$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BE11DC902A11374D255BCF14105B08B7CBA0B69A.cer File: BE11DC902A11374D255BCF14105B08B7CBA0B69A.cer (raw, json) Hash identifier: kdgtYz6+dsE3On0cEFNHn1i5neOATa53AWN7ccAoct4= Subject key identifier: BE:11:DC:90:2A:11:37:4D:25:5B:CF:14:10:5B:08:B7:CB:A0:B6:9A Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 4FDA27C1E7063A1535728CA65AF7A9C2F7AC1708 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/24C52B9B79BC4671ECC497889151B32B039A37195C094FA20346B8790EE9D431/0/BE11DC902A11374D255BCF14105B08B7CBA0B69A.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/24C52B9B79BC4671ECC497889151B32B039A37195C094FA20346B8790EE9D431/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 25 Mar 2025 07:37:20 +0000 Certificate not after: Tue 24 Mar 2026 07:42:20 +0000 Subordinate resources: AS: 273231 IP: 2803:de50::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:da:27:c1:e7:06:3a:15:35:72:8c:a6:5a:f7:a9:c2:f7:ac:17:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 25 07:37:20 2025 GMT Not After : Mar 24 07:42:20 2026 GMT Subject: CN=BE11DC902A11374D255BCF14105B08B7CBA0B69A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:2f:88:49:2a:9c:dd:a1:5c:b0:2f:09:75:42: da:00:56:7d:d6:a0:38:3c:c4:37:34:81:6a:ac:4a: 52:b0:62:75:71:59:42:79:16:f8:ac:0f:88:a3:1d: 51:d7:0d:49:6b:8a:82:e4:0d:31:fa:37:78:1c:1c: 5b:d6:b9:00:5b:1f:28:f2:3d:d1:14:55:e1:59:e2: 86:da:85:7e:95:32:ed:ae:0d:ea:ab:b3:fd:be:59: fd:88:a0:f6:a1:c7:62:f3:8b:91:92:d6:14:f7:f3: c9:64:34:7c:58:ec:9b:96:d5:1d:32:f3:48:48:ce: 3c:47:76:b6:f4:7a:1a:a2:ba:e3:22:52:ad:10:61: 83:cc:03:57:36:24:ff:ed:a5:d4:43:32:70:6c:71: bd:e2:81:c8:35:f1:a4:f5:66:5e:45:1b:fc:79:7f: 47:28:31:0a:60:b6:85:02:9c:6a:32:73:62:a8:06: 89:f6:fb:4e:c3:44:9b:9e:99:a6:7c:1e:da:c2:bf: 84:3e:02:57:d3:fa:c7:08:b3:45:39:23:4a:bc:2c: 78:51:9f:87:4e:dd:24:16:f2:20:67:dc:93:24:5a: 42:42:51:77:63:d1:57:0f:70:8c:8c:70:25:56:a5: 80:9e:f2:62:18:a8:a2:fc:b9:f0:7d:4f:7c:8f:72: 02:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BE:11:DC:90:2A:11:37:4D:25:5B:CF:14:10:5B:08:B7:CB:A0:B6:9A X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/24C52B9B79BC4671ECC497889151B32B039A37195C094FA20346B8790EE9D431/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/24C52B9B79BC4671ECC497889151B32B039A37195C094FA20346B8790EE9D431/0/BE11DC902A11374D255BCF14105B08B7CBA0B69A.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:de50::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273231 Signature Algorithm: sha256WithRSAEncryption 78:c8:9b:f7:30:b5:21:7f:54:b6:92:9d:3d:6c:1e:6b:2b:02: d4:4b:90:10:73:f8:c1:32:c5:51:05:10:47:36:83:5a:ce:08: 16:6d:9e:45:40:c1:03:d6:aa:2e:e8:90:3d:ad:31:3e:ab:f2: 8b:dd:c3:0c:34:2e:13:a3:1a:c5:9a:13:69:21:ea:a5:c3:a4: 49:6b:b0:91:22:fd:bd:28:12:04:95:26:ae:fd:61:2f:ca:c6: df:d6:cb:e3:39:ae:59:52:94:b1:5f:8d:df:4c:36:fa:17:f5: 88:3d:e0:5b:55:05:29:c1:b0:da:a5:fb:c9:84:ec:19:7d:6a: c4:41:ac:8c:7c:5f:62:95:db:98:64:dd:58:12:d6:21:b0:e4: 04:0c:62:5d:e1:46:0b:6e:32:af:6c:70:e8:1d:75:90:aa:14: f8:21:7c:58:db:d8:50:80:76:20:e0:df:b0:e0:7a:0f:72:21: b2:f9:e1:8e:c6:f3:86:49:9b:45:77:4f:89:f5:7d:bd:03:ae: 13:9e:46:9e:67:07:ba:4e:b7:36:ad:a6:15:c9:77:88:bf:65: c5:ab:f1:d1:47:b0:70:62:9b:d2:88:07:e5:a3:b2:83:e0:ab: ae:a7:6d:6c:59:b1:7d:2a:1e:d8:95:c2:a7:cd:90:2f:c1:a8: 13:ab:96:be -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUT9onwecGOhU1coymWvepwvesFwgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAzMjUwNzM3MjBaFw0yNjAzMjQwNzQyMjBaMDMxMTAvBgNV BAMTKEJFMTFEQzkwMkExMTM3NEQyNTVCQ0YxNDEwNUIwOEI3Q0JBMEI2OUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5L4hJKpzdoVywLwl1QtoAVn3W oDg8xDc0gWqsSlKwYnVxWUJ5FvisD4ijHVHXDUlrioLkDTH6N3gcHFvWuQBbHyjy PdEUVeFZ4obahX6VMu2uDeqrs/2+Wf2IoPahx2Lzi5GS1hT388lkNHxY7JuW1R0y 80hIzjxHdrb0ehqiuuMiUq0QYYPMA1c2JP/tpdRDMnBscb3igcg18aT1Zl5FG/x5 f0coMQpgtoUCnGoyc2KoBon2+07DRJuemaZ8HtrCv4Q+AlfT+scIs0U5I0q8LHhR n4dO3SQW8iBn3JMkWkJCUXdj0VcPcIyMcCVWpYCe8mIYqKL8ufB9T3yPcgKxAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS+EdyQKhE3TSVb zxQQWwi3y6C2mjAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMjRDNTJCOUI3OUJDNDY3MUVDQzQ5Nzg4 OTE1MUIzMkIwMzlBMzcxOTVDMDk0RkEyMDM0NkI4NzkwRUU5RDQzMS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8yNEM1MkI5Qjc5QkM0NjcxRUNDNDk3ODg5MTUxQjMyQjAzOUEzNzE5NUMw OTRGQTIwMzQ2Qjg3OTBFRTlENDMxLzAvQkUxMURDOTAyQTExMzc0RDI1NUJDRjE0 MTA1QjA4QjdDQkEwQjY5QS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAPeUDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEK08wDQYJKoZIhvcNAQELBQADggEBAHjIm/cw tSF/VLaSnT1sHmsrAtRLkBBz+MEyxVEFEEc2g1rOCBZtnkVAwQPWqi7okD2tMT6r 8ovdwww0LhOjGsWaE2kh6qXDpElrsJEi/b0oEgSVJq79YS/Kxt/Wy+M5rllSlLFf jd9MNvoX9Yg94FtVBSnBsNql+8mE7Bl9asRBrIx8X2KV25hk3VgS1iGw5AQMYl3h RgtuMq9scOgddZCqFPghfFjb2FCAdiDg37Dgeg9yIbL54Y7G84ZJm0V3T4n1fb0D rhOeRp5nB7pOtzatphXJd4i/ZcWr8dFHsHBim9KIB+WjsoPgq66nbWxZsX0qHtiV wqfNkC/BqBOrlr4= -----END CERTIFICATE-----Generated at Tue Nov 4 21:38:53 2025 by rpki-client