$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4DF4AB0516555337E53B489414EA6C992545CBCE.cer File: 4DF4AB0516555337E53B489414EA6C992545CBCE.cer (raw, json) Hash identifier: SAuLJOueZhde2sITk7Bp8DH1sCO+9/ZeO3Pxxz35tn8= Subject key identifier: 4D:F4:AB:05:16:55:53:37:E5:3B:48:94:14:EA:6C:99:25:45:CB:CE Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 2F11DF9804DD9D45844463F064FD0F688E610782 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/1178FEE3F17095FF81552C36AAC8BE4A4D9683A1421F084E13FEE1E6D01749CE/0/4DF4AB0516555337E53B489414EA6C992545CBCE.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/1178FEE3F17095FF81552C36AAC8BE4A4D9683A1421F084E13FEE1E6D01749CE/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Mon 02 Jun 2025 04:30:21 +0000 Certificate not after: Mon 01 Jun 2026 04:35:21 +0000 Subordinate resources: AS: 273862 IP: 2803:d50::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:11:df:98:04:dd:9d:45:84:44:63:f0:64:fd:0f:68:8e:61:07:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Jun 2 04:30:21 2025 GMT Not After : Jun 1 04:35:21 2026 GMT Subject: CN=4DF4AB0516555337E53B489414EA6C992545CBCE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:7f:3d:ca:10:76:a2:38:d0:27:55:39:32:e0: e4:d0:9d:1b:c6:58:6d:fc:64:df:71:ef:00:ba:50: d8:bd:96:40:8e:5e:2f:89:de:c5:c0:b4:46:da:ed: 85:53:a4:0f:77:9d:7c:4f:e2:0d:ce:99:2b:02:6e: 5d:f0:f3:48:8d:55:f9:43:cd:e6:98:14:9f:b8:83: f4:87:91:e1:03:89:e0:ee:34:c1:7f:9e:94:d5:a4: 81:4a:d5:fe:1f:e4:9e:53:76:de:cf:59:da:f8:9d: 6d:45:03:5a:f0:69:1e:17:f8:7b:b3:37:f2:6a:00: 63:a5:d3:81:4c:55:39:02:03:22:72:ba:35:8d:3f: d0:e9:43:41:6b:c9:e9:8e:4b:3e:19:b4:80:30:ab: 6e:b4:c0:39:a9:cc:e3:ee:c1:e3:e9:47:da:c4:0d: a9:2f:9c:7e:18:99:59:24:6d:dd:36:59:99:35:b2: bc:94:dc:7e:33:8f:40:aa:73:50:22:03:4c:b9:65: 0f:43:a4:91:a2:e2:3b:ec:24:d0:6a:59:83:07:35: 6c:43:3f:01:54:bc:b4:ae:b0:8d:4b:fd:65:a5:36: 9a:10:4b:df:25:87:c9:aa:25:94:c5:8c:12:b3:80: e9:6a:d6:0a:d3:a0:e1:fb:1d:60:02:aa:f6:b5:32: cf:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4D:F4:AB:05:16:55:53:37:E5:3B:48:94:14:EA:6C:99:25:45:CB:CE X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1178FEE3F17095FF81552C36AAC8BE4A4D9683A1421F084E13FEE1E6D01749CE/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1178FEE3F17095FF81552C36AAC8BE4A4D9683A1421F084E13FEE1E6D01749CE/0/4DF4AB0516555337E53B489414EA6C992545CBCE.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:d50::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273862 Signature Algorithm: sha256WithRSAEncryption 03:d0:9b:de:4e:da:13:a9:96:d6:4e:0b:94:5e:a1:70:41:a6: 76:51:f8:8c:dc:69:bf:2d:9e:fe:65:a3:29:95:3f:0d:6f:ed: 46:77:30:eb:64:b2:56:ce:9f:d4:ee:99:7e:66:ac:57:10:e9: e0:fa:61:ee:c9:d5:84:02:1c:9e:50:44:0a:e4:79:22:c4:8a: d6:72:42:76:c2:53:66:14:1a:b7:8a:56:ef:c9:fe:e2:ff:54: 14:c4:27:6d:66:28:c0:84:73:02:bc:ff:a7:79:72:2d:71:22: 28:a4:c6:1d:42:a5:2d:d6:57:45:e6:8e:be:7f:b0:27:1a:d3: 38:8a:82:2f:e5:f2:e6:ca:d1:cd:45:ae:9d:34:4e:e1:68:2d: cf:93:3b:9c:e7:f3:30:52:11:93:b6:2b:7d:f6:7d:b2:3f:81: ce:fa:3c:e1:70:ca:65:57:a4:25:42:81:40:86:cf:1b:3b:17: 06:4b:e8:b1:ac:b0:9d:c0:6d:5e:c2:d4:51:06:d3:b4:69:d7: a7:56:a3:e3:b2:77:19:3d:96:f5:8f:cc:cf:0c:d3:68:0d:56: a5:45:5d:6b:ac:70:4f:29:eb:17:a3:0b:75:ef:d1:f3:a5:ae: 46:ef:5c:94:09:39:00:c8:31:b3:bc:fd:a0:f7:4c:29:24:3d: 6e:e1:40:cb -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIULxHfmATdnUWERGPwZP0PaI5hB4IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTA2MDIwNDMwMjFaFw0yNjA2MDEwNDM1MjFaMDMxMTAvBgNV BAMTKDRERjRBQjA1MTY1NTUzMzdFNTNCNDg5NDE0RUE2Qzk5MjU0NUNCQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWfz3KEHaiONAnVTky4OTQnRvG WG38ZN9x7wC6UNi9lkCOXi+J3sXAtEba7YVTpA93nXxP4g3OmSsCbl3w80iNVflD zeaYFJ+4g/SHkeEDieDuNMF/npTVpIFK1f4f5J5Tdt7PWdr4nW1FA1rwaR4X+Huz N/JqAGOl04FMVTkCAyJyujWNP9DpQ0FryemOSz4ZtIAwq260wDmpzOPuwePpR9rE DakvnH4YmVkkbd02WZk1sryU3H4zj0Cqc1AiA0y5ZQ9DpJGi4jvsJNBqWYMHNWxD PwFUvLSusI1L/WWlNpoQS98lh8mqJZTFjBKzgOlq1grToOH7HWACqva1Ms8zAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRN9KsFFlVTN+U7 SJQU6myZJUXLzjAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMTE3OEZFRTNGMTcwOTVGRjgxNTUyQzM2 QUFDOEJFNEE0RDk2ODNBMTQyMUYwODRFMTNGRUUxRTZEMDE3NDlDRS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8xMTc4RkVFM0YxNzA5NUZGODE1NTJDMzZBQUM4QkU0QTREOTY4M0ExNDIx RjA4NEUxM0ZFRTFFNkQwMTc0OUNFLzAvNERGNEFCMDUxNjU1NTMzN0U1M0I0ODk0 MTRFQTZDOTkyNTQ1Q0JDRS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAMNUDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMELcYwDQYJKoZIhvcNAQELBQADggEBAAPQm95O 2hOpltZOC5ReoXBBpnZR+Izcab8tnv5loymVPw1v7UZ3MOtkslbOn9TumX5mrFcQ 6eD6Ye7J1YQCHJ5QRArkeSLEitZyQnbCU2YUGreKVu/J/uL/VBTEJ21mKMCEcwK8 /6d5ci1xIiikxh1CpS3WV0Xmjr5/sCca0ziKgi/l8ubK0c1Frp00TuFoLc+TO5zn 8zBSEZO2K332fbI/gc76POFwymVXpCVCgUCGzxs7FwZL6LGssJ3AbV7C1FEG07Rp 16dWo+Oydxk9lvWPzM8M02gNVqVFXWuscE8p6xejC3Xv0fOlrkbvXJQJOQDIMbO8 /aD3TCkkPW7hQMs= -----END CERTIFICATE-----Generated at Tue Nov 4 21:38:15 2025 by rpki-client