$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3AF420E60ADFC0F71F2F2DDD54FA7F41DFD244F3.cer File: 3AF420E60ADFC0F71F2F2DDD54FA7F41DFD244F3.cer (raw, json) Hash identifier: Q5FAiLZsUMZhloPxAxYw5xGT05BFrFakfHV6sPvKzoU= Subject key identifier: 3A:F4:20:E6:0A:DF:C0:F7:1F:2F:2D:DD:54:FA:7F:41:DF:D2:44:F3 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 3AB80669AB59B6CAEA325BA9B148F4C459C10B90 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/F5C1B2B154198CF8A950D2DD14737613DDCDFE21CD0A0E9ADF87C9A156D9E836/0/3AF420E60ADFC0F71F2F2DDD54FA7F41DFD244F3.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/F5C1B2B154198CF8A950D2DD14737613DDCDFE21CD0A0E9ADF87C9A156D9E836/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Sat 30 Aug 2025 17:55:01 +0000 Certificate not after: Sat 29 Aug 2026 18:00:01 +0000 Subordinate resources: AS: 274190 IP: 2803:6dd0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 21 Sep 2025 20:18:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:b8:06:69:ab:59:b6:ca:ea:32:5b:a9:b1:48:f4:c4:59:c1:0b:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Aug 30 17:55:01 2025 GMT Not After : Aug 29 18:00:01 2026 GMT Subject: CN=3AF420E60ADFC0F71F2F2DDD54FA7F41DFD244F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:50:6d:fa:83:42:f2:df:70:31:1c:7f:65:2d: f0:21:93:37:10:e6:a2:28:db:91:79:2a:e2:d0:54: 77:53:39:d9:28:3f:73:ba:a1:41:c3:b9:fa:2b:0c: 3e:df:1c:47:57:1e:79:1e:81:20:c0:03:dd:76:7a: eb:74:7c:00:98:0a:6b:f8:da:0b:16:7c:6c:27:08: 75:81:70:c5:08:91:b8:90:61:26:3a:45:0a:7b:98: 11:9b:40:6d:99:06:31:c5:29:c0:0d:33:fd:30:aa: cc:bd:22:f0:5e:78:a8:71:b8:10:4d:96:44:e2:d7: 6e:81:1d:20:f0:52:32:77:b6:1f:c8:2c:75:a7:29: 06:5d:49:8c:1c:e4:a5:c6:d8:cf:c8:d3:ea:6e:27: 06:c7:74:d6:f4:65:da:75:3e:99:34:50:d4:1b:4b: 3f:4d:5d:6e:5a:5e:c4:6d:63:df:9f:9f:d5:a9:14: 4f:b6:61:08:75:a6:77:3e:66:c0:ad:a1:05:63:4c: cb:2a:79:8b:05:8c:4f:4b:5b:6c:46:b0:7b:0c:34: c4:01:4c:a4:b3:2b:a9:44:5e:f8:4b:02:5b:0e:f9: 9b:e4:8a:c1:de:98:48:2e:1c:67:47:15:9b:2d:53: f1:6a:5b:85:2a:74:52:58:6f:30:05:05:66:f7:7c: 63:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3A:F4:20:E6:0A:DF:C0:F7:1F:2F:2D:DD:54:FA:7F:41:DF:D2:44:F3 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/F5C1B2B154198CF8A950D2DD14737613DDCDFE21CD0A0E9ADF87C9A156D9E836/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/F5C1B2B154198CF8A950D2DD14737613DDCDFE21CD0A0E9ADF87C9A156D9E836/0/3AF420E60ADFC0F71F2F2DDD54FA7F41DFD244F3.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:6dd0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 274190 Signature Algorithm: sha256WithRSAEncryption 37:d0:f0:83:a0:3e:36:17:1c:9f:85:6e:d5:08:a0:d8:9d:ca: 91:63:7d:cb:a3:10:d2:64:96:c4:98:ec:22:fa:df:df:94:58: 6d:a5:e8:40:b2:9c:46:34:a7:dc:bc:b8:8a:e7:d5:69:bc:5e: 74:64:76:38:98:58:08:21:c0:ff:d6:0f:dd:f6:f3:43:57:88: f0:2e:2f:3a:6c:ad:30:42:5c:55:eb:12:ce:da:e9:37:88:28: cd:49:19:55:b1:aa:96:c6:d0:46:a4:cc:02:29:52:33:38:61: 29:59:35:d1:0c:a9:8b:8b:a0:a6:75:70:70:d4:4e:d6:32:69: d2:cf:99:88:1b:2f:32:a9:13:71:a8:27:e9:3e:95:a9:e3:58: d3:60:e5:96:87:70:bc:b6:f4:c3:a3:b3:dd:83:64:fb:a2:4e: 4d:54:05:62:8d:ea:19:38:cf:75:2f:8a:af:d8:ed:45:e4:bf: cb:26:4c:fc:06:ee:f7:19:11:f1:61:e1:0a:50:89:8d:10:70: 6d:5e:f2:3f:86:90:c1:42:6a:6a:f1:9a:ca:52:f8:c2:4f:43: 4e:2f:3d:ad:af:6e:58:41:7a:ae:7f:e1:7f:25:5d:6b:d6:25: 55:ff:7d:07:9a:aa:6a:af:bc:9d:e1:fd:0f:3f:29:ff:b4:3b: f8:d1:ea:6a -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUOrgGaatZtsrqMlupsUj0xFnBC5AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTA4MzAxNzU1MDFaFw0yNjA4MjkxODAwMDFaMDMxMTAvBgNV BAMTKDNBRjQyMEU2MEFERkMwRjcxRjJGMkRERDU0RkE3RjQxREZEMjQ0RjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoUG36g0Ly33AxHH9lLfAhkzcQ 5qIo25F5KuLQVHdTOdkoP3O6oUHDuforDD7fHEdXHnkegSDAA912eut0fACYCmv4 2gsWfGwnCHWBcMUIkbiQYSY6RQp7mBGbQG2ZBjHFKcANM/0wqsy9IvBeeKhxuBBN lkTi126BHSDwUjJ3th/ILHWnKQZdSYwc5KXG2M/I0+puJwbHdNb0Zdp1Ppk0UNQb Sz9NXW5aXsRtY9+fn9WpFE+2YQh1pnc+ZsCtoQVjTMsqeYsFjE9LW2xGsHsMNMQB TKSzK6lEXvhLAlsO+ZvkisHemEguHGdHFZstU/FqW4UqdFJYbzAFBWb3fGN/AgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ69CDmCt/A9x8v Ld1U+n9B39JE8zAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRjVDMUIyQjE1NDE5OENGOEE5NTBEMkRE MTQ3Mzc2MTNERENERkUyMUNEMEEwRTlBREY4N0M5QTE1NkQ5RTgzNi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9GNUMxQjJCMTU0MTk4Q0Y4QTk1MEQyREQxNDczNzYxM0REQ0RGRTIxQ0Qw QTBFOUFERjg3QzlBMTU2RDlFODM2LzAvM0FGNDIwRTYwQURGQzBGNzFGMkYyRERE NTRGQTdGNDFERkQyNDRGMy5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKANt0DAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMELw4wDQYJKoZIhvcNAQELBQADggEBADfQ8IOg PjYXHJ+FbtUIoNidypFjfcujENJklsSY7CL639+UWG2l6ECynEY0p9y8uIrn1Wm8 XnRkdjiYWAghwP/WD93280NXiPAuLzpsrTBCXFXrEs7a6TeIKM1JGVWxqpbG0Eak zAIpUjM4YSlZNdEMqYuLoKZ1cHDUTtYyadLPmYgbLzKpE3GoJ+k+lanjWNNg5ZaH cLy29MOjs92DZPuiTk1UBWKN6hk4z3Uviq/Y7UXkv8smTPwG7vcZEfFh4QpQiY0Q cG1e8j+GkMFCamrxmspS+MJPQ04vPa2vblhBeq5/4X8lXWvWJVX/fQeaqmqvvJ3h /Q8/Kf+0O/jR6mo= -----END CERTIFICATE-----Generated at Thu Sep 18 17:00:38 2025 by rpki-client