$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA7189C75E9BFCB41A376AF33303F62E809AD1DF.cer File: AA7189C75E9BFCB41A376AF33303F62E809AD1DF.cer (raw, json) Hash identifier: aUEupykuBxrM6nuUenANBzFDvmouPDI6S78KsIRkoE0= Subject key identifier: AA:71:89:C7:5E:9B:FC:B4:1A:37:6A:F3:33:03:F6:2E:80:9A:D1:DF Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 27B4FE0BFA33BE36A690E6AA968DFB54D196D8A5 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/20ED4C07EB66687B0212C55332D0FBD17640C89F4A8F6096C769FAD8B819EBFE/0/AA7189C75E9BFCB41A376AF33303F62E809AD1DF.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/20ED4C07EB66687B0212C55332D0FBD17640C89F4A8F6096C769FAD8B819EBFE/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Sat 04 Oct 2025 06:17:14 +0000 Certificate not after: Sat 03 Oct 2026 06:22:14 +0000 Subordinate resources: AS: 266669 IP: 45.227.5.0/24 IP: 2801:154::/42 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 24 Oct 2025 00:51:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:b4:fe:0b:fa:33:be:36:a6:90:e6:aa:96:8d:fb:54:d1:96:d8:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Oct 4 06:17:14 2025 GMT Not After : Oct 3 06:22:14 2026 GMT Subject: CN=AA7189C75E9BFCB41A376AF33303F62E809AD1DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:f8:31:eb:03:ba:46:b5:ae:e7:1d:13:bb:3e: cf:19:e0:63:4c:8b:45:d9:5e:89:78:d1:9f:a6:d5: 26:41:ee:8c:04:33:06:a0:3d:a3:d1:e1:b4:fe:78: 58:4d:62:31:b2:c5:c9:52:62:01:b5:17:49:d7:9d: b7:30:38:1b:8a:1e:36:e8:4d:a3:de:cf:28:45:93: 50:3f:c4:3f:19:c0:d7:ca:9e:06:97:9e:7c:a6:62: df:70:07:cf:b6:9a:11:94:ee:27:2b:c2:f6:20:95: d0:5c:64:6d:52:0c:4e:70:2f:16:0a:a3:e1:58:62: 29:13:dc:de:77:4c:48:49:13:3a:65:7f:47:1b:5f: 5b:60:99:ab:6b:65:03:2d:b2:88:63:c9:bd:ae:35: 59:eb:8f:88:1c:7f:10:9e:e7:f9:87:09:a5:2a:8e: 6e:b3:10:08:ec:b6:d2:16:52:96:43:80:01:39:3a: 10:88:7a:3a:24:5f:cb:36:a8:34:61:35:fd:85:8e: 9f:05:b1:50:ee:3e:ac:6c:1f:f6:66:71:6c:ac:14: 32:1e:8e:6c:a8:f5:b9:27:10:1a:f8:47:6f:5b:b0: d7:16:2d:a0:28:b0:e9:60:fc:bc:07:d1:48:b0:28: c3:61:57:b2:19:bd:cd:d8:d9:4f:42:57:2c:40:59: 4e:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AA:71:89:C7:5E:9B:FC:B4:1A:37:6A:F3:33:03:F6:2E:80:9A:D1:DF X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/20ED4C07EB66687B0212C55332D0FBD17640C89F4A8F6096C769FAD8B819EBFE/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/20ED4C07EB66687B0212C55332D0FBD17640C89F4A8F6096C769FAD8B819EBFE/0/AA7189C75E9BFCB41A376AF33303F62E809AD1DF.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.227.5.0/24 IPv6: 2801:154::/42 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266669 Signature Algorithm: sha256WithRSAEncryption c6:ee:7e:dd:bf:58:01:f4:25:22:fa:41:bd:ce:ff:a2:17:0b: 17:4a:ae:6b:82:74:9e:db:47:0e:95:b2:90:80:06:ab:c5:22: 9f:3c:62:4b:f3:eb:26:e4:78:ef:a9:a3:39:a2:e7:6a:2d:d5: 04:ff:78:71:81:53:e1:f1:87:e1:7e:ba:28:28:c7:b6:b3:79: 3c:bd:4e:84:95:d5:61:7a:66:51:14:f4:54:e8:2f:1f:57:2b: c0:f3:c9:1f:97:5e:8b:47:2d:77:17:9c:35:e4:d2:55:97:73: e0:51:0c:ae:1c:64:6c:af:6a:e8:fa:b8:d2:60:37:1b:53:17: ac:a3:bd:ef:60:b4:04:5b:23:15:04:1a:5c:22:50:82:16:d4: 88:d5:9a:b2:a3:76:9a:a5:37:54:60:81:7f:99:33:04:a1:d5: 8c:36:1e:9e:04:34:a7:50:60:2c:35:e1:f1:00:f9:bd:34:f6: 96:55:8f:5d:75:64:59:00:bc:20:16:ab:b0:2c:af:cf:36:37: 44:ca:3c:16:2c:a8:00:4c:85:49:12:18:c1:05:f3:62:4c:8c: 77:17:63:e7:d3:a3:7b:af:a7:5c:ba:f7:65:49:79:43:39:40: c1:cd:9b:e9:28:bb:b5:b0:1b:60:57:c5:ef:4d:9c:5b:dd:fc: 99:22:e8:ed -----BEGIN CERTIFICATE----- MIIGpzCCBY+gAwIBAgIUJ7T+C/ozvjamkOaqlo37VNGW2KUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTEwMDQwNjE3MTRaFw0yNjEwMDMwNjIyMTRaMDMxMTAvBgNV BAMTKEFBNzE4OUM3NUU5QkZDQjQxQTM3NkFGMzMzMDNGNjJFODA5QUQxREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV+DHrA7pGta7nHRO7Ps8Z4GNM i0XZXol40Z+m1SZB7owEMwagPaPR4bT+eFhNYjGyxclSYgG1F0nXnbcwOBuKHjbo TaPezyhFk1A/xD8ZwNfKngaXnnymYt9wB8+2mhGU7icrwvYgldBcZG1SDE5wLxYK o+FYYikT3N53TEhJEzplf0cbX1tgmatrZQMtsohjyb2uNVnrj4gcfxCe5/mHCaUq jm6zEAjsttIWUpZDgAE5OhCIejokX8s2qDRhNf2Fjp8FsVDuPqxsH/ZmcWysFDIe jmyo9bknEBr4R29bsNcWLaAosOlg/LwH0UiwKMNhV7IZvc3Y2U9CVyxAWU7/AgMB AAGjggOxMIIDrTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSqcYnHXpv8tBo3 avMzA/YugJrR3zAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMjBFRDRDMDdFQjY2Njg3QjAyMTJDNTUz MzJEMEZCRDE3NjQwQzg5RjRBOEY2MDk2Qzc2OUZBRDhCODE5RUJGRS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8yMEVENEMwN0VCNjY2ODdCMDIxMkM1NTMzMkQwRkJEMTc2NDBDODlGNEE4 RjYwOTZDNzY5RkFEOEI4MTlFQkZFLzAvQUE3MTg5Qzc1RTlCRkNCNDFBMzc2QUYz MzMwM0Y2MkU4MDlBRDFERi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQALeMFMA8EAgAC MAkDBwYoAQFUAAAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBGtMA0GCSqGSIb3 DQEBCwUAA4IBAQDG7n7dv1gB9CUi+kG9zv+iFwsXSq5rgnSe20cOlbKQgAarxSKf PGJL8+sm5HjvqaM5oudqLdUE/3hxgVPh8YfhfrooKMe2s3k8vU6EldVhemZRFPRU 6C8fVyvA88kfl16LRy13F5w15NJVl3PgUQyuHGRsr2ro+rjSYDcbUxeso73vYLQE WyMVBBpcIlCCFtSI1Zqyo3aapTdUYIF/mTMEodWMNh6eBDSnUGAsNeHxAPm9NPaW VY9ddWRZALwgFquwLK/PNjdEyjwWLKgATIVJEhjBBfNiTIx3F2Pn06N7r6dcuvdl SXlDOUDBzZvpKLu1sBtgV8XvTZxb3fyZIujt -----END CERTIFICATE-----Generated at Sun Oct 19 21:02:43 2025 by rpki-client