$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6702CFD6C64C6F0FBB5330412BAF62BD85FAE668.cer File: 6702CFD6C64C6F0FBB5330412BAF62BD85FAE668.cer (raw, json) Hash identifier: h7QGTCQCNioQd2gao3Puk1lHJkM8II4OCuKp7srug2M= Subject key identifier: 67:02:CF:D6:C6:4C:6F:0F:BB:53:30:41:2B:AF:62:BD:85:FA:E6:68 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 7207FF7F124A39FA55A3219BA88488414000B045 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/65190BA08F6DD1022A5870FB9533F82E954F03F3C80D23B628FA3B48A2C31218/0/6702CFD6C64C6F0FBB5330412BAF62BD85FAE668.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/65190BA08F6DD1022A5870FB9533F82E954F03F3C80D23B628FA3B48A2C31218/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Fri 04 Jul 2025 11:48:54 +0000 Certificate not after: Fri 03 Jul 2026 11:53:54 +0000 Subordinate resources: AS: 273207 IP: 2803:d650::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:07:ff:7f:12:4a:39:fa:55:a3:21:9b:a8:84:88:41:40:00:b0:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Jul 4 11:48:54 2025 GMT Not After : Jul 3 11:53:54 2026 GMT Subject: CN=6702CFD6C64C6F0FBB5330412BAF62BD85FAE668 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:c7:50:a5:f8:3d:93:21:47:d8:ac:11:1c:df: af:6c:21:17:2d:79:21:8b:e3:ce:9f:71:31:21:a2: 84:6c:80:d0:96:4c:3c:30:f4:5b:27:98:64:e6:97: 9e:7a:c0:79:4b:71:3f:d2:cd:98:dc:9f:d5:61:a9: 4a:cb:c0:27:1d:c9:d3:3f:14:99:bd:85:34:b4:89: 2b:87:46:5f:00:be:33:68:c9:e6:ac:fa:df:b9:be: a2:16:4f:2c:e4:86:88:e1:a1:0b:ba:c9:70:6e:11: 97:38:c4:6c:48:8c:fc:b6:da:95:6f:41:e6:e9:fa: e7:ab:dd:35:c4:54:f3:67:29:06:65:9a:d2:33:97: 7f:0c:e1:d3:28:17:a0:33:f9:d4:7f:98:22:c6:33: f8:12:49:62:61:07:85:fc:4e:f6:52:4f:18:f7:50: 11:7f:c3:9f:69:5c:d9:b7:77:9d:7a:f3:46:4d:74: 55:7d:8f:44:f5:d3:eb:6f:88:0e:a9:b2:7e:6f:38: dc:67:8c:98:bc:fa:75:13:da:ad:e8:93:78:85:db: bc:f8:46:59:88:7a:3a:c1:23:cf:39:e6:64:de:6c: c1:cf:3f:7f:c6:85:7e:ce:67:7f:4a:a2:3e:e6:e1: 8c:15:dc:c1:34:62:c4:47:fe:ab:93:e2:fd:1b:bd: bf:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 67:02:CF:D6:C6:4C:6F:0F:BB:53:30:41:2B:AF:62:BD:85:FA:E6:68 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/65190BA08F6DD1022A5870FB9533F82E954F03F3C80D23B628FA3B48A2C31218/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/65190BA08F6DD1022A5870FB9533F82E954F03F3C80D23B628FA3B48A2C31218/0/6702CFD6C64C6F0FBB5330412BAF62BD85FAE668.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:d650::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273207 Signature Algorithm: sha256WithRSAEncryption a1:65:f5:02:0d:9c:eb:b8:b0:53:b2:68:ab:35:a1:8f:d2:01: 6d:93:25:fe:21:5a:0b:74:29:cc:0c:d7:6c:01:99:3a:d0:ba: 39:65:c6:9b:38:e5:d2:47:ec:71:11:c5:e9:eb:31:25:9f:c1: b2:a2:31:82:6f:d3:c6:e5:56:ef:c3:f0:d7:5a:dc:7f:9a:4a: 87:7e:88:f7:d8:ed:01:fd:ec:9f:e7:0e:4c:c6:42:51:95:30: fd:3a:e0:11:bf:ec:b9:6c:29:1e:43:3e:0a:f7:30:31:38:d1: a8:4d:0e:f1:20:8c:62:13:f5:bf:76:f4:ee:1c:7c:df:64:f0: 73:62:4a:2c:8c:57:5d:a0:56:97:45:db:28:f0:07:07:c4:8a: c7:b1:f0:16:21:68:e3:d4:d1:81:2c:d2:40:9e:75:0f:41:e6: 2b:4b:c4:f9:3b:e9:46:bf:1d:5f:73:15:c3:4c:ec:14:10:c2: 38:3c:a6:cc:b8:ba:64:d4:bb:7f:3c:ed:55:44:1f:db:f3:05: 9b:f7:c6:58:90:c3:09:6c:12:4b:e8:56:a3:ac:97:bf:a7:16: 45:90:c2:8c:1f:68:f3:0a:b7:97:87:18:67:a6:06:fe:49:40: 52:1b:9e:ae:03:36:a9:f6:66:e6:4c:af:31:8a:6d:d3:ef:8a: 83:45:82:58 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUcgf/fxJKOfpVoyGbqISIQUAAsEUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTA3MDQxMTQ4NTRaFw0yNjA3MDMxMTUzNTRaMDMxMTAvBgNV BAMTKDY3MDJDRkQ2QzY0QzZGMEZCQjUzMzA0MTJCQUY2MkJEODVGQUU2NjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfx1Cl+D2TIUfYrBEc369sIRct eSGL486fcTEhooRsgNCWTDww9FsnmGTml556wHlLcT/SzZjcn9VhqUrLwCcdydM/ FJm9hTS0iSuHRl8AvjNoyeas+t+5vqIWTyzkhojhoQu6yXBuEZc4xGxIjPy22pVv Qebp+uer3TXEVPNnKQZlmtIzl38M4dMoF6Az+dR/mCLGM/gSSWJhB4X8TvZSTxj3 UBF/w59pXNm3d51680ZNdFV9j0T10+tviA6psn5vONxnjJi8+nUT2q3ok3iF27z4 RlmIejrBI8855mTebMHPP3/GhX7OZ39Koj7m4YwV3ME0YsRH/quT4v0bvb+zAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRnAs/WxkxvD7tT MEErr2K9hfrmaDAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNjUxOTBCQTA4RjZERDEwMjJBNTg3MEZC OTUzM0Y4MkU5NTRGMDNGM0M4MEQyM0I2MjhGQTNCNDhBMkMzMTIxOC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy82NTE5MEJBMDhGNkREMTAyMkE1ODcwRkI5NTMzRjgyRTk1NEYwM0YzQzgw RDIzQjYyOEZBM0I0OEEyQzMxMjE4LzAvNjcwMkNGRDZDNjRDNkYwRkJCNTMzMDQx MkJBRjYyQkQ4NUZBRTY2OC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAPWUDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEKzcwDQYJKoZIhvcNAQELBQADggEBAKFl9QIN nOu4sFOyaKs1oY/SAW2TJf4hWgt0KcwM12wBmTrQujllxps45dJH7HERxenrMSWf wbKiMYJv08blVu/D8Nda3H+aSod+iPfY7QH97J/nDkzGQlGVMP064BG/7LlsKR5D Pgr3MDE40ahNDvEgjGIT9b929O4cfN9k8HNiSiyMV12gVpdF2yjwBwfEisex8BYh aOPU0YEs0kCedQ9B5itLxPk76Ua/HV9zFcNM7BQQwjg8psy4umTUu3887VVEH9vz BZv3xliQwwlsEkvoVqOsl7+nFkWQwowfaPMKt5eHGGemBv5JQFIbnq4DNqn2ZuZM rzGKbdPvioNFglg= -----END CERTIFICATE-----Generated at Tue Nov 4 21:38:04 2025 by rpki-client