$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BDEAB89AAA5219DB0746A97BB746F43F4F6657F3.cer File: BDEAB89AAA5219DB0746A97BB746F43F4F6657F3.cer (raw, json) Hash identifier: YRqBijCipt0uEm08rIDpgPBVGh+3zI1q934y0wj94F8= Subject key identifier: BD:EA:B8:9A:AA:52:19:DB:07:46:A9:7B:B7:46:F4:3F:4F:66:57:F3 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 0B14100FD329996FA17C10B6308F2D96C79F7742 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/FBA8DF2A8BA7A71D5D9F4325F29499ADDB0D8BD6CBAC327E025C6C526A9BF80E/0/BDEAB89AAA5219DB0746A97BB746F43F4F6657F3.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/FBA8DF2A8BA7A71D5D9F4325F29499ADDB0D8BD6CBAC327E025C6C526A9BF80E/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Sat 18 Oct 2025 03:30:00 +0000 Certificate not after: Sat 17 Oct 2026 03:35:00 +0000 Subordinate resources: AS: 274203 IP: 2803:43d0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 29 Oct 2025 22:57:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:14:10:0f:d3:29:99:6f:a1:7c:10:b6:30:8f:2d:96:c7:9f:77:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Oct 18 03:30:00 2025 GMT Not After : Oct 17 03:35:00 2026 GMT Subject: CN=BDEAB89AAA5219DB0746A97BB746F43F4F6657F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:30:20:58:c6:8c:68:43:05:ac:05:b0:dd:32: 67:f6:d8:36:65:e5:27:14:39:6c:5b:b2:8c:0c:a1: ac:b2:40:7e:21:90:ae:95:ce:6d:62:08:c1:a5:2b: cd:69:2b:c2:2a:d0:2a:65:80:b6:3f:e2:49:d5:2a: 85:3c:7c:5b:70:bb:3c:9f:42:35:25:1d:b9:4e:20: 2c:3d:6c:89:9f:d4:c8:f2:20:4c:1a:96:2c:e8:ea: 2c:83:fb:27:94:d7:cd:3d:b7:46:4b:da:4f:ad:4d: bd:42:66:83:a7:27:7b:0c:df:c5:a7:c8:f6:51:b9: d0:44:bf:cf:86:d4:b4:46:31:55:ac:a2:8a:7e:75: f0:3b:00:7b:1e:2d:46:6c:60:b1:43:01:2b:13:5f: 39:8e:3d:fe:17:48:a9:55:b1:3b:35:99:95:8d:35: b8:cc:aa:06:e3:d7:04:f5:88:15:00:bd:a0:6c:19: 2e:15:2b:1b:6b:a4:4d:c2:38:18:72:23:7d:12:80: ea:7d:13:33:81:59:cc:ab:a7:b9:bb:b4:f5:b5:a7: ad:cb:d1:78:f1:ed:d7:79:a3:76:e9:c9:ea:95:35: 0c:fe:30:cc:36:37:56:fd:24:77:b4:98:d9:d6:f2: da:55:40:0a:77:81:de:b9:5b:52:b4:bf:4b:d1:4a: 6e:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BD:EA:B8:9A:AA:52:19:DB:07:46:A9:7B:B7:46:F4:3F:4F:66:57:F3 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/FBA8DF2A8BA7A71D5D9F4325F29499ADDB0D8BD6CBAC327E025C6C526A9BF80E/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/FBA8DF2A8BA7A71D5D9F4325F29499ADDB0D8BD6CBAC327E025C6C526A9BF80E/0/BDEAB89AAA5219DB0746A97BB746F43F4F6657F3.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:43d0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 274203 Signature Algorithm: sha256WithRSAEncryption 16:14:dc:3e:5e:94:b2:a6:df:ce:c8:c4:b4:47:1d:42:a8:14: 59:e3:17:52:01:ae:84:01:8b:41:ce:83:5f:b5:55:b3:15:09: 37:cc:5a:17:24:9c:f1:82:4f:aa:fb:c1:58:23:4c:a7:e8:f9: 18:56:14:7a:e7:74:95:cb:2b:b6:ae:23:02:4d:be:03:1f:b9: 0f:03:5e:27:53:04:e9:e0:d5:e7:ec:6c:cb:a9:2b:f9:fe:f7: 4e:5b:94:b4:4c:10:e4:ca:0e:10:d1:ab:59:65:d3:49:d7:19: 53:b6:ec:fc:15:e3:e3:31:d3:78:37:65:d1:1b:d8:95:73:15: ca:0d:8f:fa:b6:2e:25:95:d2:17:9e:c3:1d:27:cb:3a:23:a4: f2:43:67:ce:da:3e:fb:fd:c4:5c:44:41:e8:a3:c5:71:97:d7: 61:3f:62:7e:c6:ec:60:c3:a6:5a:90:08:16:e7:3c:48:a5:70: 5e:4b:b5:88:83:80:5f:01:e2:d3:29:9e:62:6a:68:31:b5:59: 1a:31:e5:73:3d:65:6d:45:cf:17:de:34:e8:95:92:ab:0c:ad: 10:34:1c:3d:3e:58:00:ec:bd:bf:2c:b7:09:ba:13:fc:93:b8: 34:96:9e:18:a1:d6:c6:e7:55:8c:8b:c6:1b:4d:46:12:8e:a0: 5b:9c:6f:3e -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUCxQQD9MpmW+hfBC2MI8tlsefd0IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTEwMTgwMzMwMDBaFw0yNjEwMTcwMzM1MDBaMDMxMTAvBgNV BAMTKEJERUFCODlBQUE1MjE5REIwNzQ2QTk3QkI3NDZGNDNGNEY2NjU3RjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXMCBYxoxoQwWsBbDdMmf22DZl 5ScUOWxbsowMoayyQH4hkK6Vzm1iCMGlK81pK8Iq0CplgLY/4knVKoU8fFtwuzyf QjUlHblOICw9bImf1MjyIEwalizo6iyD+yeU1809t0ZL2k+tTb1CZoOnJ3sM38Wn yPZRudBEv8+G1LRGMVWsoop+dfA7AHseLUZsYLFDASsTXzmOPf4XSKlVsTs1mZWN NbjMqgbj1wT1iBUAvaBsGS4VKxtrpE3COBhyI30SgOp9EzOBWcyrp7m7tPW1p63L 0Xjx7dd5o3bpyeqVNQz+MMw2N1b9JHe0mNnW8tpVQAp3gd65W1K0v0vRSm6lAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS96riaqlIZ2wdG qXu3RvQ/T2ZX8zAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRkJBOERGMkE4QkE3QTcxRDVEOUY0MzI1 RjI5NDk5QUREQjBEOEJENkNCQUMzMjdFMDI1QzZDNTI2QTlCRjgwRS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9GQkE4REYyQThCQTdBNzFENUQ5RjQzMjVGMjk0OTlBRERCMEQ4QkQ2Q0JB QzMyN0UwMjVDNkM1MjZBOUJGODBFLzAvQkRFQUI4OUFBQTUyMTlEQjA3NDZBOTdC Qjc0NkY0M0Y0RjY2NTdGMy5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAND0DAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMELxswDQYJKoZIhvcNAQELBQADggEBABYU3D5e lLKm387IxLRHHUKoFFnjF1IBroQBi0HOg1+1VbMVCTfMWhcknPGCT6r7wVgjTKfo +RhWFHrndJXLK7auIwJNvgMfuQ8DXidTBOng1efsbMupK/n+905blLRMEOTKDhDR q1ll00nXGVO27PwV4+Mx03g3ZdEb2JVzFcoNj/q2LiWV0heewx0nyzojpPJDZ87a Pvv9xFxEQeijxXGX12E/Yn7G7GDDplqQCBbnPEilcF5LtYiDgF8B4tMpnmJqaDG1 WRox5XM9ZW1FzxfeNOiVkqsMrRA0HD0+WADsvb8stwm6E/yTuDSWnhih1sbnVYyL xhtNRhKOoFucbz4= -----END CERTIFICATE-----Generated at Sun Oct 26 09:00:13 2025 by rpki-client