$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D83FF1918FEA10CB5809945319D399F4E6EEFB96.cer File: D83FF1918FEA10CB5809945319D399F4E6EEFB96.cer (raw, json) Hash identifier: OLllFN9mLB5OYGZM0NZy7aCuFCE3opRy1rbdUtlRTiA= Subject key identifier: D8:3F:F1:91:8F:EA:10:CB:58:09:94:53:19:D3:99:F4:E6:EE:FB:96 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 52C67173F2C681666CED1BA698C6921EE90FDE1B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/D602B188567C4CDDA1A5234A0D85B1FE54496C8F02437673C803E282055C30F9/0/D83FF1918FEA10CB5809945319D399F4E6EEFB96.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/D602B188567C4CDDA1A5234A0D85B1FE54496C8F02437673C803E282055C30F9/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 04 Feb 2025 22:59:25 +0000 Certificate not after: Tue 03 Feb 2026 23:04:25 +0000 Subordinate resources: AS: 269766 IP: 45.182.80.0/22 IP: 2801:10:4800::/48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 15:10:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:c6:71:73:f2:c6:81:66:6c:ed:1b:a6:98:c6:92:1e:e9:0f:de:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 4 22:59:25 2025 GMT Not After : Feb 3 23:04:25 2026 GMT Subject: CN=D83FF1918FEA10CB5809945319D399F4E6EEFB96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:60:c4:c8:b9:fa:51:cd:12:8f:79:cc:f5:36: d6:19:d8:7f:d3:09:0c:75:44:e4:10:27:ba:6a:33: 63:8a:0d:cb:e2:25:51:7f:7a:ff:2c:87:8c:90:b2: fb:2a:be:28:aa:4d:64:ba:fa:ed:f1:61:72:37:26: b7:14:67:1d:50:69:95:28:b2:d3:6b:6f:ec:5b:ad: f8:77:12:e1:9d:2e:de:2f:3d:1c:7f:c6:09:b6:f1: cb:6f:75:32:03:7a:1e:3d:79:7c:bc:43:01:39:26: 17:38:21:0d:cb:8f:aa:ec:2a:09:aa:a4:b2:a1:5d: 11:98:e7:67:a0:d3:32:aa:78:69:16:e3:fc:4e:d1: 88:a1:63:38:14:28:27:b2:ac:18:47:47:2b:30:3f: 2a:98:a0:15:d1:e9:4e:7d:3f:e6:28:6c:62:74:fe: 8a:cb:59:78:9e:37:69:a6:ac:c5:54:38:8b:0c:fd: 58:02:71:8b:49:d0:40:6a:9b:70:57:fe:94:41:11: 38:36:bb:dd:fd:46:af:eb:ae:31:e8:23:be:de:f0: 77:1e:3e:5d:97:48:1b:f4:14:4b:f5:04:d1:fc:9e: 66:36:72:66:15:d1:29:4a:38:30:28:93:33:5a:f7: 3c:92:27:2d:a8:02:e8:2e:1a:7b:50:c0:fd:9b:00: 86:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D8:3F:F1:91:8F:EA:10:CB:58:09:94:53:19:D3:99:F4:E6:EE:FB:96 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/D602B188567C4CDDA1A5234A0D85B1FE54496C8F02437673C803E282055C30F9/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/D602B188567C4CDDA1A5234A0D85B1FE54496C8F02437673C803E282055C30F9/0/D83FF1918FEA10CB5809945319D399F4E6EEFB96.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.182.80.0/22 IPv6: 2801:10:4800::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 269766 Signature Algorithm: sha256WithRSAEncryption 63:49:61:bc:12:9a:74:a8:90:f0:4d:6f:37:0a:d0:9a:6d:76: 82:3c:0d:d3:44:5b:4f:f3:6c:18:56:3a:df:ff:9f:ba:89:74: ee:02:2d:2a:af:01:6b:69:cd:4e:03:ef:c6:00:0a:ad:13:95: cd:49:8e:ec:1d:e9:7b:60:67:e9:6a:94:86:0a:6a:85:f7:2e: 14:c0:d7:07:dd:c0:f7:9c:3b:a8:87:d5:09:1a:48:0f:6a:dc: e7:f9:0e:7b:d3:ec:68:e0:6d:8b:b5:a0:0d:4d:a9:3e:ae:ea: 6e:bf:87:a2:09:97:4c:07:80:98:bc:3d:9e:4d:31:d5:77:dd: 81:90:a9:b1:b2:66:34:ab:55:3b:c7:f9:84:70:dc:b4:7f:d9: 85:95:c4:97:88:89:69:37:71:77:bc:ea:a1:d7:88:22:38:f8: 1c:06:67:af:42:cb:9f:e9:01:31:79:a4:10:6d:47:cc:2a:b9: 64:7a:2b:20:5d:0f:9d:d5:c5:25:19:d7:b6:0c:a4:e9:ae:e9: 54:f7:db:68:89:ea:9e:89:9b:94:a0:51:b9:d4:68:9f:60:c1: 43:3e:32:22:50:f3:23:f9:d5:36:95:ad:29:84:53:e8:a3:51: 64:de:5f:df:93:55:41:cb:94:5a:72:0d:e5:50:ec:f8:e6:f4: b5:c2:fb:ea -----BEGIN CERTIFICATE----- MIIGpzCCBY+gAwIBAgIUUsZxc/LGgWZs7RummMaSHukP3hswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDQyMjU5MjVaFw0yNjAyMDMyMzA0MjVaMDMxMTAvBgNV BAMTKEQ4M0ZGMTkxOEZFQTEwQ0I1ODA5OTQ1MzE5RDM5OUY0RTZFRUZCOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWYMTIufpRzRKPecz1NtYZ2H/T CQx1ROQQJ7pqM2OKDcviJVF/ev8sh4yQsvsqviiqTWS6+u3xYXI3JrcUZx1QaZUo stNrb+xbrfh3EuGdLt4vPRx/xgm28ctvdTIDeh49eXy8QwE5Jhc4IQ3Lj6rsKgmq pLKhXRGY52eg0zKqeGkW4/xO0YihYzgUKCeyrBhHRyswPyqYoBXR6U59P+YobGJ0 /orLWXieN2mmrMVUOIsM/VgCcYtJ0EBqm3BX/pRBETg2u939Rq/rrjHoI77e8Hce Pl2XSBv0FEv1BNH8nmY2cmYV0SlKODAokzNa9zySJy2oAuguGntQwP2bAIbbAgMB AAGjggOxMIIDrTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTYP/GRj+oQy1gJ lFMZ05n05u77ljAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRDYwMkIxODg1NjdDNENEREExQTUyMzRB MEQ4NUIxRkU1NDQ5NkM4RjAyNDM3NjczQzgwM0UyODIwNTVDMzBGOS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9ENjAyQjE4ODU2N0M0Q0REQTFBNTIzNEEwRDg1QjFGRTU0NDk2QzhGMDI0 Mzc2NzNDODAzRTI4MjA1NUMzMEY5LzAvRDgzRkYxOTE4RkVBMTBDQjU4MDk5NDUz MTlEMzk5RjRFNkVFRkI5Ni5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCLbZQMA8EAgAC MAkDBwAoAQAQSAAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBB3GMA0GCSqGSIb3 DQEBCwUAA4IBAQBjSWG8Epp0qJDwTW83CtCabXaCPA3TRFtP82wYVjrf/5+6iXTu Ai0qrwFrac1OA+/GAAqtE5XNSY7sHel7YGfpapSGCmqF9y4UwNcH3cD3nDuoh9UJ GkgPatzn+Q570+xo4G2LtaANTak+rupuv4eiCZdMB4CYvD2eTTHVd92BkKmxsmY0 q1U7x/mEcNy0f9mFlcSXiIlpN3F3vOqh14giOPgcBmevQsuf6QExeaQQbUfMKrlk eisgXQ+d1cUlGde2DKTprulU99toieqeiZuUoFG51GifYMFDPjIiUPMj+dU2la0p hFPoo1Fk3l/fk1VBy5Racg3lUOz45vS1wvvq -----END CERTIFICATE-----Generated at Sun Nov 2 12:15:41 2025 by rpki-client