$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/953B2C5675EBB4805F495D2908251035076C3116.cer File: 953B2C5675EBB4805F495D2908251035076C3116.cer (raw, json) Hash identifier: tOuxV/XnbO+ClJDFQZJJBQXFHpTXg23c+bxPbjB4jZI= Subject key identifier: 95:3B:2C:56:75:EB:B4:80:5F:49:5D:29:08:25:10:35:07:6C:31:16 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 41BB8D1A65C1B1390DE36AFFFC6B3BD59F20A2DF Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/34D8155914F5A2BDB43A15B61F66B116DFB99E4311122CBFB368F286D8AEC3E9/0/953B2C5675EBB4805F495D2908251035076C3116.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/34D8155914F5A2BDB43A15B61F66B116DFB99E4311122CBFB368F286D8AEC3E9/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Thu 28 Aug 2025 16:40:01 +0000 Certificate not after: Thu 27 Aug 2026 16:45:01 +0000 Subordinate resources: AS: 273288 IP: 2001:122b::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 21 Sep 2025 20:18:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:bb:8d:1a:65:c1:b1:39:0d:e3:6a:ff:fc:6b:3b:d5:9f:20:a2:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Aug 28 16:40:01 2025 GMT Not After : Aug 27 16:45:01 2026 GMT Subject: CN=953B2C5675EBB4805F495D2908251035076C3116 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:7f:f7:aa:58:1b:f0:99:39:2f:74:da:93:dc: 17:17:4f:cf:31:1c:ed:66:b3:3b:a9:d8:5d:a0:4b: cc:be:01:3d:f0:49:9c:92:c5:f6:4a:4a:a9:79:8d: c0:85:66:09:e7:cf:fc:e0:44:1e:b8:b9:69:9d:31: 0a:b8:6e:4e:68:37:17:8f:35:eb:b3:d0:22:e1:60: 3d:f5:24:4b:fe:80:a3:88:61:45:4b:83:bf:3f:05: 1d:03:e8:c5:8f:02:b0:78:75:e2:97:0f:79:c8:17: 00:c4:9b:46:22:d6:d4:67:24:7a:7c:d0:d4:bb:ad: 72:55:c4:4f:1b:54:9c:0b:f0:9f:db:fe:96:ec:b3: 4c:e7:8d:53:cf:18:be:32:f0:ad:c5:1c:14:39:94: be:20:94:56:21:79:c2:82:ed:46:5b:78:d0:1e:36: d3:49:46:28:b8:8f:62:df:8a:7a:41:8e:32:94:0d: 72:eb:12:81:70:c3:94:b6:bc:c9:57:db:bd:c5:40: ab:f5:50:2a:57:0c:bd:5b:bc:76:68:be:4d:2f:3d: 49:06:f0:7e:91:1b:91:b3:d5:f0:7c:b9:a9:41:d3: ab:60:e6:63:e8:26:0c:9f:69:b5:bf:b3:b7:f4:88: 99:3f:44:9a:f7:bb:26:5c:86:bb:b4:ab:b4:a5:b3: dd:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 95:3B:2C:56:75:EB:B4:80:5F:49:5D:29:08:25:10:35:07:6C:31:16 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/34D8155914F5A2BDB43A15B61F66B116DFB99E4311122CBFB368F286D8AEC3E9/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/34D8155914F5A2BDB43A15B61F66B116DFB99E4311122CBFB368F286D8AEC3E9/0/953B2C5675EBB4805F495D2908251035076C3116.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:122b::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273288 Signature Algorithm: sha256WithRSAEncryption 2e:54:38:1d:fd:88:3a:54:97:66:c0:63:2f:e1:89:64:3b:d2: 9a:43:2e:d0:87:99:44:88:de:5a:73:ba:dc:94:02:0f:84:c0: 50:e0:0c:2e:a1:65:ab:7c:57:e9:07:16:b3:74:6d:eb:51:3c: d4:b5:73:73:0a:07:e6:0c:57:b8:1b:4e:7c:7d:41:46:81:3c: 61:2b:20:d0:f0:47:8b:e3:07:cc:d0:48:ad:b1:cb:f7:93:ce: 76:bc:21:cd:39:4e:06:eb:0f:ac:20:7d:83:3a:b9:76:7a:b7: 77:7b:c0:75:53:a6:89:a1:13:c6:b0:ce:be:24:81:38:d0:c2: f3:41:d7:f6:7c:59:c7:67:e9:07:fb:37:cc:e1:95:00:9e:b3: 9e:87:01:20:aa:98:b1:74:a9:b4:5a:e3:93:b9:7d:82:9d:7d: 9e:45:32:ca:5c:a8:d7:e1:82:40:c5:4e:94:c3:96:95:bb:58: fd:3c:47:bf:80:ac:eb:2f:97:8a:7d:14:f5:f3:80:12:05:69: 5c:3c:21:f2:3d:eb:86:39:3c:b4:98:e4:53:79:6e:13:5c:76: f2:61:b6:25:9d:a0:e4:3a:21:38:1d:58:0e:76:63:08:10:08: 30:6f:f2:d0:a5:69:09:e9:99:f3:fe:f1:33:01:a7:e5:05:e7: 66:2b:23:40 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUQbuNGmXBsTkN42r//Gs71Z8got8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTA4MjgxNjQwMDFaFw0yNjA4MjcxNjQ1MDFaMDMxMTAvBgNV BAMTKDk1M0IyQzU2NzVFQkI0ODA1RjQ5NUQyOTA4MjUxMDM1MDc2QzMxMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxf/eqWBvwmTkvdNqT3BcXT88x HO1mszup2F2gS8y+AT3wSZySxfZKSql5jcCFZgnnz/zgRB64uWmdMQq4bk5oNxeP Neuz0CLhYD31JEv+gKOIYUVLg78/BR0D6MWPArB4deKXD3nIFwDEm0Yi1tRnJHp8 0NS7rXJVxE8bVJwL8J/b/pbss0znjVPPGL4y8K3FHBQ5lL4glFYhecKC7UZbeNAe NtNJRii4j2LfinpBjjKUDXLrEoFww5S2vMlX273FQKv1UCpXDL1bvHZovk0vPUkG 8H6RG5Gz1fB8ualB06tg5mPoJgyfabW/s7f0iJk/RJr3uyZchru0q7Sls93pAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSVOyxWdeu0gF9J XSkIJRA1B2wxFjAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMzREODE1NTkxNEY1QTJCREI0M0ExNUI2 MUY2NkIxMTZERkI5OUU0MzExMTIyQ0JGQjM2OEYyODZEOEFFQzNFOS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8zNEQ4MTU1OTE0RjVBMkJEQjQzQTE1QjYxRjY2QjExNkRGQjk5RTQzMTEx MjJDQkZCMzY4RjI4NkQ4QUVDM0U5LzAvOTUzQjJDNTY3NUVCQjQ4MDVGNDk1RDI5 MDgyNTEwMzUwNzZDMzExNi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAIAESKzAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEK4gwDQYJKoZIhvcNAQELBQADggEBAC5UOB39 iDpUl2bAYy/hiWQ70ppDLtCHmUSI3lpzutyUAg+EwFDgDC6hZat8V+kHFrN0betR PNS1c3MKB+YMV7gbTnx9QUaBPGErINDwR4vjB8zQSK2xy/eTzna8Ic05TgbrD6wg fYM6uXZ6t3d7wHVTpomhE8awzr4kgTjQwvNB1/Z8Wcdn6Qf7N8zhlQCes56HASCq mLF0qbRa45O5fYKdfZ5FMspcqNfhgkDFTpTDlpW7WP08R7+ArOsvl4p9FPXzgBIF aVw8IfI964Y5PLSY5FN5bhNcdvJhtiWdoOQ6ITgdWA52YwgQCDBv8tClaQnpmfP+ 8TMBp+UF52YrI0A= -----END CERTIFICATE-----Generated at Thu Sep 18 14:15:45 2025 by rpki-client