$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BB53203F85A93FA4B10F62E703E81BB2C18359E2.cer File: BB53203F85A93FA4B10F62E703E81BB2C18359E2.cer (raw, json) Hash identifier: cnQJWMZsO6VVHhRwrZ95ZyzG91cN780gO/KdZ8JHoqo= Subject key identifier: BB:53:20:3F:85:A9:3F:A4:B1:0F:62:E7:03:E8:1B:B2:C1:83:59:E2 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 25E2EA21BE062C2DE542DD9B4D00096196F0ADEF Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/FD3218F870B4B8DE4EC71F8AE931B06444BAA737A4F7606003C125CFA549403F/0/BB53203F85A93FA4B10F62E703E81BB2C18359E2.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/FD3218F870B4B8DE4EC71F8AE931B06444BAA737A4F7606003C125CFA549403F/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Mon 20 Jul 2026 13:01:00 +0000 Certificate not after: Mon 19 Jul 2027 13:06:00 +0000 Subordinate resources: AS: 272853 IP: 2.152.40.0/23 IP: 2803:4290::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 28 Jul 2026 03:34:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:e2:ea:21:be:06:2c:2d:e5:42:dd:9b:4d:00:09:61:96:f0:ad:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jul 20 13:01:00 2026 GMT Not After : Jul 19 13:06:00 2027 GMT Subject: CN=BB53203F85A93FA4B10F62E703E81BB2C18359E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a7:d1:f3:87:50:3f:b1:fa:ee:d0:59:b4:59: dd:3b:85:57:cc:14:c8:ee:22:9b:1d:a3:bc:20:bb: ae:9a:33:b7:61:7e:db:df:e1:17:d2:b7:92:8a:8b: cb:6b:f8:70:c0:3b:b2:bf:2d:a7:94:a8:64:54:44: 27:5e:3d:71:e2:6e:a8:8c:ba:61:82:6a:0c:80:c3: 04:44:72:d6:3c:de:21:af:7b:c0:2a:ee:dc:5d:7f: 11:c5:58:8d:99:d4:c1:2c:61:37:01:9a:c8:f8:87: c7:a1:d5:bf:9e:81:2e:1b:c8:0b:f1:ad:fc:f3:bf: 40:d2:2d:59:ec:8f:b4:d9:16:fd:66:72:92:8d:0c: 33:f7:25:3d:5e:b4:35:1b:93:11:6d:10:b8:4f:ba: e1:b5:10:76:96:97:bf:7e:0e:96:3d:c2:21:c8:ca: 5b:96:33:66:f8:c7:40:ba:5d:01:50:58:87:d5:e4: 8c:b8:fe:9c:ef:70:55:4c:17:da:99:d3:7e:e2:28: ac:e4:e0:48:8a:91:b4:64:ad:c2:ba:84:bd:ca:7c: 67:c0:a0:be:8f:f8:a4:8c:d5:c4:6f:4e:8c:a7:8d: bb:0f:fe:87:a3:e3:41:ba:90:d1:74:b4:8c:cd:29: 38:33:ae:75:f5:9c:5f:cc:84:84:f0:4d:53:98:b8: 24:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BB:53:20:3F:85:A9:3F:A4:B1:0F:62:E7:03:E8:1B:B2:C1:83:59:E2 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/FD3218F870B4B8DE4EC71F8AE931B06444BAA737A4F7606003C125CFA549403F/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/FD3218F870B4B8DE4EC71F8AE931B06444BAA737A4F7606003C125CFA549403F/0/BB53203F85A93FA4B10F62E703E81BB2C18359E2.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.152.40.0/23 IPv6: 2803:4290::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 272853 Signature Algorithm: sha256WithRSAEncryption 08:a0:60:2a:94:b8:c6:85:9a:94:7e:d5:35:bc:64:3e:71:5e: ac:8f:58:0e:b6:ed:a1:94:0c:29:92:d8:5e:e3:1b:64:88:c5: 3b:4d:6d:3c:d4:b8:17:95:4c:ec:01:ba:71:59:fc:f0:b2:1b: 86:e1:ca:a2:bb:cf:77:60:e3:27:18:20:43:52:69:5b:a8:77: ad:de:4c:c4:e5:eb:c5:9a:16:a4:fe:f6:2c:f4:16:42:7c:7b: 99:b3:dd:a6:be:80:73:6a:45:5b:d5:0a:61:88:36:12:7b:3d: 19:fa:28:fb:fc:a6:68:8d:8e:f0:d8:25:e9:f0:c7:76:6f:92: 9e:7c:60:53:bc:ec:a7:17:c7:fc:21:f6:7e:47:7b:4e:eb:c5: e3:bd:54:09:8d:3c:bb:7b:71:40:0c:4f:2e:36:cc:79:c5:36: 09:a7:41:4a:12:6a:82:e3:99:40:d0:ae:41:bd:91:d4:82:d7: 1a:ea:db:ce:cf:0e:db:9c:e0:c2:6e:f7:f5:ec:5e:2e:7d:8a: 5f:7c:52:2d:16:be:1b:3e:40:ba:d6:b4:0a:ee:c8:54:d0:48: 04:01:5b:e2:c8:ce:38:c1:63:78:32:94:0b:82:b7:82:7c:94: 9e:2e:da:68:ac:58:cb:21:c4:e7:e8:7e:88:92:13:24:c1:c2: 7d:6d:24:4c -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUJeLqIb4GLC3lQt2bTQAJYZbwre8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjA3MjAxMzAxMDBaFw0yNzA3MTkxMzA2MDBaMDMxMTAvBgNV BAMTKEJCNTMyMDNGODVBOTNGQTRCMTBGNjJFNzAzRTgxQkIyQzE4MzU5RTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAp9Hzh1A/sfru0Fm0Wd07hVfM FMjuIpsdo7wgu66aM7dhftvf4RfSt5KKi8tr+HDAO7K/LaeUqGRURCdePXHibqiM umGCagyAwwREctY83iGve8Aq7txdfxHFWI2Z1MEsYTcBmsj4h8eh1b+egS4byAvx rfzzv0DSLVnsj7TZFv1mcpKNDDP3JT1etDUbkxFtELhPuuG1EHaWl79+DpY9wiHI yluWM2b4x0C6XQFQWIfV5Iy4/pzvcFVMF9qZ037iKKzk4EiKkbRkrcK6hL3KfGfA oL6P+KSM1cRvToynjbsP/oej40G6kNF0tIzNKTgzrnX1nF/MhITwTVOYuCQ3AgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS7UyA/hak/pLEP YucD6BuywYNZ4jAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRkQzMjE4Rjg3MEI0QjhERTRFQzcxRjhB RTkzMUIwNjQ0NEJBQTczN0E0Rjc2MDYwMDNDMTI1Q0ZBNTQ5NDAzRi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9GRDMyMThGODcwQjRCOERFNEVDNzFGOEFFOTMxQjA2NDQ0QkFBNzM3QTRG NzYwNjAwM0MxMjVDRkE1NDk0MDNGLzAvQkI1MzIwM0Y4NUE5M0ZBNEIxMEY2MkU3 MDNFODFCQjJDMTgzNTlFMi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBApgoMA0EAgAC MAcDBQAoA0KQMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQp1TANBgkqhkiG9w0B AQsFAAOCAQEACKBgKpS4xoWalH7VNbxkPnFerI9YDrbtoZQMKZLYXuMbZIjFO01t PNS4F5VM7AG6cVn88LIbhuHKorvPd2DjJxggQ1JpW6h3rd5MxOXrxZoWpP72LPQW Qnx7mbPdpr6Ac2pFW9UKYYg2Ens9Gfoo+/ymaI2O8Ngl6fDHdm+SnnxgU7zspxfH /CH2fkd7TuvF471UCY08u3txQAxPLjbMecU2CadBShJqguOZQNCuQb2R1ILXGurb zs8O25zgwm739exeLn2KX3xSLRa+Gz5Auta0Cu7IVNBIBAFb4sjOOMFjeDKUC4K3 gnyUni7aaKxYyyHE5+h+iJITJMHCfW0kTA== -----END CERTIFICATE-----Generated at Thu Jul 23 22:09:28 2026 by rpki-client