$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3CA12456DD018B126748F8C0546FC19DF9446F65.cer File: 3CA12456DD018B126748F8C0546FC19DF9446F65.cer (raw, json) Hash identifier: Yu6GO4FiYcii30vAr99w46i85cAo4yUpm37XcGT75dI= Subject key identifier: 3C:A1:24:56:DD:01:8B:12:67:48:F8:C0:54:6F:C1:9D:F9:44:6F:65 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 0598274D9925961F58BA562C426FFA6BFD6160DF Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/0A0891AD85E9EE4CF89035CC3733673D79EBC3FB7B954D7192030AF1210B407E/0/3CA12456DD018B126748F8C0546FC19DF9446F65.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/0A0891AD85E9EE4CF89035CC3733673D79EBC3FB7B954D7192030AF1210B407E/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 04 Nov 2025 07:09:35 +0000 Certificate not after: Tue 03 Nov 2026 07:14:35 +0000 Subordinate resources: AS: 273984 IP: 2803:48d0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:98:27:4d:99:25:96:1f:58:ba:56:2c:42:6f:fa:6b:fd:61:60:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Nov 4 07:09:35 2025 GMT Not After : Nov 3 07:14:35 2026 GMT Subject: CN=3CA12456DD018B126748F8C0546FC19DF9446F65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:37:a5:9d:b8:7a:df:37:3a:71:5d:7f:60:85: 60:11:11:48:3f:e8:e8:e2:27:e3:d7:f1:63:f2:98: 95:83:62:1e:01:42:2b:12:9b:7e:69:17:63:64:ea: 41:aa:7c:f2:0a:71:d1:9c:d6:b4:d8:14:d2:c9:a1: 59:a0:16:35:6a:74:b3:41:76:ac:52:d6:4e:3e:1c: 86:70:a4:f2:6f:f2:fb:5c:22:c4:dd:34:c2:9c:bf: db:16:4d:18:99:79:85:95:9c:1b:0c:ef:9b:1b:b1: 67:eb:39:ea:5a:66:62:02:0d:78:06:f1:1f:26:5b: 96:53:37:11:9c:3e:16:74:11:bb:35:45:6e:25:80: 5e:35:42:ef:16:bc:1e:5d:13:4d:6f:58:7d:4b:74: 1e:e6:b0:b0:c2:2b:05:78:b0:f6:ee:ea:57:ab:26: 16:69:fe:0e:4f:52:a6:02:ad:20:2d:7f:12:73:90: eb:45:26:66:45:15:6f:5d:87:eb:3b:ef:aa:2a:bb: a4:9e:7b:6e:af:fa:fd:75:de:03:41:06:e7:c7:7e: 23:e3:37:c3:76:a2:a4:73:bd:c3:0d:ee:31:0b:6d: 83:cb:34:fb:e6:80:b4:13:9d:c5:0d:b8:13:5a:56: f4:25:1a:05:58:0d:5e:8d:85:b3:61:db:5f:38:ec: 20:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3C:A1:24:56:DD:01:8B:12:67:48:F8:C0:54:6F:C1:9D:F9:44:6F:65 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0A0891AD85E9EE4CF89035CC3733673D79EBC3FB7B954D7192030AF1210B407E/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0A0891AD85E9EE4CF89035CC3733673D79EBC3FB7B954D7192030AF1210B407E/0/3CA12456DD018B126748F8C0546FC19DF9446F65.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:48d0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273984 Signature Algorithm: sha256WithRSAEncryption 54:44:da:22:92:31:13:3c:12:d8:12:7a:9e:4e:30:3d:2c:36: 58:00:e5:58:66:7b:ed:c9:4d:8a:81:ed:cc:7c:8e:6c:80:4a: 4b:a9:b9:76:f0:a2:88:26:bb:64:69:a4:e3:24:60:0c:18:d5: da:77:2f:f3:59:01:92:f6:a6:c7:19:67:54:4c:c5:af:88:dd: 2b:1b:c0:68:6c:f7:5a:6e:0d:1e:b2:2a:47:66:e8:0a:f3:e1: bd:97:c0:22:0d:b6:e5:97:9f:bf:e8:bc:e6:1d:9d:73:c8:e1: d2:a2:dc:16:a5:9f:06:9d:be:54:c0:58:fb:82:cb:47:e5:91: f0:0c:1f:03:05:6a:ef:31:e8:06:14:3f:9f:71:95:a3:cb:a4: ee:20:d2:18:74:7d:bf:a0:6c:f3:e1:24:aa:1a:fb:cd:65:17: 68:bf:e6:ed:e6:af:a1:f2:04:c9:89:2c:53:ec:80:dd:a8:d3: 9e:90:66:d3:33:a6:60:6c:76:dd:cb:63:8c:5e:9d:c0:09:68: 0d:d4:b0:97:a7:b6:77:7c:06:19:db:78:0b:9f:87:68:c2:15: a7:fd:69:fd:b1:17:b6:02:9a:c5:b0:8f:7a:08:92:85:72:2b: e3:25:af:61:63:c2:e6:e4:70:0c:5f:4a:12:68:8c:eb:ad:71: 68:89:98:75 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUBZgnTZkllh9YulYsQm/6a/1hYN8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTExMDQwNzA5MzVaFw0yNjExMDMwNzE0MzVaMDMxMTAvBgNV BAMTKDNDQTEyNDU2REQwMThCMTI2NzQ4RjhDMDU0NkZDMTlERjk0NDZGNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSN6WduHrfNzpxXX9ghWAREUg/ 6OjiJ+PX8WPymJWDYh4BQisSm35pF2Nk6kGqfPIKcdGc1rTYFNLJoVmgFjVqdLNB dqxS1k4+HIZwpPJv8vtcIsTdNMKcv9sWTRiZeYWVnBsM75sbsWfrOepaZmICDXgG 8R8mW5ZTNxGcPhZ0Ebs1RW4lgF41Qu8WvB5dE01vWH1LdB7msLDCKwV4sPbu6ler JhZp/g5PUqYCrSAtfxJzkOtFJmZFFW9dh+s776oqu6See26v+v113gNBBufHfiPj N8N2oqRzvcMN7jELbYPLNPvmgLQTncUNuBNaVvQlGgVYDV6NhbNh21847CC/AgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ8oSRW3QGLEmdI +MBUb8Gd+URvZTAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMEEwODkxQUQ4NUU5RUU0Q0Y4OTAzNUND MzczMzY3M0Q3OUVCQzNGQjdCOTU0RDcxOTIwMzBBRjEyMTBCNDA3RS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8wQTA4OTFBRDg1RTlFRTRDRjg5MDM1Q0MzNzMzNjczRDc5RUJDM0ZCN0I5 NTRENzE5MjAzMEFGMTIxMEI0MDdFLzAvM0NBMTI0NTZERDAxOEIxMjY3NDhGOEMw NTQ2RkMxOURGOTQ0NkY2NS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKANI0DAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMELkAwDQYJKoZIhvcNAQELBQADggEBAFRE2iKS MRM8EtgSep5OMD0sNlgA5Vhme+3JTYqB7cx8jmyASkupuXbwoogmu2RppOMkYAwY 1dp3L/NZAZL2pscZZ1RMxa+I3SsbwGhs91puDR6yKkdm6Arz4b2XwCINtuWXn7/o vOYdnXPI4dKi3BalnwadvlTAWPuCy0flkfAMHwMFau8x6AYUP59xlaPLpO4g0hh0 fb+gbPPhJKoa+81lF2i/5u3mr6HyBMmJLFPsgN2o056QZtMzpmBsdt3LY4xencAJ aA3UsJentnd8BhnbeAufh2jCFaf9af2xF7YCmsWwj3oIkoVyK+Mlr2FjwubkcAxf ShJojOutcWiJmHU= -----END CERTIFICATE-----Generated at Tue Nov 4 21:39:09 2025 by rpki-client