$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ADD9CD6C54CC8CB25C61B4B7FF0C3E6715E6F03D.cer File: ADD9CD6C54CC8CB25C61B4B7FF0C3E6715E6F03D.cer (raw, json) Hash identifier: m022RRIfe9yIlZ2SnSjDGNFKw/Zgarv8h6iALu0sSIg= Subject key identifier: AD:D9:CD:6C:54:CC:8C:B2:5C:61:B4:B7:FF:0C:3E:67:15:E6:F0:3D Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 2DACC6C3BEECD9B81DC657BEB0FD7E1AF6DC824F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/DFCEC531BC14805FF08CBDF8DAEA7729B5F935F57929351AC2C46E88A126B67A/0/ADD9CD6C54CC8CB25C61B4B7FF0C3E6715E6F03D.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/DFCEC531BC14805FF08CBDF8DAEA7729B5F935F57929351AC2C46E88A126B67A/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 04 Jun 2025 02:20:01 +0000 Certificate not after: Wed 03 Jun 2026 02:25:01 +0000 Subordinate resources: AS: 274104 IP: 2803:ed0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 29 Oct 2025 22:57:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:ac:c6:c3:be:ec:d9:b8:1d:c6:57:be:b0:fd:7e:1a:f6:dc:82:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Jun 4 02:20:01 2025 GMT Not After : Jun 3 02:25:01 2026 GMT Subject: CN=ADD9CD6C54CC8CB25C61B4B7FF0C3E6715E6F03D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:80:2a:d7:65:2e:6e:07:32:e3:21:6a:73:19: 8a:80:12:00:3f:4b:15:bc:46:25:52:f6:6b:9c:19: 27:04:4e:54:0c:48:da:c4:38:2b:17:6c:bf:3d:d2: 3e:93:84:81:b8:0e:46:a9:ab:7a:5b:56:ee:a9:17: dc:28:88:8f:f8:41:dd:02:21:b0:24:6e:50:1d:97: fb:67:34:51:1f:c0:4a:f2:fa:af:b5:82:0d:09:83: d2:49:92:c6:97:8f:8b:b3:e3:43:01:2d:e9:91:cf: e8:84:cc:58:6d:23:5c:e0:d0:ad:4c:f9:06:05:95: a6:96:11:eb:77:57:b5:ba:0b:8b:28:d0:85:0c:63: 65:1e:cc:87:de:f5:22:1d:96:81:dd:6c:f5:1d:c4: ce:32:79:d2:f1:e3:61:13:14:d2:84:07:5f:51:df: 7e:ec:86:41:f0:c2:96:fe:6a:94:e7:c3:d2:20:52: 5a:3a:38:3f:8a:10:a5:55:32:b0:d3:c6:6b:f1:23: 2b:1e:d3:6a:bf:c7:01:db:1f:6e:d2:42:62:ba:22: c3:75:d4:80:bd:54:f1:6b:85:25:f4:00:9e:8d:c0: 53:dd:b2:14:2f:8d:c7:da:87:99:56:91:ae:a7:8f: 64:4c:28:83:4b:8a:61:2a:c7:8e:08:a0:18:5e:28: 29:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AD:D9:CD:6C:54:CC:8C:B2:5C:61:B4:B7:FF:0C:3E:67:15:E6:F0:3D X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/DFCEC531BC14805FF08CBDF8DAEA7729B5F935F57929351AC2C46E88A126B67A/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/DFCEC531BC14805FF08CBDF8DAEA7729B5F935F57929351AC2C46E88A126B67A/0/ADD9CD6C54CC8CB25C61B4B7FF0C3E6715E6F03D.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:ed0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 274104 Signature Algorithm: sha256WithRSAEncryption 76:1c:4a:23:b8:dd:e0:3b:ee:ae:de:2f:78:a9:07:b4:7c:49: cb:d4:9e:2b:8e:ec:d5:6b:ec:22:54:d4:31:f9:52:c8:50:0f: 03:48:aa:66:21:82:3d:e9:40:b0:0f:7b:cb:20:e8:c6:64:fc: f7:22:d4:40:22:15:c9:e3:be:7f:4a:cd:3a:61:97:a5:f0:b1: 9b:e2:ec:ec:66:78:a5:dc:18:af:46:f9:9d:ba:4f:c9:61:35: 0f:83:27:c7:04:1b:47:5a:22:aa:40:3c:0c:4d:4a:6c:00:3b: f6:04:9b:61:20:bc:50:25:4f:be:49:3c:44:69:ad:55:0c:53: c1:df:45:01:f6:3e:28:31:f9:5d:5f:49:44:55:53:93:3b:f7: 97:ef:45:4a:44:59:d8:e0:19:d0:e0:3b:ec:5d:3a:05:92:01: 6a:3c:fd:62:d3:65:19:b3:b7:4d:bb:b9:9b:f1:5c:91:39:4b: 4f:5b:07:3b:48:e9:78:7c:5f:e1:24:5b:ce:01:b9:23:ed:10: 11:9a:76:c6:80:38:de:c2:50:43:3c:fe:48:7b:ce:a1:1e:62: 68:89:0e:1d:cc:59:54:f4:b2:d5:71:85:e2:52:06:0d:59:69: 7a:af:7c:f7:fa:80:bc:b0:82:64:bd:7c:eb:39:b0:2b:74:b6: 36:1d:93:d3 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIULazGw77s2bgdxle+sP1+Gvbcgk8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTA2MDQwMjIwMDFaFw0yNjA2MDMwMjI1MDFaMDMxMTAvBgNV BAMTKEFERDlDRDZDNTRDQzhDQjI1QzYxQjRCN0ZGMEMzRTY3MTVFNkYwM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTgCrXZS5uBzLjIWpzGYqAEgA/ SxW8RiVS9mucGScETlQMSNrEOCsXbL890j6ThIG4Dkapq3pbVu6pF9woiI/4Qd0C IbAkblAdl/tnNFEfwEry+q+1gg0Jg9JJksaXj4uz40MBLemRz+iEzFhtI1zg0K1M +QYFlaaWEet3V7W6C4so0IUMY2UezIfe9SIdloHdbPUdxM4yedLx42ETFNKEB19R 337shkHwwpb+apTnw9IgUlo6OD+KEKVVMrDTxmvxIyse02q/xwHbH27SQmK6IsN1 1IC9VPFrhSX0AJ6NwFPdshQvjcfah5lWka6nj2RMKINLimEqx44IoBheKCmZAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSt2c1sVMyMslxh tLf/DD5nFebwPTAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvREZDRUM1MzFCQzE0ODA1RkYwOENCREY4 REFFQTc3MjlCNUY5MzVGNTc5MjkzNTFBQzJDNDZFODhBMTI2QjY3QS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9ERkNFQzUzMUJDMTQ4MDVGRjA4Q0JERjhEQUVBNzcyOUI1RjkzNUY1Nzky OTM1MUFDMkM0NkU4OEExMjZCNjdBLzAvQUREOUNENkM1NENDOENCMjVDNjFCNEI3 RkYwQzNFNjcxNUU2RjAzRC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAMO0DAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMELrgwDQYJKoZIhvcNAQELBQADggEBAHYcSiO4 3eA77q7eL3ipB7R8ScvUniuO7NVr7CJU1DH5UshQDwNIqmYhgj3pQLAPe8sg6MZk /Pci1EAiFcnjvn9KzTphl6XwsZvi7OxmeKXcGK9G+Z26T8lhNQ+DJ8cEG0daIqpA PAxNSmwAO/YEm2EgvFAlT75JPERprVUMU8HfRQH2Pigx+V1fSURVU5M795fvRUpE WdjgGdDgO+xdOgWSAWo8/WLTZRmzt027uZvxXJE5S09bBztI6Xh8X+EkW84BuSPt EBGadsaAON7CUEM8/kh7zqEeYmiJDh3MWVT0stVxheJSBg1ZaXqvfPf6gLywgmS9 fOs5sCt0tjYdk9M= -----END CERTIFICATE-----Generated at Sun Oct 26 09:03:22 2025 by rpki-client