$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF9640C2202700AABA2DF54F969C8E24872E2892.cer File: AF9640C2202700AABA2DF54F969C8E24872E2892.cer (raw, json) Hash identifier: Ad+a0+FO1WxFGkXF79YuhHoAh/Jg1YiqdGCsxR+Blp0= Subject key identifier: AF:96:40:C2:20:27:00:AA:BA:2D:F5:4F:96:9C:8E:24:87:2E:28:92 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 22061476F71AB05783D9A6962CA8B11A4E804A3C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/A87377E6F6BB6F8595889832A9E73ACD0B9E869448103C51C66FFDF60A7F5BCC/0/AF9640C2202700AABA2DF54F969C8E24872E2892.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/A87377E6F6BB6F8595889832A9E73ACD0B9E869448103C51C66FFDF60A7F5BCC/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 04 Nov 2025 07:50:01 +0000 Certificate not after: Tue 03 Nov 2026 07:55:01 +0000 Subordinate resources: AS: 274174 IP: 2803:65d0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:06:14:76:f7:1a:b0:57:83:d9:a6:96:2c:a8:b1:1a:4e:80:4a:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Nov 4 07:50:01 2025 GMT Not After : Nov 3 07:55:01 2026 GMT Subject: CN=AF9640C2202700AABA2DF54F969C8E24872E2892 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:28:47:9d:23:36:ec:1a:38:5e:52:2e:08:61: e5:1b:05:02:de:79:91:72:11:b9:a5:74:33:11:d0: 30:0e:aa:8e:b2:b9:ee:9f:4b:7d:d1:77:a6:2d:cb: a8:37:c7:f7:56:cf:6e:60:8e:cb:72:1a:9c:e2:b9: d7:16:df:b1:0b:c4:69:e8:9a:9b:0a:1d:8e:14:e0: ea:66:0e:33:70:8f:d6:98:cf:9d:5b:2e:44:ff:f5: c6:dd:1f:79:ae:6e:20:83:3c:1c:01:44:a5:2f:a1: d9:1c:54:4d:71:af:7d:8b:a8:94:29:c0:81:1d:f3: d9:44:27:75:fa:22:09:74:cb:8d:09:6a:62:11:43: 58:2d:1e:f9:35:4d:f3:ea:bd:b6:70:c2:fe:66:b7: f6:6f:f2:89:5b:3c:6c:82:19:7b:3f:58:d7:03:7e: af:ae:d3:18:eb:ab:c6:d1:1d:3f:f0:02:5c:df:d3: a8:11:6a:ee:fe:ec:c6:b8:22:84:b3:29:9f:3c:22: c0:21:fb:df:7f:77:67:9c:cc:60:e1:7e:eb:7c:ea: ff:d5:87:e3:46:37:f5:f3:f6:64:72:2d:34:39:23: 32:f2:03:2f:1e:f4:01:db:35:8e:04:22:2e:59:6e: 0f:0d:90:e8:63:34:0d:40:6b:5a:01:3e:d1:ab:d1: 51:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AF:96:40:C2:20:27:00:AA:BA:2D:F5:4F:96:9C:8E:24:87:2E:28:92 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/A87377E6F6BB6F8595889832A9E73ACD0B9E869448103C51C66FFDF60A7F5BCC/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/A87377E6F6BB6F8595889832A9E73ACD0B9E869448103C51C66FFDF60A7F5BCC/0/AF9640C2202700AABA2DF54F969C8E24872E2892.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:65d0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 274174 Signature Algorithm: sha256WithRSAEncryption 35:d1:b8:33:01:73:1d:ca:a3:d8:98:9d:71:5a:62:0a:ef:90: 74:57:62:0b:bf:cf:21:90:43:d7:45:69:fa:d8:07:8e:3c:f4: 15:5a:f3:e9:69:21:9a:f7:9a:70:60:15:0e:3d:83:86:5f:fe: 2e:db:78:16:db:ca:8c:70:fa:6a:e3:42:d5:a1:66:e0:75:f3: 2a:42:14:61:06:e9:27:1b:52:14:4e:16:82:16:b0:4e:58:2f: a4:14:5f:a0:29:a8:4c:c0:a9:89:31:41:3f:5d:c4:a3:cd:22: d2:7e:73:4a:7f:43:1b:a5:f5:88:d4:cc:77:77:3a:c7:b7:aa: 38:e8:a5:19:10:94:93:75:4c:0f:ae:b6:be:b9:f0:e4:46:32: 32:88:35:ad:d1:08:85:c7:19:a4:13:40:6b:fa:06:d9:e4:66: ea:66:fd:35:2c:52:ab:be:d1:ac:b5:4a:9a:5f:fe:ee:94:f7: ad:01:89:34:21:9c:aa:2b:3d:43:91:b8:95:6e:2c:96:f9:a0: 4b:e4:6f:df:df:ac:a2:ef:b2:66:b2:7e:fa:8e:a5:ed:5e:3b: 8e:93:7a:d7:fc:7a:31:fa:c6:12:7c:47:fc:c0:82:dc:49:e4: 78:c4:ac:6f:ab:c7:4c:87:69:b0:85:97:5d:86:72:b7:43:1e: 46:f4:62:88 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUIgYUdvcasFeD2aaWLKixGk6ASjwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTExMDQwNzUwMDFaFw0yNjExMDMwNzU1MDFaMDMxMTAvBgNV BAMTKEFGOTY0MEMyMjAyNzAwQUFCQTJERjU0Rjk2OUM4RTI0ODcyRTI4OTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/KEedIzbsGjheUi4IYeUbBQLe eZFyEbmldDMR0DAOqo6yue6fS33Rd6Yty6g3x/dWz25gjstyGpziudcW37ELxGno mpsKHY4U4OpmDjNwj9aYz51bLkT/9cbdH3mubiCDPBwBRKUvodkcVE1xr32LqJQp wIEd89lEJ3X6Igl0y40JamIRQ1gtHvk1TfPqvbZwwv5mt/Zv8olbPGyCGXs/WNcD fq+u0xjrq8bRHT/wAlzf06gRau7+7Ma4IoSzKZ88IsAh+99/d2eczGDhfut86v/V h+NGN/Xz9mRyLTQ5IzLyAy8e9AHbNY4EIi5Zbg8NkOhjNA1Aa1oBPtGr0VGVAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSvlkDCICcAqrot 9U+WnI4khy4okjAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQTg3Mzc3RTZGNkJCNkY4NTk1ODg5ODMy QTlFNzNBQ0QwQjlFODY5NDQ4MTAzQzUxQzY2RkZERjYwQTdGNUJDQy8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9BODczNzdFNkY2QkI2Rjg1OTU4ODk4MzJBOUU3M0FDRDBCOUU4Njk0NDgx MDNDNTFDNjZGRkRGNjBBN0Y1QkNDLzAvQUY5NjQwQzIyMDI3MDBBQUJBMkRGNTRG OTY5QzhFMjQ4NzJFMjg5Mi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKANl0DAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMELv4wDQYJKoZIhvcNAQELBQADggEBADXRuDMB cx3Ko9iYnXFaYgrvkHRXYgu/zyGQQ9dFafrYB4489BVa8+lpIZr3mnBgFQ49g4Zf /i7beBbbyoxw+mrjQtWhZuB18ypCFGEG6ScbUhROFoIWsE5YL6QUX6ApqEzAqYkx QT9dxKPNItJ+c0p/Qxul9YjUzHd3Ose3qjjopRkQlJN1TA+utr658ORGMjKINa3R CIXHGaQTQGv6BtnkZupm/TUsUqu+0ay1Sppf/u6U960BiTQhnKorPUORuJVuLJb5 oEvkb9/frKLvsmayfvqOpe1eO46Tetf8ejH6xhJ8R/zAgtxJ5HjErG+rx0yHabCF l12GcrdDHkb0Yog= -----END CERTIFICATE-----Generated at Tue Nov 4 18:58:00 2025 by rpki-client