$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F9704454BEEAA5607C017F2A685262F0B549B68B.cer File: F9704454BEEAA5607C017F2A685262F0B549B68B.cer (raw, json) Hash identifier: MzzKCsbguhmZySFUr4+5CcmWgDPnjaKSoBEXpLcsRTE= Subject key identifier: F9:70:44:54:BE:EA:A5:60:7C:01:7F:2A:68:52:62:F0:B5:49:B6:8B Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 69B8A6C4519E9356F1B3FDA17D925EFB269714 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/2583954D10F857B35149AFFDF0098091E3885EFAD57EBE088477A4C4B18E5F8B/0/F9704454BEEAA5607C017F2A685262F0B549B68B.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/2583954D10F857B35149AFFDF0098091E3885EFAD57EBE088477A4C4B18E5F8B/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 20:44:52 +0000 Certificate not after: Wed 04 Feb 2026 20:49:52 +0000 Subordinate resources: AS: 263217 IP: 179.0.151.0/24 IP: 201.131.102.0/24 IP: 2801:19:c000::/48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 21:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:b8:a6:c4:51:9e:93:56:f1:b3:fd:a1:7d:92:5e:fb:26:97:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 20:44:52 2025 GMT Not After : Feb 4 20:49:52 2026 GMT Subject: CN=F9704454BEEAA5607C017F2A685262F0B549B68B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:32:70:b1:68:3d:fe:70:63:99:f4:8e:8b:e9: cb:25:6a:dc:16:5d:7a:7c:1c:e1:5c:dc:d6:b4:f7: 4c:3c:43:4c:67:bc:3d:8b:6f:c2:77:c4:ef:c2:71: 1d:1f:be:42:99:84:34:b1:be:86:1e:f7:d7:ff:24: 18:13:5c:fd:27:25:0e:a4:10:26:c3:29:7f:d5:14: 15:8e:27:81:cb:1f:81:67:d1:4f:78:04:dd:72:33: ba:36:dc:01:cd:e7:1c:65:c9:bd:72:c9:34:2f:a2: 62:c8:93:e9:ca:1f:f6:e3:53:40:ee:f8:46:ae:58: 36:1c:1e:ad:1d:47:7e:38:b9:87:47:1b:0f:44:8c: 87:f3:56:2d:5f:2c:ed:35:e7:12:f1:82:12:7d:c2: d7:be:0c:72:43:3e:dc:d3:d6:1f:81:17:1f:ca:d8: f0:6c:87:d2:87:dc:fe:07:72:25:88:75:6d:0e:7d: ff:80:af:d2:51:a5:14:24:a4:cd:c7:40:43:b2:df: 27:d8:e5:e2:fb:73:ad:7b:98:f2:06:11:e8:23:5c: 5e:55:16:8d:21:89:62:ff:87:8e:a2:cd:00:1d:02: 3c:6a:d5:1c:2b:7c:9f:7f:73:21:72:2c:4c:47:01: e9:6a:75:c7:94:29:fd:76:fa:45:2b:fb:d7:ff:36: 46:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F9:70:44:54:BE:EA:A5:60:7C:01:7F:2A:68:52:62:F0:B5:49:B6:8B X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/2583954D10F857B35149AFFDF0098091E3885EFAD57EBE088477A4C4B18E5F8B/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/2583954D10F857B35149AFFDF0098091E3885EFAD57EBE088477A4C4B18E5F8B/0/F9704454BEEAA5607C017F2A685262F0B549B68B.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 179.0.151.0/24 201.131.102.0/24 IPv6: 2801:19:c000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263217 Signature Algorithm: sha256WithRSAEncryption 95:c6:10:53:15:2f:90:20:b7:df:00:78:48:e9:a0:93:26:db: 09:48:f3:53:94:6c:4e:55:27:fe:d1:e8:6d:44:33:6f:d9:1f: 15:8d:d1:4e:ed:53:c0:f8:68:58:cb:f3:98:bf:d8:37:f9:f2: 5c:eb:67:9b:48:ce:5d:d8:17:2f:75:89:21:af:75:54:f6:48: 4b:f8:e4:a9:58:35:d3:4e:d4:73:04:61:dc:59:33:f3:53:45: fe:bc:96:2c:46:71:60:f9:19:e7:b3:33:05:4b:6c:f6:dc:04: 31:41:70:1e:2c:1a:fc:f2:38:38:a6:79:d2:e7:11:0f:26:7b: 20:00:dd:5b:e9:11:6d:35:d9:b4:1c:b4:99:31:64:ea:59:b5: 78:4d:4e:82:7a:fd:7c:3d:fa:86:81:33:ae:36:9a:bd:0a:4a: b0:97:ea:7b:df:c3:cd:43:1d:ed:bd:ee:97:c4:93:c8:e7:b0: bb:37:b1:4c:11:b3:cf:a8:3f:0e:32:a8:24:a3:db:a5:74:fa: 85:ab:f2:0b:d1:4f:d2:aa:05:35:98:cc:76:5a:a0:08:7c:b4: 84:6f:34:40:41:1d:91:07:7e:df:b6:25:7c:af:0a:93:53:8c: 95:06:1a:98:f7:ef:f0:38:b5:bd:d8:80:69:2a:3c:88:c1:58: 8a:a2:fa:f4 -----BEGIN CERTIFICATE----- MIIGrDCCBZSgAwIBAgITabimxFGek1bxs/2hfZJe+yaXFDANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyhCQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFF NjYxODE2MB4XDTI1MDIwNTIwNDQ1MloXDTI2MDIwNDIwNDk1MlowMzExMC8GA1UE AxMoRjk3MDQ0NTRCRUVBQTU2MDdDMDE3RjJBNjg1MjYyRjBCNTQ5QjY4QjCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMMycLFoPf5wY5n0jovpyyVq3BZd enwc4Vzc1rT3TDxDTGe8PYtvwnfE78JxHR++QpmENLG+hh731/8kGBNc/SclDqQQ JsMpf9UUFY4ngcsfgWfRT3gE3XIzujbcAc3nHGXJvXLJNC+iYsiT6cof9uNTQO74 Rq5YNhwerR1Hfji5h0cbD0SMh/NWLV8s7TXnEvGCEn3C174MckM+3NPWH4EXH8rY 8GyH0ofc/gdyJYh1bQ59/4Cv0lGlFCSkzcdAQ7LfJ9jl4vtzrXuY8gYR6CNcXlUW jSGJYv+HjqLNAB0CPGrVHCt8n39zIXIsTEcB6Wp1x5Qp/Xb6RSv71/82Ru8CAwEA AaOCA7cwggOzMA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYEFPlwRFS+6qVgfAF/ KmhSYvC1SbaLMB8GA1UdIwQYMBaAFLzAZl7Pipe4PjmCaNkqJVuuZhgWMA4GA1Ud DwEB/wQEAwIBBjCBsAYDVR0fBIGoMIGlMIGioIGfoIGchoGZcnN5bmM6Ly9yZXBv c2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRkRDMzU5NERENEU1NEJBREU3 MDlBQzBEMjU1Q0YyNzlDNDc3MTZEMkU4QjNGNEQ0NURDNDYzNTU4OTlCMzZENC8w L0JDQzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY3JsMIG5 BggrBgEFBQcBAQSBrDCBqTCBpgYIKwYBBQUHMAKGgZlyc3luYzovL3JlcG9zaXRv cnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9FNUFBMUIyQzY5MEQzNEREM0E0MkUw QzAyNjhDMzIxOEVEMTU4RTE1RDI5RkNCRDBCQUI2NkI0Nzg2RDYzMkU2LzAvQkND MDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJBRTY2MTgxNi5jZXIwggFxBggr BgEFBQcBCwSCAWMwggFfMHkGCCsGAQUFBzAFhm1yc3luYzovL3JlcG9zaXRvcnku bGFjbmljLm5ldC9ycGtpL2xhY25pYy8yNTgzOTU0RDEwRjg1N0IzNTE0OUFGRkRG MDA5ODA5MUUzODg1RUZBRDU3RUJFMDg4NDc3QTRDNEIxOEU1RjhCLzAvMIGmBggr BgEFBQcwCoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj bmljLzI1ODM5NTREMTBGODU3QjM1MTQ5QUZGREYwMDk4MDkxRTM4ODVFRkFENTdF QkUwODg0NzdBNEM0QjE4RTVGOEIvMC9GOTcwNDQ1NEJFRUFBNTYwN0MwMTdGMkE2 ODUyNjJGMEI1NDlCNjhCLm1mdDA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxh Y25pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwNgYIKwYBBQUHAQcBAf8EJzAlMBIEAgABMAwDBACzAJcDBADJg2Yw DwQCAAIwCQMHACgBABnAADAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEBDEwDQYJ KoZIhvcNAQELBQADggEBAJXGEFMVL5Agt98AeEjpoJMm2wlI81OUbE5VJ/7R6G1E M2/ZHxWN0U7tU8D4aFjL85i/2Df58lzrZ5tIzl3YFy91iSGvdVT2SEv45KlYNdNO 1HMEYdxZM/NTRf68lixGcWD5GeezMwVLbPbcBDFBcB4sGvzyODimedLnEQ8meyAA 3VvpEW012bQctJkxZOpZtXhNToJ6/Xw9+oaBM642mr0KSrCX6nvfw81DHe297pfE k8jnsLs3sUwRs8+oPw4yqCSj26V0+oWr8gvRT9KqBTWYzHZaoAh8tIRvNEBBHZEH ft+2JXyvCpNTjJUGGpj37/A4tb3YgGkqPIjBWIqi+vQ= -----END CERTIFICATE-----Generated at Sat Nov 1 01:12:41 2025 by rpki-client