$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F756488F3CE4E25A1F0A875271CD9C70EACCA4C.cer File: 4F756488F3CE4E25A1F0A875271CD9C70EACCA4C.cer (raw, json) Hash identifier: eUb0Us8JCP+vNewbTIIF9oZSoVEb5wPuAk/O0syCxFA= Subject key identifier: 4F:75:64:88:F3:CE:4E:25:A1:F0:A8:75:27:1C:D9:C7:0E:AC:CA:4C Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 0993410A92B79737F67D3297B6541BD2D38EF8CF Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/72D8F6687C54A870ACE71A32E06DA4C25D3ECA2212104A275238420D3E9A4B1F/0/4F756488F3CE4E25A1F0A875271CD9C70EACCA4C.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/72D8F6687C54A870ACE71A32E06DA4C25D3ECA2212104A275238420D3E9A4B1F/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Fri 07 Feb 2025 03:25:01 +0000 Certificate not after: Fri 06 Feb 2026 03:30:01 +0000 Subordinate resources: AS: 273086 IP: 2803:3f90::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:93:41:0a:92:b7:97:37:f6:7d:32:97:b6:54:1b:d2:d3:8e:f8:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 7 03:25:01 2025 GMT Not After : Feb 6 03:30:01 2026 GMT Subject: CN=4F756488F3CE4E25A1F0A875271CD9C70EACCA4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:42:bc:fe:6b:aa:b2:14:8b:0f:c5:46:60:b1: 6f:86:f2:02:77:a5:4f:0d:58:f7:2e:ea:0a:07:03: 35:3b:49:a8:3a:3c:29:3f:96:1c:c1:d8:1b:3b:ab: dc:6b:71:e9:a8:2b:20:15:e0:76:8c:7f:19:c1:e2: d4:d4:f5:c9:e5:96:83:82:31:d0:42:c8:ae:01:3d: b9:6f:2e:b2:8a:52:0b:9c:44:3e:ec:94:b2:13:0a: 32:cb:d6:88:8f:bc:59:44:34:1c:66:48:7f:cd:c3: 5b:d9:6a:c5:e9:38:0a:77:fe:18:14:a4:b8:74:c2: 2c:96:e8:0f:55:0e:5f:98:ba:02:d1:d1:cd:82:02: 8b:fc:e8:b8:df:14:82:13:51:20:18:9a:62:94:b4: 2a:f3:6c:e6:2b:81:db:14:10:df:19:cf:d3:9d:a8: d4:cb:8c:65:26:16:04:85:1e:5e:14:0f:b3:24:5a: 3b:b1:06:a1:bf:c6:48:23:d8:ea:d2:83:11:59:f3: df:61:c9:62:7d:a7:15:d6:94:c1:0f:d3:f2:51:f9: 3b:60:e5:2a:79:ef:76:1c:ad:54:3f:9b:88:3d:63: dc:b2:51:a2:b6:31:21:35:44:80:24:11:7e:73:3d: ea:12:fe:88:8e:27:27:b3:74:0f:6e:6a:7a:4b:83: 4e:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4F:75:64:88:F3:CE:4E:25:A1:F0:A8:75:27:1C:D9:C7:0E:AC:CA:4C X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/72D8F6687C54A870ACE71A32E06DA4C25D3ECA2212104A275238420D3E9A4B1F/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/72D8F6687C54A870ACE71A32E06DA4C25D3ECA2212104A275238420D3E9A4B1F/0/4F756488F3CE4E25A1F0A875271CD9C70EACCA4C.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:3f90::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273086 Signature Algorithm: sha256WithRSAEncryption bb:c1:2a:bb:55:e5:24:54:a1:4a:de:4b:9e:56:26:e4:c0:f2: 0e:07:42:0a:d7:7e:da:c7:15:5b:69:b2:ed:d5:35:de:82:af: 4d:35:6a:2e:08:9d:ad:85:2a:98:59:8d:81:fb:09:e4:3b:0f: 72:3c:51:18:2d:60:26:ed:f4:e2:40:d7:6c:3e:7c:82:a7:64: bd:f2:93:1c:49:2f:b4:31:af:4c:89:18:e2:72:49:6a:2a:b5: 79:9b:f7:55:7d:3d:71:11:85:94:95:a6:cc:37:72:3a:e5:41: 62:9e:2f:ee:74:2e:30:f7:b2:9d:94:e3:43:21:be:12:4e:11: 51:4f:a1:55:9b:16:66:64:61:08:74:32:16:3a:dc:37:36:3b: 4a:3a:6a:30:14:e1:e7:5d:1c:b2:8c:0f:dc:15:79:0f:13:3f: e6:b9:24:b9:d7:99:98:67:6d:cb:e0:c7:dc:03:b8:27:05:10: 5b:cd:48:96:44:f7:0f:60:69:1c:2c:79:b7:91:ac:02:57:a2: 5b:65:15:78:80:2a:34:f8:95:31:6d:4d:ab:a3:0a:e2:92:ed: 29:12:54:a6:ca:69:be:fb:4e:2d:68:14:ad:c1:45:d9:0d:78: 76:b6:d8:21:ec:2f:ed:ea:fb:29:f6:2d:d9:20:ad:64:0b:f1: 50:60:75:91 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUCZNBCpK3lzf2fTKXtlQb0tOO+M8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDcwMzI1MDFaFw0yNjAyMDYwMzMwMDFaMDMxMTAvBgNV BAMTKDRGNzU2NDg4RjNDRTRFMjVBMUYwQTg3NTI3MUNEOUM3MEVBQ0NBNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxQrz+a6qyFIsPxUZgsW+G8gJ3 pU8NWPcu6goHAzU7Sag6PCk/lhzB2Bs7q9xrcemoKyAV4HaMfxnB4tTU9cnlloOC MdBCyK4BPblvLrKKUgucRD7slLITCjLL1oiPvFlENBxmSH/Nw1vZasXpOAp3/hgU pLh0wiyW6A9VDl+YugLR0c2CAov86LjfFIITUSAYmmKUtCrzbOYrgdsUEN8Zz9Od qNTLjGUmFgSFHl4UD7MkWjuxBqG/xkgj2OrSgxFZ899hyWJ9pxXWlMEP0/JR+Ttg 5Sp573YcrVQ/m4g9Y9yyUaK2MSE1RIAkEX5zPeoS/oiOJyezdA9uanpLg07VAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRPdWSI885OJaHw qHUnHNnHDqzKTDAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNzJEOEY2Njg3QzU0QTg3MEFDRTcxQTMy RTA2REE0QzI1RDNFQ0EyMjEyMTA0QTI3NTIzODQyMEQzRTlBNEIxRi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy83MkQ4RjY2ODdDNTRBODcwQUNFNzFBMzJFMDZEQTRDMjVEM0VDQTIyMTIx MDRBMjc1MjM4NDIwRDNFOUE0QjFGLzAvNEY3NTY0ODhGM0NFNEUyNUExRjBBODc1 MjcxQ0Q5QzcwRUFDQ0E0Qy5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAM/kDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEKr4wDQYJKoZIhvcNAQELBQADggEBALvBKrtV 5SRUoUreS55WJuTA8g4HQgrXftrHFVtpsu3VNd6Cr001ai4Ina2FKphZjYH7CeQ7 D3I8URgtYCbt9OJA12w+fIKnZL3ykxxJL7Qxr0yJGOJySWoqtXmb91V9PXERhZSV psw3cjrlQWKeL+50LjD3sp2U40MhvhJOEVFPoVWbFmZkYQh0MhY63Dc2O0o6ajAU 4eddHLKMD9wVeQ8TP+a5JLnXmZhnbcvgx9wDuCcFEFvNSJZE9w9gaRwsebeRrAJX oltlFXiAKjT4lTFtTaujCuKS7SkSVKbKab77Ti1oFK3BRdkNeHa22CHsL+3q+yn2 LdkgrWQL8VBgdZE= -----END CERTIFICATE-----Generated at Wed Nov 5 17:19:17 2025 by rpki-client