$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D196F50BF4C5E8C8C8F6D6A756E4001CCBC71ACE.cer File: D196F50BF4C5E8C8C8F6D6A756E4001CCBC71ACE.cer (raw, json) Hash identifier: JpfkwPNWuGkVPyDkX99cKPztwzE10mkeL1kgiQ8WEZ0= Subject key identifier: D1:96:F5:0B:F4:C5:E8:C8:C8:F6:D6:A7:56:E4:00:1C:CB:C7:1A:CE Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 72D61A7D34A9012DFADB081D674036BEA2C5E563 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/DB1AD68115239E04434A464D37574DBD1BCED2D33D41C15455EADC2A923128AE/0/D196F50BF4C5E8C8C8F6D6A756E4001CCBC71ACE.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/DB1AD68115239E04434A464D37574DBD1BCED2D33D41C15455EADC2A923128AE/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Fri 04 Jul 2025 17:30:01 +0000 Certificate not after: Fri 03 Jul 2026 17:35:01 +0000 Subordinate resources: AS: 273158 IP: 2803:c250::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 10 Jul 2025 07:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:d6:1a:7d:34:a9:01:2d:fa:db:08:1d:67:40:36:be:a2:c5:e5:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Jul 4 17:30:01 2025 GMT Not After : Jul 3 17:35:01 2026 GMT Subject: CN=D196F50BF4C5E8C8C8F6D6A756E4001CCBC71ACE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:bd:9a:22:62:06:c5:18:90:c0:00:e4:b2:1d: 48:56:55:dd:9f:40:3d:ac:53:08:18:f5:4e:f8:dc: 9f:b6:15:1f:5b:d3:a8:c6:03:6f:70:4f:dc:a7:a5: 6e:4a:59:03:22:18:61:5c:07:b4:e0:17:15:67:bd: 5e:03:34:11:d2:39:b3:a7:51:02:92:0a:2c:4e:89: 6a:a8:72:77:34:1d:56:85:95:06:59:3a:a8:12:8d: 6d:d3:09:39:0d:05:d9:95:9c:ed:13:fe:93:a6:55: a8:c8:c0:b5:28:c0:77:28:ba:0e:8e:43:0a:73:a1: 5b:e2:89:fa:f0:fe:b0:e2:fa:a7:cb:80:61:94:5d: b6:da:80:2f:50:ea:58:eb:89:f9:2d:e3:eb:de:68: 40:7f:31:fb:f8:75:05:f7:96:59:7c:94:f2:9c:19: 02:56:8e:81:be:57:1c:77:8f:7c:c6:dc:fa:1e:3b: ec:e8:96:4a:e7:55:0b:ca:e0:c9:c2:0f:d8:f0:fc: 9b:fc:a3:5d:10:a3:91:2d:84:48:6c:f0:bb:96:f1: 4a:82:65:02:c4:e9:ca:52:ed:28:33:b4:21:b9:d4: fc:65:a9:1d:5c:7e:22:85:a5:6b:a4:be:d8:37:57: 0f:3c:1d:60:63:3c:f6:38:d3:85:3d:f7:fc:c1:60: 5d:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D1:96:F5:0B:F4:C5:E8:C8:C8:F6:D6:A7:56:E4:00:1C:CB:C7:1A:CE X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/DB1AD68115239E04434A464D37574DBD1BCED2D33D41C15455EADC2A923128AE/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/DB1AD68115239E04434A464D37574DBD1BCED2D33D41C15455EADC2A923128AE/0/D196F50BF4C5E8C8C8F6D6A756E4001CCBC71ACE.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:c250::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273158 Signature Algorithm: sha256WithRSAEncryption 89:17:18:0f:2e:c5:5f:ec:77:2b:54:30:2a:42:0d:74:48:e4: e8:07:cc:6d:f7:ae:54:94:c1:9f:3d:6d:ae:2b:25:19:76:09: 47:fc:74:84:45:89:af:83:4b:47:11:39:fe:4a:17:53:fc:1c: ec:47:2f:15:4e:a3:84:28:38:b9:9b:87:d4:3d:eb:aa:8e:d0: 56:5a:b8:94:6e:0f:99:90:cf:ee:24:1b:f1:e0:a0:6f:c3:9f: 93:48:5d:39:a2:c8:08:c8:d5:c6:bf:a7:e1:22:89:e8:90:74: ca:ed:4e:81:13:74:af:de:31:ca:b7:6f:50:d2:dc:be:e7:24: 2e:e0:ef:09:b5:4a:29:6f:2b:6d:df:ed:9d:de:1e:98:f5:97: af:28:41:8b:0e:c8:55:77:e1:73:35:2b:df:88:af:2f:0a:e2: 81:cc:32:1e:60:8a:b9:06:d6:5f:de:b4:02:bb:e9:30:76:b8: 92:fa:87:0e:f5:c6:23:89:8a:23:66:49:be:7a:7b:dd:ca:9e: 66:53:99:10:0a:4f:36:4b:55:80:20:29:96:fd:1b:f2:5f:d9: ac:77:0a:01:6d:3e:e9:2a:ca:68:ea:c0:09:ac:42:7c:0f:d1: 87:7f:d9:34:22:20:18:56:3c:b7:6f:db:3a:2f:df:f9:3d:4e: 55:29:98:3c -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUctYafTSpAS362wgdZ0A2vqLF5WMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTA3MDQxNzMwMDFaFw0yNjA3MDMxNzM1MDFaMDMxMTAvBgNV BAMTKEQxOTZGNTBCRjRDNUU4QzhDOEY2RDZBNzU2RTQwMDFDQ0JDNzFBQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCvZoiYgbFGJDAAOSyHUhWVd2f QD2sUwgY9U743J+2FR9b06jGA29wT9ynpW5KWQMiGGFcB7TgFxVnvV4DNBHSObOn UQKSCixOiWqocnc0HVaFlQZZOqgSjW3TCTkNBdmVnO0T/pOmVajIwLUowHcoug6O QwpzoVviifrw/rDi+qfLgGGUXbbagC9Q6ljrifkt4+veaEB/Mfv4dQX3lll8lPKc GQJWjoG+Vxx3j3zG3PoeO+zolkrnVQvK4MnCD9jw/Jv8o10Qo5EthEhs8LuW8UqC ZQLE6cpS7SgztCG51PxlqR1cfiKFpWukvtg3Vw88HWBjPPY404U99/zBYF0XAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTRlvUL9MXoyMj2 1qdW5AAcy8cazjAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvREIxQUQ2ODExNTIzOUUwNDQzNEE0NjRE Mzc1NzREQkQxQkNFRDJEMzNENDFDMTU0NTVFQURDMkE5MjMxMjhBRS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9EQjFBRDY4MTE1MjM5RTA0NDM0QTQ2NEQzNzU3NERCRDFCQ0VEMkQzM0Q0 MUMxNTQ1NUVBREMyQTkyMzEyOEFFLzAvRDE5NkY1MEJGNEM1RThDOEM4RjZENkE3 NTZFNDAwMUNDQkM3MUFDRS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAPCUDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEKwYwDQYJKoZIhvcNAQELBQADggEBAIkXGA8u xV/sdytUMCpCDXRI5OgHzG33rlSUwZ89ba4rJRl2CUf8dIRFia+DS0cROf5KF1P8 HOxHLxVOo4QoOLmbh9Q966qO0FZauJRuD5mQz+4kG/HgoG/Dn5NIXTmiyAjI1ca/ p+EiieiQdMrtToETdK/eMcq3b1DS3L7nJC7g7wm1SilvK23f7Z3eHpj1l68oQYsO yFV34XM1K9+Iry8K4oHMMh5girkG1l/etAK76TB2uJL6hw71xiOJiiNmSb56e93K nmZTmRAKTzZLVYAgKZb9G/Jf2ax3CgFtPukqymjqwAmsQnwP0Yd/2TQiIBhWPLdv 2zov3/k9TlUpmDw= -----END CERTIFICATE-----Generated at Sun Jul 6 04:28:54 2025 by rpki-client