$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9CB4E39C4E4795FB2F6A116CBA9FD66F06F64B97.cer File: 9CB4E39C4E4795FB2F6A116CBA9FD66F06F64B97.cer (raw, json) Hash identifier: TAEVDVxoYZArc4H/neQuV2ED/bvFxvhl+E73hmjYl9Y= Subject key identifier: 9C:B4:E3:9C:4E:47:95:FB:2F:6A:11:6C:BA:9F:D6:6F:06:F6:4B:97 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 589CFA704DBAC83C45CE77ED5E1E02215183EEA8 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/2EDC57A066356868B87F146864D5278EF98DD94055450A2BF7A6A77355F9E6C3/0/9CB4E39C4E4795FB2F6A116CBA9FD66F06F64B97.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/2EDC57A066356868B87F146864D5278EF98DD94055450A2BF7A6A77355F9E6C3/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 09 Sep 2025 13:40:12 +0000 Certificate not after: Tue 08 Sep 2026 13:45:12 +0000 Subordinate resources: AS: 273871 IP: 103.111.40.0/22 IP: 2803:9d50::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 21 Sep 2025 20:18:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:9c:fa:70:4d:ba:c8:3c:45:ce:77:ed:5e:1e:02:21:51:83:ee:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Sep 9 13:40:12 2025 GMT Not After : Sep 8 13:45:12 2026 GMT Subject: CN=9CB4E39C4E4795FB2F6A116CBA9FD66F06F64B97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:68:d5:66:ad:cb:b1:33:ed:87:64:8a:2d:39: d9:2f:ca:d3:c5:5a:0a:a2:f8:04:ec:71:01:f4:b8: a1:da:8b:91:5a:c3:31:f6:5f:ea:c6:1a:28:60:87: a8:8c:c7:6e:56:04:49:35:89:05:86:56:a7:e5:48: 02:09:9c:00:72:17:72:6f:57:61:02:07:a5:7c:02: 24:d6:28:9e:5c:0e:15:1c:8e:00:3e:04:9c:1f:9b: 72:ce:e1:48:10:73:2b:b0:77:e9:71:ea:a7:dc:88: 44:a1:9b:b8:fb:a6:7b:35:63:84:a6:0b:c7:ba:00: f5:96:57:c8:80:96:89:de:80:6d:2a:f0:71:c1:db: 00:6e:9d:70:6a:a1:42:b2:b8:c9:84:18:81:a0:2e: a9:5f:55:61:fa:33:61:1c:1a:9e:5a:cc:e3:b5:28: 83:ee:b0:11:4c:d2:41:47:28:7f:6e:08:13:ab:68: 7d:e7:f5:97:45:5a:e4:48:ad:0e:c6:21:3e:76:a0: 00:9f:fe:6c:4a:3c:d7:08:9a:a3:4b:3d:1b:a7:73: 37:09:8d:b1:a1:6a:d7:0b:af:5f:7d:eb:4f:49:b3: 05:dd:fa:ba:3d:2d:f6:af:0d:eb:e6:ca:e3:01:f9: 9a:21:de:51:f3:b9:60:1d:1d:0c:17:c8:87:4a:96: fe:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9C:B4:E3:9C:4E:47:95:FB:2F:6A:11:6C:BA:9F:D6:6F:06:F6:4B:97 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/2EDC57A066356868B87F146864D5278EF98DD94055450A2BF7A6A77355F9E6C3/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/2EDC57A066356868B87F146864D5278EF98DD94055450A2BF7A6A77355F9E6C3/0/9CB4E39C4E4795FB2F6A116CBA9FD66F06F64B97.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.111.40.0/22 IPv6: 2803:9d50::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273871 Signature Algorithm: sha256WithRSAEncryption 07:c6:94:fe:be:52:c1:ed:22:bb:c6:1a:f2:a1:90:a6:03:a4: de:61:84:21:d4:c4:ba:20:d7:ee:5a:ef:01:43:5e:aa:10:b9: 4c:77:1d:fd:1f:00:82:56:f5:9e:53:57:3b:cd:2d:4f:52:f7: 96:55:99:72:ad:e4:36:b1:f5:18:36:97:72:f9:ed:92:97:68: c3:81:7e:aa:e0:4c:c4:87:c5:15:19:c0:54:9a:e3:40:75:62: be:1a:c5:2b:e7:d9:76:f6:70:3b:88:73:61:3c:80:26:9c:ca: aa:1d:a2:d7:63:ab:87:50:3b:fb:7f:49:20:77:a8:19:63:1f: 09:b6:12:b3:ad:ca:ed:6b:a9:e4:a7:28:7b:af:0d:a7:23:f3: 83:c8:4d:59:ed:c3:ec:29:65:68:99:28:ac:e6:8b:2a:b4:dc: e7:fe:5e:19:72:10:16:71:47:c0:a1:5e:17:8f:03:0f:02:74: 6e:24:4d:7d:30:20:d9:68:93:f3:ae:82:fa:38:a9:f9:04:32: ce:83:e0:17:b0:25:c5:fc:68:2c:5d:8c:8c:41:7e:1f:57:5e: 38:fc:0e:42:af:c6:23:61:33:c8:e2:5d:55:ad:0d:6a:c3:75: 19:3b:f7:0a:66:26:e7:03:55:57:ae:06:af:96:84:af:da:34: f9:45:b8:7d -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUWJz6cE26yDxFznftXh4CIVGD7qgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTA5MDkxMzQwMTJaFw0yNjA5MDgxMzQ1MTJaMDMxMTAvBgNV BAMTKDlDQjRFMzlDNEU0Nzk1RkIyRjZBMTE2Q0JBOUZENjZGMDZGNjRCOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgaNVmrcuxM+2HZIotOdkvytPF Wgqi+ATscQH0uKHai5FawzH2X+rGGihgh6iMx25WBEk1iQWGVqflSAIJnAByF3Jv V2ECB6V8AiTWKJ5cDhUcjgA+BJwfm3LO4UgQcyuwd+lx6qfciEShm7j7pns1Y4Sm C8e6APWWV8iAlonegG0q8HHB2wBunXBqoUKyuMmEGIGgLqlfVWH6M2EcGp5azOO1 KIPusBFM0kFHKH9uCBOraH3n9ZdFWuRIrQ7GIT52oACf/mxKPNcImqNLPRunczcJ jbGhatcLr199609JswXd+ro9LfavDevmyuMB+Zoh3lHzuWAdHQwXyIdKlv5BAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSctOOcTkeV+y9q EWy6n9ZvBvZLlzAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMkVEQzU3QTA2NjM1Njg2OEI4N0YxNDY4 NjRENTI3OEVGOThERDk0MDU1NDUwQTJCRjdBNkE3NzM1NUY5RTZDMy8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8yRURDNTdBMDY2MzU2ODY4Qjg3RjE0Njg2NEQ1Mjc4RUY5OEREOTQwNTU0 NTBBMkJGN0E2QTc3MzU1RjlFNkMzLzAvOUNCNEUzOUM0RTQ3OTVGQjJGNkExMTZD QkE5RkQ2NkYwNkY2NEI5Ny5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCZ28oMA0EAgAC MAcDBQAoA51QMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQtzzANBgkqhkiG9w0B AQsFAAOCAQEAB8aU/r5Swe0iu8Ya8qGQpgOk3mGEIdTEuiDX7lrvAUNeqhC5THcd /R8Aglb1nlNXO80tT1L3llWZcq3kNrH1GDaXcvntkpdow4F+quBMxIfFFRnAVJrj QHVivhrFK+fZdvZwO4hzYTyAJpzKqh2i12Orh1A7+39JIHeoGWMfCbYSs63K7Wup 5Kcoe68NpyPzg8hNWe3D7CllaJkorOaLKrTc5/5eGXIQFnFHwKFeF48DDwJ0biRN fTAg2WiT866C+jip+QQyzoPgF7AlxfxoLF2MjEF+H1deOPwOQq/GI2EzyOJdVa0N asN1GTv3CmYm5wNVV64Gr5aEr9o0+UW4fQ== -----END CERTIFICATE-----Generated at Thu Sep 18 18:29:12 2025 by rpki-client