$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/02F630ED71E30A0228F714DB90E8B714460D868C.cer File: 02F630ED71E30A0228F714DB90E8B714460D868C.cer (raw, json) Hash identifier: yqvMB7NbnZ2xM7ilOw/Oix+TxUDNd6Eu5kbPJQe4DH0= Subject key identifier: 02:F6:30:ED:71:E3:0A:02:28:F7:14:DB:90:E8:B7:14:46:0D:86:8C Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 3D21068A95D82E27F4CA9FBAC5E07AEAEB53B344 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/2D45B84B7283B5CCAD0980AD5AC9144CB78F9F815EA75B219470A6348154EE51/0/02F630ED71E30A0228F714DB90E8B714460D868C.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/2D45B84B7283B5CCAD0980AD5AC9144CB78F9F815EA75B219470A6348154EE51/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 13:49:40 +0000 Certificate not after: Wed 04 Feb 2026 13:54:40 +0000 Subordinate resources: AS: 272919 IP: 2801:119::/44 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:21:06:8a:95:d8:2e:27:f4:ca:9f:ba:c5:e0:7a:ea:eb:53:b3:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 13:49:40 2025 GMT Not After : Feb 4 13:54:40 2026 GMT Subject: CN=02F630ED71E30A0228F714DB90E8B714460D868C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d4:7e:b7:7d:5d:76:68:cb:f8:a8:46:9a:09: 17:e6:fe:d8:2e:c7:b9:7f:b0:19:43:b4:a8:32:98: d4:ad:e3:23:a7:ca:12:f1:a6:78:b2:b3:2d:34:8e: 73:c3:e4:4b:04:ae:85:6f:ae:60:75:7d:ac:69:ad: c9:e6:6d:ce:04:0a:12:b3:51:49:1c:da:73:dc:48: 4c:de:c6:88:9d:99:94:71:45:0c:68:43:3a:4d:54: e6:7b:18:52:3d:72:1d:19:d1:58:9a:95:6e:63:43: 10:34:52:c1:d0:4e:dc:4e:cf:22:11:68:ae:35:b3: 7e:44:ca:e8:95:a6:43:6a:26:42:75:8d:1c:c6:dd: 0a:ae:e9:fc:af:20:41:3f:b3:67:75:11:64:c0:3f: 96:d5:05:98:9f:d1:ee:37:e5:24:7a:c4:72:3a:3b: 41:bb:db:2f:0e:c6:5c:d4:a8:d8:90:98:b4:5c:e2: 9c:cc:af:91:6d:bd:e6:23:e5:a7:5e:0c:20:32:5c: 70:df:1f:a4:5c:57:bd:4b:10:a8:24:8c:bc:23:3c: e9:66:3f:98:96:24:f9:00:4f:14:01:be:a9:bc:c0: bd:ca:04:72:64:32:eb:0d:78:7b:d7:66:24:b0:d4: 00:c1:ca:be:39:f6:9c:f9:5f:4e:50:bb:b8:16:c7: 33:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 02:F6:30:ED:71:E3:0A:02:28:F7:14:DB:90:E8:B7:14:46:0D:86:8C X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/2D45B84B7283B5CCAD0980AD5AC9144CB78F9F815EA75B219470A6348154EE51/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/2D45B84B7283B5CCAD0980AD5AC9144CB78F9F815EA75B219470A6348154EE51/0/02F630ED71E30A0228F714DB90E8B714460D868C.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2801:119::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 272919 Signature Algorithm: sha256WithRSAEncryption b1:c2:66:29:55:c9:1a:99:db:d3:13:1d:c8:bd:4f:df:29:5f: 1f:de:8c:76:6e:fe:43:0c:b5:41:5d:12:f8:90:18:62:27:b0: 99:3b:e0:49:ec:2a:b1:39:a8:20:a8:a2:ba:2d:3f:1a:f2:17: eb:c1:43:d1:1a:98:26:55:47:2c:16:94:54:8a:90:e8:1e:5b: c3:1a:58:66:4e:a5:7b:e9:85:a9:7c:6c:e7:c2:41:67:ab:d4: dc:fc:07:3c:82:23:13:1c:aa:92:35:50:80:d6:67:dc:4e:01: 3c:a1:a8:aa:a3:e2:73:73:9b:2c:cd:78:e4:e6:44:7b:89:3e: 98:cc:33:83:a6:9a:20:1f:15:7e:e5:8e:74:95:d1:6d:9e:fb: bd:92:c4:de:2e:7c:c3:fb:e0:23:de:93:18:87:6d:84:fe:a5: d6:e7:23:74:f3:79:30:44:0c:14:1e:7f:fc:93:32:67:ad:b9: 5a:03:8e:35:3b:96:ee:76:03:27:f1:8c:91:df:2e:b7:34:7f: c2:17:ed:2c:47:b4:08:fb:ce:32:4f:0f:2d:b7:71:80:90:4c: 58:02:53:1a:5f:38:47:12:65:4a:70:b2:ae:22:0a:48:39:b1: 64:26:23:c8:40:1c:e1:f1:dc:15:9e:fa:ee:ff:f9:e2:96:66: 75:d3:1a:2c -----BEGIN CERTIFICATE----- MIIGmTCCBYGgAwIBAgIUPSEGipXYLif0yp+6xeB66utTs0QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUxMzQ5NDBaFw0yNjAyMDQxMzU0NDBaMDMxMTAvBgNV BAMTKDAyRjYzMEVENzFFMzBBMDIyOEY3MTREQjkwRThCNzE0NDYwRDg2OEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm1H63fV12aMv4qEaaCRfm/tgu x7l/sBlDtKgymNSt4yOnyhLxpniysy00jnPD5EsEroVvrmB1faxprcnmbc4EChKz UUkc2nPcSEzexoidmZRxRQxoQzpNVOZ7GFI9ch0Z0VialW5jQxA0UsHQTtxOzyIR aK41s35EyuiVpkNqJkJ1jRzG3Qqu6fyvIEE/s2d1EWTAP5bVBZif0e435SR6xHI6 O0G72y8OxlzUqNiQmLRc4pzMr5FtveYj5adeDCAyXHDfH6RcV71LEKgkjLwjPOlm P5iWJPkATxQBvqm8wL3KBHJkMusNeHvXZiSw1ADByr459pz5X05Qu7gWxzO5AgMB AAGjggOjMIIDnzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQC9jDtceMKAij3 FNuQ6LcURg2GjDAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMkQ0NUI4NEI3MjgzQjVDQ0FEMDk4MEFE NUFDOTE0NENCNzhGOUY4MTVFQTc1QjIxOTQ3MEE2MzQ4MTU0RUU1MS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8yRDQ1Qjg0QjcyODNCNUNDQUQwOTgwQUQ1QUM5MTQ0Q0I3OEY5RjgxNUVB NzVCMjE5NDcwQTYzNDgxNTRFRTUxLzAvMDJGNjMwRUQ3MUUzMEEwMjI4RjcxNERC OTBFOEI3MTQ0NjBEODY4Qy5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKAEBGQAAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwQqFzANBgkqhkiG9w0BAQsFAAOCAQEAscJm KVXJGpnb0xMdyL1P3ylfH96Mdm7+Qwy1QV0S+JAYYiewmTvgSewqsTmoIKiiui0/ GvIX68FD0RqYJlVHLBaUVIqQ6B5bwxpYZk6le+mFqXxs58JBZ6vU3PwHPIIjExyq kjVQgNZn3E4BPKGoqqPic3ObLM145OZEe4k+mMwzg6aaIB8VfuWOdJXRbZ77vZLE 3i58w/vgI96TGIdthP6l1ucjdPN5MEQMFB5//JMyZ625WgOONTuW7nYDJ/GMkd8u tzR/whftLEe0CPvOMk8PLbdxgJBMWAJTGl84RxJlSnCyriIKSDmxZCYjyEAc4fHc FZ767v/54pZmddMaLA== -----END CERTIFICATE-----Generated at Wed Nov 5 15:44:01 2025 by rpki-client