$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E26827C02EA6431AE7B4F616C8625DC85A94F800.cer File: E26827C02EA6431AE7B4F616C8625DC85A94F800.cer (raw, json) Hash identifier: ehx0apOaxjoE1UroMVqvJs5L4Snooxd9q8kopqhJjas= Subject key identifier: E2:68:27:C0:2E:A6:43:1A:E7:B4:F6:16:C8:62:5D:C8:5A:94:F8:00 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 0A566AA2752F1D58280274627DBB1D8E2CE30AE8 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/BB20FF6CF92550E986AE22A9D697D4F917F9817C4D9BA54A4C692160005A3ECC/0/E26827C02EA6431AE7B4F616C8625DC85A94F800.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/BB20FF6CF92550E986AE22A9D697D4F917F9817C4D9BA54A4C692160005A3ECC/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 04 Feb 2025 20:33:22 +0000 Certificate not after: Tue 03 Feb 2026 20:38:22 +0000 Subordinate resources: AS: 64127 IP: 167.249.28.0/22 IP: 2803:d3e0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 21:38:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:56:6a:a2:75:2f:1d:58:28:02:74:62:7d:bb:1d:8e:2c:e3:0a:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 4 20:33:22 2025 GMT Not After : Feb 3 20:38:22 2026 GMT Subject: CN=E26827C02EA6431AE7B4F616C8625DC85A94F800 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:31:9e:28:50:3a:ae:d2:f0:c0:33:43:f1:e0: ac:c8:24:18:db:43:6c:c1:ee:c8:d3:e7:c3:a7:44: 5f:98:08:1b:6c:26:33:ee:c9:3c:cc:b3:15:1a:98: 40:55:10:21:14:75:6b:3c:dd:72:b1:57:70:eb:38: 78:70:77:68:3c:c2:8b:ba:14:78:81:9e:c5:a5:d6: 5c:33:87:e1:c0:01:7c:24:aa:78:06:e0:88:56:c1: 60:44:95:bd:2f:20:a1:47:2a:79:05:ef:87:03:1a: a8:f2:60:fb:3a:f9:be:24:b0:b5:92:4d:95:28:d4: e6:18:10:99:08:ce:9b:a5:ea:63:e8:eb:1b:ed:b2: f6:8d:7b:60:79:52:79:ed:6e:36:02:d2:11:02:ce: 2e:55:00:8a:85:97:b7:52:69:b0:93:26:e4:77:fc: 1f:a4:6f:b1:84:de:6e:18:1d:46:1e:08:7e:7a:7d: af:75:49:85:a5:e8:33:08:3a:14:a2:2e:45:cd:d1: 4f:67:88:8b:21:66:00:34:1f:db:a0:51:1c:c2:cf: 59:50:ca:31:e2:cc:28:95:7b:30:a8:53:c4:8d:51: 84:ac:a6:23:ea:dc:0c:a0:9c:66:7b:7f:5f:6e:00: 90:71:a7:e6:db:08:20:f9:4c:d7:59:19:4b:6e:0f: b0:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E2:68:27:C0:2E:A6:43:1A:E7:B4:F6:16:C8:62:5D:C8:5A:94:F8:00 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/BB20FF6CF92550E986AE22A9D697D4F917F9817C4D9BA54A4C692160005A3ECC/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/BB20FF6CF92550E986AE22A9D697D4F917F9817C4D9BA54A4C692160005A3ECC/0/E26827C02EA6431AE7B4F616C8625DC85A94F800.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 167.249.28.0/22 IPv6: 2803:d3e0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 64127 Signature Algorithm: sha256WithRSAEncryption a3:44:6c:d0:8e:20:1d:05:77:e8:d4:ea:d3:0d:fd:1e:c0:47: ff:6b:94:30:5e:f9:4b:8a:a8:bf:e3:18:20:8b:e2:68:a3:63: 57:21:bd:8d:c0:e1:a6:61:bd:2c:4e:0c:ee:ad:aa:1b:dd:b2: 4a:8a:d0:84:a8:5f:9a:e5:82:78:a5:94:6a:2c:fb:48:39:4b: a1:16:bd:e9:0d:67:93:ee:fa:cb:5f:46:ce:cf:a1:0b:ac:0e: de:13:22:07:52:ab:c4:9f:f1:5d:2f:7a:c5:c6:6d:db:57:19: 04:bc:17:60:56:aa:ad:d6:0e:f9:c6:1d:b0:0c:e2:63:06:b7: 5e:3e:50:d7:25:c0:87:15:b9:48:d4:81:1c:c0:04:9d:e3:22: 26:4b:47:b6:34:ea:36:61:a3:f9:24:0d:69:43:38:16:e3:8e: f8:cf:00:eb:4c:68:ca:7d:fb:d8:ca:64:6f:f6:60:90:27:cd: 16:d2:e6:3e:18:37:ca:91:47:8f:1b:22:61:a6:cf:ba:e3:21: 4b:79:98:8a:8f:03:5d:25:51:ee:ea:6e:6b:0f:fd:f9:ce:2c: 01:1b:8f:fb:69:fe:9b:f9:92:ed:59:1e:60:58:67:5a:4b:ae: 74:81:84:c2:4d:64:ef:f1:5b:ce:ac:01:a5:e7:c6:20:d2:fc: 13:e8:8a:91 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUClZqonUvHVgoAnRifbsdjizjCugwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDQyMDMzMjJaFw0yNjAyMDMyMDM4MjJaMDMxMTAvBgNV BAMTKEUyNjgyN0MwMkVBNjQzMUFFN0I0RjYxNkM4NjI1REM4NUE5NEY4MDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7MZ4oUDqu0vDAM0Px4KzIJBjb Q2zB7sjT58OnRF+YCBtsJjPuyTzMsxUamEBVECEUdWs83XKxV3DrOHhwd2g8wou6 FHiBnsWl1lwzh+HAAXwkqngG4IhWwWBElb0vIKFHKnkF74cDGqjyYPs6+b4ksLWS TZUo1OYYEJkIzpul6mPo6xvtsvaNe2B5UnntbjYC0hECzi5VAIqFl7dSabCTJuR3 /B+kb7GE3m4YHUYeCH56fa91SYWl6DMIOhSiLkXN0U9niIshZgA0H9ugURzCz1lQ yjHizCiVezCoU8SNUYSspiPq3AygnGZ7f19uAJBxp+bbCCD5TNdZGUtuD7CFAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTiaCfALqZDGue0 9hbIYl3IWpT4ADAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQkIyMEZGNkNGOTI1NTBFOTg2QUUyMkE5 RDY5N0Q0RjkxN0Y5ODE3QzREOUJBNTRBNEM2OTIxNjAwMDVBM0VDQy8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9CQjIwRkY2Q0Y5MjU1MEU5ODZBRTIyQTlENjk3RDRGOTE3Rjk4MTdDNEQ5 QkE1NEE0QzY5MjE2MDAwNUEzRUNDLzAvRTI2ODI3QzAyRUE2NDMxQUU3QjRGNjE2 Qzg2MjVEQzg1QTk0RjgwMC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCp/kcMA0EAgAC MAcDBQAoA9PgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwD6fzANBgkqhkiG9w0B AQsFAAOCAQEAo0Rs0I4gHQV36NTq0w39HsBH/2uUMF75S4qov+MYIIviaKNjVyG9 jcDhpmG9LE4M7q2qG92ySorQhKhfmuWCeKWUaiz7SDlLoRa96Q1nk+76y19Gzs+h C6wO3hMiB1KrxJ/xXS96xcZt21cZBLwXYFaqrdYO+cYdsAziYwa3Xj5Q1yXAhxW5 SNSBHMAEneMiJktHtjTqNmGj+SQNaUM4FuOO+M8A60xoyn372Mpkb/ZgkCfNFtLm Phg3ypFHjxsiYabPuuMhS3mYio8DXSVR7upuaw/9+c4sARuP+2n+m/mS7VkeYFhn WkuudIGEwk1k7/FbzqwBpefGINL8E+iKkQ== -----END CERTIFICATE-----Generated at Sun Nov 2 20:38:26 2025 by rpki-client