$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DB282B34740BD99CDF8943062B7DCEC3C4B1FF3.cer File: 8DB282B34740BD99CDF8943062B7DCEC3C4B1FF3.cer (raw, json) Hash identifier: xEZX1SlXT2g64vMQrfRVGEpntrbCIswVyoxS6sQdbCw= Subject key identifier: 8D:B2:82:B3:47:40:BD:99:CD:F8:94:30:62:B7:DC:EC:3C:4B:1F:F3 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 26ADFAB8FF2CFCE1CAF338AF7A4723887DCF9158 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/D6C0CE8CFCA14141C3AE42DE6EFC6BBC7716894DF4542224014E417E2E14AB2B/0/8DB282B34740BD99CDF8943062B7DCEC3C4B1FF3.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/D6C0CE8CFCA14141C3AE42DE6EFC6BBC7716894DF4542224014E417E2E14AB2B/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 01 Jul 2025 19:05:01 +0000 Certificate not after: Tue 30 Jun 2026 19:10:01 +0000 Subordinate resources: AS: 14117 IP: 131.0.172.0/22 IP: 179.56.0.0/15 IP: 181.226.0.0/16 IP: 190.13.128.0/18 IP: 190.95.0.0/17 IP: 190.121.0.0/17 IP: 190.211.0.0/18 IP: 190.217.128.0/17 IP: 200.85.192.0/19 IP: 200.126.64.0/18 IP: 201.186.0.0 -- 201.187.127.255 IP: 201.220.96.0/19 IP: 201.221.192.0/19 IP: 216.155.64.0/19 IP: 2803:6f00::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 07 Jul 2025 14:15:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:ad:fa:b8:ff:2c:fc:e1:ca:f3:38:af:7a:47:23:88:7d:cf:91:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Jul 1 19:05:01 2025 GMT Not After : Jun 30 19:10:01 2026 GMT Subject: CN=8DB282B34740BD99CDF8943062B7DCEC3C4B1FF3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:5e:81:59:15:a4:2f:f7:8a:88:d6:bb:c8:d0: 42:b8:ef:51:ba:29:a9:87:27:dc:79:5c:14:0e:af: 16:3c:cb:f4:7e:fa:07:3e:65:09:63:3c:b0:4c:b1: 9c:cc:ba:d8:69:57:9a:28:34:b2:93:f6:79:70:ad: 43:d7:6a:10:8b:6c:77:d2:d0:5e:b5:f0:75:bf:60: 2a:51:77:63:12:5b:a4:5d:7f:f8:5f:67:72:db:7e: 1a:89:f5:3e:93:b5:09:69:7d:bf:3a:cb:46:4a:c1: 5f:f8:e7:63:54:f7:7c:da:d2:f7:27:e8:c0:eb:0d: 18:45:5c:4b:87:36:eb:0a:6b:a6:41:22:aa:90:96: 30:e4:c9:2a:ff:4b:10:a2:69:5f:47:f3:5c:5c:16: 53:b1:c1:48:97:e1:dd:07:58:a6:c4:11:23:4e:28: 79:f5:63:0f:62:65:8a:8f:c0:51:08:1b:94:9d:f5: fb:b5:0a:a1:04:0d:72:36:90:47:bc:d2:a7:d4:be: 27:e4:18:d6:00:19:12:a7:6d:37:3b:c7:45:f2:81: 4e:ff:ab:1d:b4:52:ca:b1:9a:17:5a:e4:7c:ad:f8: 3e:4f:80:de:cc:88:a9:35:5e:d9:61:f7:36:4b:24: f6:d3:65:ea:d4:3e:72:95:35:75:66:be:48:e4:9b: 4f:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8D:B2:82:B3:47:40:BD:99:CD:F8:94:30:62:B7:DC:EC:3C:4B:1F:F3 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/D6C0CE8CFCA14141C3AE42DE6EFC6BBC7716894DF4542224014E417E2E14AB2B/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/D6C0CE8CFCA14141C3AE42DE6EFC6BBC7716894DF4542224014E417E2E14AB2B/0/8DB282B34740BD99CDF8943062B7DCEC3C4B1FF3.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.0.172.0/22 179.56.0.0/15 181.226.0.0/16 190.13.128.0/18 190.95.0.0/17 190.121.0.0/17 190.211.0.0/18 190.217.128.0/17 200.85.192.0/19 200.126.64.0/18 201.186.0.0-201.187.127.255 201.220.96.0/19 201.221.192.0/19 216.155.64.0/19 IPv6: 2803:6f00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 14117 Signature Algorithm: sha256WithRSAEncryption 9a:34:e5:34:b0:dc:09:fa:da:f9:59:c0:c6:82:90:43:52:32: 39:a8:db:c5:4f:f9:18:d6:e6:b9:e1:83:31:cf:0a:f3:71:2f: 8b:89:34:a2:55:a4:b5:0f:d5:7f:5c:c6:1e:31:a8:9a:e6:19: 87:34:37:46:7a:b0:12:be:1b:27:43:7c:bc:7e:31:b2:ad:13: bb:ff:89:22:60:55:14:32:7c:b5:e2:9c:6d:81:80:b9:51:ee: a7:eb:31:74:61:c0:78:52:7c:ba:d9:50:66:c8:1c:00:a5:90: fd:4b:54:bf:78:b4:95:6a:de:ff:f7:2a:56:e3:c3:e7:8a:fb: 74:52:21:87:c5:d2:09:e3:bd:11:34:c9:1f:f0:fa:65:f1:c2: 9e:64:88:f6:06:c1:45:ce:dd:4b:bf:3e:20:6d:95:14:01:8a: b8:11:03:59:51:56:70:cb:0c:13:34:12:d4:35:ec:b3:c0:db: 79:5a:0b:b5:bc:b8:e5:fc:91:38:26:0e:7f:7a:b2:fc:c0:fb: bb:bb:e8:85:c4:10:9a:3c:32:4b:ae:a5:c5:9c:eb:a2:73:30: 5b:6d:3e:eb:2a:d0:6f:78:2c:e9:bb:4c:9d:f7:15:d8:7d:d5: bd:65:15:e2:f0:25:cc:a2:12:23:8e:cd:96:7c:64:d4:ec:ce: d8:cb:0f:fa -----BEGIN CERTIFICATE----- MIIG+DCCBeCgAwIBAgIUJq36uP8s/OHK8zivekcjiH3PkVgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTA3MDExOTA1MDFaFw0yNjA2MzAxOTEwMDFaMDMxMTAvBgNV BAMTKDhEQjI4MkIzNDc0MEJEOTlDREY4OTQzMDYyQjdEQ0VDM0M0QjFGRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJXoFZFaQv94qI1rvI0EK471G6 KamHJ9x5XBQOrxY8y/R++gc+ZQljPLBMsZzMuthpV5ooNLKT9nlwrUPXahCLbHfS 0F618HW/YCpRd2MSW6Rdf/hfZ3LbfhqJ9T6TtQlpfb86y0ZKwV/452NU93za0vcn 6MDrDRhFXEuHNusKa6ZBIqqQljDkySr/SxCiaV9H81xcFlOxwUiX4d0HWKbEESNO KHn1Yw9iZYqPwFEIG5Sd9fu1CqEEDXI2kEe80qfUvifkGNYAGRKnbTc7x0XygU7/ qx20Usqxmhda5Hyt+D5PgN7MiKk1Xtlh9zZLJPbTZerUPnKVNXVmvkjkm0/xAgMB AAGjggQCMIID/jAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSNsoKzR0C9mc34 lDBit9zsPEsf8zAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRDZDMENFOENGQ0ExNDE0MUMzQUU0MkRF NkVGQzZCQkM3NzE2ODk0REY0NTQyMjI0MDE0RTQxN0UyRTE0QUIyQi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9ENkMwQ0U4Q0ZDQTE0MTQxQzNBRTQyREU2RUZDNkJCQzc3MTY4OTRERjQ1 NDIyMjQwMTRFNDE3RTJFMTRBQjJCLzAvOERCMjgyQjM0NzQwQkQ5OUNERjg5NDMw NjJCN0RDRUMzQzRCMUZGMy5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMIGBBggrBgEFBQcBBwEB/wRyMHAwXwQCAAEwWQMEAoMArAMDAbM4 AwMAteIDBAa+DYADBAe+XwADBAe+eQADBAa+0wADBAe+2YADBAXIVcADBAbIfkAw CwMDAcm6AwQHybsAAwQFydxgAwQFyd3AAwQF2JtAMA0EAgACMAcDBQAoA28AMBkG CCsGAQUFBwEIAQH/BAowCKAGMAQCAjclMA0GCSqGSIb3DQEBCwUAA4IBAQCaNOU0 sNwJ+tr5WcDGgpBDUjI5qNvFT/kY1ua54YMxzwrzcS+LiTSiVaS1D9V/XMYeMaia 5hmHNDdGerASvhsnQ3y8fjGyrRO7/4kiYFUUMny14pxtgYC5Ue6n6zF0YcB4Uny6 2VBmyBwApZD9S1S/eLSVat7/9ypW48Pnivt0UiGHxdIJ470RNMkf8Ppl8cKeZIj2 BsFFzt1Lvz4gbZUUAYq4EQNZUVZwywwTNBLUNeyzwNt5Wgu1vLjl/JE4Jg5/erL8 wPu7u+iFxBCaPDJLrqXFnOuiczBbbT7rKtBveCzpu0yd9xXYfdW9ZRXi8CXMohIj js2WfGTU7M7Yyw/6 -----END CERTIFICATE-----Generated at Thu Jul 3 18:08:03 2025 by rpki-client