$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EADB21399E814385AD279AF6C173BCE1C8320169.cer File: EADB21399E814385AD279AF6C173BCE1C8320169.cer (raw, json) Hash identifier: f/YgsRCYlXygApOskSHOFfzupELztIjCoyAR0oGuZb0= Subject key identifier: EA:DB:21:39:9E:81:43:85:AD:27:9A:F6:C1:73:BC:E1:C8:32:01:69 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 0389DDB8230AC5598A9CDEB5EA6DDD43D37E12A0 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/04186AADFB8A6A9DBEE0AC3FB153446F510D8799B1D9A60C5814F08BC391DCC1/0/EADB21399E814385AD279AF6C173BCE1C8320169.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/04186AADFB8A6A9DBEE0AC3FB153446F510D8799B1D9A60C5814F08BC391DCC1/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 12 Aug 2025 01:30:01 +0000 Certificate not after: Tue 11 Aug 2026 01:35:01 +0000 Subordinate resources: AS: 269817 IP: 45.186.204.0/22 IP: 2803:8760::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 27 Aug 2025 07:04:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:89:dd:b8:23:0a:c5:59:8a:9c:de:b5:ea:6d:dd:43:d3:7e:12:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Aug 12 01:30:01 2025 GMT Not After : Aug 11 01:35:01 2026 GMT Subject: CN=EADB21399E814385AD279AF6C173BCE1C8320169 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:88:49:f9:bb:a8:93:a5:e0:d5:69:c3:2a:b7: 70:40:95:10:7a:77:8d:5f:4c:b7:70:8a:cd:8f:f0: e9:9b:48:97:e2:43:38:fb:6a:a6:be:03:77:72:3a: 0f:4e:5e:45:2f:f8:da:7f:48:2d:15:1f:8d:16:32: 99:bb:16:b8:13:e8:56:df:be:4c:90:3f:9e:15:9d: bc:48:bf:e4:b5:37:b7:4a:56:62:5b:55:76:5a:49: 54:54:e7:88:a9:0f:1b:9b:ad:d0:02:34:6c:55:69: 29:a2:b7:f4:6d:c5:48:1f:d1:13:8a:16:91:50:88: 6c:14:c6:f8:05:b0:76:71:23:92:20:b0:a6:5c:9c: 95:99:df:e1:85:3d:d0:6a:04:86:05:33:ee:a4:a0: 8f:d0:73:a5:3d:be:ac:8d:61:53:dc:ea:b1:f0:53: 8f:14:99:97:4e:89:8f:0d:c2:21:37:75:e7:71:8f: 0f:40:84:e4:73:ed:b1:20:30:2d:25:63:5f:d7:c4: 5f:b7:c3:b0:d8:51:88:f1:85:c7:03:95:24:7a:0d: e8:46:e5:ec:f0:50:5f:29:73:53:c4:07:de:d0:50: 63:68:08:18:06:e0:ff:fe:b8:6e:dd:f4:97:2a:bc: df:86:53:7c:4f:30:39:36:74:f3:18:99:fa:ff:ca: 76:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: EA:DB:21:39:9E:81:43:85:AD:27:9A:F6:C1:73:BC:E1:C8:32:01:69 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/04186AADFB8A6A9DBEE0AC3FB153446F510D8799B1D9A60C5814F08BC391DCC1/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/04186AADFB8A6A9DBEE0AC3FB153446F510D8799B1D9A60C5814F08BC391DCC1/0/EADB21399E814385AD279AF6C173BCE1C8320169.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.186.204.0/22 IPv6: 2803:8760::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 269817 Signature Algorithm: sha256WithRSAEncryption cc:77:48:36:8b:a4:93:f8:0d:f6:e7:5c:e9:16:c7:d8:2d:68: 3f:ab:94:dc:bc:87:53:b4:33:95:0f:16:84:8e:45:2e:0f:9a: a0:bf:e8:35:b2:1b:fe:46:9a:c5:64:0c:2e:65:9f:d3:d1:c6: 36:93:20:af:9b:da:4d:3d:32:1f:4d:98:a8:34:ac:81:23:e8: 96:71:0e:f8:d7:c7:73:51:98:60:db:43:0e:47:fc:bb:a0:a2: a5:9d:e2:8d:20:83:ec:a1:92:6d:87:c0:02:b4:96:9e:d3:f1: 6f:cc:00:d4:9d:24:4a:4d:65:bb:2a:a5:a2:2c:97:ca:d7:11: f8:99:2d:5d:2f:d5:ec:5f:a9:83:51:87:55:e2:01:7a:dd:6a: ab:b1:7a:16:bb:24:de:c7:4c:1e:2f:b6:6a:0f:d8:8c:ab:4f: 10:c4:27:07:7a:8d:db:b5:81:98:e0:7d:48:4b:cb:de:ad:55: 84:ee:16:72:68:a5:3b:69:88:14:96:ff:c7:98:45:75:3c:12: b5:78:29:a4:33:7c:07:4d:63:0f:c2:79:b6:2f:1c:61:1b:6b: c3:40:70:a4:52:65:be:9d:a3:55:65:f2:94:6e:46:0b:49:a3: ff:36:1a:8e:ba:22:7b:44:a6:19:b6:62:4b:f0:a1:dc:72:78: 5e:01:be:51 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUA4nduCMKxVmKnN616m3dQ9N+EqAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTA4MTIwMTMwMDFaFw0yNjA4MTEwMTM1MDFaMDMxMTAvBgNV BAMTKEVBREIyMTM5OUU4MTQzODVBRDI3OUFGNkMxNzNCQ0UxQzgzMjAxNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdiEn5u6iTpeDVacMqt3BAlRB6 d41fTLdwis2P8OmbSJfiQzj7aqa+A3dyOg9OXkUv+Np/SC0VH40WMpm7FrgT6Fbf vkyQP54VnbxIv+S1N7dKVmJbVXZaSVRU54ipDxubrdACNGxVaSmit/RtxUgf0ROK FpFQiGwUxvgFsHZxI5IgsKZcnJWZ3+GFPdBqBIYFM+6koI/Qc6U9vqyNYVPc6rHw U48UmZdOiY8NwiE3dedxjw9AhORz7bEgMC0lY1/XxF+3w7DYUYjxhccDlSR6DehG 5ezwUF8pc1PEB97QUGNoCBgG4P/+uG7d9JcqvN+GU3xPMDk2dPMYmfr/ynbXAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTq2yE5noFDha0n mvbBc7zhyDIBaTAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMDQxODZBQURGQjhBNkE5REJFRTBBQzNG QjE1MzQ0NkY1MTBEODc5OUIxRDlBNjBDNTgxNEYwOEJDMzkxRENDMS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8wNDE4NkFBREZCOEE2QTlEQkVFMEFDM0ZCMTUzNDQ2RjUxMEQ4Nzk5QjFE OUE2MEM1ODE0RjA4QkMzOTFEQ0MxLzAvRUFEQjIxMzk5RTgxNDM4NUFEMjc5QUY2 QzE3M0JDRTFDODMyMDE2OS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLbrMMA0EAgAC MAcDBQAoA4dgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQd+TANBgkqhkiG9w0B AQsFAAOCAQEAzHdINoukk/gN9udc6RbH2C1oP6uU3LyHU7QzlQ8WhI5FLg+aoL/o NbIb/kaaxWQMLmWf09HGNpMgr5vaTT0yH02YqDSsgSPolnEO+NfHc1GYYNtDDkf8 u6CipZ3ijSCD7KGSbYfAArSWntPxb8wA1J0kSk1luyqloiyXytcR+JktXS/V7F+p g1GHVeIBet1qq7F6Frsk3sdMHi+2ag/YjKtPEMQnB3qN27WBmOB9SEvL3q1VhO4W cmilO2mIFJb/x5hFdTwStXgppDN8B01jD8J5ti8cYRtrw0BwpFJlvp2jVWXylG5G C0mj/zYajroie0SmGbZiS/Ch3HJ4XgG+UQ== -----END CERTIFICATE-----Generated at Sat Aug 23 09:44:46 2025 by rpki-client