$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E68D9D36A3D299DDDD317AA2508CD25165A8452.cer File: 5E68D9D36A3D299DDDD317AA2508CD25165A8452.cer (raw, json) Hash identifier: H3Wdvhyk69Rq+yzEvA8meUTyMCm9aRSfzj3AkTtAoTw= Subject key identifier: 5E:68:D9:D3:6A:3D:29:9D:DD:D3:17:AA:25:08:CD:25:16:5A:84:52 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 359ACE6D5211797B38BD18F840C2061DA2D7FBF2 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/6DE06578F5924E825D8C1EBDDA242F06800A9A9F2BB4DFB23DD39862178C47CA/0/5E68D9D36A3D299DDDD317AA2508CD25165A8452.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/6DE06578F5924E825D8C1EBDDA242F06800A9A9F2BB4DFB23DD39862178C47CA/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 24 Jun 2025 17:55:46 +0000 Certificate not after: Tue 23 Jun 2026 18:00:46 +0000 Subordinate resources: AS: 274033 IP: 148.222.58.0/23 IP: 205.159.31.0/24 IP: 2803:5cd0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 07 Jul 2025 14:15:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:9a:ce:6d:52:11:79:7b:38:bd:18:f8:40:c2:06:1d:a2:d7:fb:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Jun 24 17:55:46 2025 GMT Not After : Jun 23 18:00:46 2026 GMT Subject: CN=5E68D9D36A3D299DDDD317AA2508CD25165A8452 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:28:69:05:e4:c6:82:ed:38:db:96:95:0d:45: 28:e0:c7:f5:76:27:97:0d:c4:15:86:88:b2:1a:dc: 09:72:82:34:d8:c4:21:f1:ce:d4:23:3a:d1:5a:d5: ae:cb:2c:4f:49:37:30:76:9d:55:19:26:38:77:f6: 17:14:1b:ec:de:27:bc:58:9f:94:c6:dc:b1:37:41: a4:64:33:bd:09:05:d1:cf:8f:e8:23:97:43:fa:b1: 5f:45:3b:3b:54:bb:ec:02:40:74:f4:f9:7d:bf:c0: bd:e8:57:68:db:87:bf:37:1f:97:3e:fe:de:04:53: 56:57:37:02:d2:de:31:ae:4a:10:64:d5:93:41:89: b0:5c:6f:12:93:58:14:09:3e:ab:c2:9a:4a:8d:f6: 0e:e7:08:4a:da:73:01:3b:93:b4:ed:76:ea:1f:d3: d6:d0:16:37:9b:12:41:b2:87:03:a2:8e:9d:78:0e: 42:da:95:80:a9:9c:ee:21:66:4c:f5:d0:6a:77:1a: 3d:fc:db:64:87:2e:2a:c5:79:4f:dd:70:98:ba:de: 65:1c:44:ea:62:21:2a:7c:cb:84:63:74:a9:50:29: 49:c5:20:f5:99:e8:82:4d:83:eb:7b:3b:b9:46:92: f5:3b:e4:b1:5e:16:36:4a:49:b0:47:c9:44:c1:f3: cb:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5E:68:D9:D3:6A:3D:29:9D:DD:D3:17:AA:25:08:CD:25:16:5A:84:52 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6DE06578F5924E825D8C1EBDDA242F06800A9A9F2BB4DFB23DD39862178C47CA/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6DE06578F5924E825D8C1EBDDA242F06800A9A9F2BB4DFB23DD39862178C47CA/0/5E68D9D36A3D299DDDD317AA2508CD25165A8452.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 148.222.58.0/23 205.159.31.0/24 IPv6: 2803:5cd0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 274033 Signature Algorithm: sha256WithRSAEncryption 6f:08:64:a3:14:d3:70:fd:d1:bb:b3:52:e1:0e:ca:00:8c:c0: 5e:ae:30:88:ec:9f:e9:c5:09:93:b9:19:9c:7e:4e:bf:0d:31: c6:8c:2a:4d:2f:71:1e:67:cc:92:4b:0a:b2:02:29:a6:77:a7: 75:77:98:d0:b8:45:74:9f:21:d8:fd:f5:4d:c8:e4:7d:88:6e: cd:d6:7b:3c:76:f7:3f:40:98:9d:db:be:e7:33:33:ac:74:97: 68:a6:f0:32:82:c2:ba:68:2c:43:5d:53:2d:30:bb:77:e4:71: 65:12:fc:67:6d:37:56:2a:cb:f7:19:02:dc:17:d3:38:7e:b8: 66:44:a2:aa:79:f3:8c:1b:6e:e9:40:c6:ae:3b:b2:11:8a:df: 0e:56:68:ee:02:25:98:0f:1c:05:94:a0:c3:a0:2f:46:2b:e1: d5:9b:ef:0e:29:f2:22:18:10:21:a6:af:af:27:9c:f3:a6:eb: 63:5c:0d:7d:93:15:8e:9b:53:91:a8:d0:58:c9:f6:59:f3:d0: 90:db:1a:a4:be:e2:52:82:e5:92:d6:56:e0:aa:48:31:ad:1c: 35:6a:9a:78:e0:ea:80:2e:80:c8:5f:a7:05:99:e0:74:81:a6: 5b:76:c1:2a:bd:ae:69:3b:f6:84:3e:96:b3:b1:ee:3a:04:95: cc:5f:84:45 -----BEGIN CERTIFICATE----- MIIGqzCCBZOgAwIBAgIUNZrObVIReXs4vRj4QMIGHaLX+/IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTA2MjQxNzU1NDZaFw0yNjA2MjMxODAwNDZaMDMxMTAvBgNV BAMTKDVFNjhEOUQzNkEzRDI5OUREREQzMTdBQTI1MDhDRDI1MTY1QTg0NTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbKGkF5MaC7TjblpUNRSjgx/V2 J5cNxBWGiLIa3AlygjTYxCHxztQjOtFa1a7LLE9JNzB2nVUZJjh39hcUG+zeJ7xY n5TG3LE3QaRkM70JBdHPj+gjl0P6sV9FOztUu+wCQHT0+X2/wL3oV2jbh783H5c+ /t4EU1ZXNwLS3jGuShBk1ZNBibBcbxKTWBQJPqvCmkqN9g7nCEracwE7k7Ttduof 09bQFjebEkGyhwOijp14DkLalYCpnO4hZkz10Gp3Gj3822SHLirFeU/dcJi63mUc ROpiISp8y4RjdKlQKUnFIPWZ6IJNg+t7O7lGkvU75LFeFjZKSbBHyUTB88vfAgMB AAGjggO1MIIDsTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBReaNnTaj0pnd3T F6olCM0lFlqEUjAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNkRFMDY1NzhGNTkyNEU4MjVEOEMxRUJE REEyNDJGMDY4MDBBOUE5RjJCQjRERkIyM0REMzk4NjIxNzhDNDdDQS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy82REUwNjU3OEY1OTI0RTgyNUQ4QzFFQkREQTI0MkYwNjgwMEE5QTlGMkJC NERGQjIzREQzOTg2MjE3OEM0N0NBLzAvNUU2OEQ5RDM2QTNEMjk5RERERDMxN0FB MjUwOENEMjUxNjVBODQ1Mi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBlN46AwQAzZ8f MA0EAgACMAcDBQAoA1zQMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQucTANBgkq hkiG9w0BAQsFAAOCAQEAbwhkoxTTcP3Ru7NS4Q7KAIzAXq4wiOyf6cUJk7kZnH5O vw0xxowqTS9xHmfMkksKsgIppnendXeY0LhFdJ8h2P31TcjkfYhuzdZ7PHb3P0CY ndu+5zMzrHSXaKbwMoLCumgsQ11TLTC7d+RxZRL8Z203VirL9xkC3BfTOH64ZkSi qnnzjBtu6UDGrjuyEYrfDlZo7gIlmA8cBZSgw6AvRivh1ZvvDinyIhgQIaavryec 86brY1wNfZMVjptTkajQWMn2WfPQkNsapL7iUoLlktZW4KpIMa0cNWqaeODqgC6A yF+nBZngdIGmW3bBKr2uaTv2hD6Ws7HuOgSVzF+ERQ== -----END CERTIFICATE-----Generated at Thu Jul 3 18:17:05 2025 by rpki-client