: 35:b8:e1:55:3e:ef:86:97:65:9d:f6:c1:56:b9:69:c9:12:30: 81:81:4b:34:1e:8b:c2:91:12:61:c6:08:9a:16:70:10:aa:9d: 6f:0f:da:92:52:1b:f5:0c:97:48:5b:e0:5e:e7:ba:af:29:2e: fd:68:b1:7b:6b:94:eb:72:b1:3a:be:80:40:3b:59:7e:ae:23: e3:a2:38:4e:53:94:24:e4:5e:77:54:c0:bc:fc:3d:9e:9d:a3: 4a:ee:a4:92:17:49:cb:24:11:2b:d6:6c:fe:34:c7:e6:47:ba: cb:44:fa:52:92:8d:90:eb:ac:52:62:f5:b2:b2:89:a4:4e:a3: 8d:c4:1d:f0:d4:4e:d4:c4:f2:86:66:c2:1b:18:1a:5d:dc:68: 9e:34:e8:b4:08:37:6a:d0:fd:ab:14:10:36:3d:08:bc:42:3b: 88:e4:ec:db:ae:96:75:2b:8e:6b:b2:cc:a1:65:8c:74:fd:a7: c6:a2:b8:7a:6a:72:55:1b:11:18:60:09:7d:e5:a0:32:8b:39: 27:72:b6:16:40:ee:ab:49:d5:6f:86:d6:51:53:8e:e6:95:52: ee:79:d6:f8 -----BEGIN CERTIFICATE----- MIIGqzCCBZOgAwIBAgIUUNTUw9aeFMXvHw5S368imjvET0QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUxMjA5MjVaFw0yNjAyMDQxMjE0MjVaMDMxMTAvBgNV BAMTKENFRkY1ODUwN0FGMUEwNkFFRkRBNjdERDhENjUxMjVDMzY0QTRERUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9YVfKxfRtrzct3bRO6soRleww nwrEmjIZ+FiRwInMt4QtV9uBM5X4LvLHjUVY4clspml9NU49OatjGAwjOGO7xaTd eDUgwPPtSsr56LmNxgs4SzGIpnpp2jmc5N/fykVz13QjsQl9FbuWt3VtaXz2lscd M5ERCP9z0Weu9EgA49DfodccV4wgJ1PNBQtynkiceNPgzhe1n7VIeIHqGCT8eG6I LdhEYa7lXypHHt/vtXQ6KLdvVcs882ObMHdbKLmCXxO1my+B0XdEjEDZFtgFM9+h AyjnbSD5mEnEaL1Ok+/x7e3khrPDdpAfrUIWW7bCEudhtRJJ+iqD5XxyFTzZAgMB AAGjggO1MIIDsTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTO/1hQevGgau/a Z92NZRJcNkpN7DAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQjVEQzk3NjhFQTBBQUNGNDZEQzkxMUU4 MUQwRDlEMDQ5OTI3RDI0QUFDQUYwNjg1Q0IzNjdENTRDRUUyQkQ5NS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9CNURDOTc2OEVBMEFBQ0Y0NkRDOTExRTgxRDBEOUQwNDk5MjdEMjRBQUNB RjA2ODVDQjM2N0Q1NENFRTJCRDk1LzAvQ0VGRjU4NTA3QUYxQTA2QUVGREE2N0RE OEQ2NTEyNUMzNjRBNERFQy5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCqvRYAwQCv2EQ MA0EAgACMAcDBQAoA4KAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQKjDANBgkq hkiG9w0BAQsFAAOCAQEAl+qXsodS+aMP58APJiX05Ff9i6PQX+/ck4FowOdzqRjB FN25NbjhVT7vhpdlnfbBVrlpyRIwgYFLNB6LwpESYcYImhZwEKqdbw/aklIb9QyX SFvgXue6ryku/Wixe2uU63KxOr6AQDtZfq4j46I4TlOUJORed1TAvPw9np2jSu6k khdJyyQRK9Zs/jTH5ke6y0T6UpKNkOusUmL1srKJpE6jjcQd8NRO1MTyhmbCGxga XdxonjTotAg3atD9qxQQNj0IvEI7iOTs266WdSuOa7LMoWWMdP2nxqK4empyVRsR GGAJfeWgMos5J3K2FkDuq0nVb4bWUVOO5pVS7nnW+A== -----END CERTIFICATE-----Generated at Mon Oct 27 18:00:43 2025 by rpki-client