$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D8A5D8A34E265B308F626454D8A6E920C65D608.cer File: 2D8A5D8A34E265B308F626454D8A6E920C65D608.cer (raw, json) Hash identifier: X71GXoco1DMBhh92DQoaPWzI0jrMmqqNzmnCodZU8Cs= Subject key identifier: 2D:8A:5D:8A:34:E2:65:B3:08:F6:26:45:4D:8A:6E:92:0C:65:D6:08 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 61A7578BEF6FDDC27E178EF9B8E3A3177BD8E4 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/86AF7F5A91E2D9513088A1BAA9E8B8D786BC52A7FBCFCCA73D29C6BB6ADD62C0/0/2D8A5D8A34E265B308F626454D8A6E920C65D608.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/86AF7F5A91E2D9513088A1BAA9E8B8D786BC52A7FBCFCCA73D29C6BB6ADD62C0/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Fri 09 May 2025 12:45:01 +0000 Certificate not after: Fri 08 May 2026 12:50:01 +0000 Subordinate resources: AS: 272964 IP: 2803:590::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:a7:57:8b:ef:6f:dd:c2:7e:17:8e:f9:b8:e3:a3:17:7b:d8:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: May 9 12:45:01 2025 GMT Not After : May 8 12:50:01 2026 GMT Subject: CN=2D8A5D8A34E265B308F626454D8A6E920C65D608 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:72:24:6a:c6:45:e2:4f:eb:50:f0:7a:2f:64: 7c:cf:8f:9d:bb:1a:aa:f8:6a:6c:2b:7e:db:8d:5a: 37:8c:01:a2:bf:d7:33:e6:ef:51:63:13:42:eb:1c: 8c:72:fb:6e:49:8c:a0:a8:f0:0a:dc:93:20:2a:b3: 67:f6:75:cd:59:79:3d:55:2b:ec:ca:97:f9:4a:b7: dd:6c:01:97:de:07:1a:04:5f:7d:ae:76:37:00:cc: aa:8b:7c:8d:ba:d3:64:4d:11:02:69:81:c2:98:fb: 69:2b:25:a9:99:ad:3c:b3:71:1f:1e:f3:d7:41:8f: 28:7a:68:ac:cd:59:d2:d5:b8:d1:01:66:71:87:73: e7:45:43:b0:fd:00:52:8d:f9:47:12:e4:39:0f:b6: 7f:92:40:1c:51:17:1c:f2:37:f8:1f:b6:f5:af:8d: 50:c9:98:6e:cd:82:cd:00:ec:8d:c8:95:ca:eb:c1: a8:8b:12:6d:21:01:13:dc:95:68:42:d1:20:f6:a1: 34:aa:ea:aa:4f:d1:a6:ac:3b:96:18:1c:b9:8c:b3: c8:22:da:af:95:b9:d4:ce:13:85:25:31:3d:e0:6d: 14:c4:f0:b9:a1:46:30:3a:2f:8d:99:17:74:b3:cd: b5:f7:76:1b:a4:8a:98:c1:c2:db:66:dc:d5:02:4e: 33:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2D:8A:5D:8A:34:E2:65:B3:08:F6:26:45:4D:8A:6E:92:0C:65:D6:08 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/86AF7F5A91E2D9513088A1BAA9E8B8D786BC52A7FBCFCCA73D29C6BB6ADD62C0/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/86AF7F5A91E2D9513088A1BAA9E8B8D786BC52A7FBCFCCA73D29C6BB6ADD62C0/0/2D8A5D8A34E265B308F626454D8A6E920C65D608.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:590::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 272964 Signature Algorithm: sha256WithRSAEncryption b8:0f:7e:0a:50:97:26:fb:34:5f:ed:4f:66:ac:d2:0a:fe:93: 1a:47:da:cd:f0:27:64:28:87:1c:d1:5f:74:ac:21:a8:5e:46: 0d:4c:a1:cd:07:07:4c:3e:ab:1e:9e:a8:aa:b4:2c:06:3a:9e: 8b:43:04:c9:04:f2:f4:9a:38:f0:74:5e:12:ef:81:9a:ed:08: 68:8a:56:23:86:d8:82:29:dd:80:98:8c:f7:15:fe:f6:bc:af: f4:17:71:9b:d7:2b:22:da:10:e5:26:ff:cb:29:8b:7e:65:1e: 3c:b5:90:ea:1e:a0:fd:d4:57:2d:22:12:5b:57:c2:ae:6b:f3: 2e:91:b9:d5:4e:bb:9b:0b:16:cf:93:d0:7b:f9:17:ed:a1:ff: e6:8d:f7:e6:8c:1f:06:f0:6f:8c:88:9c:e3:e5:13:4e:c6:02: ee:57:00:d7:5a:eb:26:2f:ef:0a:b4:f2:84:ff:56:8d:91:b7: 0f:d9:6f:ba:fc:0b:60:06:27:68:87:10:8b:ec:1c:f6:14:00: c5:b5:90:72:49:08:9d:df:27:36:19:45:b5:ea:e5:5c:ff:9f: d4:3e:ae:95:91:93:33:58:2c:3c:12:de:29:81:62:70:5d:9b: cc:fa:e9:76:6f:c1:b1:d3:59:08:dd:b0:14:95:e4:fe:dc:4d: c0:f6:2b:a2 -----BEGIN CERTIFICATE----- MIIGljCCBX6gAwIBAgITYadXi+9v3cJ+F475uOOjF3vY5DANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyhCQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFF NjYxODE2MB4XDTI1MDUwOTEyNDUwMVoXDTI2MDUwODEyNTAwMVowMzExMC8GA1UE AxMoMkQ4QTVEOEEzNEUyNjVCMzA4RjYyNjQ1NEQ4QTZFOTIwQzY1RDYwODCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANtyJGrGReJP61Dwei9kfM+Pnbsa qvhqbCt+241aN4wBor/XM+bvUWMTQuscjHL7bkmMoKjwCtyTICqzZ/Z1zVl5PVUr 7MqX+Uq33WwBl94HGgRffa52NwDMqot8jbrTZE0RAmmBwpj7aSslqZmtPLNxHx7z 10GPKHporM1Z0tW40QFmcYdz50VDsP0AUo35RxLkOQ+2f5JAHFEXHPI3+B+29a+N UMmYbs2CzQDsjciVyuvBqIsSbSEBE9yVaELRIPahNKrqqk/Rpqw7lhgcuYyzyCLa r5W51M4ThSUxPeBtFMTwuaFGMDovjZkXdLPNtfd2G6SKmMHC22bc1QJOM6UCAwEA AaOCA6EwggOdMA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYEFC2KXYo04mWzCPYm RU2KbpIMZdYIMB8GA1UdIwQYMBaAFLzAZl7Pipe4PjmCaNkqJVuuZhgWMA4GA1Ud DwEB/wQEAwIBBjCBsAYDVR0fBIGoMIGlMIGioIGfoIGchoGZcnN5bmM6Ly9yZXBv c2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRkRDMzU5NERENEU1NEJBREU3 MDlBQzBEMjU1Q0YyNzlDNDc3MTZEMkU4QjNGNEQ0NURDNDYzNTU4OTlCMzZENC8w L0JDQzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY3JsMIG5 BggrBgEFBQcBAQSBrDCBqTCBpgYIKwYBBQUHMAKGgZlyc3luYzovL3JlcG9zaXRv cnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9FNUFBMUIyQzY5MEQzNEREM0E0MkUw QzAyNjhDMzIxOEVEMTU4RTE1RDI5RkNCRDBCQUI2NkI0Nzg2RDYzMkU2LzAvQkND MDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJBRTY2MTgxNi5jZXIwggFxBggr BgEFBQcBCwSCAWMwggFfMHkGCCsGAQUFBzAFhm1yc3luYzovL3JlcG9zaXRvcnku bGFjbmljLm5ldC9ycGtpL2xhY25pYy84NkFGN0Y1QTkxRTJEOTUxMzA4OEExQkFB OUU4QjhENzg2QkM1MkE3RkJDRkNDQTczRDI5QzZCQjZBREQ2MkMwLzAvMIGmBggr BgEFBQcwCoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj bmljLzg2QUY3RjVBOTFFMkQ5NTEzMDg4QTFCQUE5RThCOEQ3ODZCQzUyQTdGQkNG Q0NBNzNEMjlDNkJCNkFERDYyQzAvMC8yRDhBNUQ4QTM0RTI2NUIzMDhGNjI2NDU0 RDhBNkU5MjBDNjVENjA4Lm1mdDA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxh Y25pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoAwWQMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQqRDANBgkqhkiG9w0BAQsFAAOCAQEAuA9+ClCX Jvs0X+1PZqzSCv6TGkfazfAnZCiHHNFfdKwhqF5GDUyhzQcHTD6rHp6oqrQsBjqe i0MEyQTy9Jo48HReEu+Bmu0IaIpWI4bYgindgJiM9xX+9ryv9Bdxm9crItoQ5Sb/ yymLfmUePLWQ6h6g/dRXLSISW1fCrmvzLpG51U67mwsWz5PQe/kX7aH/5o335owf BvBvjIic4+UTTsYC7lcA11rrJi/vCrTyhP9WjZG3D9lvuvwLYAYnaIcQi+wc9hQA xbWQckkInd8nNhlFterlXP+f1D6ulZGTM1gsPBLeKYFicF2bzPrpdm/BsdNZCN2w FJXk/txNwPYrog== -----END CERTIFICATE-----Generated at Tue Nov 4 21:37:39 2025 by rpki-client