$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/06ED0ED732E4FA6FFDCF295D970EE30AA4C6F0F5.cer File: 06ED0ED732E4FA6FFDCF295D970EE30AA4C6F0F5.cer (raw, json) Hash identifier: 9BAJHAA9EH9t8/vmJGztVyvfpm9aNoqRGaQo5rXGL+g= Subject key identifier: 06:ED:0E:D7:32:E4:FA:6F:FD:CF:29:5D:97:0E:E3:0A:A4:C6:F0:F5 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 0EA2C074229964593B49D5640BD48161BAAF3A67 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/086296C1CEE54B18BB2DC1FAE50C6A216318CFA5EE30DFC70BE0C8240CAC89A4/0/06ED0ED732E4FA6FFDCF295D970EE30AA4C6F0F5.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/086296C1CEE54B18BB2DC1FAE50C6A216318CFA5EE30DFC70BE0C8240CAC89A4/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 04 Nov 2025 15:13:18 +0000 Certificate not after: Tue 03 Nov 2026 15:18:18 +0000 Subordinate resources: AS: 273097 IP: 2803:9050::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:a2:c0:74:22:99:64:59:3b:49:d5:64:0b:d4:81:61:ba:af:3a:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Nov 4 15:13:18 2025 GMT Not After : Nov 3 15:18:18 2026 GMT Subject: CN=06ED0ED732E4FA6FFDCF295D970EE30AA4C6F0F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:4a:48:bc:43:ac:e6:6c:8e:ac:e8:9e:5d:28: 11:9e:13:c0:af:09:7e:aa:af:d3:a8:01:cf:ac:ca: cf:01:a6:1f:9c:df:61:c1:b5:f9:10:99:11:dc:d3: ab:54:9d:34:7f:4b:b7:89:c3:8c:df:f3:a7:58:d9: ca:95:a3:35:82:0d:c6:39:d4:44:e5:f5:f5:15:8b: cf:85:a7:41:20:f8:17:f1:fb:6b:57:42:7f:d2:f4: f4:a8:38:0c:94:49:cd:4d:55:75:a9:91:65:0b:1f: 49:ae:a9:e1:ab:d5:41:a0:1f:e9:df:02:b2:f6:98: 0c:4a:8c:59:38:ec:f7:bd:c8:b8:29:36:6c:d1:1f: 86:b6:fa:4b:32:8c:72:63:4b:1e:31:7b:85:0a:ae: 62:20:43:f0:a0:9c:5f:45:70:23:5f:8c:39:24:10: 71:c4:5c:c7:8d:63:d3:4e:de:cd:85:d9:82:4c:ec: 26:07:65:53:07:10:5d:bf:90:b4:0d:33:9e:4e:9e: ad:88:8f:35:de:4f:8d:ac:a6:12:bc:b1:ce:9d:9f: 5c:28:27:a1:71:7a:d6:e4:41:1e:56:81:57:32:ea: 8a:f4:5b:61:92:a4:61:8a:77:8f:31:35:13:38:fc: f5:79:cf:06:29:03:18:2b:2b:08:5b:92:f1:95:ec: 45:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 06:ED:0E:D7:32:E4:FA:6F:FD:CF:29:5D:97:0E:E3:0A:A4:C6:F0:F5 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/086296C1CEE54B18BB2DC1FAE50C6A216318CFA5EE30DFC70BE0C8240CAC89A4/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/086296C1CEE54B18BB2DC1FAE50C6A216318CFA5EE30DFC70BE0C8240CAC89A4/0/06ED0ED732E4FA6FFDCF295D970EE30AA4C6F0F5.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:9050::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273097 Signature Algorithm: sha256WithRSAEncryption a4:d9:17:af:df:5c:fa:27:ab:ee:2f:d3:ac:fe:43:31:14:3f: e7:32:5e:f0:03:14:9f:7e:86:05:8b:1d:6c:35:b1:55:36:3f: 30:f4:19:07:70:f3:37:4e:cf:0d:70:d0:c0:5e:67:cd:20:24: 32:0f:49:17:00:24:d9:31:43:11:10:06:a0:d3:39:c3:bd:05: a0:8a:5f:25:42:d7:55:a0:ab:1d:01:74:93:98:65:96:4a:55: eb:4f:fd:d2:11:78:35:57:57:68:64:25:90:2e:21:f6:9e:5d: 5c:de:83:7c:77:92:ef:a3:51:6f:a3:e8:57:ee:15:8d:66:8e: a0:ec:78:d7:31:9b:be:67:01:5a:ea:63:53:a3:39:a9:54:69: c3:7f:6b:16:be:a2:87:06:4d:be:de:ff:b8:1f:2b:e4:4a:72: 16:b4:f1:85:d0:b5:74:84:37:0f:39:09:1b:bf:57:05:80:1d: 22:ac:ae:43:46:b4:c4:2b:50:23:5b:7d:ce:0f:9c:00:c1:45: 03:83:56:41:f5:3c:48:27:f9:dd:f8:81:32:28:d6:a5:6b:cd: f9:d8:14:41:cd:ca:be:96:62:b8:29:71:e6:f6:0d:47:68:54: ef:0b:7a:be:21:2c:fd:06:18:da:1d:2a:9e:6b:00:69:87:f1: 47:39:44:8a -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUDqLAdCKZZFk7SdVkC9SBYbqvOmcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTExMDQxNTEzMThaFw0yNjExMDMxNTE4MThaMDMxMTAvBgNV BAMTKDA2RUQwRUQ3MzJFNEZBNkZGRENGMjk1RDk3MEVFMzBBQTRDNkYwRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtSki8Q6zmbI6s6J5dKBGeE8Cv CX6qr9OoAc+sys8Bph+c32HBtfkQmRHc06tUnTR/S7eJw4zf86dY2cqVozWCDcY5 1ETl9fUVi8+Fp0Eg+Bfx+2tXQn/S9PSoOAyUSc1NVXWpkWULH0muqeGr1UGgH+nf ArL2mAxKjFk47Pe9yLgpNmzRH4a2+ksyjHJjSx4xe4UKrmIgQ/CgnF9FcCNfjDkk EHHEXMeNY9NO3s2F2YJM7CYHZVMHEF2/kLQNM55Onq2IjzXeT42sphK8sc6dn1wo J6FxetbkQR5WgVcy6or0W2GSpGGKd48xNRM4/PV5zwYpAxgrKwhbkvGV7EUDAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQG7Q7XMuT6b/3P KV2XDuMKpMbw9TAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMDg2Mjk2QzFDRUU1NEIxOEJCMkRDMUZB RTUwQzZBMjE2MzE4Q0ZBNUVFMzBERkM3MEJFMEM4MjQwQ0FDODlBNC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8wODYyOTZDMUNFRTU0QjE4QkIyREMxRkFFNTBDNkEyMTYzMThDRkE1RUUz MERGQzcwQkUwQzgyNDBDQUM4OUE0LzAvMDZFRDBFRDczMkU0RkE2RkZEQ0YyOTVE OTcwRUUzMEFBNEM2RjBGNS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAOQUDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEKskwDQYJKoZIhvcNAQELBQADggEBAKTZF6/f XPonq+4v06z+QzEUP+cyXvADFJ9+hgWLHWw1sVU2PzD0GQdw8zdOzw1w0MBeZ80g JDIPSRcAJNkxQxEQBqDTOcO9BaCKXyVC11Wgqx0BdJOYZZZKVetP/dIReDVXV2hk JZAuIfaeXVzeg3x3ku+jUW+j6FfuFY1mjqDseNcxm75nAVrqY1OjOalUacN/axa+ oocGTb7e/7gfK+RKcha08YXQtXSENw85CRu/VwWAHSKsrkNGtMQrUCNbfc4PnADB RQODVkH1PEgn+d34gTIo1qVrzfnYFEHNyr6WYrgpceb2DUdoVO8Ler4hLP0GGNod Kp5rAGmH8Uc5RIo= -----END CERTIFICATE-----Generated at Wed Nov 5 13:36:48 2025 by rpki-client