$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/515E3AA341EF8349020D7BF59BE54DC21A5116E4.cer File: 515E3AA341EF8349020D7BF59BE54DC21A5116E4.cer (raw, json) Hash identifier: dY2lcMFRv3l5tiY6pa9alyUslBi6lg+ljG6zre45WJ4= Subject key identifier: 51:5E:3A:A3:41:EF:83:49:02:0D:7B:F5:9B:E5:4D:C2:1A:51:16:E4 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 19F743098BB302C5512ADAFFBAB50496171CB55F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/2D66870EAB0E4932805F4DB0951805820E1B8AF8C9798AB906AEF05EFEB6C1D6/0/515E3AA341EF8349020D7BF59BE54DC21A5116E4.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/2D66870EAB0E4932805F4DB0951805820E1B8AF8C9798AB906AEF05EFEB6C1D6/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 09 Jul 2025 02:50:01 +0000 Certificate not after: Wed 08 Jul 2026 02:55:01 +0000 Subordinate resources: AS: 274079 IP: 2803:5ad0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Jul 2025 04:37:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:f7:43:09:8b:b3:02:c5:51:2a:da:ff:ba:b5:04:96:17:1c:b5:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Jul 9 02:50:01 2025 GMT Not After : Jul 8 02:55:01 2026 GMT Subject: CN=515E3AA341EF8349020D7BF59BE54DC21A5116E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:fd:f4:f0:9e:5b:05:65:1f:ee:6e:6d:63:42: 59:d3:54:79:9f:a8:e5:83:8e:0f:ad:b6:c6:3e:98: d8:f1:ba:9e:11:b2:40:bf:89:ec:39:0e:9a:20:77: 90:b3:45:d9:3b:03:e1:99:fd:8b:18:fb:8b:4c:30: 29:9a:ef:46:61:fb:a4:f7:3b:0c:c8:79:93:67:8d: 31:f5:5d:a3:4b:64:61:70:6a:f7:91:66:8b:ed:bb: 70:b6:2c:b4:9e:6a:42:98:af:4e:92:08:4d:0d:fc: db:32:f4:56:79:fc:28:ad:f9:22:aa:79:7f:f4:82: c1:b0:fb:ed:4a:1e:2b:8b:dd:9d:a9:23:0a:39:04: 8a:dc:67:9e:3b:26:eb:d2:a0:4a:78:18:9f:9c:0e: ff:61:a0:a2:e0:ce:46:07:fb:03:ce:07:37:0b:0c: 3a:87:ff:5b:86:33:ca:57:2f:52:fd:7a:5b:56:2c: c1:fc:0c:c8:d1:32:59:f0:8f:a8:76:78:2e:6f:08: 86:be:7f:f2:2e:ec:0a:09:d7:e5:3b:22:f1:4f:cf: d4:a6:df:fb:ed:66:b8:13:93:45:60:44:9a:44:e4: 6d:fb:b9:7c:de:9c:64:18:87:02:85:16:e0:75:ae: 44:87:fe:d3:72:72:f1:67:55:73:af:bb:fb:0a:09: 12:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 51:5E:3A:A3:41:EF:83:49:02:0D:7B:F5:9B:E5:4D:C2:1A:51:16:E4 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/2D66870EAB0E4932805F4DB0951805820E1B8AF8C9798AB906AEF05EFEB6C1D6/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/2D66870EAB0E4932805F4DB0951805820E1B8AF8C9798AB906AEF05EFEB6C1D6/0/515E3AA341EF8349020D7BF59BE54DC21A5116E4.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:5ad0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 274079 Signature Algorithm: sha256WithRSAEncryption 4e:96:bb:2c:4b:fd:72:c5:de:68:36:28:2b:26:fc:d6:66:17: 06:df:41:36:ea:27:b9:f2:ca:6d:f4:8d:ff:95:36:5a:72:7b: e3:49:96:df:47:12:e7:84:6b:ac:74:3d:26:c8:2c:a1:37:b1: 79:0b:3f:08:e3:2f:31:2c:af:e3:b0:3d:5b:36:71:fe:e7:ec: 1f:c3:82:b5:bc:69:7d:da:e2:c5:cb:a2:5f:e2:61:d6:d2:73: 98:ae:d9:4c:2f:b6:24:7e:0e:9e:c9:d4:0a:e3:da:c5:93:9d: 18:e3:f7:6f:6b:53:15:a2:83:b2:32:66:f6:3c:58:e5:1f:d0: bd:26:dd:a9:af:54:6f:b1:e5:cb:ad:a7:e7:4e:3e:38:76:e3: 32:b1:e1:59:dc:55:ee:7b:9d:1a:b8:63:c6:80:91:a6:34:75: 4e:50:ed:3c:24:86:f9:19:4c:e9:47:33:6a:a8:cb:98:0f:8d: b0:5e:37:42:65:33:e2:c3:9c:d6:e0:6a:f4:22:6e:d6:40:28: 44:e4:27:5d:f3:da:a6:cc:19:2d:e3:4f:fc:6d:4f:d9:5a:eb: 8b:77:a9:83:cf:30:d4:14:4e:9b:fd:24:4a:d0:1a:cc:6a:81: fd:3f:cd:68:30:1e:1b:8e:61:e7:53:fd:bc:5f:77:90:ae:30: 77:00:2b:72 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUGfdDCYuzAsVRKtr/urUElhcctV8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTA3MDkwMjUwMDFaFw0yNjA3MDgwMjU1MDFaMDMxMTAvBgNV BAMTKDUxNUUzQUEzNDFFRjgzNDkwMjBEN0JGNTlCRTU0REMyMUE1MTE2RTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI/fTwnlsFZR/ubm1jQlnTVHmf qOWDjg+ttsY+mNjxup4RskC/iew5Dpogd5CzRdk7A+GZ/YsY+4tMMCma70Zh+6T3 OwzIeZNnjTH1XaNLZGFwaveRZovtu3C2LLSeakKYr06SCE0N/Nsy9FZ5/Cit+SKq eX/0gsGw++1KHiuL3Z2pIwo5BIrcZ547JuvSoEp4GJ+cDv9hoKLgzkYH+wPOBzcL DDqH/1uGM8pXL1L9eltWLMH8DMjRMlnwj6h2eC5vCIa+f/Iu7AoJ1+U7IvFPz9Sm 3/vtZrgTk0VgRJpE5G37uXzenGQYhwKFFuB1rkSH/tNycvFnVXOvu/sKCRKPAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRRXjqjQe+DSQIN e/Wb5U3CGlEW5DAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMkQ2Njg3MEVBQjBFNDkzMjgwNUY0REIw OTUxODA1ODIwRTFCOEFGOEM5Nzk4QUI5MDZBRUYwNUVGRUI2QzFENi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8yRDY2ODcwRUFCMEU0OTMyODA1RjREQjA5NTE4MDU4MjBFMUI4QUY4Qzk3 OThBQjkwNkFFRjA1RUZFQjZDMUQ2LzAvNTE1RTNBQTM0MUVGODM0OTAyMEQ3QkY1 OUJFNTREQzIxQTUxMTZFNC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKANa0DAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMELp8wDQYJKoZIhvcNAQELBQADggEBAE6WuyxL /XLF3mg2KCsm/NZmFwbfQTbqJ7nyym30jf+VNlpye+NJlt9HEueEa6x0PSbILKE3 sXkLPwjjLzEsr+OwPVs2cf7n7B/DgrW8aX3a4sXLol/iYdbSc5iu2UwvtiR+Dp7J 1Arj2sWTnRjj929rUxWig7IyZvY8WOUf0L0m3amvVG+x5cutp+dOPjh24zKx4Vnc Ve57nRq4Y8aAkaY0dU5Q7TwkhvkZTOlHM2qoy5gPjbBeN0JlM+LDnNbgavQibtZA KETkJ13z2qbMGS3jT/xtT9la64t3qYPPMNQUTpv9JErQGsxqgf0/zWgwHhuOYedT /bxfd5CuMHcAK3I= -----END CERTIFICATE-----Generated at Mon Jul 21 18:58:28 2025 by rpki-client