$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A3D5847870400288733F35669D7F1880025D0D1A.cer File: A3D5847870400288733F35669D7F1880025D0D1A.cer (raw, json) Hash identifier: /vkpxHVzdPu/jB7yAF0V+Q2x6rynfOedfUYZsjBx0yY= Subject key identifier: A3:D5:84:78:70:40:02:88:73:3F:35:66:9D:7F:18:80:02:5D:0D:1A Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 36C75C63A0D80A3D7423A2AFE205D072868517D2 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/093F85FA3FFC31CC7BBB4D96C4C3E38F5E9842748FBAFA96A0C68A34876D3CE2/0/A3D5847870400288733F35669D7F1880025D0D1A.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/093F85FA3FFC31CC7BBB4D96C4C3E38F5E9842748FBAFA96A0C68A34876D3CE2/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 04 Feb 2025 18:54:08 +0000 Certificate not after: Tue 03 Feb 2026 18:59:08 +0000 Subordinate resources: AS: 272123 IP: 2803:6f10::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:c7:5c:63:a0:d8:0a:3d:74:23:a2:af:e2:05:d0:72:86:85:17:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 4 18:54:08 2025 GMT Not After : Feb 3 18:59:08 2026 GMT Subject: CN=A3D5847870400288733F35669D7F1880025D0D1A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:6a:bf:53:bd:e1:75:0c:ef:5e:ae:17:b9:aa: 81:05:15:eb:0c:da:0f:26:ec:5c:70:76:89:9a:5c: b4:31:88:f3:f6:b2:a8:8f:b5:b0:a7:de:7b:0d:88: f7:29:56:00:c9:15:2e:01:4e:5a:5b:a4:b8:c9:89: 7d:59:64:0b:92:c2:41:d2:47:8a:52:b8:93:a9:31: 8c:e1:42:d9:35:ca:26:d8:ed:1a:a4:5a:d8:2b:99: 65:4e:2a:a7:cf:43:c3:2f:22:41:29:38:07:0b:31: 59:cc:af:65:26:56:35:9e:dc:a1:1f:2d:09:c8:c2: b6:dd:87:34:5c:23:4f:f1:e7:70:42:58:71:7f:55: 36:c2:b5:84:c1:f4:e7:01:7f:4d:ec:da:fd:0d:89: a7:3b:60:94:28:60:fb:0f:9f:d6:b8:f8:a3:db:bf: 70:5a:88:af:18:00:d9:81:65:12:26:d4:5a:31:b6: 0b:4d:ed:95:98:1e:58:1b:f7:ea:b1:64:74:bd:c8: 9b:bf:27:53:67:be:8e:92:5b:5c:cc:c3:38:35:2c: 98:28:ab:61:e9:1a:d0:16:1b:bf:c1:77:0b:77:6e: 1b:ed:ea:11:37:31:14:a8:22:b4:37:9e:f1:14:95: e2:cc:32:e0:63:49:24:7d:b2:e9:c3:b1:a6:2b:d0: d2:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A3:D5:84:78:70:40:02:88:73:3F:35:66:9D:7F:18:80:02:5D:0D:1A X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/093F85FA3FFC31CC7BBB4D96C4C3E38F5E9842748FBAFA96A0C68A34876D3CE2/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/093F85FA3FFC31CC7BBB4D96C4C3E38F5E9842748FBAFA96A0C68A34876D3CE2/0/A3D5847870400288733F35669D7F1880025D0D1A.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:6f10::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 272123 Signature Algorithm: sha256WithRSAEncryption 6b:f3:70:aa:77:21:a6:0a:4b:b4:77:95:57:fe:59:6e:7a:87: 1e:1f:72:9f:ac:93:61:fc:2c:df:d4:7d:f9:19:24:86:a3:80: 89:63:e3:9c:96:1e:22:0c:3b:e0:6f:c5:7b:eb:17:c1:e0:9b: fe:bb:51:4d:c8:f9:79:2c:5e:9a:1a:e7:f5:ab:37:8f:12:ab: 67:94:3a:23:ba:9b:20:5d:3f:3b:7a:94:61:1b:7f:1a:9d:f8: de:26:b6:59:8f:01:e7:89:f0:00:4d:8b:a1:c2:20:60:ed:86: 83:d9:f4:46:7d:3a:97:c3:6b:91:9b:cd:77:42:dd:e5:b2:de: f6:92:4c:89:81:6c:69:6a:d6:bd:d6:b9:cd:9b:fa:e2:8d:f2: b2:6f:81:d6:84:da:d9:bc:2d:fc:06:fc:d1:85:1c:28:b3:41: f8:7b:9a:a2:7a:b5:b0:2b:42:da:9d:8f:51:25:e3:3c:7e:51: 8c:f9:e3:bf:e6:95:4c:d7:35:6f:34:bb:14:9f:ff:0b:98:93: 17:dd:71:5d:22:12:82:20:60:cc:e8:3b:be:f1:23:55:22:f9: 61:e3:35:5d:f6:8c:63:90:8c:30:5e:56:c0:e6:65:8c:c7:43: a4:b2:d5:b3:e7:49:ca:dc:3e:e5:a6:82:ee:21:b9:31:3d:c1: cc:3d:16:7d -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUNsdcY6DYCj10I6Kv4gXQcoaFF9IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDQxODU0MDhaFw0yNjAyMDMxODU5MDhaMDMxMTAvBgNV BAMTKEEzRDU4NDc4NzA0MDAyODg3MzNGMzU2NjlEN0YxODgwMDI1RDBEMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/ar9TveF1DO9erhe5qoEFFesM 2g8m7FxwdomaXLQxiPP2sqiPtbCn3nsNiPcpVgDJFS4BTlpbpLjJiX1ZZAuSwkHS R4pSuJOpMYzhQtk1yibY7RqkWtgrmWVOKqfPQ8MvIkEpOAcLMVnMr2UmVjWe3KEf LQnIwrbdhzRcI0/x53BCWHF/VTbCtYTB9OcBf03s2v0Niac7YJQoYPsPn9a4+KPb v3BaiK8YANmBZRIm1FoxtgtN7ZWYHlgb9+qxZHS9yJu/J1Nnvo6SW1zMwzg1LJgo q2HpGtAWG7/Bdwt3bhvt6hE3MRSoIrQ3nvEUleLMMuBjSSR9sunDsaYr0NKpAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSj1YR4cEACiHM/ NWadfxiAAl0NGjAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMDkzRjg1RkEzRkZDMzFDQzdCQkI0RDk2 QzRDM0UzOEY1RTk4NDI3NDhGQkFGQTk2QTBDNjhBMzQ4NzZEM0NFMi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8wOTNGODVGQTNGRkMzMUNDN0JCQjREOTZDNEMzRTM4RjVFOTg0Mjc0OEZC QUZBOTZBMEM2OEEzNDg3NkQzQ0UyLzAvQTNENTg0Nzg3MDQwMDI4ODczM0YzNTY2 OUQ3RjE4ODAwMjVEMEQxQS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKANvEDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEJvswDQYJKoZIhvcNAQELBQADggEBAGvzcKp3 IaYKS7R3lVf+WW56hx4fcp+sk2H8LN/UffkZJIajgIlj45yWHiIMO+BvxXvrF8Hg m/67UU3I+XksXpoa5/WrN48Sq2eUOiO6myBdPzt6lGEbfxqd+N4mtlmPAeeJ8ABN i6HCIGDthoPZ9EZ9OpfDa5GbzXdC3eWy3vaSTImBbGlq1r3Wuc2b+uKN8rJvgdaE 2tm8LfwG/NGFHCizQfh7mqJ6tbArQtqdj1El4zx+UYz547/mlUzXNW80uxSf/wuY kxfdcV0iEoIgYMzoO77xI1Ui+WHjNV32jGOQjDBeVsDmZYzHQ6Sy1bPnScrcPuWm gu4huTE9wcw9Fn0= -----END CERTIFICATE-----Generated at Tue Nov 4 21:37:47 2025 by rpki-client