$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F821DED2CE38BADE79C41BB152602F035BB78B6C.cer File: F821DED2CE38BADE79C41BB152602F035BB78B6C.cer (raw, json) Hash identifier: jBDO/Lk3wMpDUzmT632wUSo2BE1+34zz3q+7+BnfReg= Subject key identifier: F8:21:DE:D2:CE:38:BA:DE:79:C4:1B:B1:52:60:2F:03:5B:B7:8B:6C Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 5B98F02B6875F7876DD52EE076D818528B4B4367 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/4E176CFB859FFF8D07920D2AD4B9F8E7788C33CC9D3336684CB4C666434E4B22/0/F821DED2CE38BADE79C41BB152602F035BB78B6C.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/4E176CFB859FFF8D07920D2AD4B9F8E7788C33CC9D3336684CB4C666434E4B22/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Mon 01 Sep 2025 22:55:42 +0000 Certificate not after: Mon 31 Aug 2026 23:00:42 +0000 Subordinate resources: IP: 190.105.144.0/21 IP: 2803:1080::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 21 Sep 2025 20:18:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:98:f0:2b:68:75:f7:87:6d:d5:2e:e0:76:d8:18:52:8b:4b:43:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Sep 1 22:55:42 2025 GMT Not After : Aug 31 23:00:42 2026 GMT Subject: CN=F821DED2CE38BADE79C41BB152602F035BB78B6C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:db:78:eb:02:a4:7d:7a:1a:b2:dc:90:05:82: d1:97:3e:fd:87:41:1d:bf:3c:39:99:f7:9f:ac:28: 0b:87:de:5d:34:75:5f:05:36:d4:52:89:9c:fb:3e: 26:b6:2a:34:f7:2b:fd:a8:f8:c1:b4:0b:d5:cd:86: 00:06:20:0c:51:ab:85:75:8d:90:da:af:11:e5:5e: b0:72:7e:fa:2f:b3:90:39:e8:d3:85:0d:5e:5f:4e: a2:2a:59:03:48:7e:04:e4:e7:41:c7:d7:89:68:ff: 4a:36:ef:83:c9:dc:41:38:e3:3c:8e:2a:76:c7:51: 77:89:de:ec:c1:94:ed:04:b2:a2:0f:4e:90:9a:27: e4:63:1a:e0:00:0c:3c:6d:00:9d:e4:fc:d0:82:26: 2a:e1:0f:fa:28:f4:ba:4a:b6:b7:c7:48:c1:61:43: 5b:8f:1f:6e:78:f6:ba:be:1e:3c:25:7c:a6:b9:e8: d4:e4:5d:4f:b3:3a:9c:f9:0f:19:27:cc:1d:29:90: 79:42:6e:da:2c:0e:f2:9d:be:30:00:d5:65:73:3d: e5:69:08:d4:af:5a:5a:c1:08:87:d8:c7:b3:45:d0: 76:14:23:2d:14:fd:c7:8c:04:be:b1:63:64:2b:6c: b8:f9:d0:b4:98:9e:de:f1:9e:91:c0:65:51:79:02: 04:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F8:21:DE:D2:CE:38:BA:DE:79:C4:1B:B1:52:60:2F:03:5B:B7:8B:6C X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/4E176CFB859FFF8D07920D2AD4B9F8E7788C33CC9D3336684CB4C666434E4B22/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/4E176CFB859FFF8D07920D2AD4B9F8E7788C33CC9D3336684CB4C666434E4B22/0/F821DED2CE38BADE79C41BB152602F035BB78B6C.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 190.105.144.0/21 IPv6: 2803:1080::/32 Signature Algorithm: sha256WithRSAEncryption c3:13:8b:3a:ab:5a:c7:f3:64:81:da:4e:18:6a:ce:72:6a:d1: 69:ba:2b:f6:32:ac:0f:a4:ad:18:8a:a0:3c:af:11:7b:da:6a: 75:62:2f:08:ce:0a:56:b1:31:d3:90:b4:f8:2d:02:05:3d:a2: ae:09:bd:40:19:31:ad:a9:b3:ec:b3:17:3c:4b:44:a6:b1:ec: f7:c9:c5:0f:e2:53:55:a8:ce:45:37:c6:f2:3c:9a:50:6a:97: 51:b5:91:ac:ca:63:25:c4:33:97:75:de:26:b0:21:7a:c4:5f: 0b:d5:04:cc:90:63:e5:7f:5d:58:f8:ee:47:fd:db:06:5d:a7: 51:49:77:72:1d:68:49:19:19:29:4c:79:3d:87:72:30:bb:0c: ce:a0:d3:aa:54:9d:09:5d:0c:91:70:72:d0:27:6f:93:a9:b0: b5:64:72:16:f4:4d:86:48:4a:2f:bd:70:ce:30:fc:97:e6:c4: 25:98:90:1e:32:ea:98:9a:27:83:a1:c1:ce:db:28:09:f8:12: c5:0f:de:27:5f:67:2a:4b:6e:3e:d6:5b:f2:b6:74:c8:98:59: 5c:f8:ad:6a:d3:2c:4e:2d:38:cd:a1:4a:78:99:36:aa:55:d3: 02:53:86:81:5e:cb:34:0d:64:72:bc:b2:77:15:4e:ce:77:0a: bc:01:b8:2a -----BEGIN CERTIFICATE----- MIIGiTCCBXGgAwIBAgIUW5jwK2h194dt1S7gdtgYUotLQ2cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTA5MDEyMjU1NDJaFw0yNjA4MzEyMzAwNDJaMDMxMTAvBgNV BAMTKEY4MjFERUQyQ0UzOEJBREU3OUM0MUJCMTUyNjAyRjAzNUJCNzhCNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCV23jrAqR9ehqy3JAFgtGXPv2H QR2/PDmZ95+sKAuH3l00dV8FNtRSiZz7Pia2KjT3K/2o+MG0C9XNhgAGIAxRq4V1 jZDarxHlXrByfvovs5A56NOFDV5fTqIqWQNIfgTk50HH14lo/0o274PJ3EE44zyO KnbHUXeJ3uzBlO0EsqIPTpCaJ+RjGuAADDxtAJ3k/NCCJirhD/oo9LpKtrfHSMFh Q1uPH2549rq+HjwlfKa56NTkXU+zOpz5DxknzB0pkHlCbtosDvKdvjAA1WVzPeVp CNSvWlrBCIfYx7NF0HYUIy0U/ceMBL6xY2QrbLj50LSYnt7xnpHAZVF5AgTXAgMB AAGjggOTMIIDjzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT4Id7Szji63nnE G7FSYC8DW7eLbDAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNEUxNzZDRkI4NTlGRkY4RDA3OTIwRDJB RDRCOUY4RTc3ODhDMzNDQzlEMzMzNjY4NENCNEM2NjY0MzRFNEIyMi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80RTE3NkNGQjg1OUZGRjhEMDc5MjBEMkFENEI5RjhFNzc4OEMzM0NDOUQz MzM2Njg0Q0I0QzY2NjQzNEU0QjIyLzAvRjgyMURFRDJDRTM4QkFERTc5QzQxQkIx NTI2MDJGMDM1QkI3OEI2Qy5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDvmmQMA0EAgAC MAcDBQAoAxCAMA0GCSqGSIb3DQEBCwUAA4IBAQDDE4s6q1rH82SB2k4Yas5yatFp uiv2MqwPpK0YiqA8rxF72mp1Yi8IzgpWsTHTkLT4LQIFPaKuCb1AGTGtqbPssxc8 S0Smsez3ycUP4lNVqM5FN8byPJpQapdRtZGsymMlxDOXdd4msCF6xF8L1QTMkGPl f11Y+O5H/dsGXadRSXdyHWhJGRkpTHk9h3IwuwzOoNOqVJ0JXQyRcHLQJ2+TqbC1 ZHIW9E2GSEovvXDOMPyX5sQlmJAeMuqYmieDocHO2ygJ+BLFD94nX2cqS24+1lvy tnTImFlc+K1q0yxOLTjNoUp4mTaqVdMCU4aBXss0DWRyvLJ3FU7Odwq8Abgq -----END CERTIFICATE-----Generated at Thu Sep 18 17:50:22 2025 by rpki-client