$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2CAAB2CDC295C8BA276169D10D1870BBB92D74F.cer File: D2CAAB2CDC295C8BA276169D10D1870BBB92D74F.cer (raw, json) Hash identifier: 5jG8ZJYeHwPBgRrri2MsmSXesVziRFWR1BwhViSdJvg= Subject key identifier: D2:CA:AB:2C:DC:29:5C:8B:A2:76:16:9D:10:D1:87:0B:BB:92:D7:4F Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 25986B9B58BC37D049A3755AB60B5F66A400E7E1 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/985AEFDCA9C633DF884BD5ED3FD9FCB1E7065D7C859523AF886E91805EEAB406/0/D2CAAB2CDC295C8BA276169D10D1870BBB92D74F.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/985AEFDCA9C633DF884BD5ED3FD9FCB1E7065D7C859523AF886E91805EEAB406/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 23 Jul 2025 22:04:02 +0000 Certificate not after: Wed 22 Jul 2026 22:09:02 +0000 Subordinate resources: AS: 273234 IP: 2803:7e50::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 21:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:98:6b:9b:58:bc:37:d0:49:a3:75:5a:b6:0b:5f:66:a4:00:e7:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Jul 23 22:04:02 2025 GMT Not After : Jul 22 22:09:02 2026 GMT Subject: CN=D2CAAB2CDC295C8BA276169D10D1870BBB92D74F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:1f:f9:82:9a:aa:29:f2:5b:b8:e7:28:c2:48: 26:22:fd:87:fd:fc:d2:ce:74:4e:e0:ce:e3:6b:3b: fb:93:d2:8b:c6:2e:3c:1e:c1:d6:ef:d7:1b:40:49: 5b:2d:5b:b6:d3:cf:2c:40:c9:c5:3a:23:9e:3c:00: e7:da:39:90:d3:92:f8:7a:9e:05:88:2b:6a:cc:18: b1:7d:e1:b6:f9:d2:d7:d0:28:dd:c9:df:da:11:7e: ad:82:d5:58:fb:b6:ee:9d:49:c9:cc:f7:6b:56:a8: c2:cf:42:ac:66:cc:45:a1:b3:2f:db:9b:c9:ed:f1: d9:54:5d:75:46:93:90:53:ba:1e:1c:5d:ed:ae:f5: ec:b5:aa:3b:39:5b:6f:d7:37:20:a8:a4:79:cd:22: d8:f8:af:f2:c8:fe:9e:90:45:42:00:e8:2e:da:5c: 57:be:1e:31:60:0a:03:91:3e:48:4c:29:50:96:0e: c7:db:06:85:7f:15:a7:c3:a8:1d:d7:4f:b5:17:2e: ab:03:98:58:ce:69:92:97:cd:b5:d9:8f:79:de:50: bd:2d:d3:f0:6b:95:ad:37:8d:08:04:4c:db:c5:f0: ba:2c:51:e3:8c:66:13:c3:99:a5:92:b5:34:4e:74: a0:b0:41:47:56:e6:c6:73:9e:1d:39:e5:8c:87:43: 4b:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D2:CA:AB:2C:DC:29:5C:8B:A2:76:16:9D:10:D1:87:0B:BB:92:D7:4F X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/985AEFDCA9C633DF884BD5ED3FD9FCB1E7065D7C859523AF886E91805EEAB406/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/985AEFDCA9C633DF884BD5ED3FD9FCB1E7065D7C859523AF886E91805EEAB406/0/D2CAAB2CDC295C8BA276169D10D1870BBB92D74F.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:7e50::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273234 Signature Algorithm: sha256WithRSAEncryption 53:89:7e:0c:73:2d:66:92:83:e2:05:12:cc:fd:ff:5b:16:8b: 37:d7:fc:3e:5a:a8:9d:49:a3:98:85:9c:1b:ac:87:a1:ab:c0: 4f:98:46:17:7a:43:50:31:d3:42:59:f5:e8:e9:0e:d7:9f:4d: 74:56:4b:a5:95:f8:63:4c:d7:c7:a3:28:7c:44:d9:3f:fa:63: 36:f8:db:2a:19:c9:80:88:44:ce:6d:3f:27:35:a9:da:0d:58: c9:96:09:43:43:2d:10:02:4d:0b:c9:3c:04:ec:dd:d6:94:ec: 8c:04:06:3a:c6:5f:f5:f7:03:a7:a7:f8:bb:9c:fe:6c:76:a7: c7:49:b9:28:b8:e3:c3:78:03:91:0c:97:30:65:26:d1:82:06: cc:6f:69:65:0e:15:a5:88:e8:cc:a6:2b:c5:ab:01:2c:ee:f4: 81:0e:e4:1e:c0:dc:e3:ae:bf:27:11:21:5d:4b:32:b8:10:7d: 5e:9a:aa:f2:e6:56:71:bd:16:29:77:95:7b:97:98:6d:ab:2f: aa:94:d7:21:72:5f:09:1f:95:30:20:71:7d:97:e3:b3:b9:76: 1a:f2:77:46:af:5d:2d:ea:5d:cd:1d:23:d9:21:e1:18:ef:38: 3e:84:b2:90:b2:48:b7:ed:06:6a:12:53:87:49:fd:c3:ea:df: d4:89:d4:ef -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUJZhrm1i8N9BJo3VatgtfZqQA5+EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTA3MjMyMjA0MDJaFw0yNjA3MjIyMjA5MDJaMDMxMTAvBgNV BAMTKEQyQ0FBQjJDREMyOTVDOEJBMjc2MTY5RDEwRDE4NzBCQkI5MkQ3NEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZH/mCmqop8lu45yjCSCYi/Yf9 /NLOdE7gzuNrO/uT0ovGLjwewdbv1xtASVstW7bTzyxAycU6I548AOfaOZDTkvh6 ngWIK2rMGLF94bb50tfQKN3J39oRfq2C1Vj7tu6dScnM92tWqMLPQqxmzEWhsy/b m8nt8dlUXXVGk5BTuh4cXe2u9ey1qjs5W2/XNyCopHnNItj4r/LI/p6QRUIA6C7a XFe+HjFgCgORPkhMKVCWDsfbBoV/FafDqB3XT7UXLqsDmFjOaZKXzbXZj3neUL0t 0/Brla03jQgETNvF8LosUeOMZhPDmaWStTROdKCwQUdW5sZznh055YyHQ0uVAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTSyqss3Clci6J2 Fp0Q0YcLu5LXTzAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvOTg1QUVGRENBOUM2MzNERjg4NEJENUVE M0ZEOUZDQjFFNzA2NUQ3Qzg1OTUyM0FGODg2RTkxODA1RUVBQjQwNi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy85ODVBRUZEQ0E5QzYzM0RGODg0QkQ1RUQzRkQ5RkNCMUU3MDY1RDdDODU5 NTIzQUY4ODZFOTE4MDVFRUFCNDA2LzAvRDJDQUFCMkNEQzI5NUM4QkEyNzYxNjlE MTBEMTg3MEJCQjkyRDc0Ri5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAN+UDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEK1IwDQYJKoZIhvcNAQELBQADggEBAFOJfgxz LWaSg+IFEsz9/1sWizfX/D5aqJ1Jo5iFnBush6GrwE+YRhd6Q1Ax00JZ9ejpDtef TXRWS6WV+GNM18ejKHxE2T/6Yzb42yoZyYCIRM5tPyc1qdoNWMmWCUNDLRACTQvJ PATs3daU7IwEBjrGX/X3A6en+Luc/mx2p8dJuSi448N4A5EMlzBlJtGCBsxvaWUO FaWI6MymK8WrASzu9IEO5B7A3OOuvycRIV1LMrgQfV6aqvLmVnG9Fil3lXuXmG2r L6qU1yFyXwkflTAgcX2X47O5dhryd0avXS3qXc0dI9kh4RjvOD6EspCySLftBmoS U4dJ/cPq39SJ1O8= -----END CERTIFICATE-----Generated at Sat Nov 1 04:09:16 2025 by rpki-client