$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5600F7492F4B1FEAF3C10AF2568FDB92A07365.cer File: DA5600F7492F4B1FEAF3C10AF2568FDB92A07365.cer (raw, json) Hash identifier: nzjLtAut2ktx0GE9CWNL1RKxedbwZ7R2cnrCf4UXb+E= Subject key identifier: DA:56:00:F7:49:2F:4B:1F:EA:F3:C1:0A:F2:56:8F:DB:92:A0:73:65 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 0FD58388E95094BAD2E003981C8F261ED57F76C8 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/5FE2A3E3B2B96C524D80EF356B8B01C5216BEDE4D07574D1DDD146D856AC8F3A/0/DA5600F7492F4B1FEAF3C10AF2568FDB92A07365.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/5FE2A3E3B2B96C524D80EF356B8B01C5216BEDE4D07574D1DDD146D856AC8F3A/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 09 Jul 2025 12:00:28 +0000 Certificate not after: Wed 08 Jul 2026 12:05:28 +0000 Subordinate resources: AS: 272401 IP: 2806:427::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 29 Oct 2025 22:57:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:d5:83:88:e9:50:94:ba:d2:e0:03:98:1c:8f:26:1e:d5:7f:76:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Jul 9 12:00:28 2025 GMT Not After : Jul 8 12:05:28 2026 GMT Subject: CN=DA5600F7492F4B1FEAF3C10AF2568FDB92A07365 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:9e:c6:b3:aa:1e:02:d1:b9:f0:be:09:c0:16: eb:f9:14:5e:79:7e:18:6c:c1:e0:11:a5:c5:d4:17: 6c:ae:a4:f3:e4:16:e8:f3:ac:1b:f6:a8:96:f4:66: 2e:ab:90:05:84:45:a5:b0:c9:b7:cb:d2:53:54:1f: 40:38:83:aa:a2:24:66:34:18:b9:bb:1e:dc:fc:4c: 2c:72:10:04:2d:cd:4c:67:43:8d:e4:6c:c8:fc:a5: 6e:84:1d:e2:12:93:01:20:15:71:1c:65:fe:c0:a5: c9:1c:8f:66:fa:8c:98:2c:44:cc:cf:9a:3e:a4:69: 47:a0:bc:e7:41:25:d7:49:e2:c3:ce:61:c2:57:e1: 58:ef:ec:ba:c9:67:bb:43:3a:8f:ac:8e:07:5a:f9: 5d:f0:34:e4:45:20:25:a5:e0:6b:4c:65:48:5e:30: fa:7f:a7:60:be:98:4e:b2:33:d7:62:05:6c:9b:80: e2:5c:0d:0d:6f:fc:a5:30:1c:30:6a:0a:df:6d:1f: 56:63:8d:07:ea:f6:d4:dd:f4:ff:c7:ea:ef:f0:e9: e3:1a:bd:74:3e:b9:ec:85:f0:5f:fd:70:ea:24:24: eb:ae:94:84:b4:9b:5d:a0:66:bf:d9:f4:cb:59:ef: 0b:62:59:90:a6:c5:62:9c:5a:00:05:6b:f0:5b:c6: cf:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DA:56:00:F7:49:2F:4B:1F:EA:F3:C1:0A:F2:56:8F:DB:92:A0:73:65 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/5FE2A3E3B2B96C524D80EF356B8B01C5216BEDE4D07574D1DDD146D856AC8F3A/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/5FE2A3E3B2B96C524D80EF356B8B01C5216BEDE4D07574D1DDD146D856AC8F3A/0/DA5600F7492F4B1FEAF3C10AF2568FDB92A07365.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2806:427::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 272401 Signature Algorithm: sha256WithRSAEncryption 63:d9:db:56:19:91:cc:9c:00:be:23:54:3b:4e:f4:96:1e:f1: 45:7b:49:d4:22:22:c8:ed:e1:42:80:73:4d:a8:a2:b9:4b:97: ca:ca:16:ea:af:41:dd:ed:73:51:34:cb:67:27:84:c3:7f:62: 24:fc:a3:3d:82:e8:68:fb:18:1b:b0:8e:51:71:9a:8f:4d:9c: a7:ef:11:78:71:55:71:7b:63:c6:65:e1:b8:49:b6:51:0a:1f: a1:6d:d4:f6:c0:8e:e1:be:f8:84:bb:6f:7b:51:3e:ef:bc:88: 09:98:62:29:9d:38:17:67:66:e6:42:2e:3d:4a:b4:ec:5c:54: 8b:d7:5a:04:42:14:9e:9f:35:4d:88:58:da:37:57:50:8f:e7: 08:4e:27:74:cf:3f:7d:4f:07:d9:66:43:b4:cd:fd:d7:44:fc: db:20:c9:e5:92:3c:56:02:2f:b7:26:0e:b7:ca:a0:b7:5c:c3: 51:1a:94:16:57:f4:d1:8c:1c:7c:53:00:51:f8:59:29:de:99: b8:31:cc:aa:e1:a9:7a:71:09:bc:48:da:55:1c:37:b7:a2:dc: d0:32:b8:9c:9c:c6:53:25:ea:c7:44:0f:a1:b1:69:65:f9:ee: 36:b0:26:95:da:9b:c4:60:85:91:cd:3a:b2:88:ab:b7:c6:51: 8b:4d:c0:b0 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUD9WDiOlQlLrS4AOYHI8mHtV/dsgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTA3MDkxMjAwMjhaFw0yNjA3MDgxMjA1MjhaMDMxMTAvBgNV BAMTKERBNTYwMEY3NDkyRjRCMUZFQUYzQzEwQUYyNTY4RkRCOTJBMDczNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4nsazqh4C0bnwvgnAFuv5FF55 fhhsweARpcXUF2yupPPkFujzrBv2qJb0Zi6rkAWERaWwybfL0lNUH0A4g6qiJGY0 GLm7Htz8TCxyEAQtzUxnQ43kbMj8pW6EHeISkwEgFXEcZf7Apckcj2b6jJgsRMzP mj6kaUegvOdBJddJ4sPOYcJX4Vjv7LrJZ7tDOo+sjgda+V3wNORFICWl4GtMZUhe MPp/p2C+mE6yM9diBWybgOJcDQ1v/KUwHDBqCt9tH1ZjjQfq9tTd9P/H6u/w6eMa vXQ+ueyF8F/9cOokJOuulIS0m12gZr/Z9MtZ7wtiWZCmxWKcWgAFa/Bbxs/hAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTaVgD3SS9LH+rz wQryVo/bkqBzZTAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNUZFMkEzRTNCMkI5NkM1MjREODBFRjM1 NkI4QjAxQzUyMTZCRURFNEQwNzU3NEQxREREMTQ2RDg1NkFDOEYzQS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy81RkUyQTNFM0IyQjk2QzUyNEQ4MEVGMzU2QjhCMDFDNTIxNkJFREU0RDA3 NTc0RDFEREQxNDZEODU2QUM4RjNBLzAvREE1NjAwRjc0OTJGNEIxRkVBRjNDMTBB RjI1NjhGREI5MkEwNzM2NS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAYEJzAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEKBEwDQYJKoZIhvcNAQELBQADggEBAGPZ21YZ kcycAL4jVDtO9JYe8UV7SdQiIsjt4UKAc02oorlLl8rKFuqvQd3tc1E0y2cnhMN/ YiT8oz2C6Gj7GBuwjlFxmo9NnKfvEXhxVXF7Y8Zl4bhJtlEKH6Ft1PbAjuG++IS7 b3tRPu+8iAmYYimdOBdnZuZCLj1KtOxcVIvXWgRCFJ6fNU2IWNo3V1CP5whOJ3TP P31PB9lmQ7TN/ddE/NsgyeWSPFYCL7cmDrfKoLdcw1EalBZX9NGMHHxTAFH4WSne mbgxzKrhqXpxCbxI2lUcN7ei3NAyuJycxlMl6sdED6GxaWX57jawJpXam8RghZHN OrKIq7fGUYtNwLA= -----END CERTIFICATE-----Generated at Sun Oct 26 09:03:20 2025 by rpki-client