$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC077FE7F6BB5074B5614D8C0409D1A5D5D8BBB4.cer File: DC077FE7F6BB5074B5614D8C0409D1A5D5D8BBB4.cer (raw, json) Hash identifier: 7Qv5lx/xih203ivm2lBsFFY/V+UAt3iE3ddMey63feg= Subject key identifier: DC:07:7F:E7:F6:BB:50:74:B5:61:4D:8C:04:09:D1:A5:D5:D8:BB:B4 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 721608AC647AAABCC9F7725E59405F04F70926BF Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/B96C4BB34F5CC2F723905B8343F2CDE4A5A7DB350EC2819E7E0EAF8BB51ED5E7/0/DC077FE7F6BB5074B5614D8C0409D1A5D5D8BBB4.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/B96C4BB34F5CC2F723905B8343F2CDE4A5A7DB350EC2819E7E0EAF8BB51ED5E7/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Mon 25 Aug 2025 23:50:01 +0000 Certificate not after: Mon 24 Aug 2026 23:55:01 +0000 Subordinate resources: AS: 267826 IP: 45.173.128.0/22 IP: 2803:d860::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 21 Sep 2025 20:18:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:16:08:ac:64:7a:aa:bc:c9:f7:72:5e:59:40:5f:04:f7:09:26:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Aug 25 23:50:01 2025 GMT Not After : Aug 24 23:55:01 2026 GMT Subject: CN=DC077FE7F6BB5074B5614D8C0409D1A5D5D8BBB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:21:26:1d:69:b5:57:9c:65:3c:6b:74:3e:a6: d8:20:81:a9:5f:4f:7d:fb:28:a2:d0:a9:e5:61:40: 28:da:d3:0a:8d:e0:19:44:13:4f:44:31:3e:f0:64: 7c:ec:88:fc:83:33:c6:8d:6d:0e:95:a5:9c:b4:e8: a2:06:5e:2b:6f:37:ed:66:ce:a0:ac:9d:ca:f2:7f: 2d:1d:3f:3a:51:b3:c3:ac:30:ed:40:6a:6b:af:b3: 34:a3:39:df:b5:ca:5a:c2:7c:0c:24:0d:7d:a9:0c: cb:31:ea:74:cd:62:7e:cb:26:bb:89:79:15:1e:b0: 07:48:3f:04:09:47:89:ba:3d:70:ae:c6:66:9c:d5: 97:f1:96:6f:7b:33:30:5c:77:eb:00:c7:33:3a:76: 07:e0:f0:9f:a5:8d:17:aa:b5:1e:77:54:09:53:26: d7:8a:34:76:ed:71:08:0b:20:0e:bd:10:97:a7:8f: 00:fb:51:4d:15:5b:75:64:20:95:a3:62:07:81:49: 1c:ba:41:c3:75:4f:17:3a:9e:40:90:c6:11:b8:4f: 4e:50:1f:2f:40:eb:40:11:f6:06:d2:34:09:16:27: cf:f7:1e:f8:15:6a:06:19:d6:6a:b3:81:59:20:e2: 74:ae:43:2b:37:38:4b:00:6b:20:f5:39:c1:bd:25: 88:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DC:07:7F:E7:F6:BB:50:74:B5:61:4D:8C:04:09:D1:A5:D5:D8:BB:B4 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/B96C4BB34F5CC2F723905B8343F2CDE4A5A7DB350EC2819E7E0EAF8BB51ED5E7/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/B96C4BB34F5CC2F723905B8343F2CDE4A5A7DB350EC2819E7E0EAF8BB51ED5E7/0/DC077FE7F6BB5074B5614D8C0409D1A5D5D8BBB4.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.173.128.0/22 IPv6: 2803:d860::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267826 Signature Algorithm: sha256WithRSAEncryption 81:94:7c:d1:50:41:ae:9b:a1:13:14:40:fd:62:94:9a:32:4d: 79:26:56:7c:19:6a:a3:3a:dd:b7:c2:25:b2:c9:9c:b9:55:6e: 17:59:02:a9:94:eb:fc:12:a6:8a:d2:4f:f2:8d:cb:82:b1:2b: 8f:61:62:8d:71:9a:03:21:97:b0:4f:ed:5c:4d:02:44:0f:e6: 64:65:e5:5a:ae:d9:2c:ff:94:e6:93:84:71:1e:a5:05:16:00: cb:03:2c:14:c2:19:f2:f1:32:58:5e:c1:c5:d6:32:af:77:6f: 07:d8:e4:9b:f2:4e:38:da:7f:32:bd:bc:95:28:a9:2c:a8:32: c3:57:be:fb:31:03:ba:88:3f:76:15:a4:90:17:e7:37:08:a5: 2a:50:9b:5b:e7:9c:1a:8e:cb:30:72:a3:11:98:78:f5:27:d4: 88:8f:10:06:3c:16:46:09:b7:63:b6:46:99:62:4e:18:02:98: 07:a9:96:6c:40:57:a3:de:06:bc:f9:ac:ea:ef:5e:e3:74:80: 9e:4c:c5:e7:99:c8:65:e4:df:e7:ae:1b:d9:c6:d1:1b:f5:7c: 71:43:dc:aa:ed:af:a1:45:fa:92:77:53:d1:2b:16:37:c4:32: 11:6e:e8:62:1a:eb:9d:ad:e6:73:62:5a:46:08:76:6b:38:01: 66:d5:ea:4b -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUchYIrGR6qrzJ93JeWUBfBPcJJr8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTA4MjUyMzUwMDFaFw0yNjA4MjQyMzU1MDFaMDMxMTAvBgNV BAMTKERDMDc3RkU3RjZCQjUwNzRCNTYxNEQ4QzA0MDlEMUE1RDVEOEJCQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxISYdabVXnGU8a3Q+ptgggalf T337KKLQqeVhQCja0wqN4BlEE09EMT7wZHzsiPyDM8aNbQ6VpZy06KIGXitvN+1m zqCsncryfy0dPzpRs8OsMO1AamuvszSjOd+1ylrCfAwkDX2pDMsx6nTNYn7LJruJ eRUesAdIPwQJR4m6PXCuxmac1Zfxlm97MzBcd+sAxzM6dgfg8J+ljReqtR53VAlT JteKNHbtcQgLIA69EJenjwD7UU0VW3VkIJWjYgeBSRy6QcN1Txc6nkCQxhG4T05Q Hy9A60AR9gbSNAkWJ8/3HvgVagYZ1mqzgVkg4nSuQys3OEsAayD1OcG9JYhRAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTcB3/n9rtQdLVh TYwECdGl1di7tDAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQjk2QzRCQjM0RjVDQzJGNzIzOTA1Qjgz NDNGMkNERTRBNUE3REIzNTBFQzI4MTlFN0UwRUFGOEJCNTFFRDVFNy8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9COTZDNEJCMzRGNUNDMkY3MjM5MDVCODM0M0YyQ0RFNEE1QTdEQjM1MEVD MjgxOUU3RTBFQUY4QkI1MUVENUU3LzAvREMwNzdGRTdGNkJCNTA3NEI1NjE0RDhD MDQwOUQxQTVENUQ4QkJCNC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLa2AMA0EAgAC MAcDBQAoA9hgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQWMjANBgkqhkiG9w0B AQsFAAOCAQEAgZR80VBBrpuhExRA/WKUmjJNeSZWfBlqozrdt8IlssmcuVVuF1kC qZTr/BKmitJP8o3LgrErj2FijXGaAyGXsE/tXE0CRA/mZGXlWq7ZLP+U5pOEcR6l BRYAywMsFMIZ8vEyWF7BxdYyr3dvB9jkm/JOONp/Mr28lSipLKgyw1e++zEDuog/ dhWkkBfnNwilKlCbW+ecGo7LMHKjEZh49SfUiI8QBjwWRgm3Y7ZGmWJOGAKYB6mW bEBXo94GvPms6u9e43SAnkzF55nIZeTf564b2cbRG/V8cUPcqu2voUX6kndT0SsW N8QyEW7oYhrrna3mc2JaRgh2azgBZtXqSw== -----END CERTIFICATE-----Generated at Thu Sep 18 17:02:05 2025 by rpki-client