$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F390031CA03915A9B3D5820F0AAA4533AA219D46.cer File: F390031CA03915A9B3D5820F0AAA4533AA219D46.cer (raw, json) Hash identifier: +NJkUuRqFXVy8aXGztUo9Chf27gRzurvPqJZek9xKTk= Subject key identifier: F3:90:03:1C:A0:39:15:A9:B3:D5:82:0F:0A:AA:45:33:AA:21:9D:46 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 27737CE8101AE419A86CBF6D683DDDEFB788841B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/910BE362BBF573ED77E2EC6C8062462ECFCCA9E524D4071455BA4AF96F42F316/0/F390031CA03915A9B3D5820F0AAA4533AA219D46.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/910BE362BBF573ED77E2EC6C8062462ECFCCA9E524D4071455BA4AF96F42F316/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Thu 29 May 2025 23:15:01 +0000 Certificate not after: Thu 28 May 2026 23:20:01 +0000 Subordinate resources: AS: 273957 IP: 2803:7f50::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:73:7c:e8:10:1a:e4:19:a8:6c:bf:6d:68:3d:dd:ef:b7:88:84:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: May 29 23:15:01 2025 GMT Not After : May 28 23:20:01 2026 GMT Subject: CN=F390031CA03915A9B3D5820F0AAA4533AA219D46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:fe:5a:55:88:f7:8b:a6:ad:f1:00:f4:21:ab: f7:25:55:10:ca:ae:c4:aa:df:c4:7f:60:df:2b:1a: 07:07:9d:11:30:51:d0:2b:58:9a:c4:2d:de:f1:d6: 4e:9b:a7:23:ee:25:43:80:5c:32:1a:ce:eb:7b:80: d3:d0:82:cf:1d:a2:cf:d7:c5:13:3f:f2:da:a4:45: 27:60:c6:ef:21:0e:b9:0d:4c:19:f1:58:9f:74:b5: 56:96:c0:85:31:04:d7:f9:6e:67:40:5e:6e:f3:8c: 72:c9:c2:87:0f:9a:75:7b:b7:d0:85:f3:f5:a2:80: 23:7e:37:0e:cc:ef:b0:0f:36:20:a9:f9:10:73:e3: bd:c5:92:c9:2d:17:bd:f8:c9:c7:50:4a:9a:e4:79: 96:70:4e:36:a6:1e:70:39:06:80:58:2e:24:78:44: 13:ea:6c:97:e7:72:85:0e:45:ac:f3:e9:be:7e:a2: 72:61:51:1f:ee:3b:92:23:7a:15:4a:6c:c0:45:36: aa:d8:82:d9:b9:a6:07:60:f7:73:81:e9:9b:cb:32: 0d:d7:2a:40:3e:80:ad:8a:06:c6:55:c5:89:1d:04: 3d:bd:1b:59:4a:ce:ab:c6:00:56:e1:56:b5:07:21: 65:06:2e:c2:e5:ac:df:9c:46:97:99:a2:11:90:ac: 4f:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F3:90:03:1C:A0:39:15:A9:B3:D5:82:0F:0A:AA:45:33:AA:21:9D:46 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/910BE362BBF573ED77E2EC6C8062462ECFCCA9E524D4071455BA4AF96F42F316/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/910BE362BBF573ED77E2EC6C8062462ECFCCA9E524D4071455BA4AF96F42F316/0/F390031CA03915A9B3D5820F0AAA4533AA219D46.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:7f50::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273957 Signature Algorithm: sha256WithRSAEncryption bf:f2:e9:a1:59:cf:02:90:f0:f5:fd:e3:dd:86:44:df:b4:20: 52:8b:09:11:21:7f:28:10:37:f5:51:87:fe:5b:38:fe:ff:09: 55:2a:cc:93:3d:9e:83:4d:0e:ee:da:c3:0f:b6:32:b7:2c:1b: 66:f6:f1:83:fc:5f:57:15:99:ec:ec:04:04:49:f7:9d:ca:05: 2d:06:6b:2e:03:4d:b5:5d:b0:eb:15:ef:fd:1a:0d:e4:c6:67: 99:01:7c:da:6b:5b:60:2b:d4:18:e2:bd:1b:b9:9c:db:1b:e0: a7:93:d6:1f:2b:02:b0:f6:bd:1b:3c:4d:9a:77:f5:43:da:b4: 10:df:c1:3d:8d:f4:3b:8d:09:9b:3a:fb:0a:37:43:c4:b5:77: ac:48:74:78:08:fd:cf:28:3e:5c:35:9f:b0:12:21:a0:85:2b: 8d:65:85:66:bf:7f:09:41:ea:3d:c6:6d:b0:eb:92:bd:1d:60: 06:38:af:92:58:e9:a6:dc:e0:6f:d7:43:f8:35:ca:06:6e:06: 94:b6:30:a4:39:7a:2f:14:50:a5:a8:c8:fb:3e:54:80:1c:1a: 5e:55:66:57:ec:a6:3d:2c:c0:33:6a:51:35:36:6a:d2:df:6a: e8:90:49:b1:59:00:06:81:df:17:b1:1b:e1:52:6b:30:ac:c1: 59:87:14:d2 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUJ3N86BAa5BmobL9taD3d77eIhBswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTA1MjkyMzE1MDFaFw0yNjA1MjgyMzIwMDFaMDMxMTAvBgNV BAMTKEYzOTAwMzFDQTAzOTE1QTlCM0Q1ODIwRjBBQUE0NTMzQUEyMTlENDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq/lpViPeLpq3xAPQhq/clVRDK rsSq38R/YN8rGgcHnREwUdArWJrELd7x1k6bpyPuJUOAXDIazut7gNPQgs8dos/X xRM/8tqkRSdgxu8hDrkNTBnxWJ90tVaWwIUxBNf5bmdAXm7zjHLJwocPmnV7t9CF 8/WigCN+Nw7M77APNiCp+RBz473FksktF734ycdQSprkeZZwTjamHnA5BoBYLiR4 RBPqbJfncoUORazz6b5+onJhUR/uO5IjehVKbMBFNqrYgtm5pgdg93OB6ZvLMg3X KkA+gK2KBsZVxYkdBD29G1lKzqvGAFbhVrUHIWUGLsLlrN+cRpeZohGQrE9XAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTzkAMcoDkVqbPV gg8KqkUzqiGdRjAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvOTEwQkUzNjJCQkY1NzNFRDc3RTJFQzZD ODA2MjQ2MkVDRkNDQTlFNTI0RDQwNzE0NTVCQTRBRjk2RjQyRjMxNi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy85MTBCRTM2MkJCRjU3M0VENzdFMkVDNkM4MDYyNDYyRUNGQ0NBOUU1MjRE NDA3MTQ1NUJBNEFGOTZGNDJGMzE2LzAvRjM5MDAzMUNBMDM5MTVBOUIzRDU4MjBG MEFBQTQ1MzNBQTIxOUQ0Ni5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAN/UDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMELiUwDQYJKoZIhvcNAQELBQADggEBAL/y6aFZ zwKQ8PX9492GRN+0IFKLCREhfygQN/VRh/5bOP7/CVUqzJM9noNNDu7aww+2Mrcs G2b28YP8X1cVmezsBARJ953KBS0Gay4DTbVdsOsV7/0aDeTGZ5kBfNprW2Ar1Bji vRu5nNsb4KeT1h8rArD2vRs8TZp39UPatBDfwT2N9DuNCZs6+wo3Q8S1d6xIdHgI /c8oPlw1n7ASIaCFK41lhWa/fwlB6j3GbbDrkr0dYAY4r5JY6abc4G/XQ/g1ygZu BpS2MKQ5ei8UUKWoyPs+VIAcGl5VZlfspj0swDNqUTU2atLfauiQSbFZAAaB3xex G+FSazCswVmHFNI= -----END CERTIFICATE-----Generated at Tue Nov 4 21:37:29 2025 by rpki-client