$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9198017297E2662957B6F27616FF7A44A81298A.cer File: E9198017297E2662957B6F27616FF7A44A81298A.cer (raw, json) Hash identifier: RbuGhN2c47De61Ne+i1JGJa/pGqBGEkC8yZaN529D0U= Subject key identifier: E9:19:80:17:29:7E:26:62:95:7B:6F:27:61:6F:F7:A4:4A:81:29:8A Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 4055D0DDAE1EC91DA61C3568F725F0C97DF83AD7 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/1B2A41F8E29B375E45E90E01AB27A74A6557BE70B81FFDB5F563A9ECC355E0B1/0/E9198017297E2662957B6F27616FF7A44A81298A.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/1B2A41F8E29B375E45E90E01AB27A74A6557BE70B81FFDB5F563A9ECC355E0B1/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Fri 01 Aug 2025 01:00:01 +0000 Certificate not after: Fri 31 Jul 2026 01:05:01 +0000 Subordinate resources: AS: 273832 IP: 2803:8950::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 06 Aug 2025 17:55:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:55:d0:dd:ae:1e:c9:1d:a6:1c:35:68:f7:25:f0:c9:7d:f8:3a:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Aug 1 01:00:01 2025 GMT Not After : Jul 31 01:05:01 2026 GMT Subject: CN=E9198017297E2662957B6F27616FF7A44A81298A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:54:bb:37:bb:d1:f6:c2:41:88:40:47:56:7c: ae:c2:05:8b:66:77:f4:4b:bb:50:14:da:c2:d2:4a: fa:1c:dc:8d:f6:5b:c6:d7:a7:e0:4f:b2:22:be:c3: 61:4f:30:9c:82:49:38:c4:97:19:39:37:a8:41:0b: 9a:04:03:09:d5:71:57:8e:6b:51:09:ed:1d:4c:d6: 79:ff:ee:43:ac:e0:0d:c0:99:8a:86:8d:0d:ee:de: b8:89:d3:ef:71:1a:91:36:ad:fd:f1:b2:e0:8f:4d: 33:4e:25:a6:25:5f:a2:39:04:46:76:22:e4:80:7a: 67:e3:29:0a:5a:b4:f4:65:78:83:d2:2f:62:ba:71: a0:b3:61:0a:cc:16:27:46:68:48:ee:46:fd:97:58: ce:de:01:4d:63:d9:61:0f:45:94:95:23:ac:27:cc: 62:7e:d1:1d:61:9c:6a:0e:39:8b:a7:cf:c4:6a:46: 08:c8:b1:d1:63:11:c3:3a:4c:20:83:c1:53:46:84: ac:3f:ba:f4:42:0a:aa:d0:ab:b2:37:dd:05:19:7c: bc:63:9e:a6:21:1c:ca:a7:7f:97:fc:46:5e:1f:be: e1:5a:65:8b:4a:47:67:fd:97:3e:14:19:71:9e:78: 55:9c:03:bd:e9:31:b7:61:d6:a2:ef:7e:35:bc:3e: 8e:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E9:19:80:17:29:7E:26:62:95:7B:6F:27:61:6F:F7:A4:4A:81:29:8A X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1B2A41F8E29B375E45E90E01AB27A74A6557BE70B81FFDB5F563A9ECC355E0B1/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1B2A41F8E29B375E45E90E01AB27A74A6557BE70B81FFDB5F563A9ECC355E0B1/0/E9198017297E2662957B6F27616FF7A44A81298A.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:8950::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273832 Signature Algorithm: sha256WithRSAEncryption dd:12:09:3b:7e:37:0a:2a:73:03:64:29:b9:53:32:11:4d:0b: 32:7e:6e:a0:73:10:31:6e:7c:05:9e:aa:54:bc:cf:1e:f7:5a: ca:c4:9d:cf:12:11:a8:5d:1b:3e:3d:7c:23:09:81:9d:5b:39: df:ab:6b:06:98:23:ff:93:28:37:32:97:d9:3e:fa:7a:a6:06: ed:d6:b1:26:d7:6d:b7:ae:11:c0:2d:ba:a7:a3:bf:47:76:da: 64:82:f8:36:88:4b:f4:62:ed:63:b8:71:26:e6:6a:65:d0:93: a1:e2:38:c9:43:57:c0:b1:28:8d:2a:f9:55:86:c5:72:e0:19: 66:4f:36:40:ee:cd:e0:84:94:3d:47:87:66:53:35:73:ac:88: 77:5e:bd:8f:c3:8f:b5:cc:d8:b6:d2:e8:c3:1c:ca:d1:f1:5c: 5e:94:01:07:b0:9c:89:34:7a:95:a6:8c:24:d1:7a:01:d1:10: ea:73:20:a9:a1:ae:5f:8b:38:12:fa:dd:69:1f:4b:76:8b:ad: 6c:be:e2:36:c7:8c:d6:bc:84:63:27:38:c1:42:f8:d5:0b:c8: c7:4c:49:cc:19:16:e8:0e:c7:2c:17:21:d8:cd:94:64:3b:31: 63:b4:cf:7a:44:bf:36:10:da:eb:34:e7:d4:77:52:ff:e8:03: 86:1c:71:e5 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUQFXQ3a4eyR2mHDVo9yXwyX34OtcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTA4MDEwMTAwMDFaFw0yNjA3MzEwMTA1MDFaMDMxMTAvBgNV BAMTKEU5MTk4MDE3Mjk3RTI2NjI5NTdCNkYyNzYxNkZGN0E0NEE4MTI5OEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYVLs3u9H2wkGIQEdWfK7CBYtm d/RLu1AU2sLSSvoc3I32W8bXp+BPsiK+w2FPMJyCSTjElxk5N6hBC5oEAwnVcVeO a1EJ7R1M1nn/7kOs4A3AmYqGjQ3u3riJ0+9xGpE2rf3xsuCPTTNOJaYlX6I5BEZ2 IuSAemfjKQpatPRleIPSL2K6caCzYQrMFidGaEjuRv2XWM7eAU1j2WEPRZSVI6wn zGJ+0R1hnGoOOYunz8RqRgjIsdFjEcM6TCCDwVNGhKw/uvRCCqrQq7I33QUZfLxj nqYhHMqnf5f8Rl4fvuFaZYtKR2f9lz4UGXGeeFWcA73pMbdh1qLvfjW8Po77AgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTpGYAXKX4mYpV7 bydhb/ekSoEpijAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMUIyQTQxRjhFMjlCMzc1RTQ1RTkwRTAx QUIyN0E3NEE2NTU3QkU3MEI4MUZGREI1RjU2M0E5RUNDMzU1RTBCMS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8xQjJBNDFGOEUyOUIzNzVFNDVFOTBFMDFBQjI3QTc0QTY1NTdCRTcwQjgx RkZEQjVGNTYzQTlFQ0MzNTVFMEIxLzAvRTkxOTgwMTcyOTdFMjY2Mjk1N0I2RjI3 NjE2RkY3QTQ0QTgxMjk4QS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAOJUDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMELagwDQYJKoZIhvcNAQELBQADggEBAN0SCTt+ NwoqcwNkKblTMhFNCzJ+bqBzEDFufAWeqlS8zx73WsrEnc8SEahdGz49fCMJgZ1b Od+rawaYI/+TKDcyl9k++nqmBu3WsSbXbbeuEcAtuqejv0d22mSC+DaIS/Ri7WO4 cSbmamXQk6HiOMlDV8CxKI0q+VWGxXLgGWZPNkDuzeCElD1Hh2ZTNXOsiHdevY/D j7XM2LbS6MMcytHxXF6UAQewnIk0epWmjCTRegHREOpzIKmhrl+LOBL63WkfS3aL rWy+4jbHjNa8hGMnOMFC+NULyMdMScwZFugOxywXIdjNlGQ7MWO0z3pEvzYQ2us0 59R3Uv/oA4YcceU= -----END CERTIFICATE-----Generated at Sun Aug 3 00:57:47 2025 by rpki-client