$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6403C53F9B05EDE5B902522724143F306D488E7.cer File: B6403C53F9B05EDE5B902522724143F306D488E7.cer (raw, json) Hash identifier: 9MiLx7dnmeDB7yNxKno/xXdxv8nL3M4exEUCGdLT9QE= Subject key identifier: B6:40:3C:53:F9:B0:5E:DE:5B:90:25:22:72:41:43:F3:06:D4:88:E7 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 3BEBFB493AAB42C685EDBE0BA07AA1FB89536FFA Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/406BFEAC47888E79323A6C0453295FBD53E061F93D6CE47410D5A2381489A351/0/B6403C53F9B05EDE5B902522724143F306D488E7.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/406BFEAC47888E79323A6C0453295FBD53E061F93D6CE47410D5A2381489A351/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 10:32:42 +0000 Certificate not after: Wed 04 Feb 2026 10:37:42 +0000 Subordinate resources: AS: 271942 IP: 2803:2610::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 21:38:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:eb:fb:49:3a:ab:42:c6:85:ed:be:0b:a0:7a:a1:fb:89:53:6f:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 10:32:42 2025 GMT Not After : Feb 4 10:37:42 2026 GMT Subject: CN=B6403C53F9B05EDE5B902522724143F306D488E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:cb:d6:9f:29:49:ec:c3:18:cf:7f:26:e4:ce: cd:34:a8:90:c5:36:a2:03:1f:67:da:39:a2:f7:fa: 6f:3c:ec:c9:92:62:4f:1e:e5:88:be:cd:ef:9a:d4: eb:f2:6b:d5:58:f4:e5:10:13:63:30:04:58:4b:e5: 97:f3:b6:fe:20:60:b9:47:d1:3b:bb:55:b6:1f:56: 2b:2b:12:8f:9b:4d:ee:d9:9c:08:db:8a:f6:c5:17: 11:7f:ec:b9:1d:ac:ea:8b:e4:fc:9f:4a:47:f1:3c: 5a:c5:d4:e2:67:52:04:4d:f8:32:23:c2:a8:a8:f3: 4c:7a:b4:93:a6:4b:e8:c0:59:46:b4:1d:bd:6f:14: 2e:39:b2:b6:8c:a8:32:bd:13:88:f8:2a:1d:ba:6f: 6b:5b:af:10:c3:34:81:e0:ac:ff:83:56:11:98:49: e0:54:24:bf:a8:96:40:5a:cd:aa:d6:60:e0:a2:8e: 7e:a5:71:a1:5f:11:ee:1e:b9:1b:47:00:61:f6:b1: 0e:17:f3:e6:66:1b:97:31:61:95:98:b9:2c:13:a8: f2:6a:b7:3a:31:b9:14:bd:5d:8f:53:3f:2c:0b:24: dc:37:a6:be:3f:b2:0e:df:be:b1:fb:90:94:58:f7: 80:17:b7:d8:36:7f:c5:bd:c0:a8:f2:fa:b7:20:e8: ca:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B6:40:3C:53:F9:B0:5E:DE:5B:90:25:22:72:41:43:F3:06:D4:88:E7 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/406BFEAC47888E79323A6C0453295FBD53E061F93D6CE47410D5A2381489A351/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/406BFEAC47888E79323A6C0453295FBD53E061F93D6CE47410D5A2381489A351/0/B6403C53F9B05EDE5B902522724143F306D488E7.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:2610::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 271942 Signature Algorithm: sha256WithRSAEncryption ca:61:eb:b6:ad:f8:dd:eb:47:0b:4d:a8:4b:a9:e6:ac:0f:06: 53:35:fb:8d:8f:27:0f:1f:c3:e1:d7:b9:eb:fa:6e:41:b4:bb: 40:74:8e:a0:51:3b:9d:ac:a4:1d:8e:24:7d:61:3d:c6:19:25: 60:ad:a0:18:c4:d4:fd:fa:b2:8e:0a:74:c4:ca:de:85:32:f6: d2:0a:c5:7f:cd:53:0d:33:eb:e9:64:bd:fa:87:68:06:5d:77: 3a:4e:79:37:52:97:f0:67:58:46:51:c8:4d:53:1e:50:66:18: ea:bf:4b:c3:36:3e:aa:52:49:f4:91:a8:02:88:dc:f5:a5:70: 2b:c2:56:53:4f:91:78:db:37:1c:61:7c:c7:1c:87:ce:35:bc: 47:d2:6d:21:de:d0:f7:5c:3d:1b:34:26:7b:dd:6d:be:7e:af: 1e:f9:41:aa:34:bd:4b:96:66:e9:f5:81:e7:58:a8:7f:70:f0: 4c:6d:27:23:f6:02:12:a5:42:38:32:47:a8:83:f7:8b:76:c2: 29:36:57:07:41:22:65:dd:95:67:89:e0:62:37:4e:11:ff:72: 18:31:34:f2:7e:e5:17:5c:1a:c1:7b:b8:d9:a4:e4:97:28:33: e2:76:9b:8b:50:ec:d1:04:74:23:73:40:19:49:b6:57:46:1e: 48:e3:67:27 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUO+v7STqrQsaF7b4LoHqh+4lTb/owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUxMDMyNDJaFw0yNjAyMDQxMDM3NDJaMDMxMTAvBgNV BAMTKEI2NDAzQzUzRjlCMDVFREU1QjkwMjUyMjcyNDE0M0YzMDZENDg4RTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyy9afKUnswxjPfybkzs00qJDF NqIDH2faOaL3+m887MmSYk8e5Yi+ze+a1Ovya9VY9OUQE2MwBFhL5Zfztv4gYLlH 0Tu7VbYfVisrEo+bTe7ZnAjbivbFFxF/7LkdrOqL5PyfSkfxPFrF1OJnUgRN+DIj wqio80x6tJOmS+jAWUa0Hb1vFC45sraMqDK9E4j4Kh26b2tbrxDDNIHgrP+DVhGY SeBUJL+olkBazarWYOCijn6lcaFfEe4euRtHAGH2sQ4X8+ZmG5cxYZWYuSwTqPJq tzoxuRS9XY9TPywLJNw3pr4/sg7fvrH7kJRY94AXt9g2f8W9wKjy+rcg6Mr7AgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS2QDxT+bBe3luQ JSJyQUPzBtSI5zAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNDA2QkZFQUM0Nzg4OEU3OTMyM0E2QzA0 NTMyOTVGQkQ1M0UwNjFGOTNENkNFNDc0MTBENUEyMzgxNDg5QTM1MS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80MDZCRkVBQzQ3ODg4RTc5MzIzQTZDMDQ1MzI5NUZCRDUzRTA2MUY5M0Q2 Q0U0NzQxMEQ1QTIzODE0ODlBMzUxLzAvQjY0MDNDNTNGOUIwNUVERTVCOTAyNTIy NzI0MTQzRjMwNkQ0ODhFNy5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAMmEDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEJkYwDQYJKoZIhvcNAQELBQADggEBAMph67at +N3rRwtNqEup5qwPBlM1+42PJw8fw+HXuev6bkG0u0B0jqBRO52spB2OJH1hPcYZ JWCtoBjE1P36so4KdMTK3oUy9tIKxX/NUw0z6+lkvfqHaAZddzpOeTdSl/BnWEZR yE1THlBmGOq/S8M2PqpSSfSRqAKI3PWlcCvCVlNPkXjbNxxhfMcch841vEfSbSHe 0PdcPRs0Jnvdbb5+rx75Qao0vUuWZun1gedYqH9w8ExtJyP2AhKlQjgyR6iD94t2 wik2VwdBImXdlWeJ4GI3ThH/chgxNPJ+5RdcGsF7uNmk5JcoM+J2m4tQ7NEEdCNz QBlJtldGHkjjZyc= -----END CERTIFICATE-----Generated at Sun Nov 2 11:43:00 2025 by rpki-client