$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3CAAABB99F5CF79CA7C25F022F85F85E0DCB2CBA.cer File: 3CAAABB99F5CF79CA7C25F022F85F85E0DCB2CBA.cer (raw, json) Hash identifier: k62AlDIADpz4gj5vVTJZW/Ghju4yub0XMN+Pa3OQyq4= Subject key identifier: 3C:AA:AB:B9:9F:5C:F7:9C:A7:C2:5F:02:2F:85:F8:5E:0D:CB:2C:BA Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 7EE361FF752F9E3ED3DC5E9E2B0ACEFD718E49C7 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/965872978B42FE99970EE04D8B2060771083E30741A509BAEB00DB63CECB23D3/0/3CAAABB99F5CF79CA7C25F022F85F85E0DCB2CBA.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/965872978B42FE99970EE04D8B2060771083E30741A509BAEB00DB63CECB23D3/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 04 Feb 2025 20:32:01 +0000 Certificate not after: Tue 03 Feb 2026 20:37:01 +0000 Subordinate resources: AS: 265654 IP: 170.246.220.0/22 IP: 2803:96c0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:e3:61:ff:75:2f:9e:3e:d3:dc:5e:9e:2b:0a:ce:fd:71:8e:49:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 4 20:32:01 2025 GMT Not After : Feb 3 20:37:01 2026 GMT Subject: CN=3CAAABB99F5CF79CA7C25F022F85F85E0DCB2CBA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:8d:ad:9d:8a:90:58:b8:10:be:f2:d1:d0:e4: 81:b3:81:15:11:b7:ec:95:e8:f4:80:87:4d:1a:0a: 6e:a1:96:b6:7e:30:ee:77:13:2f:98:36:be:3a:8a: 1b:1b:89:1b:86:f4:b8:f3:3c:48:ae:48:f9:f1:5a: 58:2b:eb:17:8f:48:80:a0:29:dc:b0:8e:5f:01:98: 5a:d2:20:41:c6:c7:37:30:23:3b:ed:ef:1a:d5:38: 18:3f:c7:6f:08:be:1d:78:ce:7f:3b:5c:7d:86:30: 8e:50:87:d3:18:c0:c8:68:e2:6a:94:6b:6b:6b:07: 68:04:73:ee:2b:7a:c5:9f:88:37:6d:8b:e5:a7:b5: 3b:4d:b5:12:1d:bc:54:ca:0b:93:ed:ed:9f:c4:10: 67:10:62:47:48:1f:be:79:b2:e2:8c:19:ab:a6:a4: a6:21:1e:56:00:bd:ab:8a:49:a9:83:79:60:70:11: 6e:3c:5a:d2:b1:86:4e:99:0f:7e:0d:aa:da:c4:57: d7:c7:93:5c:d9:44:78:21:c4:8c:c1:da:9d:82:79: 77:80:a9:7b:9f:c6:ab:af:b1:a9:7f:7b:2d:4b:5c: 0a:3d:b0:77:38:8a:e8:34:54:00:61:58:81:0d:4a: e0:f6:d8:cb:1c:7c:03:88:af:f8:20:26:5a:a1:94: 54:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3C:AA:AB:B9:9F:5C:F7:9C:A7:C2:5F:02:2F:85:F8:5E:0D:CB:2C:BA X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/965872978B42FE99970EE04D8B2060771083E30741A509BAEB00DB63CECB23D3/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/965872978B42FE99970EE04D8B2060771083E30741A509BAEB00DB63CECB23D3/0/3CAAABB99F5CF79CA7C25F022F85F85E0DCB2CBA.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.246.220.0/22 IPv6: 2803:96c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265654 Signature Algorithm: sha256WithRSAEncryption 60:c6:73:cd:a9:81:df:27:c0:bb:de:b6:3d:54:fe:ac:6e:d5: 55:94:ff:a2:ad:e2:af:50:33:21:d4:bc:cd:fa:0a:17:75:da: 0c:ee:f1:fd:a1:39:0c:4f:59:4c:f5:88:de:39:4e:92:ae:5b: 4e:8b:8b:a2:e1:58:5a:ab:45:52:e8:55:89:f9:8d:e5:3e:b5: 96:0c:ce:fd:4a:63:97:98:c6:4c:81:89:03:e0:24:6a:d9:07: 19:ce:4f:54:ad:0d:42:ce:b1:96:33:5d:b9:97:90:52:b7:39: 2a:3d:6a:9f:a1:56:fd:1a:ff:ed:fb:55:7b:82:c1:15:e2:23: fb:8e:7f:c1:5e:d1:5e:e0:fb:75:af:79:7b:db:a0:03:b6:0f: 9a:c1:53:3a:5b:dc:b5:3f:30:4d:11:6e:4c:d4:37:b7:a2:b1: 63:0c:bd:e0:19:25:08:5c:aa:94:a5:9f:50:5f:d6:52:00:73: 24:e0:53:03:49:e8:56:c5:dc:6a:32:41:12:f3:1e:aa:d7:e4: 9b:e0:9f:2c:bc:20:7b:53:51:87:af:f7:ef:6c:df:2d:e8:16: 89:cc:7e:e8:da:fa:3a:8c:dd:23:30:2b:35:15:b8:40:bc:d6: fd:a3:79:e3:ec:db:ad:3d:b8:11:38:a2:0f:78:78:87:71:5e: 3d:29:91:a5 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUfuNh/3Uvnj7T3F6eKwrO/XGOSccwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDQyMDMyMDFaFw0yNjAyMDMyMDM3MDFaMDMxMTAvBgNV BAMTKDNDQUFBQkI5OUY1Q0Y3OUNBN0MyNUYwMjJGODVGODVFMERDQjJDQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJja2dipBYuBC+8tHQ5IGzgRUR t+yV6PSAh00aCm6hlrZ+MO53Ey+YNr46ihsbiRuG9LjzPEiuSPnxWlgr6xePSICg Kdywjl8BmFrSIEHGxzcwIzvt7xrVOBg/x28Ivh14zn87XH2GMI5Qh9MYwMho4mqU a2trB2gEc+4resWfiDdti+WntTtNtRIdvFTKC5Pt7Z/EEGcQYkdIH755suKMGaum pKYhHlYAvauKSamDeWBwEW48WtKxhk6ZD34NqtrEV9fHk1zZRHghxIzB2p2CeXeA qXufxquvsal/ey1LXAo9sHc4iug0VABhWIENSuD22MscfAOIr/ggJlqhlFS7AgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ8qqu5n1z3nKfC XwIvhfheDcssujAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvOTY1ODcyOTc4QjQyRkU5OTk3MEVFMDRE OEIyMDYwNzcxMDgzRTMwNzQxQTUwOUJBRUIwMERCNjNDRUNCMjNEMy8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy85NjU4NzI5NzhCNDJGRTk5OTcwRUUwNEQ4QjIwNjA3NzEwODNFMzA3NDFB NTA5QkFFQjAwREI2M0NFQ0IyM0QzLzAvM0NBQUFCQjk5RjVDRjc5Q0E3QzI1RjAy MkY4NUY4NUUwRENCMkNCQS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCqvbcMA0EAgAC MAcDBQAoA5bAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQNtjANBgkqhkiG9w0B AQsFAAOCAQEAYMZzzamB3yfAu962PVT+rG7VVZT/oq3ir1AzIdS8zfoKF3XaDO7x /aE5DE9ZTPWI3jlOkq5bTouLouFYWqtFUuhVifmN5T61lgzO/Upjl5jGTIGJA+Ak atkHGc5PVK0NQs6xljNduZeQUrc5Kj1qn6FW/Rr/7ftVe4LBFeIj+45/wV7RXuD7 da95e9ugA7YPmsFTOlvctT8wTRFuTNQ3t6KxYwy94BklCFyqlKWfUF/WUgBzJOBT A0noVsXcajJBEvMeqtfkm+CfLLwge1NRh6/372zfLegWicx+6Nr6OozdIzArNRW4 QLzW/aN54+zbrT24ETiiD3h4h3FePSmRpQ== -----END CERTIFICATE-----Generated at Wed Nov 5 12:08:04 2025 by rpki-client