$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F2E58143D2740EF45140B3C58EE14ACB71DE18E.cer File: 3F2E58143D2740EF45140B3C58EE14ACB71DE18E.cer (raw, json) Hash identifier: c/H8wPM7zZiczfSOpnfyF065hNJcH2CGWmPpoBR3dDg= Subject key identifier: 3F:2E:58:14:3D:27:40:EF:45:14:0B:3C:58:EE:14:AC:B7:1D:E1:8E Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 0B7F5732528F54FEDF47CAFDF415D4E6E3CADB55 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/A4F2C9A2E6E0AADFD50CAEE9E61ABC180679417559E4A61EEAC97D6F1F9306D9/0/3F2E58143D2740EF45140B3C58EE14ACB71DE18E.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/A4F2C9A2E6E0AADFD50CAEE9E61ABC180679417559E4A61EEAC97D6F1F9306D9/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Thu 06 Feb 2025 00:28:20 +0000 Certificate not after: Thu 05 Feb 2026 00:33:20 +0000 Subordinate resources: AS: 269996 IP: 190.103.88.0/21 IP: 2800:ca0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:7f:57:32:52:8f:54:fe:df:47:ca:fd:f4:15:d4:e6:e3:ca:db:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 6 00:28:20 2025 GMT Not After : Feb 5 00:33:20 2026 GMT Subject: CN=3F2E58143D2740EF45140B3C58EE14ACB71DE18E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:29:ba:22:92:3a:57:98:56:24:35:7c:0a:da: be:89:19:32:bb:f7:e6:4d:61:11:9b:8b:25:66:2d: ce:ae:06:72:34:cf:14:b0:49:79:1a:c4:f0:84:93: bc:c8:ee:37:92:15:49:6e:84:81:2c:a8:9e:37:01: ae:af:d3:20:13:45:04:ea:17:65:a3:a4:7c:a7:c2: 01:f5:8f:cb:84:c4:7d:7f:f9:9f:3c:c7:a0:d7:10: cf:4e:fd:94:97:9b:1e:fc:39:47:19:f8:e7:99:2d: 46:29:ad:11:be:21:6a:b9:e5:46:3c:37:20:a7:29: 30:ef:33:cb:73:ed:34:8b:67:bf:27:d6:2d:d0:86: c0:a1:3d:c9:c4:b1:ee:a9:df:2d:c1:a2:80:1f:4c: 27:13:fd:4e:c7:c5:73:26:b3:24:9f:48:34:55:83: 36:bc:e6:79:4a:44:02:21:39:8c:dd:e3:9e:1a:4a: 48:5f:19:7f:6e:fe:fe:d1:32:6b:d9:67:07:9a:8c: bb:24:2d:94:25:0c:2a:ea:bd:3b:73:03:50:af:70: a4:c7:55:d9:fe:1b:3c:f2:78:19:c5:c2:38:28:22: d8:d9:e2:8b:87:3d:18:1d:33:5a:0e:28:f2:ab:15: 61:84:bc:c1:46:46:a1:e2:1a:f6:ba:0f:69:f7:ac: a7:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3F:2E:58:14:3D:27:40:EF:45:14:0B:3C:58:EE:14:AC:B7:1D:E1:8E X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/A4F2C9A2E6E0AADFD50CAEE9E61ABC180679417559E4A61EEAC97D6F1F9306D9/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/A4F2C9A2E6E0AADFD50CAEE9E61ABC180679417559E4A61EEAC97D6F1F9306D9/0/3F2E58143D2740EF45140B3C58EE14ACB71DE18E.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 190.103.88.0/21 IPv6: 2800:ca0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 269996 Signature Algorithm: sha256WithRSAEncryption 45:6e:65:c0:f0:6e:2c:84:f0:34:98:f8:d2:98:53:32:23:62: 14:52:e5:b1:f0:9a:7d:26:95:af:df:1f:6f:ed:17:d2:78:f7: ac:f1:ff:a2:c0:f1:12:e2:06:04:f9:67:51:5e:3a:83:ea:9b: 88:10:f5:a5:fc:3f:22:69:ee:e3:b8:cf:c7:77:b2:07:35:52: 3e:50:42:24:1a:12:a9:c1:a4:bb:a8:29:56:d9:cc:4d:7d:90: 8d:83:97:67:19:3d:27:74:41:a9:90:7e:0b:7f:fd:a0:4b:35: a4:b7:d0:e3:49:72:d6:50:3b:8d:8d:15:39:a2:49:fe:c2:8c: 36:ff:af:92:7a:14:28:73:50:8c:76:ce:54:22:69:d8:a1:9f: 20:fd:2c:9c:ee:54:ee:55:36:f8:13:b0:ba:22:a7:dc:8b:0b: 39:62:d2:8b:3b:1f:85:aa:10:48:65:4d:f6:21:81:32:f0:ac: 4c:9e:40:47:f8:8d:c5:2b:ee:ca:9c:f0:b0:84:2e:7e:21:8b: 77:79:bd:58:aa:28:b1:be:99:3b:b4:9d:e5:a6:9b:c4:a8:f6: 76:63:a3:17:10:54:f3:90:7e:bf:d1:82:76:1d:a9:e0:4a:72: 8a:ad:b0:5e:c0:eb:a2:56:6c:9b:21:ad:d4:cd:bc:c6:32:42: da:88:2a:36 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUC39XMlKPVP7fR8r99BXU5uPK21UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDYwMDI4MjBaFw0yNjAyMDUwMDMzMjBaMDMxMTAvBgNV BAMTKDNGMkU1ODE0M0QyNzQwRUY0NTE0MEIzQzU4RUUxNEFDQjcxREUxOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1KboikjpXmFYkNXwK2r6JGTK7 9+ZNYRGbiyVmLc6uBnI0zxSwSXkaxPCEk7zI7jeSFUluhIEsqJ43Aa6v0yATRQTq F2WjpHynwgH1j8uExH1/+Z88x6DXEM9O/ZSXmx78OUcZ+OeZLUYprRG+IWq55UY8 NyCnKTDvM8tz7TSLZ78n1i3QhsChPcnEse6p3y3BooAfTCcT/U7HxXMmsySfSDRV gza85nlKRAIhOYzd454aSkhfGX9u/v7RMmvZZweajLskLZQlDCrqvTtzA1CvcKTH Vdn+GzzyeBnFwjgoItjZ4ouHPRgdM1oOKPKrFWGEvMFGRqHiGva6D2n3rKcDAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ/LlgUPSdA70UU CzxY7hSstx3hjjAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQTRGMkM5QTJFNkUwQUFERkQ1MENBRUU5 RTYxQUJDMTgwNjc5NDE3NTU5RTRBNjFFRUFDOTdENkYxRjkzMDZEOS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9BNEYyQzlBMkU2RTBBQURGRDUwQ0FFRTlFNjFBQkMxODA2Nzk0MTc1NTlF NEE2MUVFQUM5N0Q2RjFGOTMwNkQ5LzAvM0YyRTU4MTQzRDI3NDBFRjQ1MTQwQjND NThFRTE0QUNCNzFERTE4RS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDvmdYMA0EAgAC MAcDBQAoAAygMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQerDANBgkqhkiG9w0B AQsFAAOCAQEARW5lwPBuLITwNJj40phTMiNiFFLlsfCafSaVr98fb+0X0nj3rPH/ osDxEuIGBPlnUV46g+qbiBD1pfw/Imnu47jPx3eyBzVSPlBCJBoSqcGku6gpVtnM TX2QjYOXZxk9J3RBqZB+C3/9oEs1pLfQ40ly1lA7jY0VOaJJ/sKMNv+vknoUKHNQ jHbOVCJp2KGfIP0snO5U7lU2+BOwuiKn3IsLOWLSizsfhaoQSGVN9iGBMvCsTJ5A R/iNxSvuypzwsIQufiGLd3m9WKoosb6ZO7Sd5aabxKj2dmOjFxBU85B+v9GCdh2p 4Epyiq2wXsDrolZsmyGt1M28xjJC2ogqNg== -----END CERTIFICATE-----Generated at Tue Nov 4 21:38:31 2025 by rpki-client