$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC61C9832275FDCA9E312CE28253A3F9165ECC75.cer File: CC61C9832275FDCA9E312CE28253A3F9165ECC75.cer (raw, json) Hash identifier: /mBZR5FnDwXja8I0vZhFm5QoIblIlCpf780vuzTXV/E= Subject key identifier: CC:61:C9:83:22:75:FD:CA:9E:31:2C:E2:82:53:A3:F9:16:5E:CC:75 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 25CA54E3A04943223AD78F66CACC0F86AC39CE48 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/960BAF811DF8A8A73E67CE5E72527E76D206E7D466FCA7E849B3D9A70BA355D7/0/CC61C9832275FDCA9E312CE28253A3F9165ECC75.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/960BAF811DF8A8A73E67CE5E72527E76D206E7D466FCA7E849B3D9A70BA355D7/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 22 Oct 2025 00:45:01 +0000 Certificate not after: Wed 21 Oct 2026 00:50:01 +0000 Subordinate resources: AS: 274231 IP: 2803:7bd0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 27 Oct 2025 11:10:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:ca:54:e3:a0:49:43:22:3a:d7:8f:66:ca:cc:0f:86:ac:39:ce:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Oct 22 00:45:01 2025 GMT Not After : Oct 21 00:50:01 2026 GMT Subject: CN=CC61C9832275FDCA9E312CE28253A3F9165ECC75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:60:15:24:4e:1a:ea:aa:7d:d4:71:e9:a6:2b: 45:c6:bf:26:e0:16:e4:a2:e3:50:10:5c:68:b4:03: 65:15:62:3d:83:8a:7e:91:8f:d2:54:34:e0:e8:15: f5:da:c1:1b:2a:c3:48:0a:6c:19:36:55:6e:c7:ff: 5b:bf:92:e4:2b:d2:a1:ff:59:10:9e:a7:50:98:ac: 61:dc:28:8b:dd:bd:12:b6:ee:93:69:89:32:39:2c: d2:98:fe:e1:ef:5f:c3:e1:ab:a4:19:82:6e:41:e6: 33:b3:d9:2b:88:3a:df:48:e5:7a:d5:20:a0:2b:a8: 9e:47:5c:7e:36:d9:55:71:ac:a7:a1:da:5b:ee:c7: 66:b0:1f:a7:3f:54:8a:bf:a1:b4:3b:66:af:12:3a: b6:1c:5f:58:89:7c:1a:57:08:87:9d:da:a8:14:e6: 31:d0:1b:95:03:ce:ba:0c:5b:39:96:6f:1c:29:0b: ff:2b:09:0a:ea:3c:91:00:35:34:44:29:17:5e:2f: d1:cc:39:ea:b7:94:0a:e9:57:bf:96:51:b9:dd:97: f2:2b:bf:2f:15:83:e9:39:3e:dc:f2:af:f1:56:8c: 28:a6:07:8e:65:f9:67:8c:c9:bd:32:74:ac:d9:c1: 8f:1e:da:29:b4:20:97:57:41:83:d3:e5:98:05:98: 77:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CC:61:C9:83:22:75:FD:CA:9E:31:2C:E2:82:53:A3:F9:16:5E:CC:75 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/960BAF811DF8A8A73E67CE5E72527E76D206E7D466FCA7E849B3D9A70BA355D7/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/960BAF811DF8A8A73E67CE5E72527E76D206E7D466FCA7E849B3D9A70BA355D7/0/CC61C9832275FDCA9E312CE28253A3F9165ECC75.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:7bd0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 274231 Signature Algorithm: sha256WithRSAEncryption cc:7d:80:76:61:33:9b:c7:45:bc:0a:02:7e:2d:ca:25:df:3a: b1:c6:fa:cc:79:0a:b1:43:d8:94:84:b8:33:6c:dc:a6:32:8d: 22:82:c3:3f:ff:34:8c:16:c4:ef:de:f2:52:6c:ab:51:7b:ff: 9b:aa:16:08:f2:6d:d6:74:a6:da:4a:2c:a8:2c:09:94:c0:64: 2b:6f:1e:ec:9e:2a:d8:1e:34:a1:60:d8:f6:c1:cc:8f:6b:9a: e5:f5:31:18:1b:94:2e:c6:2c:c8:c1:c1:33:6b:9f:b6:d8:54: 4f:76:3a:d1:03:69:7f:80:f8:b6:dd:3a:1f:52:3e:2c:17:71: 4a:53:36:09:27:13:f7:6d:98:52:ed:0c:55:61:97:89:58:c9: ea:9c:c4:5d:6b:16:ea:0a:45:6d:59:74:24:77:a8:bf:19:e4: 90:fc:39:08:4c:e6:24:35:bb:52:43:1a:a4:18:40:07:92:70: e2:0a:18:09:2c:2a:71:3e:02:86:0c:b7:ec:e9:60:57:87:0b: c8:bb:99:e9:3c:4e:30:28:5f:4b:34:26:df:87:8f:35:ad:37: 13:37:24:72:14:2d:f2:46:f4:3d:ba:6c:5b:85:d7:3b:40:b6: 56:83:93:41:c3:58:e9:b0:86:5b:90:5e:0b:32:a2:64:53:48: 30:e0:bc:11 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUJcpU46BJQyI6149myswPhqw5zkgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTEwMjIwMDQ1MDFaFw0yNjEwMjEwMDUwMDFaMDMxMTAvBgNV BAMTKENDNjFDOTgzMjI3NUZEQ0E5RTMxMkNFMjgyNTNBM0Y5MTY1RUNDNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFYBUkThrqqn3UcemmK0XGvybg FuSi41AQXGi0A2UVYj2Din6Rj9JUNODoFfXawRsqw0gKbBk2VW7H/1u/kuQr0qH/ WRCep1CYrGHcKIvdvRK27pNpiTI5LNKY/uHvX8Phq6QZgm5B5jOz2SuIOt9I5XrV IKArqJ5HXH422VVxrKeh2lvux2awH6c/VIq/obQ7Zq8SOrYcX1iJfBpXCIed2qgU 5jHQG5UDzroMWzmWbxwpC/8rCQrqPJEANTREKRdeL9HMOeq3lArpV7+WUbndl/Ir vy8Vg+k5Ptzyr/FWjCimB45l+WeMyb0ydKzZwY8e2im0IJdXQYPT5ZgFmHebAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTMYcmDInX9yp4x LOKCU6P5Fl7MdTAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvOTYwQkFGODExREY4QThBNzNFNjdDRTVF NzI1MjdFNzZEMjA2RTdENDY2RkNBN0U4NDlCM0Q5QTcwQkEzNTVENy8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy85NjBCQUY4MTFERjhBOEE3M0U2N0NFNUU3MjUyN0U3NkQyMDZFN0Q0NjZG Q0E3RTg0OUIzRDlBNzBCQTM1NUQ3LzAvQ0M2MUM5ODMyMjc1RkRDQTlFMzEyQ0Uy ODI1M0EzRjkxNjVFQ0M3NS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAN70DAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMELzcwDQYJKoZIhvcNAQELBQADggEBAMx9gHZh M5vHRbwKAn4tyiXfOrHG+sx5CrFD2JSEuDNs3KYyjSKCwz//NIwWxO/e8lJsq1F7 /5uqFgjybdZ0ptpKLKgsCZTAZCtvHuyeKtgeNKFg2PbBzI9rmuX1MRgblC7GLMjB wTNrn7bYVE92OtEDaX+A+LbdOh9SPiwXcUpTNgknE/dtmFLtDFVhl4lYyeqcxF1r FuoKRW1ZdCR3qL8Z5JD8OQhM5iQ1u1JDGqQYQAeScOIKGAksKnE+AoYMt+zpYFeH C8i7mek8TjAoX0s0Jt+HjzWtNxM3JHIULfJG9D26bFuF1ztAtlaDk0HDWOmwhluQ XgsyomRTSDDgvBE= -----END CERTIFICATE-----Generated at Thu Oct 23 02:02:39 2025 by rpki-client