$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B38BDE76E463241532282B264A16F479CD7D0224.cer File: B38BDE76E463241532282B264A16F479CD7D0224.cer (raw, json) Hash identifier: /UMT7xiqGxu14pVsHw2YIsMRguR9r2mWS6h3rUEDt8o= Subject key identifier: B3:8B:DE:76:E4:63:24:15:32:28:2B:26:4A:16:F4:79:CD:7D:02:24 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 424B1876DB1C22A7C7A27E7C5D622CEB7302FB48 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/CF416BA52A17B78F7D57F16A98E5D9A0B7DC328D02D2CC14A9D7467235748F04/0/B38BDE76E463241532282B264A16F479CD7D0224.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/CF416BA52A17B78F7D57F16A98E5D9A0B7DC328D02D2CC14A9D7467235748F04/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 02 Jul 2025 16:24:42 +0000 Certificate not after: Wed 01 Jul 2026 16:29:42 +0000 Subordinate resources: AS: 262199 IP: 45.152.216.0/22 IP: 138.99.180.0/22 IP: 181.225.128.0/21 IP: 201.150.84.0/22 IP: 2803:df00::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 07 Jul 2025 18:57:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:4b:18:76:db:1c:22:a7:c7:a2:7e:7c:5d:62:2c:eb:73:02:fb:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Jul 2 16:24:42 2025 GMT Not After : Jul 1 16:29:42 2026 GMT Subject: CN=B38BDE76E463241532282B264A16F479CD7D0224 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b1:64:1c:49:98:11:e9:d3:ea:e9:ae:d9:8f: cd:65:83:5d:bb:41:16:23:5f:9d:21:07:d7:e3:1b: 1d:06:9a:f8:4c:16:24:72:95:0f:bd:c9:78:af:e5: 7b:e0:4c:e8:cb:51:44:aa:a6:f4:f7:df:69:92:62: 59:58:c3:cf:55:ad:8a:ef:83:f0:7d:b9:09:bc:0b: f0:ca:b0:26:7c:4f:cb:42:9d:c6:5a:4f:c6:0a:cc: 35:6d:76:a2:c4:97:25:db:63:d5:64:e8:0f:15:08: 8f:32:8f:ed:6d:9b:11:c9:8f:4c:de:c9:d1:a8:83: 2f:12:b3:f7:a0:41:7e:bd:6c:36:c2:6f:63:76:59: 46:0c:e4:81:54:59:12:23:b3:b3:a9:30:5d:56:f8: 44:8c:80:07:e1:84:0c:c9:02:e9:24:e4:56:ca:be: 75:72:a1:62:ff:11:f3:c2:86:45:e8:c9:4c:51:db: 5d:2e:0e:68:49:c7:8e:09:1c:b1:96:50:cd:17:80: c7:7b:d3:8a:06:b1:a7:b7:0f:ba:21:7f:7c:9e:12: 4e:fe:e8:94:ec:8e:54:ea:65:8a:fe:d8:1c:77:5a: 44:08:8a:52:8e:c9:cd:e0:0d:e1:76:61:fa:4c:79: 34:18:42:60:32:c3:69:47:0f:20:d3:dc:91:f8:03: 3a:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B3:8B:DE:76:E4:63:24:15:32:28:2B:26:4A:16:F4:79:CD:7D:02:24 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/CF416BA52A17B78F7D57F16A98E5D9A0B7DC328D02D2CC14A9D7467235748F04/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/CF416BA52A17B78F7D57F16A98E5D9A0B7DC328D02D2CC14A9D7467235748F04/0/B38BDE76E463241532282B264A16F479CD7D0224.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.152.216.0/22 138.99.180.0/22 181.225.128.0/21 201.150.84.0/22 IPv6: 2803:df00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 262199 Signature Algorithm: sha256WithRSAEncryption c7:48:34:95:38:03:08:bd:28:ab:8c:c2:49:78:3f:5a:2c:5d: eb:44:05:7f:03:54:97:db:fc:35:1e:43:4a:45:bd:4c:76:fc: ba:2d:22:03:8b:84:3a:7f:14:79:7c:cc:f4:9b:5c:81:96:44: 73:cb:f2:69:82:ec:c2:93:05:61:c9:be:aa:06:c0:00:be:c9: 2b:2b:fb:e1:cf:7a:0a:96:92:28:9d:2f:7c:2b:7c:08:c0:f5: d6:1c:f7:6b:2e:8f:22:9a:ce:8e:f2:70:52:75:c6:71:5b:c7: 6c:bd:1e:f7:9c:c6:0b:b5:9d:3c:c3:c1:c7:22:b5:9c:c0:17: 82:80:22:a4:55:88:e9:9a:06:ef:33:f9:b0:b9:f7:d4:3e:d4: a4:91:ca:e7:24:2a:e5:14:ad:6b:51:6f:fc:36:c0:01:3a:06: b2:06:66:e6:ff:65:91:a6:43:a3:3b:6b:d4:32:95:c8:41:17: 1c:6f:91:40:8b:1b:9d:d0:6b:e0:59:af:d2:f4:30:01:49:0e: 0f:64:b8:3c:9e:fc:a7:26:76:73:88:35:a6:77:c2:e2:71:dd: 8f:3b:7f:5b:ca:03:7d:74:a4:96:79:51:0b:3f:e3:39:b3:09: bb:d7:88:d8:e5:68:6f:f2:2d:8b:3f:e7:82:6a:34:4e:5b:4a: 7e:7b:34:bd -----BEGIN CERTIFICATE----- MIIGtzCCBZ+gAwIBAgIUQksYdtscIqfHon58XWIs63MC+0gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTA3MDIxNjI0NDJaFw0yNjA3MDExNjI5NDJaMDMxMTAvBgNV BAMTKEIzOEJERTc2RTQ2MzI0MTUzMjI4MkIyNjRBMTZGNDc5Q0Q3RDAyMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFsWQcSZgR6dPq6a7Zj81lg127 QRYjX50hB9fjGx0GmvhMFiRylQ+9yXiv5XvgTOjLUUSqpvT332mSYllYw89VrYrv g/B9uQm8C/DKsCZ8T8tCncZaT8YKzDVtdqLElyXbY9Vk6A8VCI8yj+1tmxHJj0ze ydGogy8Ss/egQX69bDbCb2N2WUYM5IFUWRIjs7OpMF1W+ESMgAfhhAzJAukk5FbK vnVyoWL/EfPChkXoyUxR210uDmhJx44JHLGWUM0XgMd704oGsae3D7ohf3yeEk7+ 6JTsjlTqZYr+2Bx3WkQIilKOyc3gDeF2YfpMeTQYQmAyw2lHDyDT3JH4AzolAgMB AAGjggPBMIIDvTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSzi9525GMkFTIo KyZKFvR5zX0CJDAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQ0Y0MTZCQTUyQTE3Qjc4RjdENTdGMTZB OThFNUQ5QTBCN0RDMzI4RDAyRDJDQzE0QTlENzQ2NzIzNTc0OEYwNC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9DRjQxNkJBNTJBMTdCNzhGN0Q1N0YxNkE5OEU1RDlBMEI3REMzMjhEMDJE MkNDMTRBOUQ3NDY3MjM1NzQ4RjA0LzAvQjM4QkRFNzZFNDYzMjQxNTMyMjgyQjI2 NEExNkY0NzlDRDdEMDIyNC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQCLZjYAwQCimO0 AwQDteGAAwQCyZZUMA0EAgACMAcDBQAoA98AMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwQANzANBgkqhkiG9w0BAQsFAAOCAQEAx0g0lTgDCL0oq4zCSXg/Wixd60QF fwNUl9v8NR5DSkW9THb8ui0iA4uEOn8UeXzM9JtcgZZEc8vyaYLswpMFYcm+qgbA AL7JKyv74c96CpaSKJ0vfCt8CMD11hz3ay6PIprOjvJwUnXGcVvHbL0e95zGC7Wd PMPBxyK1nMAXgoAipFWI6ZoG7zP5sLn31D7UpJHK5yQq5RSta1Fv/DbAAToGsgZm 5v9lkaZDoztr1DKVyEEXHG+RQIsbndBr4Fmv0vQwAUkOD2S4PJ78pyZ2c4g1pnfC 4nHdjzt/W8oDfXSklnlRCz/jObMJu9eI2OVob/Itiz/ngmo0TltKfns0vQ== -----END CERTIFICATE-----Generated at Fri Jul 4 01:34:03 2025 by rpki-client