$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/710BAA23497F47E0CB6599D321F91913EB0F4013.cer File: 710BAA23497F47E0CB6599D321F91913EB0F4013.cer (raw, json) Hash identifier: 3g/TnGuyrjJmfBHx5YfquVfib4Y80i74JS1ixR3Achc= Subject key identifier: 71:0B:AA:23:49:7F:47:E0:CB:65:99:D3:21:F9:19:13:EB:0F:40:13 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 1A17AE06959F5C40154D193D88A34AFA679DEE67 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/AD85CDC6CC6B07A92C852F8E0D7C990F9C2D15AA8289E3A2F0F97194A67FA5CB/0/710BAA23497F47E0CB6599D321F91913EB0F4013.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/AD85CDC6CC6B07A92C852F8E0D7C990F9C2D15AA8289E3A2F0F97194A67FA5CB/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Sun 02 Nov 2025 18:05:01 +0000 Certificate not after: Sun 01 Nov 2026 18:10:01 +0000 Subordinate resources: AS: 272381 IP: 2806:41d::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:17:ae:06:95:9f:5c:40:15:4d:19:3d:88:a3:4a:fa:67:9d:ee:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Nov 2 18:05:01 2025 GMT Not After : Nov 1 18:10:01 2026 GMT Subject: CN=710BAA23497F47E0CB6599D321F91913EB0F4013 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b8:20:f5:5a:70:e5:e1:98:8c:97:86:81:83: 56:8e:44:8b:eb:41:d2:7d:23:c7:92:9d:be:9b:b1: 81:aa:e5:7d:4e:f1:ce:48:b9:6d:19:a0:42:a4:e7: 51:16:e3:19:13:c7:d1:15:40:7f:82:86:2e:53:c0: f5:d1:33:27:93:51:f3:91:4f:e6:3f:c4:c7:2f:01: 08:e8:53:c8:e7:54:63:be:63:f5:3f:7c:1c:9b:0f: b4:45:31:4c:8c:9f:ce:b7:df:de:2c:4a:70:be:47: a3:43:3a:9c:96:7a:a4:65:9f:3e:a3:44:1d:0c:d8: af:4e:7b:94:e8:03:bb:57:24:02:4a:32:3f:71:53: 33:8d:2a:38:e6:0a:ce:52:dc:1a:87:a6:f6:00:6c: 28:2a:dc:9b:39:f2:78:48:d7:9c:ce:07:3d:3e:80: 80:32:82:c9:f9:12:18:41:31:49:6b:95:50:f9:ab: e5:4a:41:f3:f2:b5:2a:35:3a:28:5a:1d:c6:98:47: c3:f1:95:6e:87:68:c5:0a:7f:f2:91:e9:0f:e7:d7: 88:31:d2:99:bc:d2:33:e6:23:5d:fc:36:29:50:a0: 14:dd:61:80:50:8f:ed:b8:d9:79:51:73:e4:88:55: 4f:94:ae:e0:b7:cc:52:b7:96:30:96:ef:79:57:2f: b3:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 71:0B:AA:23:49:7F:47:E0:CB:65:99:D3:21:F9:19:13:EB:0F:40:13 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/AD85CDC6CC6B07A92C852F8E0D7C990F9C2D15AA8289E3A2F0F97194A67FA5CB/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/AD85CDC6CC6B07A92C852F8E0D7C990F9C2D15AA8289E3A2F0F97194A67FA5CB/0/710BAA23497F47E0CB6599D321F91913EB0F4013.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2806:41d::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 272381 Signature Algorithm: sha256WithRSAEncryption a9:09:82:22:f1:2c:d5:c4:8a:7b:25:91:a8:cb:b2:6b:44:7b: 24:d8:7d:9a:1b:29:d6:33:d1:d6:48:c7:b5:3c:83:4a:fb:5b: d0:3d:d8:49:fe:70:b6:3b:00:5f:89:e1:d1:0b:9a:ca:62:f5: 68:30:9f:1d:43:5f:8e:b5:86:bd:f4:c2:9b:27:6e:69:b0:29: 0c:fa:f3:0d:be:a4:f4:0c:84:be:20:9c:0f:fd:71:6b:b9:15: ba:2a:2d:a8:b5:ad:ab:c3:78:48:7d:2f:a4:b7:08:5d:8a:17: 5e:71:0b:af:89:fd:a3:c8:47:f1:7b:31:b4:4c:cf:a4:d0:8e: 7d:6e:1a:e8:fa:57:5e:19:05:6e:cb:d5:fc:5a:22:ee:d1:be: 3a:b9:35:d2:44:f7:69:04:51:5d:d1:5b:68:23:32:a1:46:98: 61:b8:11:87:d9:2d:91:8f:8b:36:ae:af:48:93:fb:d4:3d:fd: 9c:79:d8:54:2b:23:d2:23:be:fe:d7:ee:e2:07:80:f5:df:94: c5:fc:68:94:b2:81:b1:91:e3:34:b8:4e:0e:a1:e4:63:94:e1: ed:ee:47:c2:40:8a:4d:78:7d:37:34:1d:8d:67:ea:20:79:d9: 34:78:c1:9b:d8:d9:b5:4d:4e:5e:8e:a7:59:26:7d:80:d0:4f: f1:f0:ae:1b -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUGheuBpWfXEAVTRk9iKNK+med7mcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTExMDIxODA1MDFaFw0yNjExMDExODEwMDFaMDMxMTAvBgNV BAMTKDcxMEJBQTIzNDk3RjQ3RTBDQjY1OTlEMzIxRjkxOTEzRUIwRjQwMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4uCD1WnDl4ZiMl4aBg1aORIvr QdJ9I8eSnb6bsYGq5X1O8c5IuW0ZoEKk51EW4xkTx9EVQH+Chi5TwPXRMyeTUfOR T+Y/xMcvAQjoU8jnVGO+Y/U/fBybD7RFMUyMn863394sSnC+R6NDOpyWeqRlnz6j RB0M2K9Oe5ToA7tXJAJKMj9xUzONKjjmCs5S3BqHpvYAbCgq3Js58nhI15zOBz0+ gIAygsn5EhhBMUlrlVD5q+VKQfPytSo1OihaHcaYR8PxlW6HaMUKf/KR6Q/n14gx 0pm80jPmI138NilQoBTdYYBQj+242XlRc+SIVU+UruC3zFK3ljCW73lXL7OXAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRxC6ojSX9H4Mtl mdMh+RkT6w9AEzAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQUQ4NUNEQzZDQzZCMDdBOTJDODUyRjhF MEQ3Qzk5MEY5QzJEMTVBQTgyODlFM0EyRjBGOTcxOTRBNjdGQTVDQi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9BRDg1Q0RDNkNDNkIwN0E5MkM4NTJGOEUwRDdDOTkwRjlDMkQxNUFBODI4 OUUzQTJGMEY5NzE5NEE2N0ZBNUNCLzAvNzEwQkFBMjM0OTdGNDdFMENCNjU5OUQz MjFGOTE5MTNFQjBGNDAxMy5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAYEHTAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEJ/0wDQYJKoZIhvcNAQELBQADggEBAKkJgiLx LNXEinslkajLsmtEeyTYfZobKdYz0dZIx7U8g0r7W9A92En+cLY7AF+J4dELmspi 9Wgwnx1DX461hr30wpsnbmmwKQz68w2+pPQMhL4gnA/9cWu5FboqLai1ravDeEh9 L6S3CF2KF15xC6+J/aPIR/F7MbRMz6TQjn1uGuj6V14ZBW7L1fxaIu7Rvjq5NdJE 92kEUV3RW2gjMqFGmGG4EYfZLZGPizaur0iT+9Q9/Zx52FQrI9Ijvv7X7uIHgPXf lMX8aJSygbGR4zS4Tg6h5GOU4e3uR8JAik14fTc0HY1n6iB52TR4wZvY2bVNTl6O p1kmfYDQT/Hwrhs= -----END CERTIFICATE-----Generated at Tue Nov 4 18:57:59 2025 by rpki-client