$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D68C275AE349DFCD32C558419A7893BADFF5F3F8.cer File: D68C275AE349DFCD32C558419A7893BADFF5F3F8.cer (raw, json) Hash identifier: xFrtI2yJEJmxg4bimbEQ69/5WKu4LnEpgIHydbnFyxk= Subject key identifier: D6:8C:27:5A:E3:49:DF:CD:32:C5:58:41:9A:78:93:BA:DF:F5:F3:F8 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 38E42BF136ED12C9BFED5C6D8A9F743875DD0511 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/802672FE15624BDF705C3588B1C7767DD409D7594E5A7CC8FD3A384F7AA4E7EF/0/D68C275AE349DFCD32C558419A7893BADFF5F3F8.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/802672FE15624BDF705C3588B1C7767DD409D7594E5A7CC8FD3A384F7AA4E7EF/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 08:51:39 +0000 Certificate not after: Wed 04 Feb 2026 08:56:39 +0000 Subordinate resources: AS: 273008 IP: 2803:b590::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:e4:2b:f1:36:ed:12:c9:bf:ed:5c:6d:8a:9f:74:38:75:dd:05:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 08:51:39 2025 GMT Not After : Feb 4 08:56:39 2026 GMT Subject: CN=D68C275AE349DFCD32C558419A7893BADFF5F3F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:65:88:2b:7f:2a:45:7c:e5:9f:b6:c8:b9:b1: 20:85:0a:45:a5:5c:9d:54:10:c8:e5:52:bf:f4:0d: 5c:d5:22:6e:84:2b:04:b1:ce:fb:71:ab:b0:98:84: dd:ec:67:8f:22:db:f3:80:90:6e:46:cf:fc:23:bb: c1:e2:8f:56:f4:9d:59:e1:e3:42:06:51:95:14:de: 57:74:df:77:36:a1:25:d2:87:0f:de:9d:d1:9a:70: ea:e5:63:d9:dd:a1:c6:7a:85:9e:cb:2e:a7:8a:be: d0:83:9c:ad:ac:f1:c0:a8:61:52:91:51:bf:42:c8: 73:4d:57:99:27:6f:77:51:fa:87:3f:29:16:91:e7: b8:18:af:90:ed:3b:5d:68:23:10:27:41:5b:8a:42: d0:ea:f4:41:22:ce:15:95:a8:45:15:7a:9f:68:57: 13:30:ba:30:a8:3a:45:ec:2a:0c:d3:72:69:d9:cd: 4c:46:1e:9c:a8:2e:42:9c:b0:91:58:a9:03:c3:d8: bf:14:e5:6c:9a:00:ed:db:c6:9b:be:c0:9c:3f:a5: 93:13:1a:f0:ed:14:14:df:d1:60:ab:5d:46:47:ea: ff:74:ac:5e:e7:38:40:a3:2a:a8:03:56:9c:d6:95: b4:81:70:18:8b:74:eb:71:2f:bc:4c:b9:18:05:45: 40:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D6:8C:27:5A:E3:49:DF:CD:32:C5:58:41:9A:78:93:BA:DF:F5:F3:F8 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/802672FE15624BDF705C3588B1C7767DD409D7594E5A7CC8FD3A384F7AA4E7EF/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/802672FE15624BDF705C3588B1C7767DD409D7594E5A7CC8FD3A384F7AA4E7EF/0/D68C275AE349DFCD32C558419A7893BADFF5F3F8.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:b590::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273008 Signature Algorithm: sha256WithRSAEncryption 83:32:fd:2b:45:ce:f4:a2:7f:f9:34:1a:22:c9:be:3e:97:a3: 61:b2:b7:ad:ba:0c:87:89:08:6c:39:62:c1:94:e1:99:9a:9c: ef:1d:ba:8a:00:ff:a8:e0:f5:5f:f2:54:41:74:4d:f3:e9:96: 7e:82:83:3e:8e:94:3e:3a:0c:fc:1a:b7:31:25:c3:32:79:92: 34:59:32:ea:dc:14:5d:2a:ad:2c:a0:fc:4a:6b:db:db:7e:a0: a0:1a:67:81:75:8d:29:ff:35:b7:d7:e7:1c:52:05:2b:d1:0f: 65:7b:f5:6e:e7:94:7e:a4:13:7c:07:09:22:d6:dd:26:c6:7c: f1:11:0d:18:aa:eb:3a:a2:86:09:a7:78:c3:b4:bc:32:b1:0b: 5c:ac:62:80:e9:73:bd:dd:d8:84:96:31:64:1a:54:97:6f:68: 9a:46:cc:ea:9c:49:a7:fd:43:a2:6e:74:a1:3a:fc:3e:85:f4: 93:05:c8:13:4d:5e:d1:b5:9a:52:56:b6:0b:bf:48:a4:ea:f7: 52:2a:04:d9:f1:88:49:ca:c7:88:ed:56:fa:12:6f:44:d2:ba: f5:d8:19:b2:5a:4c:3e:d8:f5:e2:30:32:25:1d:75:34:9a:4d: 3d:f6:06:e1:d7:a5:11:c9:ef:f1:03:57:79:17:1c:81:20:19: 30:dd:39:3f -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUOOQr8TbtEsm/7Vxtip90OHXdBREwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUwODUxMzlaFw0yNjAyMDQwODU2MzlaMDMxMTAvBgNV BAMTKEQ2OEMyNzVBRTM0OURGQ0QzMkM1NTg0MTlBNzg5M0JBREZGNUYzRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkZYgrfypFfOWftsi5sSCFCkWl XJ1UEMjlUr/0DVzVIm6EKwSxzvtxq7CYhN3sZ48i2/OAkG5Gz/wju8Hij1b0nVnh 40IGUZUU3ld033c2oSXShw/endGacOrlY9ndocZ6hZ7LLqeKvtCDnK2s8cCoYVKR Ub9CyHNNV5knb3dR+oc/KRaR57gYr5DtO11oIxAnQVuKQtDq9EEizhWVqEUVep9o VxMwujCoOkXsKgzTcmnZzUxGHpyoLkKcsJFYqQPD2L8U5WyaAO3bxpu+wJw/pZMT GvDtFBTf0WCrXUZH6v90rF7nOECjKqgDVpzWlbSBcBiLdOtxL7xMuRgFRUD1AgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTWjCda40nfzTLF WEGaeJO63/Xz+DAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvODAyNjcyRkUxNTYyNEJERjcwNUMzNTg4 QjFDNzc2N0RENDA5RDc1OTRFNUE3Q0M4RkQzQTM4NEY3QUE0RTdFRi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy84MDI2NzJGRTE1NjI0QkRGNzA1QzM1ODhCMUM3NzY3REQ0MDlENzU5NEU1 QTdDQzhGRDNBMzg0RjdBQTRFN0VGLzAvRDY4QzI3NUFFMzQ5REZDRDMyQzU1ODQx OUE3ODkzQkFERkY1RjNGOC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAO1kDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEKnAwDQYJKoZIhvcNAQELBQADggEBAIMy/StF zvSif/k0GiLJvj6Xo2Gyt626DIeJCGw5YsGU4ZmanO8duooA/6jg9V/yVEF0TfPp ln6Cgz6OlD46DPwatzElwzJ5kjRZMurcFF0qrSyg/Epr29t+oKAaZ4F1jSn/NbfX 5xxSBSvRD2V79W7nlH6kE3wHCSLW3SbGfPERDRiq6zqihgmneMO0vDKxC1ysYoDp c73d2ISWMWQaVJdvaJpGzOqcSaf9Q6JudKE6/D6F9JMFyBNNXtG1mlJWtgu/SKTq 91IqBNnxiEnKx4jtVvoSb0TSuvXYGbJaTD7Y9eIwMiUddTSaTT32BuHXpRHJ7/ED V3kXHIEgGTDdOT8= -----END CERTIFICATE-----Generated at Tue Nov 4 21:38:28 2025 by rpki-client