$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/119B7B5F0187CFCFD24CA5A7035670D2F09936C2.cer File: 119B7B5F0187CFCFD24CA5A7035670D2F09936C2.cer (raw, json) Hash identifier: 12R7t22EbzPRMlqNh1R7BpUAlbY/1+FYtx5cKRXcZ3g= Subject key identifier: 11:9B:7B:5F:01:87:CF:CF:D2:4C:A5:A7:03:56:70:D2:F0:99:36:C2 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 0B7605EEC980B63E47F36E648108A6CDC5141008 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/23B6FC42FB9BC367A07DD63750F53CB0662DB6732F25928DBB1C0336119D1A43/0/119B7B5F0187CFCFD24CA5A7035670D2F09936C2.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/23B6FC42FB9BC367A07DD63750F53CB0662DB6732F25928DBB1C0336119D1A43/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Fri 01 Aug 2025 09:00:21 +0000 Certificate not after: Fri 31 Jul 2026 09:05:21 +0000 Subordinate resources: AS: 265565 IP: 45.167.252.0/22 IP: 2806:315::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 26 Aug 2025 06:12:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:76:05:ee:c9:80:b6:3e:47:f3:6e:64:81:08:a6:cd:c5:14:10:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Aug 1 09:00:21 2025 GMT Not After : Jul 31 09:05:21 2026 GMT Subject: CN=119B7B5F0187CFCFD24CA5A7035670D2F09936C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:69:1e:7b:6c:8a:86:80:e4:de:1f:9b:dd:7d: d8:3c:a9:7a:81:ac:de:3f:bb:5e:15:2a:49:64:4c: 7c:90:7b:89:d4:ac:f4:6d:54:1c:e3:60:12:38:7c: c3:23:e5:2d:56:eb:41:78:3a:02:0f:02:56:91:2b: c8:25:37:8e:1f:0e:6d:bc:40:19:1b:e3:6c:fc:36: ff:4b:d2:42:e8:55:5a:c1:69:cf:7f:d9:7d:6e:75: ca:45:aa:d9:df:e8:8d:ee:a4:4f:14:19:bb:9b:8c: de:58:3c:3d:40:96:ba:de:0d:8a:30:77:2b:92:91: 70:1a:a5:b3:ce:20:d9:22:2c:ab:85:17:76:89:6b: a6:99:08:1f:b3:e7:be:79:cf:c0:11:8c:7b:e0:ac: e4:30:b2:7a:e0:50:05:d1:4d:8d:62:3c:4a:a0:59: d0:73:2f:8d:1d:ba:ca:9e:16:1b:52:04:7f:83:0b: 7d:5b:39:4a:31:cd:7c:6b:72:78:f0:56:fd:a7:96: d9:6a:39:37:c9:12:74:88:94:b6:2c:3f:ee:c0:da: 17:65:41:f8:2d:32:56:00:e8:c2:3c:db:8b:7b:8d: 2a:84:23:2e:f6:8c:76:44:02:3c:25:b9:e8:79:7c: ae:a4:e2:18:ba:bc:e5:57:6c:9c:55:af:d6:1d:d2: 9d:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 11:9B:7B:5F:01:87:CF:CF:D2:4C:A5:A7:03:56:70:D2:F0:99:36:C2 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/23B6FC42FB9BC367A07DD63750F53CB0662DB6732F25928DBB1C0336119D1A43/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/23B6FC42FB9BC367A07DD63750F53CB0662DB6732F25928DBB1C0336119D1A43/0/119B7B5F0187CFCFD24CA5A7035670D2F09936C2.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.167.252.0/22 IPv6: 2806:315::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265565 Signature Algorithm: sha256WithRSAEncryption e6:68:af:85:94:32:51:7f:d7:4d:5e:e4:3c:bf:93:6f:72:20: 51:b8:68:6d:13:f2:06:90:b9:ee:64:85:b2:d0:1d:27:cd:a2: 69:92:1f:fe:33:a7:60:25:7a:24:38:51:e1:1f:32:c5:37:f7: b2:f1:a9:39:ab:c5:58:b7:2b:d9:f5:4a:47:b0:84:38:25:83: b4:cc:c9:df:88:65:d3:63:5d:93:d6:3a:0d:e0:73:5a:c4:fb: 8f:ea:be:0d:e8:3b:be:9e:1d:43:a9:c3:27:ac:30:5a:e3:4f: 94:a2:ae:d5:b4:5e:58:d7:e0:e7:1f:9a:24:36:16:86:b2:f1: 5c:8e:57:14:66:02:fb:62:10:3b:40:d2:dc:5c:4d:2f:61:81: 12:69:8b:61:ae:b6:53:1e:30:d9:12:3b:32:88:5e:3d:b9:ef: 5c:fc:78:cc:a6:d7:1e:24:c3:b4:04:98:fd:2c:23:a3:21:5a: 57:04:0b:37:41:c1:8f:44:3a:7a:ae:df:7d:7a:00:80:08:10: 1f:de:3c:dc:45:bc:e3:d1:6b:cb:e5:f1:cf:83:7e:c1:20:71: bf:94:6b:5d:46:0a:62:36:dc:f4:35:9b:f3:85:82:ae:53:da: 5d:8a:50:dc:b2:27:23:50:37:f4:8d:83:07:5a:a3:34:88:fb: 03:cb:e4:2a -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUC3YF7smAtj5H825kgQimzcUUEAgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTA4MDEwOTAwMjFaFw0yNjA3MzEwOTA1MjFaMDMxMTAvBgNV BAMTKDExOUI3QjVGMDE4N0NGQ0ZEMjRDQTVBNzAzNTY3MEQyRjA5OTM2QzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeaR57bIqGgOTeH5vdfdg8qXqB rN4/u14VKklkTHyQe4nUrPRtVBzjYBI4fMMj5S1W60F4OgIPAlaRK8glN44fDm28 QBkb42z8Nv9L0kLoVVrBac9/2X1udcpFqtnf6I3upE8UGbubjN5YPD1AlrreDYow dyuSkXAapbPOINkiLKuFF3aJa6aZCB+z5755z8ARjHvgrOQwsnrgUAXRTY1iPEqg WdBzL40dusqeFhtSBH+DC31bOUoxzXxrcnjwVv2nltlqOTfJEnSIlLYsP+7A2hdl QfgtMlYA6MI824t7jSqEIy72jHZEAjwlueh5fK6k4hi6vOVXbJxVr9Yd0p3LAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQRm3tfAYfPz9JM pacDVnDS8Jk2wjAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMjNCNkZDNDJGQjlCQzM2N0EwN0RENjM3 NTBGNTNDQjA2NjJEQjY3MzJGMjU5MjhEQkIxQzAzMzYxMTlEMUE0My8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8yM0I2RkM0MkZCOUJDMzY3QTA3REQ2Mzc1MEY1M0NCMDY2MkRCNjczMkYy NTkyOERCQjFDMDMzNjExOUQxQTQzLzAvMTE5QjdCNUYwMTg3Q0ZDRkQyNENBNUE3 MDM1NjcwRDJGMDk5MzZDMi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLaf8MA0EAgAC MAcDBQAoBgMVMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQNXTANBgkqhkiG9w0B AQsFAAOCAQEA5mivhZQyUX/XTV7kPL+Tb3IgUbhobRPyBpC57mSFstAdJ82iaZIf /jOnYCV6JDhR4R8yxTf3svGpOavFWLcr2fVKR7CEOCWDtMzJ34hl02Ndk9Y6DeBz WsT7j+q+Deg7vp4dQ6nDJ6wwWuNPlKKu1bReWNfg5x+aJDYWhrLxXI5XFGYC+2IQ O0DS3FxNL2GBEmmLYa62Ux4w2RI7MohePbnvXPx4zKbXHiTDtASY/SwjoyFaVwQL N0HBj0Q6eq7ffXoAgAgQH9483EW849Fry+Xxz4N+wSBxv5RrXUYKYjbc9DWb84WC rlPaXYpQ3LInI1A39I2DB1qjNIj7A8vkKg== -----END CERTIFICATE-----Generated at Sat Aug 23 07:26:06 2025 by rpki-client