$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9C920C3F82E080EFF6CD0269962DD3BECD5697A.cer File: B9C920C3F82E080EFF6CD0269962DD3BECD5697A.cer (raw, json) Hash identifier: lEdZmDVrFp3Emc9kVWAR3AuABFWo7rFjD2KMN/3I/m8= Subject key identifier: B9:C9:20:C3:F8:2E:08:0E:FF:6C:D0:26:99:62:DD:3B:EC:D5:69:7A Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 3D67C1706CD92EDE653E69C02A3BFF4F625405ED Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/FEC91FEFDCB3832609DCA5F4CC602339EBC5C4AE476E831D08FA62D13B0E2E0C/0/B9C920C3F82E080EFF6CD0269962DD3BECD5697A.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/FEC91FEFDCB3832609DCA5F4CC602339EBC5C4AE476E831D08FA62D13B0E2E0C/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 20 Aug 2025 17:10:36 +0000 Certificate not after: Wed 19 Aug 2026 17:15:36 +0000 Subordinate resources: AS: 263765 IP: 138.117.4.0/22 IP: 170.84.132.0/22 IP: 2803:9840::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 26 Aug 2025 06:12:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:67:c1:70:6c:d9:2e:de:65:3e:69:c0:2a:3b:ff:4f:62:54:05:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Aug 20 17:10:36 2025 GMT Not After : Aug 19 17:15:36 2026 GMT Subject: CN=B9C920C3F82E080EFF6CD0269962DD3BECD5697A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:32:f6:46:35:38:2d:4f:8a:80:b9:c7:70:73: e4:ce:34:07:0b:9c:ab:4c:5d:62:07:37:a6:83:31: ca:96:cd:aa:54:8c:2b:c4:0f:6d:48:3e:89:75:e1: 4c:32:2c:7f:e7:ff:a3:79:c7:0e:f1:70:84:c7:02: fb:c2:75:82:b9:f8:de:93:23:7c:ca:c8:13:0d:15: 30:ec:4b:92:78:a9:75:f7:36:8c:76:b1:e9:a2:72: 99:08:09:d6:b5:e4:83:01:c3:a7:a7:e0:3c:54:2c: 46:32:3f:80:ba:7c:6a:9f:bd:5b:c0:7e:9b:e5:56: 7b:19:24:df:8d:4e:41:4d:3b:72:9d:f3:88:46:89: 7e:7d:77:b6:7a:1e:8c:ee:bb:42:50:86:80:7f:22: 1d:6a:4a:34:41:6d:57:bc:98:6d:be:33:0c:ef:96: a3:e4:02:6e:d8:6f:a4:4d:22:5a:24:e5:42:04:18: 7b:d7:7a:52:41:3f:d7:ff:f5:f2:c2:bd:1d:b7:fc: a9:69:c7:e2:81:ef:4e:34:10:a5:91:0a:08:73:fc: cf:1d:b7:75:16:38:63:23:c8:81:d5:78:fc:bf:63: 73:85:55:50:3d:f3:c4:3b:8d:4d:2c:06:99:51:61: 0a:ea:de:08:59:f8:30:66:f4:98:78:3c:0a:e1:68: 4c:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B9:C9:20:C3:F8:2E:08:0E:FF:6C:D0:26:99:62:DD:3B:EC:D5:69:7A X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/FEC91FEFDCB3832609DCA5F4CC602339EBC5C4AE476E831D08FA62D13B0E2E0C/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/FEC91FEFDCB3832609DCA5F4CC602339EBC5C4AE476E831D08FA62D13B0E2E0C/0/B9C920C3F82E080EFF6CD0269962DD3BECD5697A.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.117.4.0/22 170.84.132.0/22 IPv6: 2803:9840::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263765 Signature Algorithm: sha256WithRSAEncryption 61:e7:d9:08:ba:95:ce:92:b2:23:07:4b:27:aa:dc:c9:59:93: f0:6f:62:8d:a4:a1:dc:00:62:20:f9:fa:2b:27:ed:d3:ce:7f: e2:28:77:76:a8:71:33:cd:71:09:86:e9:4d:e7:65:fb:48:c2: 4b:d3:d5:82:e8:51:71:96:59:bc:74:d2:18:f1:58:94:72:fa: 09:f6:91:0d:ca:67:af:4a:29:48:70:9d:89:fa:bf:41:cc:fe: d8:72:e2:c2:b4:e0:ed:9e:f2:57:11:27:c0:07:4b:d8:ee:33: e4:f0:89:4c:19:18:b7:3f:9f:4c:38:65:4a:9b:eb:7c:78:5f: a1:36:8f:2f:5a:c3:89:67:c0:20:c3:45:4f:d4:ee:56:70:c4: 6d:8a:6e:91:7b:be:87:6b:ef:be:5d:8c:4c:6a:4a:85:11:60: ed:0b:eb:ee:09:86:ae:a3:ba:8e:92:22:f9:ee:f6:47:82:7d: 78:0b:7f:94:4b:22:3a:2b:0d:84:d6:50:c8:49:9b:47:2c:80: 18:ae:9a:19:d5:be:fd:59:3f:92:3c:85:96:2a:0f:41:fa:f3: a5:b7:c0:34:bb:48:13:19:bb:9c:9f:ca:b4:fb:31:35:65:4b: bf:8a:af:8f:7c:12:0e:b7:96:bc:98:fb:45:d9:29:94:07:07: af:aa:b3:1f -----BEGIN CERTIFICATE----- MIIGqzCCBZOgAwIBAgIUPWfBcGzZLt5lPmnAKjv/T2JUBe0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTA4MjAxNzEwMzZaFw0yNjA4MTkxNzE1MzZaMDMxMTAvBgNV BAMTKEI5QzkyMEMzRjgyRTA4MEVGRjZDRDAyNjk5NjJERDNCRUNENTY5N0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuMvZGNTgtT4qAucdwc+TONAcL nKtMXWIHN6aDMcqWzapUjCvED21IPol14UwyLH/n/6N5xw7xcITHAvvCdYK5+N6T I3zKyBMNFTDsS5J4qXX3Nox2semicpkICda15IMBw6en4DxULEYyP4C6fGqfvVvA fpvlVnsZJN+NTkFNO3Kd84hGiX59d7Z6Hozuu0JQhoB/Ih1qSjRBbVe8mG2+Mwzv lqPkAm7Yb6RNIlok5UIEGHvXelJBP9f/9fLCvR23/Klpx+KB7040EKWRCghz/M8d t3UWOGMjyIHVePy/Y3OFVVA988Q7jU0sBplRYQrq3ghZ+DBm9Jh4PArhaEz5AgMB AAGjggO1MIIDsTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS5ySDD+C4IDv9s 0CaZYt077NVpejAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRkVDOTFGRUZEQ0IzODMyNjA5RENBNUY0 Q0M2MDIzMzlFQkM1QzRBRTQ3NkU4MzFEMDhGQTYyRDEzQjBFMkUwQy8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9GRUM5MUZFRkRDQjM4MzI2MDlEQ0E1RjRDQzYwMjMzOUVCQzVDNEFFNDc2 RTgzMUQwOEZBNjJEMTNCMEUyRTBDLzAvQjlDOTIwQzNGODJFMDgwRUZGNkNEMDI2 OTk2MkREM0JFQ0Q1Njk3QS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCinUEAwQCqlSE MA0EAgACMAcDBQAoA5hAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQGVTANBgkq hkiG9w0BAQsFAAOCAQEAYefZCLqVzpKyIwdLJ6rcyVmT8G9ijaSh3ABiIPn6Kyft 085/4ih3dqhxM81xCYbpTedl+0jCS9PVguhRcZZZvHTSGPFYlHL6CfaRDcpnr0op SHCdifq/Qcz+2HLiwrTg7Z7yVxEnwAdL2O4z5PCJTBkYtz+fTDhlSpvrfHhfoTaP L1rDiWfAIMNFT9TuVnDEbYpukXu+h2vvvl2MTGpKhRFg7Qvr7gmGrqO6jpIi+e72 R4J9eAt/lEsiOisNhNZQyEmbRyyAGK6aGdW+/Vk/kjyFlioPQfrzpbfANLtIExm7 nJ/KtPsxNWVLv4qvj3wSDreWvJj7RdkplAcHr6qzHw== -----END CERTIFICATE-----Generated at Sat Aug 23 07:31:11 2025 by rpki-client