$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8B3641D8012C1A22F326467848DB2095ED4A79F6.cer File: 8B3641D8012C1A22F326467848DB2095ED4A79F6.cer (raw, json) Hash identifier: u5MOBpXWqkkGqLN3IVl13QL0TBoSFd5PPr/hw2ni+4A= Subject key identifier: 8B:36:41:D8:01:2C:1A:22:F3:26:46:78:48:DB:20:95:ED:4A:79:F6 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 28D7C0F63C8C54782EC596DB350A17241D207EAD Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/19C3DD00728809F85D7DF48B1655259D0203299638C9CB0E43875A901ACDC45C/0/8B3641D8012C1A22F326467848DB2095ED4A79F6.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/19C3DD00728809F85D7DF48B1655259D0203299638C9CB0E43875A901ACDC45C/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 21 May 2025 01:15:01 +0000 Certificate not after: Wed 20 May 2026 01:20:01 +0000 Subordinate resources: AS: 273837 IP: 2803:6950::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:d7:c0:f6:3c:8c:54:78:2e:c5:96:db:35:0a:17:24:1d:20:7e:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: May 21 01:15:01 2025 GMT Not After : May 20 01:20:01 2026 GMT Subject: CN=8B3641D8012C1A22F326467848DB2095ED4A79F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:4b:d9:64:0a:41:07:0f:9a:f4:36:dc:72:27: 78:1b:1f:32:70:5f:c4:67:b8:81:01:7c:c1:45:44: 45:0d:07:07:47:2f:56:3b:97:77:2e:59:8b:e0:f2: 0f:4d:58:04:f0:90:36:22:dd:59:94:0f:44:9a:1c: b8:5b:1f:8f:ca:bf:54:5a:7c:66:f7:a5:fc:29:d0: ff:74:54:53:8a:2c:55:1f:5a:57:f1:90:3a:93:b0: a7:84:0a:f1:f9:1d:86:35:41:b9:ad:9b:b6:a1:d0: af:d0:9b:3e:69:db:66:a8:3b:b6:bc:84:75:25:02: 7c:51:79:ec:ee:e9:aa:ad:70:39:8b:f7:79:88:ac: 0a:3d:e5:41:94:40:f5:c0:ec:b6:6f:f5:81:03:eb: a0:04:f9:88:40:5d:eb:04:16:ed:8d:1f:2a:59:80: c7:54:a3:44:aa:95:43:81:e2:1b:07:41:07:75:bc: e2:f8:99:e6:1b:d2:73:e9:d5:dd:e4:91:10:2b:ab: b8:ee:26:42:69:7f:de:e9:da:7b:ab:76:1b:f6:77: 6a:e3:74:f8:15:9c:ab:94:4b:ff:d8:42:c6:cd:b5: 09:7d:41:5d:14:46:a3:98:7f:c1:e3:31:1f:b5:f3: ae:df:42:0f:52:e3:52:8d:38:18:78:ab:87:64:3c: 1c:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8B:36:41:D8:01:2C:1A:22:F3:26:46:78:48:DB:20:95:ED:4A:79:F6 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/19C3DD00728809F85D7DF48B1655259D0203299638C9CB0E43875A901ACDC45C/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/19C3DD00728809F85D7DF48B1655259D0203299638C9CB0E43875A901ACDC45C/0/8B3641D8012C1A22F326467848DB2095ED4A79F6.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:6950::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273837 Signature Algorithm: sha256WithRSAEncryption 2b:a4:42:02:0c:eb:85:22:fa:cb:b9:b2:09:ff:35:31:72:ea: fe:66:fa:20:9c:cc:e6:39:30:b4:e1:50:14:00:7b:7b:dc:b8: 61:d3:c7:dc:5f:a0:b6:51:bb:42:47:a3:19:5e:d3:9e:0d:3d: c9:bb:1b:59:08:73:82:48:0a:9b:34:4f:dd:34:c9:10:8f:4d: ab:e0:5e:26:d2:88:81:6f:46:3c:c9:5d:6e:0f:fd:a0:80:03: f7:23:c9:d0:87:16:8f:10:08:f1:f5:45:bb:c1:c9:2c:71:c3: 8e:95:7b:23:90:b5:36:69:04:20:24:92:eb:b6:83:67:36:14: 8e:ad:59:75:58:58:d4:82:15:4c:36:df:00:f9:a7:e3:8c:ff: 05:9e:10:4b:d9:bf:ce:bb:06:c0:82:78:b5:f8:02:96:2c:e2: d3:31:92:09:69:db:ca:39:68:24:7c:9a:ff:ac:a8:ed:8e:48: d8:e9:20:b5:02:fd:a7:33:c9:7f:9d:f6:61:2f:76:dc:51:d5: 12:94:69:60:4a:fc:40:1d:54:b0:2c:b6:ee:5d:23:af:f0:59: e4:47:2e:b6:f2:be:14:8e:31:41:7b:b4:0e:1b:36:27:9a:d0: a3:fa:2e:33:5b:94:3a:6a:20:70:12:32:6d:e8:de:d2:31:fc: ed:c5:4c:c0 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUKNfA9jyMVHguxZbbNQoXJB0gfq0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTA1MjEwMTE1MDFaFw0yNjA1MjAwMTIwMDFaMDMxMTAvBgNV BAMTKDhCMzY0MUQ4MDEyQzFBMjJGMzI2NDY3ODQ4REIyMDk1RUQ0QTc5RjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4S9lkCkEHD5r0NtxyJ3gbHzJw X8RnuIEBfMFFREUNBwdHL1Y7l3cuWYvg8g9NWATwkDYi3VmUD0SaHLhbH4/Kv1Ra fGb3pfwp0P90VFOKLFUfWlfxkDqTsKeECvH5HYY1Qbmtm7ah0K/Qmz5p22aoO7a8 hHUlAnxReezu6aqtcDmL93mIrAo95UGUQPXA7LZv9YED66AE+YhAXesEFu2NHypZ gMdUo0SqlUOB4hsHQQd1vOL4meYb0nPp1d3kkRArq7juJkJpf97p2nurdhv2d2rj dPgVnKuUS//YQsbNtQl9QV0URqOYf8HjMR+1867fQg9S41KNOBh4q4dkPBxLAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSLNkHYASwaIvMm RnhI2yCV7Up59jAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMTlDM0REMDA3Mjg4MDlGODVEN0RGNDhC MTY1NTI1OUQwMjAzMjk5NjM4QzlDQjBFNDM4NzVBOTAxQUNEQzQ1Qy8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8xOUMzREQwMDcyODgwOUY4NUQ3REY0OEIxNjU1MjU5RDAyMDMyOTk2MzhD OUNCMEU0Mzg3NUE5MDFBQ0RDNDVDLzAvOEIzNjQxRDgwMTJDMUEyMkYzMjY0Njc4 NDhEQjIwOTVFRDRBNzlGNi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKANpUDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMELa0wDQYJKoZIhvcNAQELBQADggEBACukQgIM 64Ui+su5sgn/NTFy6v5m+iCczOY5MLThUBQAe3vcuGHTx9xfoLZRu0JHoxle054N Pcm7G1kIc4JICps0T900yRCPTavgXibSiIFvRjzJXW4P/aCAA/cjydCHFo8QCPH1 RbvBySxxw46VeyOQtTZpBCAkkuu2g2c2FI6tWXVYWNSCFUw23wD5p+OM/wWeEEvZ v867BsCCeLX4ApYs4tMxkglp28o5aCR8mv+sqO2OSNjpILUC/aczyX+d9mEvdtxR 1RKUaWBK/EAdVLAstu5dI6/wWeRHLrbyvhSOMUF7tA4bNiea0KP6LjNblDpqIHAS Mm3o3tIx/O3FTMA= -----END CERTIFICATE-----Generated at Tue Nov 4 21:37:27 2025 by rpki-client