$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69A22062FEA656EAA1AEE03349A885226BB40E90.cer File: 69A22062FEA656EAA1AEE03349A885226BB40E90.cer (raw, json) Hash identifier: cCORJvH6RgUDNs5ET/zy78RYaPwr3GJYdL6MX1E1ar0= Subject key identifier: 69:A2:20:62:FE:A6:56:EA:A1:AE:E0:33:49:A8:85:22:6B:B4:0E:90 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 0DAC237DAD6E18BA17E0E715D547E94150560C0F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/F5D70459C94144150FEC616E53F671374DC8CA04DF5B96CF680492BB45F6E74D/0/69A22062FEA656EAA1AEE03349A885226BB40E90.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/F5D70459C94144150FEC616E53F671374DC8CA04DF5B96CF680492BB45F6E74D/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 04 Feb 2025 18:54:07 +0000 Certificate not after: Tue 03 Feb 2026 18:59:07 +0000 Subordinate resources: AS: 272156 IP: 2803:4890::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:ac:23:7d:ad:6e:18:ba:17:e0:e7:15:d5:47:e9:41:50:56:0c:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 4 18:54:07 2025 GMT Not After : Feb 3 18:59:07 2026 GMT Subject: CN=69A22062FEA656EAA1AEE03349A885226BB40E90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:39:86:34:cc:75:6c:f7:28:25:94:2e:52:8e: 1d:64:de:5b:75:a3:e8:5f:44:06:53:36:e3:e8:30: b8:c6:c7:20:06:ef:0c:bb:cf:c0:74:5d:43:0e:24: 55:55:6c:9c:eb:c0:0e:57:06:6f:56:24:23:78:7b: 79:c0:c3:9e:21:97:db:61:a4:e5:92:f9:7f:7b:bb: 51:b1:8d:1b:df:7f:29:7d:14:8c:13:a3:8b:f5:ca: b1:73:f2:68:de:e6:d8:c5:95:de:ce:28:24:27:0f: 81:8c:2d:38:41:51:50:bc:44:00:50:37:54:e2:3c: d2:1b:84:f1:aa:7d:82:c5:c7:78:cc:3e:f6:72:70: 90:61:7a:df:2f:df:ab:6a:fa:5d:fb:fe:92:ce:a5: 7b:e1:b0:69:4f:0e:3d:be:8c:a2:57:26:7f:85:94: cf:6c:b5:2d:94:74:51:bd:a3:bf:e5:55:73:17:92: 47:ae:4e:07:48:2e:28:7d:00:ba:28:b5:8b:66:dc: 07:d4:11:03:fc:eb:08:2f:4f:fd:23:26:97:8b:b9: cb:7e:e4:8e:5b:51:bd:e9:f3:17:ca:19:a5:57:66: e7:0b:58:55:ab:05:18:59:75:a1:bb:be:49:13:ca: 88:67:15:80:fd:11:95:41:81:5f:72:0d:a6:df:b9: 14:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 69:A2:20:62:FE:A6:56:EA:A1:AE:E0:33:49:A8:85:22:6B:B4:0E:90 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/F5D70459C94144150FEC616E53F671374DC8CA04DF5B96CF680492BB45F6E74D/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/F5D70459C94144150FEC616E53F671374DC8CA04DF5B96CF680492BB45F6E74D/0/69A22062FEA656EAA1AEE03349A885226BB40E90.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:4890::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 272156 Signature Algorithm: sha256WithRSAEncryption c7:70:21:38:15:9f:14:dc:59:d9:a2:21:99:03:b1:cc:63:29: 86:e4:d4:31:38:ce:21:dd:dd:8c:0f:dd:01:c1:7e:7b:db:ec: c4:c2:80:e2:42:cc:ac:a2:26:f7:ac:50:92:8b:d5:fb:d4:5b: 4f:a4:19:8e:e0:70:0f:4b:89:0c:5b:bd:7e:a1:67:4e:1f:d8: 8a:82:0e:48:75:03:13:8c:c1:8e:db:71:2c:e1:66:e6:f5:11: a3:d3:18:d9:20:0e:5e:15:f4:e6:c3:4f:54:0b:7b:9d:6a:e3: 98:47:ac:23:2b:1c:de:5e:4b:26:73:a2:26:7e:51:d0:8e:bb: 3a:8f:af:18:6a:ef:f8:d0:cf:b4:e2:d9:c5:6a:2a:23:0c:11: 5a:d1:3e:ab:36:66:41:f2:c5:b0:2f:21:84:67:29:73:63:e0: 01:e4:ce:a3:1c:48:a5:cf:1c:dd:ac:06:9c:ce:a0:d5:00:22: b7:d1:d3:3b:08:f7:5a:bd:e7:a6:d3:ea:c8:b9:4f:f1:3b:02: 81:bf:a1:ef:f6:c8:14:46:d5:a8:5d:8e:96:1a:98:bb:9e:6e: 6a:8f:f9:68:01:4f:cc:78:fd:ef:f2:d6:a8:a6:98:07:32:e5: 1b:69:fb:07:d1:eb:35:3f:df:42:95:b8:94:59:11:3c:4c:c2: 00:20:14:df -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUDawjfa1uGLoX4OcV1UfpQVBWDA8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDQxODU0MDdaFw0yNjAyMDMxODU5MDdaMDMxMTAvBgNV BAMTKDY5QTIyMDYyRkVBNjU2RUFBMUFFRTAzMzQ5QTg4NTIyNkJCNDBFOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQOYY0zHVs9ygllC5Sjh1k3lt1 o+hfRAZTNuPoMLjGxyAG7wy7z8B0XUMOJFVVbJzrwA5XBm9WJCN4e3nAw54hl9th pOWS+X97u1GxjRvffyl9FIwTo4v1yrFz8mje5tjFld7OKCQnD4GMLThBUVC8RABQ N1TiPNIbhPGqfYLFx3jMPvZycJBhet8v36tq+l37/pLOpXvhsGlPDj2+jKJXJn+F lM9stS2UdFG9o7/lVXMXkkeuTgdILih9ALootYtm3AfUEQP86wgvT/0jJpeLuct+ 5I5bUb3p8xfKGaVXZucLWFWrBRhZdaG7vkkTyohnFYD9EZVBgV9yDabfuRQ3AgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRpoiBi/qZW6qGu 4DNJqIUia7QOkDAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRjVENzA0NTlDOTQxNDQxNTBGRUM2MTZF NTNGNjcxMzc0REM4Q0EwNERGNUI5NkNGNjgwNDkyQkI0NUY2RTc0RC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9GNUQ3MDQ1OUM5NDE0NDE1MEZFQzYxNkU1M0Y2NzEzNzREQzhDQTA0REY1 Qjk2Q0Y2ODA0OTJCQjQ1RjZFNzRELzAvNjlBMjIwNjJGRUE2NTZFQUExQUVFMDMz NDlBODg1MjI2QkI0MEU5MC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKANIkDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEJxwwDQYJKoZIhvcNAQELBQADggEBAMdwITgV nxTcWdmiIZkDscxjKYbk1DE4ziHd3YwP3QHBfnvb7MTCgOJCzKyiJvesUJKL1fvU W0+kGY7gcA9LiQxbvX6hZ04f2IqCDkh1AxOMwY7bcSzhZub1EaPTGNkgDl4V9ObD T1QLe51q45hHrCMrHN5eSyZzoiZ+UdCOuzqPrxhq7/jQz7Ti2cVqKiMMEVrRPqs2 ZkHyxbAvIYRnKXNj4AHkzqMcSKXPHN2sBpzOoNUAIrfR0zsI91q956bT6si5T/E7 AoG/oe/2yBRG1ahdjpYamLuebmqP+WgBT8x4/e/y1qimmAcy5Rtp+wfR6zU/30KV uJRZETxMwgAgFN8= -----END CERTIFICATE-----Generated at Tue Nov 4 21:37:47 2025 by rpki-client