$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EF37818874083DA94149A04C0F74F543044C43C0.cer File: EF37818874083DA94149A04C0F74F543044C43C0.cer (raw, json) Hash identifier: LA+9L2+ol1ZwqvZ6pwIjHqwAlZuTCcL84ULaxRYzSIk= Subject key identifier: EF:37:81:88:74:08:3D:A9:41:49:A0:4C:0F:74:F5:43:04:4C:43:C0 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 24917FA6369B833A26351A4AFBB64052A452D5AA Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/112D51081C3D0FF680742BBEBAAA66A46F02C5841E24516D0D7CDFFD22B3720A/0/EF37818874083DA94149A04C0F74F543044C43C0.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/112D51081C3D0FF680742BBEBAAA66A46F02C5841E24516D0D7CDFFD22B3720A/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 26 Aug 2025 16:58:44 +0000 Certificate not after: Tue 25 Aug 2026 17:03:44 +0000 Subordinate resources: AS: 270162 IP: 103.239.234.0/24 IP: 2806:3e8::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:91:7f:a6:36:9b:83:3a:26:35:1a:4a:fb:b6:40:52:a4:52:d5:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Aug 26 16:58:44 2025 GMT Not After : Aug 25 17:03:44 2026 GMT Subject: CN=EF37818874083DA94149A04C0F74F543044C43C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:1e:f5:29:a2:6a:40:ee:5e:d5:9c:fc:2f:7b: 13:a8:21:61:6e:13:2c:7d:ec:db:69:38:ba:b1:b5: dd:5c:3d:83:c8:ec:17:7b:ee:9e:69:ba:36:5b:e5: 1c:e0:34:b1:ed:0d:47:f9:0f:70:f5:d5:fb:ef:da: 83:e1:b7:a5:db:c2:56:92:4d:86:fd:fe:94:1d:3c: 77:18:f2:1c:2b:d3:03:82:0b:cf:f2:cb:21:15:19: b3:95:48:dc:f1:f2:4d:d9:a7:1f:54:54:8a:4f:af: 20:7f:1f:6a:cc:63:db:10:8c:e5:61:4d:df:a9:02: 53:6d:65:b5:44:35:44:a2:59:88:f5:9a:28:47:ad: 9b:b5:c9:77:e3:df:3a:b7:a7:d6:a9:d0:fd:f7:88: 6d:4f:2a:79:fe:e8:07:41:d0:a1:00:39:55:2c:39: 2e:6e:33:d3:45:f6:e0:fd:3d:ba:a7:da:53:32:c6: 9b:0e:16:e4:de:31:6e:e1:29:73:aa:97:12:09:87: 12:c7:86:81:36:21:ca:05:d4:78:06:d0:f3:18:4d: 03:a4:77:2e:9a:09:9a:af:e6:34:bf:4d:00:26:a2: f3:1d:2b:64:3a:4a:c6:74:4b:1c:cc:19:7e:0a:e3: ae:88:2c:e5:ef:85:5f:0a:e4:e4:53:4d:be:a4:12: 42:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: EF:37:81:88:74:08:3D:A9:41:49:A0:4C:0F:74:F5:43:04:4C:43:C0 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/112D51081C3D0FF680742BBEBAAA66A46F02C5841E24516D0D7CDFFD22B3720A/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/112D51081C3D0FF680742BBEBAAA66A46F02C5841E24516D0D7CDFFD22B3720A/0/EF37818874083DA94149A04C0F74F543044C43C0.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.239.234.0/24 IPv6: 2806:3e8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 270162 Signature Algorithm: sha256WithRSAEncryption 21:3e:69:59:5c:8c:49:c4:f1:c7:b7:ed:42:66:9e:76:12:30: 65:69:82:1a:81:ac:d0:36:e5:e3:29:2d:59:a6:21:bb:bd:19: 16:d0:32:39:c7:cd:35:d7:f7:09:80:f8:f8:10:6f:ea:77:77: 10:7d:3c:a7:d9:5a:c7:a7:02:e6:76:21:83:3a:f7:14:18:b8: d9:a0:0e:7d:ee:cc:70:be:28:fd:76:dc:a1:42:51:8c:a1:52: 9b:33:11:30:77:5f:d2:39:da:dc:e0:10:1c:0e:fb:ee:67:94: 3d:d0:20:3f:fa:4b:e4:75:4c:2a:d0:e7:3a:60:4a:82:94:8a: af:ad:46:7b:73:2b:b0:16:5e:9c:83:1d:89:18:d3:64:b4:58: 53:15:d2:98:27:3e:68:df:d3:dc:a8:01:21:d8:34:f9:00:3e: d8:8b:40:83:e4:0e:b2:cd:bc:67:ea:a5:14:94:e7:87:97:e0: 87:dd:1c:5a:a9:76:90:55:d1:16:9d:0d:32:a8:ad:30:e9:bb: 0d:cf:66:7f:c3:c8:c0:31:41:2d:8e:a1:9f:22:7b:19:7a:ea: 85:f1:10:b6:1f:d2:0c:a9:12:05:f7:e2:ae:9d:8c:90:fc:9b: 6b:d2:bb:93:99:17:d1:09:fc:76:89:9c:4a:da:4d:e8:1b:5c: c6:ff:d5:c1 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUJJF/pjabgzomNRpK+7ZAUqRS1aowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTA4MjYxNjU4NDRaFw0yNjA4MjUxNzAzNDRaMDMxMTAvBgNV BAMTKEVGMzc4MTg4NzQwODNEQTk0MTQ5QTA0QzBGNzRGNTQzMDQ0QzQzQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYHvUpompA7l7VnPwvexOoIWFu Eyx97NtpOLqxtd1cPYPI7Bd77p5pujZb5RzgNLHtDUf5D3D11fvv2oPht6XbwlaS TYb9/pQdPHcY8hwr0wOCC8/yyyEVGbOVSNzx8k3Zpx9UVIpPryB/H2rMY9sQjOVh Td+pAlNtZbVENUSiWYj1mihHrZu1yXfj3zq3p9ap0P33iG1PKnn+6AdB0KEAOVUs OS5uM9NF9uD9Pbqn2lMyxpsOFuTeMW7hKXOqlxIJhxLHhoE2IcoF1HgG0PMYTQOk dy6aCZqv5jS/TQAmovMdK2Q6SsZ0SxzMGX4K466ILOXvhV8K5ORTTb6kEkIFAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTvN4GIdAg9qUFJ oEwPdPVDBExDwDAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMTEyRDUxMDgxQzNEMEZGNjgwNzQyQkJF QkFBQTY2QTQ2RjAyQzU4NDFFMjQ1MTZEMEQ3Q0RGRkQyMkIzNzIwQS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8xMTJENTEwODFDM0QwRkY2ODA3NDJCQkVCQUFBNjZBNDZGMDJDNTg0MUUy NDUxNkQwRDdDREZGRDIyQjM3MjBBLzAvRUYzNzgxODg3NDA4M0RBOTQxNDlBMDRD MEY3NEY1NDMwNDRDNDNDMC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAZ+/qMA0EAgAC MAcDBQAoBgPoMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQfUjANBgkqhkiG9w0B AQsFAAOCAQEAIT5pWVyMScTxx7ftQmaedhIwZWmCGoGs0Dbl4yktWaYhu70ZFtAy OcfNNdf3CYD4+BBv6nd3EH08p9lax6cC5nYhgzr3FBi42aAOfe7McL4o/XbcoUJR jKFSmzMRMHdf0jna3OAQHA777meUPdAgP/pL5HVMKtDnOmBKgpSKr61Ge3MrsBZe nIMdiRjTZLRYUxXSmCc+aN/T3KgBIdg0+QA+2ItAg+QOss28Z+qlFJTnh5fgh90c Wql2kFXRFp0NMqitMOm7Dc9mf8PIwDFBLY6hnyJ7GXrqhfEQth/SDKkSBffirp2M kPyba9K7k5kX0Qn8domcStpN6Btcxv/VwQ== -----END CERTIFICATE-----Generated at Wed Nov 5 12:04:28 2025 by rpki-client