$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3E2777AB92EF5AC6D502E29F092B21D6B1E9D3B6.cer File: 3E2777AB92EF5AC6D502E29F092B21D6B1E9D3B6.cer (raw, json) Hash identifier: jyKjDEDi8shgPgDke3U+nXYz7kE/p+Dt4aauHq/uvKk= Subject key identifier: 3E:27:77:AB:92:EF:5A:C6:D5:02:E2:9F:09:2B:21:D6:B1:E9:D3:B6 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 2844A1010B5BE83CB8AE13964C7F612FA76DEABA Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/F2B1487DD11AA7BA31389AABDDEF2181B0CF0CBE8F015A5AB481A574D73DB6D6/0/3E2777AB92EF5AC6D502E29F092B21D6B1E9D3B6.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/F2B1487DD11AA7BA31389AABDDEF2181B0CF0CBE8F015A5AB481A574D73DB6D6/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 11:56:15 +0000 Certificate not after: Wed 04 Feb 2026 12:01:15 +0000 Subordinate resources: AS: 269962 IP: 190.111.160.0/22 IP: 2803:a6e0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:44:a1:01:0b:5b:e8:3c:b8:ae:13:96:4c:7f:61:2f:a7:6d:ea:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 11:56:15 2025 GMT Not After : Feb 4 12:01:15 2026 GMT Subject: CN=3E2777AB92EF5AC6D502E29F092B21D6B1E9D3B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:96:7d:5f:4b:4d:ae:7e:36:18:f1:20:9d:64: bf:e8:ba:d2:e3:1e:4d:b7:af:dc:9f:35:9d:42:e1: 2d:c4:78:18:cf:d2:30:aa:54:a9:64:ec:f3:2a:f0: ff:bd:a9:c4:fb:90:5a:bd:8a:1b:c3:9f:f0:3a:16: 85:a8:e7:8f:89:ab:ba:0d:5d:02:e0:6c:7f:99:ca: c4:a8:ff:b7:b4:6c:8d:82:01:86:06:1a:90:d0:67: 3d:47:7c:20:3a:6e:66:f8:cd:77:23:14:54:1b:65: 76:b7:09:87:47:72:0e:9a:29:f5:61:3f:07:ce:3d: d0:92:91:30:91:9a:96:01:65:04:f0:03:67:7e:31: fc:c2:a8:b2:94:9f:50:79:f7:69:86:fb:51:76:e1: 7f:80:44:91:a2:9b:d2:c5:b9:8b:7f:b9:47:96:0e: 4e:a2:8a:e0:a1:16:c1:9e:fb:c2:d5:dd:a6:80:61: 7c:72:c1:96:b5:f8:f6:04:4f:bd:a3:96:ed:77:38: 2d:3e:a5:72:27:3f:6e:7f:12:52:64:df:57:b2:3a: 8b:8f:f7:4e:20:6a:c1:7c:53:57:2f:60:c9:bf:83: 6c:ff:b6:0c:75:94:51:9a:29:95:65:9c:15:6f:b3: 8f:4c:2b:71:8e:f4:41:2e:f0:f1:eb:02:b3:40:09: 8e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3E:27:77:AB:92:EF:5A:C6:D5:02:E2:9F:09:2B:21:D6:B1:E9:D3:B6 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/F2B1487DD11AA7BA31389AABDDEF2181B0CF0CBE8F015A5AB481A574D73DB6D6/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/F2B1487DD11AA7BA31389AABDDEF2181B0CF0CBE8F015A5AB481A574D73DB6D6/0/3E2777AB92EF5AC6D502E29F092B21D6B1E9D3B6.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 190.111.160.0/22 IPv6: 2803:a6e0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 269962 Signature Algorithm: sha256WithRSAEncryption d3:af:8d:e3:9a:ab:fa:68:a9:8b:c3:e3:6d:b3:28:18:59:be: 09:da:46:a2:1d:13:3a:a4:88:b6:92:49:41:11:18:c6:d3:b5: 92:01:48:f0:f7:8e:0b:68:4b:65:ed:ec:31:43:5d:00:8d:6c: b2:f5:e7:45:92:e4:dd:d9:b7:35:32:98:fe:ac:58:ad:4d:66: cc:2e:d3:06:23:0b:f6:22:a2:14:e2:2b:77:f6:81:ba:6a:12: a9:50:6c:d3:fb:9d:74:6d:dc:5e:7a:30:19:97:4b:0f:3b:43: f0:bb:dc:0d:ad:b4:23:a1:d5:ea:05:49:f9:2c:7c:46:05:8b: c7:c6:2a:0d:60:76:d7:a3:38:cd:29:0c:ac:7d:5c:e3:7b:c1: 11:42:04:88:dc:fe:5a:7e:c5:48:b6:d5:52:ea:42:ba:b5:bb: 29:46:48:24:72:15:a3:8b:61:8a:dd:7c:a9:7a:b9:34:19:5d: 74:b3:76:48:70:59:31:c9:9a:98:14:9d:86:35:7a:43:4d:40: 07:1f:18:52:36:90:fc:89:4f:45:b9:be:7f:8b:66:31:01:f7: 09:d6:9d:45:ee:5b:f1:21:73:0b:f0:f5:8f:44:a6:de:85:c8: 75:3a:0e:57:82:cb:1b:c0:17:7a:b1:19:7c:02:a9:60:3f:43: 42:b9:38:20 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUKEShAQtb6Dy4rhOWTH9hL6dt6rowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUxMTU2MTVaFw0yNjAyMDQxMjAxMTVaMDMxMTAvBgNV BAMTKDNFMjc3N0FCOTJFRjVBQzZENTAyRTI5RjA5MkIyMUQ2QjFFOUQzQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsln1fS02ufjYY8SCdZL/outLj Hk23r9yfNZ1C4S3EeBjP0jCqVKlk7PMq8P+9qcT7kFq9ihvDn/A6FoWo54+Jq7oN XQLgbH+ZysSo/7e0bI2CAYYGGpDQZz1HfCA6bmb4zXcjFFQbZXa3CYdHcg6aKfVh PwfOPdCSkTCRmpYBZQTwA2d+MfzCqLKUn1B592mG+1F24X+ARJGim9LFuYt/uUeW Dk6iiuChFsGe+8LV3aaAYXxywZa1+PYET72jlu13OC0+pXInP25/ElJk31eyOouP 904gasF8U1cvYMm/g2z/tgx1lFGaKZVlnBVvs49MK3GO9EEu8PHrArNACY7HAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ+J3erku9axtUC 4p8JKyHWsenTtjAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRjJCMTQ4N0REMTFBQTdCQTMxMzg5QUFC RERFRjIxODFCMENGMENCRThGMDE1QTVBQjQ4MUE1NzRENzNEQjZENi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9GMkIxNDg3REQxMUFBN0JBMzEzODlBQUJEREVGMjE4MUIwQ0YwQ0JFOEYw MTVBNUFCNDgxQTU3NEQ3M0RCNkQ2LzAvM0UyNzc3QUI5MkVGNUFDNkQ1MDJFMjlG MDkyQjIxRDZCMUU5RDNCNi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCvm+gMA0EAgAC MAcDBQAoA6bgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQeijANBgkqhkiG9w0B AQsFAAOCAQEA06+N45qr+mipi8PjbbMoGFm+CdpGoh0TOqSItpJJQREYxtO1kgFI 8PeOC2hLZe3sMUNdAI1ssvXnRZLk3dm3NTKY/qxYrU1mzC7TBiML9iKiFOIrd/aB umoSqVBs0/uddG3cXnowGZdLDztD8LvcDa20I6HV6gVJ+Sx8RgWLx8YqDWB216M4 zSkMrH1c43vBEUIEiNz+Wn7FSLbVUupCurW7KUZIJHIVo4thit18qXq5NBlddLN2 SHBZMcmamBSdhjV6Q01ABx8YUjaQ/IlPRbm+f4tmMQH3CdadRe5b8SFzC/D1j0Sm 3oXIdToOV4LLG8AXerEZfAKpYD9DQrk4IA== -----END CERTIFICATE-----Generated at Wed Nov 5 17:16:35 2025 by rpki-client