$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CAD6BBA34BDEF53CDAC8570D7207CD3DD4DCDFF3.cer File: CAD6BBA34BDEF53CDAC8570D7207CD3DD4DCDFF3.cer (raw, json) Hash identifier: bYFt8vz0z2ppJxZ/SSEvnIgn82nQFqr+XqDp6mMsKtw= Subject key identifier: CA:D6:BB:A3:4B:DE:F5:3C:DA:C8:57:0D:72:07:CD:3D:D4:DC:DF:F3 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 13E341D13FD96AAC3F9ACE36FDE80EFE3FF70D05 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/F27408D37BE9E3B51637AEBBB76EE810F22FA1F91A99AB95ED0CA1CDAEADAEEB/0/CAD6BBA34BDEF53CDAC8570D7207CD3DD4DCDFF3.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/F27408D37BE9E3B51637AEBBB76EE810F22FA1F91A99AB95ED0CA1CDAEADAEEB/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Sat 30 Aug 2025 02:07:20 +0000 Certificate not after: Sat 29 Aug 2026 02:12:20 +0000 Subordinate resources: AS: 273923 IP: 2803:8750::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:e3:41:d1:3f:d9:6a:ac:3f:9a:ce:36:fd:e8:0e:fe:3f:f7:0d:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Aug 30 02:07:20 2025 GMT Not After : Aug 29 02:12:20 2026 GMT Subject: CN=CAD6BBA34BDEF53CDAC8570D7207CD3DD4DCDFF3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e5:8d:eb:59:f6:cf:b2:c7:6b:85:63:5a:42: ee:17:56:a8:62:35:e1:bb:e8:17:a2:04:e5:3a:08: ca:fa:3a:ee:4d:39:ab:bd:b7:a5:6a:f2:c5:b1:b0: a1:94:f7:d7:e8:19:d8:87:06:58:38:a3:b4:a8:64: 8d:53:43:6b:ad:6d:44:11:53:5c:4d:6a:be:ee:aa: 32:3e:ee:87:8d:58:ce:85:28:0e:9c:fb:22:a5:1f: d1:fd:76:bb:5a:f7:6b:8c:a3:ff:f9:66:71:00:ab: 52:73:d6:53:25:79:36:ef:8f:b7:5a:ff:eb:da:4c: 0f:e3:93:79:c3:28:b7:10:d9:aa:fe:ad:f7:c4:03: 9a:64:87:22:11:26:f3:e6:2d:66:fc:06:ba:17:e4: aa:2e:be:85:1b:42:5b:9d:1f:7c:89:91:ab:30:40: 6d:c5:fd:c1:e0:45:bb:a7:15:ee:75:91:6c:92:a3: 48:70:62:75:23:6a:5c:a8:85:ba:7b:f2:74:3f:21: be:8b:9a:1a:12:70:7d:70:00:2a:f0:31:e4:d0:33: f9:a0:dc:b6:4c:6e:2a:f3:db:3b:69:5d:c4:60:83: 5c:31:99:bb:c5:61:b3:14:61:1d:f6:d3:5b:da:fd: 2d:7f:f2:ca:84:d2:12:0e:99:76:23:86:ae:dc:63: dd:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CA:D6:BB:A3:4B:DE:F5:3C:DA:C8:57:0D:72:07:CD:3D:D4:DC:DF:F3 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/F27408D37BE9E3B51637AEBBB76EE810F22FA1F91A99AB95ED0CA1CDAEADAEEB/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/F27408D37BE9E3B51637AEBBB76EE810F22FA1F91A99AB95ED0CA1CDAEADAEEB/0/CAD6BBA34BDEF53CDAC8570D7207CD3DD4DCDFF3.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:8750::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273923 Signature Algorithm: sha256WithRSAEncryption 0a:2a:d8:d1:c2:7a:61:dd:68:3b:96:14:4e:9a:ca:37:3e:97: f0:e8:40:e7:2f:a3:05:26:3e:89:a4:aa:60:da:7f:8c:22:cf: fb:54:f8:64:70:24:4f:8f:b3:52:cd:20:fc:bc:6a:6e:a4:ab: d3:94:a2:c8:3e:5a:c8:47:db:f8:67:02:b0:33:88:40:9a:c8: 56:99:11:00:c3:f9:c1:82:51:57:18:9e:a1:c2:ad:2b:d9:08: 2a:ee:ef:a9:26:5b:f6:a2:7a:c4:15:30:40:f8:46:ae:04:60: 45:d4:eb:64:b2:39:8f:bf:aa:25:91:01:1e:ba:d5:ac:fd:c4: 0c:55:7b:1a:5a:39:f9:fb:3b:69:6c:f5:95:f9:c5:77:05:99: e8:5a:47:29:1c:c2:7a:0f:d9:d6:70:c8:24:d2:18:65:c5:8c: 5b:93:a8:76:f4:0f:ec:89:87:e5:f8:4b:8b:21:58:9e:bc:b3: a3:41:dc:6a:95:be:d0:dd:5f:91:27:de:9b:e5:55:bf:de:56: 7f:80:5b:1f:25:55:d1:16:57:a3:63:ad:21:a0:97:8c:84:61: 87:a3:1e:12:c5:ae:88:8f:62:ff:fc:9f:1f:c5:eb:7f:3e:01: 51:cf:7f:b6:3f:b8:05:71:20:d3:b9:24:18:4a:1f:8e:fa:b0: a0:f4:65:58 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUE+NB0T/Zaqw/ms42/egO/j/3DQUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTA4MzAwMjA3MjBaFw0yNjA4MjkwMjEyMjBaMDMxMTAvBgNV BAMTKENBRDZCQkEzNEJERUY1M0NEQUM4NTcwRDcyMDdDRDNERDREQ0RGRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/5Y3rWfbPssdrhWNaQu4XVqhi NeG76BeiBOU6CMr6Ou5NOau9t6Vq8sWxsKGU99foGdiHBlg4o7SoZI1TQ2utbUQR U1xNar7uqjI+7oeNWM6FKA6c+yKlH9H9drta92uMo//5ZnEAq1Jz1lMleTbvj7da /+vaTA/jk3nDKLcQ2ar+rffEA5pkhyIRJvPmLWb8BroX5KouvoUbQludH3yJkasw QG3F/cHgRbunFe51kWySo0hwYnUjalyohbp78nQ/Ib6LmhoScH1wACrwMeTQM/mg 3LZMbirz2ztpXcRgg1wxmbvFYbMUYR3201va/S1/8sqE0hIOmXYjhq7cY93ZAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTK1rujS971PNrI Vw1yB8091Nzf8zAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRjI3NDA4RDM3QkU5RTNCNTE2MzdBRUJC Qjc2RUU4MTBGMjJGQTFGOTFBOTlBQjk1RUQwQ0ExQ0RBRUFEQUVFQi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9GMjc0MDhEMzdCRTlFM0I1MTYzN0FFQkJCNzZFRTgxMEYyMkZBMUY5MUE5 OUFCOTVFRDBDQTFDREFFQURBRUVCLzAvQ0FENkJCQTM0QkRFRjUzQ0RBQzg1NzBE NzIwN0NEM0RENERDREZGMy5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAOHUDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMELgMwDQYJKoZIhvcNAQELBQADggEBAAoq2NHC emHdaDuWFE6ayjc+l/DoQOcvowUmPomkqmDaf4wiz/tU+GRwJE+Ps1LNIPy8am6k q9OUosg+WshH2/hnArAziECayFaZEQDD+cGCUVcYnqHCrSvZCCru76kmW/aiesQV MED4Rq4EYEXU62SyOY+/qiWRAR661az9xAxVexpaOfn7O2ls9ZX5xXcFmehaRykc wnoP2dZwyCTSGGXFjFuTqHb0D+yJh+X4S4shWJ68s6NB3GqVvtDdX5En3pvlVb/e Vn+AWx8lVdEWV6NjrSGgl4yEYYejHhLFroiPYv/8nx/F638+AVHPf7Y/uAVxINO5 JBhKH476sKD0ZVg= -----END CERTIFICATE-----Generated at Wed Nov 5 05:13:20 2025 by rpki-client