$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F6F76355591EF78F2876F224A9DA4EC3D1F7C75.cer File: 7F6F76355591EF78F2876F224A9DA4EC3D1F7C75.cer (raw, json) Hash identifier: KHATnfs3lSlNwMXqykBvUWyClq/zHaNkjdj3wxL3RRc= Subject key identifier: 7F:6F:76:35:55:91:EF:78:F2:87:6F:22:4A:9D:A4:EC:3D:1F:7C:75 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 0AFF791C20C53D315006C8FB5032060EDC9DBB4C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/9BF1002C9E31D1B526FABE60CC81CC5A203BEB8DF84C3441F29CF9E07584DAEC/0/7F6F76355591EF78F2876F224A9DA4EC3D1F7C75.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/9BF1002C9E31D1B526FABE60CC81CC5A203BEB8DF84C3441F29CF9E07584DAEC/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 04 Nov 2025 14:49:34 +0000 Certificate not after: Tue 03 Nov 2026 14:54:34 +0000 Subordinate resources: AS: 263189 IP: 179.43.96.0/22 IP: 2803:4480::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:ff:79:1c:20:c5:3d:31:50:06:c8:fb:50:32:06:0e:dc:9d:bb:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Nov 4 14:49:34 2025 GMT Not After : Nov 3 14:54:34 2026 GMT Subject: CN=7F6F76355591EF78F2876F224A9DA4EC3D1F7C75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:03:af:69:e7:3f:2d:9a:88:57:ad:49:f6:89: 8d:c8:e0:82:b3:af:9d:ef:07:de:de:ac:a0:fc:41: 6e:22:53:f1:d1:ad:53:e5:ab:90:b6:2f:55:ce:ad: 58:5c:24:39:4c:61:c1:40:02:90:02:ae:4a:7c:b0: 3e:cb:61:09:d2:93:91:c3:c4:94:80:ec:9d:85:53: 69:da:2f:a8:37:6f:34:48:f4:26:46:a8:ef:9d:5c: f9:60:66:12:02:c0:97:99:99:dc:15:36:e0:d8:3c: ce:21:7f:7c:0d:42:3c:e9:8e:d9:d8:89:57:0f:11: 2e:03:14:c0:9d:ef:63:7d:34:6d:2a:68:db:6f:46: 34:14:1e:66:07:22:1e:11:32:7f:1f:16:a7:33:b7: 10:e0:ca:e0:b6:a6:70:4c:ca:a5:2c:fd:cb:db:90: 11:9a:33:b6:45:15:2c:5e:7b:50:8d:fa:3d:69:da: 03:39:cd:2f:fe:69:02:89:1e:b2:c9:99:65:46:79: 67:09:a0:cd:f6:b1:dd:4f:d8:9e:08:c5:7d:f8:ec: 0b:4c:c3:21:63:2f:df:c4:ad:e0:27:7c:d8:3a:bc: e3:1c:be:7d:57:ef:27:63:a8:58:8d:b5:c8:9b:1c: 75:d7:31:a0:7f:86:93:bb:c8:82:61:e1:86:84:01: 65:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7F:6F:76:35:55:91:EF:78:F2:87:6F:22:4A:9D:A4:EC:3D:1F:7C:75 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/9BF1002C9E31D1B526FABE60CC81CC5A203BEB8DF84C3441F29CF9E07584DAEC/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/9BF1002C9E31D1B526FABE60CC81CC5A203BEB8DF84C3441F29CF9E07584DAEC/0/7F6F76355591EF78F2876F224A9DA4EC3D1F7C75.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 179.43.96.0/22 IPv6: 2803:4480::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263189 Signature Algorithm: sha256WithRSAEncryption 65:bf:5a:ca:78:21:97:76:6b:a2:40:87:3c:0c:6e:d7:63:d6: ca:63:1a:3c:65:90:d2:d1:0a:e6:22:c3:8d:54:6a:c2:0f:35: a6:b8:29:2d:7e:8c:3e:6c:48:54:de:22:3f:28:d3:3e:cc:fa: 33:ad:74:c2:f5:f8:c4:d8:b1:53:5b:a4:60:42:26:3a:62:f4: 39:2e:cd:82:13:19:0d:b3:aa:56:f2:f8:2b:09:6e:74:a4:f5: e4:00:65:f3:4c:66:3b:6d:3a:86:b8:d2:ac:db:ab:00:b1:fe: 85:0e:dc:93:d4:a5:ca:d2:85:c0:43:e8:b4:30:8e:81:62:5e: 07:55:0d:10:4f:c6:f9:6d:82:1d:fe:ec:87:c0:7e:1d:2a:93: 25:fb:74:fd:d5:28:71:b4:75:3e:6e:fc:2a:89:66:92:4b:47: 70:1b:f3:a7:4f:e9:b8:30:7f:03:b6:20:32:b2:9c:95:3c:db: 28:9b:e9:95:41:ad:d4:21:e6:2d:c1:2b:73:14:21:01:2a:07: d0:b5:49:9f:69:1b:87:d9:28:7a:d1:3f:2c:a4:d4:a1:48:5d: a1:4a:cf:83:0f:f3:3a:03:71:fa:57:ca:76:d0:96:e7:7f:1e: a0:0a:19:87:cf:93:e7:6a:a3:29:30:a5:da:34:dd:8b:15:f0: 7e:d7:9b:be -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUCv95HCDFPTFQBsj7UDIGDtydu0wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTExMDQxNDQ5MzRaFw0yNjExMDMxNDU0MzRaMDMxMTAvBgNV BAMTKDdGNkY3NjM1NTU5MUVGNzhGMjg3NkYyMjRBOURBNEVDM0QxRjdDNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPA69p5z8tmohXrUn2iY3I4IKz r53vB97erKD8QW4iU/HRrVPlq5C2L1XOrVhcJDlMYcFAApACrkp8sD7LYQnSk5HD xJSA7J2FU2naL6g3bzRI9CZGqO+dXPlgZhICwJeZmdwVNuDYPM4hf3wNQjzpjtnY iVcPES4DFMCd72N9NG0qaNtvRjQUHmYHIh4RMn8fFqcztxDgyuC2pnBMyqUs/cvb kBGaM7ZFFSxee1CN+j1p2gM5zS/+aQKJHrLJmWVGeWcJoM32sd1P2J4IxX347AtM wyFjL9/EreAnfNg6vOMcvn1X7ydjqFiNtcibHHXXMaB/hpO7yIJh4YaEAWXrAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR/b3Y1VZHvePKH byJKnaTsPR98dTAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvOUJGMTAwMkM5RTMxRDFCNTI2RkFCRTYw Q0M4MUNDNUEyMDNCRUI4REY4NEMzNDQxRjI5Q0Y5RTA3NTg0REFFQy8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy85QkYxMDAyQzlFMzFEMUI1MjZGQUJFNjBDQzgxQ0M1QTIwM0JFQjhERjg0 QzM0NDFGMjlDRjlFMDc1ODREQUVDLzAvN0Y2Rjc2MzU1NTkxRUY3OEYyODc2RjIy NEE5REE0RUMzRDFGN0M3NS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCsytgMA0EAgAC MAcDBQAoA0SAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQEFTANBgkqhkiG9w0B AQsFAAOCAQEAZb9aynghl3ZrokCHPAxu12PWymMaPGWQ0tEK5iLDjVRqwg81prgp LX6MPmxIVN4iPyjTPsz6M610wvX4xNixU1ukYEImOmL0OS7NghMZDbOqVvL4Kwlu dKT15ABl80xmO206hrjSrNurALH+hQ7ck9SlytKFwEPotDCOgWJeB1UNEE/G+W2C Hf7sh8B+HSqTJft0/dUocbR1Pm78KolmkktHcBvzp0/puDB/A7YgMrKclTzbKJvp lUGt1CHmLcErcxQhASoH0LVJn2kbh9koetE/LKTUoUhdoUrPgw/zOgNx+lfKdtCW 538eoAoZh8+T52qjKTCl2jTdixXwftebvg== -----END CERTIFICATE-----Generated at Tue Nov 4 21:38:56 2025 by rpki-client