$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/64BC48E3A6135CF82F39FBD21751AF299756F257.cer File: 64BC48E3A6135CF82F39FBD21751AF299756F257.cer (raw, json) Hash identifier: i9f+bb2wjYlUJNiYRDJuXovXpy1WELzf3F/ghdsy7x8= Subject key identifier: 64:BC:48:E3:A6:13:5C:F8:2F:39:FB:D2:17:51:AF:29:97:56:F2:57 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 71CF4BF582C91414031B67ABF9E2D4EFCE628EEB Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/F52B3BC4521A4C2B4C92CB07A5C1D6C55FA436C1794112048EF541CD788FC494/0/64BC48E3A6135CF82F39FBD21751AF299756F257.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/F52B3BC4521A4C2B4C92CB07A5C1D6C55FA436C1794112048EF541CD788FC494/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 09 Jul 2025 22:02:59 +0000 Certificate not after: Wed 08 Jul 2026 22:07:59 +0000 Subordinate resources: AS: 273889 IP: 2803:e350::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Jul 2025 04:37:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:cf:4b:f5:82:c9:14:14:03:1b:67:ab:f9:e2:d4:ef:ce:62:8e:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Jul 9 22:02:59 2025 GMT Not After : Jul 8 22:07:59 2026 GMT Subject: CN=64BC48E3A6135CF82F39FBD21751AF299756F257 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b7:14:ae:8c:4d:37:06:2f:4f:e1:67:9a:68: 2b:6b:e0:40:65:db:59:9d:fa:8e:9f:ab:4b:36:12: b1:2c:cb:b3:7b:bf:f1:23:00:e0:79:0a:15:a3:8e: de:dd:f0:85:09:3b:d2:81:d1:f5:45:50:af:26:9b: d6:5f:75:14:6e:05:d9:7f:cd:62:d5:ad:ed:0d:55: d2:cb:c7:d3:54:cc:d9:81:46:6d:ec:29:4a:bd:5d: 78:da:bc:0b:9f:60:6f:30:d5:c3:a4:e2:64:b0:5e: ce:b9:1a:bd:c8:e6:53:97:dc:fc:b3:da:9b:7a:4f: 95:8e:de:ee:3c:d2:f2:c0:18:71:3e:9e:9b:52:da: 1f:8b:5f:bd:82:d1:78:dc:45:16:30:33:17:79:d5: aa:e3:47:41:74:68:a7:63:f3:70:6c:f5:1c:f1:17: b0:3e:59:86:d9:2c:08:c8:0d:20:1a:58:35:14:15: 0d:f3:19:19:96:4e:36:c7:b8:45:32:4f:35:6d:72: 62:71:0b:9e:1a:ed:e1:d8:39:de:0a:c5:19:90:ab: a0:b3:c2:fa:03:d1:d8:73:78:70:fc:72:d2:e8:a9: 55:52:c4:74:50:2f:92:87:bf:61:d5:b0:6b:b1:53: 0b:1e:64:94:30:8b:e9:f5:f2:dc:46:c8:b2:ce:5b: e9:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 64:BC:48:E3:A6:13:5C:F8:2F:39:FB:D2:17:51:AF:29:97:56:F2:57 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/F52B3BC4521A4C2B4C92CB07A5C1D6C55FA436C1794112048EF541CD788FC494/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/F52B3BC4521A4C2B4C92CB07A5C1D6C55FA436C1794112048EF541CD788FC494/0/64BC48E3A6135CF82F39FBD21751AF299756F257.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:e350::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273889 Signature Algorithm: sha256WithRSAEncryption dd:48:58:6b:bc:75:5d:72:2c:b4:7c:6d:3e:0d:3e:c5:46:0e: e0:a9:10:0f:a2:f4:ed:1c:d8:27:d8:d7:ec:05:2d:f5:f5:13: 17:c9:2b:f7:c1:a9:e9:52:c6:70:3a:69:de:e0:07:c2:0e:40: f5:f6:72:87:5a:25:01:23:ed:0b:43:a3:3e:58:fa:cc:a2:74: 5a:1f:6c:57:86:1d:b0:46:72:3b:04:09:0e:d6:7b:54:46:74: 4d:17:c7:7d:89:06:6f:13:4a:fe:1f:0f:85:44:e5:29:02:1a: fd:e8:00:55:2d:4a:df:41:d0:1c:90:1c:a9:48:1e:e3:f1:ed: 6a:0c:ea:e5:76:b6:54:b6:50:e7:8a:b6:a8:4b:f6:8f:89:98: e7:8b:19:5f:03:96:f8:b0:8b:c1:55:84:bc:7d:13:50:a7:1f: 1e:49:8e:5b:ab:7c:75:0c:94:54:34:23:a0:d2:11:3b:fa:cc: 73:5d:b9:a1:a8:48:a8:b6:a0:b3:05:43:3d:4e:4d:1a:a7:82: 2b:e8:ec:f2:33:15:cb:dd:0a:7d:8c:e7:0b:3a:3f:f0:e7:3c: 7e:31:53:82:b0:1c:40:ab:49:dc:95:b4:b0:a7:6a:4a:d4:a4: bc:cc:25:7f:ad:7b:23:6c:33:1b:f4:de:5c:c6:e1:5d:3b:a9: f3:3d:04:09 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUcc9L9YLJFBQDG2er+eLU785ijuswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTA3MDkyMjAyNTlaFw0yNjA3MDgyMjA3NTlaMDMxMTAvBgNV BAMTKDY0QkM0OEUzQTYxMzVDRjgyRjM5RkJEMjE3NTFBRjI5OTc1NkYyNTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3txSujE03Bi9P4WeaaCtr4EBl 21md+o6fq0s2ErEsy7N7v/EjAOB5ChWjjt7d8IUJO9KB0fVFUK8mm9ZfdRRuBdl/ zWLVre0NVdLLx9NUzNmBRm3sKUq9XXjavAufYG8w1cOk4mSwXs65Gr3I5lOX3Pyz 2pt6T5WO3u480vLAGHE+nptS2h+LX72C0XjcRRYwMxd51arjR0F0aKdj83Bs9Rzx F7A+WYbZLAjIDSAaWDUUFQ3zGRmWTjbHuEUyTzVtcmJxC54a7eHYOd4KxRmQq6Cz wvoD0dhzeHD8ctLoqVVSxHRQL5KHv2HVsGuxUwseZJQwi+n18txGyLLOW+nDAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRkvEjjphNc+C85 +9IXUa8pl1byVzAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRjUyQjNCQzQ1MjFBNEMyQjRDOTJDQjA3 QTVDMUQ2QzU1RkE0MzZDMTc5NDExMjA0OEVGNTQxQ0Q3ODhGQzQ5NC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9GNTJCM0JDNDUyMUE0QzJCNEM5MkNCMDdBNUMxRDZDNTVGQTQzNkMxNzk0 MTEyMDQ4RUY1NDFDRDc4OEZDNDk0LzAvNjRCQzQ4RTNBNjEzNUNGODJGMzlGQkQy MTc1MUFGMjk5NzU2RjI1Ny5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAPjUDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMELeEwDQYJKoZIhvcNAQELBQADggEBAN1IWGu8 dV1yLLR8bT4NPsVGDuCpEA+i9O0c2CfY1+wFLfX1ExfJK/fBqelSxnA6ad7gB8IO QPX2codaJQEj7QtDoz5Y+syidFofbFeGHbBGcjsECQ7We1RGdE0Xx32JBm8TSv4f D4VE5SkCGv3oAFUtSt9B0ByQHKlIHuPx7WoM6uV2tlS2UOeKtqhL9o+JmOeLGV8D lviwi8FVhLx9E1CnHx5JjlurfHUMlFQ0I6DSETv6zHNduaGoSKi2oLMFQz1OTRqn givo7PIzFcvdCn2M5ws6P/DnPH4xU4KwHECrSdyVtLCnakrUpLzMJX+teyNsMxv0 3lzG4V07qfM9BAk= -----END CERTIFICATE-----Generated at Mon Jul 21 18:50:38 2025 by rpki-client