$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/03EADE63CD8AF6482547D464E8DBBEA8040D0D88.cer File: 03EADE63CD8AF6482547D464E8DBBEA8040D0D88.cer (raw, json) Hash identifier: 2zFQdrI70TCukpOL1w80VFJmz0tdK5qLiZPCt0WXTaM= Subject key identifier: 03:EA:DE:63:CD:8A:F6:48:25:47:D4:64:E8:DB:BE:A8:04:0D:0D:88 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 658B676A7F53B6E1E91AC17BBB9B719F15F8C0A2 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/BFB4C0F7CCADD62E07ED7A054BF45AB8B38472AF4BA299DEE13AD4C5AE60FC46/0/03EADE63CD8AF6482547D464E8DBBEA8040D0D88.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/BFB4C0F7CCADD62E07ED7A054BF45AB8B38472AF4BA299DEE13AD4C5AE60FC46/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Mon 23 Jun 2025 21:15:01 +0000 Certificate not after: Mon 22 Jun 2026 21:20:01 +0000 Subordinate resources: AS: 267840 IP: 45.175.212.0/22 IP: 2803:d460::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 07 Jul 2025 14:15:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:8b:67:6a:7f:53:b6:e1:e9:1a:c1:7b:bb:9b:71:9f:15:f8:c0:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Jun 23 21:15:01 2025 GMT Not After : Jun 22 21:20:01 2026 GMT Subject: CN=03EADE63CD8AF6482547D464E8DBBEA8040D0D88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:92:cc:e9:c1:fa:c7:ae:77:28:ba:16:a8:4d: 67:72:a5:bc:71:2b:e6:d7:f2:01:0e:4f:78:65:6a: a5:32:5d:72:91:5a:75:a4:eb:f0:55:da:ba:60:21: 89:a8:27:b8:9a:eb:e4:42:89:40:ca:28:0c:34:4c: 81:4f:6f:68:b6:6a:fa:72:da:54:7b:5b:fe:88:5f: 50:02:7b:43:be:0c:71:1a:6f:cf:ed:8a:cc:7f:5b: 48:9d:9b:55:7e:5d:8e:54:e7:bf:20:9a:cc:b4:df: a5:20:e2:d5:94:3f:62:75:af:89:18:56:d4:35:54: ad:48:d1:96:73:fa:39:d9:a1:28:16:10:7c:0a:8a: 44:64:c2:77:bd:35:b9:de:ba:68:67:f7:20:b5:3c: 84:80:32:d7:7a:3e:00:59:de:79:a3:a8:f1:d2:f7: 44:86:ad:cb:26:0d:d9:cb:ee:08:b4:bd:2a:1c:ba: ad:a3:44:0b:e5:e5:99:63:21:4b:2d:05:ce:3a:e0: b4:f3:8b:aa:5e:85:9e:c6:3d:54:91:c6:30:ab:4c: d8:ec:d9:47:27:da:9a:3d:c2:18:29:5b:e8:9e:72: 0a:09:af:59:7c:7a:19:c6:14:de:b6:37:47:d5:85: 33:bf:7c:cc:e6:ba:44:b9:9a:13:5f:28:4e:e2:6a: c2:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 03:EA:DE:63:CD:8A:F6:48:25:47:D4:64:E8:DB:BE:A8:04:0D:0D:88 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/BFB4C0F7CCADD62E07ED7A054BF45AB8B38472AF4BA299DEE13AD4C5AE60FC46/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/BFB4C0F7CCADD62E07ED7A054BF45AB8B38472AF4BA299DEE13AD4C5AE60FC46/0/03EADE63CD8AF6482547D464E8DBBEA8040D0D88.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.175.212.0/22 IPv6: 2803:d460::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267840 Signature Algorithm: sha256WithRSAEncryption 13:93:34:11:f7:2f:3f:87:65:29:25:87:87:80:7f:f0:1e:a2: 47:66:fb:05:32:1d:1c:a8:d1:c6:da:68:c2:b9:a7:37:c5:ec: e5:63:76:77:1c:4a:14:a8:d7:08:72:bd:62:41:ec:47:7d:a8: 4a:f3:ee:02:5b:0e:e7:d2:00:15:d2:00:e7:b2:85:41:e4:af: 91:1d:a9:65:30:d0:48:b3:71:5a:8a:49:a0:0b:db:12:3e:91: 6e:21:0c:41:09:89:d2:af:c4:28:ce:4d:4f:eb:18:22:29:87: 81:84:85:b4:f7:d4:e7:81:09:28:7d:03:35:81:39:80:1f:f2: 0c:4d:cd:86:5d:e9:20:fc:2a:85:48:f6:c5:19:4f:5d:fa:e6: ef:ad:ea:ed:ca:5a:18:84:c7:d0:02:36:56:4d:30:d9:cc:6a: 03:d6:8d:40:5d:65:44:d5:00:be:2c:f0:71:92:ed:26:37:d7: 6d:e2:d3:22:12:ba:fb:81:3d:f1:b1:09:f7:66:1d:92:da:30: b6:75:d1:c6:98:5d:be:40:05:67:f5:43:c3:54:c3:e0:a3:9a: 3d:c3:71:27:8a:f8:f6:6f:15:b4:aa:67:fe:ff:dc:bf:75:68: 15:05:ed:17:0e:93:fb:c4:17:cf:a6:63:a2:59:08:ff:ed:43: 17:bc:64:f2 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUZYtnan9TtuHpGsF7u5txnxX4wKIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTA2MjMyMTE1MDFaFw0yNjA2MjIyMTIwMDFaMDMxMTAvBgNV BAMTKDAzRUFERTYzQ0Q4QUY2NDgyNTQ3RDQ2NEU4REJCRUE4MDQwRDBEODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtkszpwfrHrncouhaoTWdypbxx K+bX8gEOT3hlaqUyXXKRWnWk6/BV2rpgIYmoJ7ia6+RCiUDKKAw0TIFPb2i2avpy 2lR7W/6IX1ACe0O+DHEab8/tisx/W0idm1V+XY5U578gmsy036Ug4tWUP2J1r4kY VtQ1VK1I0ZZz+jnZoSgWEHwKikRkwne9Nbneumhn9yC1PISAMtd6PgBZ3nmjqPHS 90SGrcsmDdnL7gi0vSocuq2jRAvl5ZljIUstBc464LTzi6pehZ7GPVSRxjCrTNjs 2Ucn2po9whgpW+iecgoJr1l8ehnGFN62N0fVhTO/fMzmukS5mhNfKE7iasKVAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQD6t5jzYr2SCVH 1GTo276oBA0NiDAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQkZCNEMwRjdDQ0FERDYyRTA3RUQ3QTA1 NEJGNDVBQjhCMzg0NzJBRjRCQTI5OURFRTEzQUQ0QzVBRTYwRkM0Ni8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9CRkI0QzBGN0NDQURENjJFMDdFRDdBMDU0QkY0NUFCOEIzODQ3MkFGNEJB Mjk5REVFMTNBRDRDNUFFNjBGQzQ2LzAvMDNFQURFNjNDRDhBRjY0ODI1NDdENDY0 RThEQkJFQTgwNDBEMEQ4OC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLa/UMA0EAgAC MAcDBQAoA9RgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQWQDANBgkqhkiG9w0B AQsFAAOCAQEAE5M0EfcvP4dlKSWHh4B/8B6iR2b7BTIdHKjRxtpowrmnN8Xs5WN2 dxxKFKjXCHK9YkHsR32oSvPuAlsO59IAFdIA57KFQeSvkR2pZTDQSLNxWopJoAvb Ej6RbiEMQQmJ0q/EKM5NT+sYIimHgYSFtPfU54EJKH0DNYE5gB/yDE3Nhl3pIPwq hUj2xRlPXfrm763q7cpaGITH0AI2Vk0w2cxqA9aNQF1lRNUAvizwcZLtJjfXbeLT IhK6+4E98bEJ92YdktowtnXRxphdvkAFZ/VDw1TD4KOaPcNxJ4r49m8VtKpn/v/c v3VoFQXtFw6T+8QXz6ZjolkI/+1DF7xk8g== -----END CERTIFICATE-----Generated at Thu Jul 3 18:55:34 2025 by rpki-client