$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E97E37E90E2004FF865CAD09871B6A3D5AB4AC6D.cer File: E97E37E90E2004FF865CAD09871B6A3D5AB4AC6D.cer (raw, json) Hash identifier: CkwKpNJnT+OLsz+YJiytdnqdAbX3GpHMGrxwlFHlmiE= Subject key identifier: E9:7E:37:E9:0E:20:04:FF:86:5C:AD:09:87:1B:6A:3D:5A:B4:AC:6D Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 5C2F3A915BC1352DA6D230FC67359B90DD5BBECE Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/D50B444A47220AB9DB443F5014580ADFEAF36B28D96B80BB3A17705049BF6D5A/0/E97E37E90E2004FF865CAD09871B6A3D5AB4AC6D.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/D50B444A47220AB9DB443F5014580ADFEAF36B28D96B80BB3A17705049BF6D5A/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Fri 04 Jul 2025 00:10:01 +0000 Certificate not after: Fri 03 Jul 2026 00:15:01 +0000 Subordinate resources: AS: 274129 IP: 2803:21d0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 10 Jul 2025 07:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:2f:3a:91:5b:c1:35:2d:a6:d2:30:fc:67:35:9b:90:dd:5b:be:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Jul 4 00:10:01 2025 GMT Not After : Jul 3 00:15:01 2026 GMT Subject: CN=E97E37E90E2004FF865CAD09871B6A3D5AB4AC6D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b4:bd:d4:79:d4:cc:19:2c:c9:78:aa:6c:8b: d9:f8:a0:3c:9d:48:84:9f:cc:77:f6:3c:3b:87:cc: 7f:7d:e3:dd:45:51:8e:87:a8:5f:60:0d:1b:27:18: 33:94:d2:36:eb:a9:aa:78:2e:59:39:86:32:24:0d: e4:12:25:a6:70:8e:cb:9d:bf:72:93:a4:97:39:05: 8d:62:ba:df:f5:78:89:af:2d:5f:90:25:08:9a:fe: 5c:24:da:75:f0:0b:25:53:43:10:f4:d2:da:76:1f: f5:59:9a:f7:8a:48:5a:90:84:07:d5:3f:a3:9b:ec: 97:b8:1d:75:99:97:c9:dc:2f:45:39:43:8e:4a:b6: 7f:6c:1a:e5:cd:53:fd:fa:28:e1:b7:a0:93:f3:31: 10:33:fa:ac:1d:f5:7c:43:45:08:89:74:df:80:1f: 0b:0b:6d:af:f1:3f:36:1f:b9:ad:ac:6e:54:fa:63: 21:cd:4f:00:bb:b4:d7:d2:87:c0:c8:6a:30:d9:e7: f3:31:62:9c:5c:a2:7e:a9:01:60:4a:13:40:23:b3: 87:ca:94:5f:5c:fd:0c:47:f3:49:a5:28:f5:af:32: c6:2e:10:e3:1d:75:8a:1e:8f:4c:40:5b:19:43:e8: 4f:b7:0a:5b:87:9a:b9:1d:fd:86:03:64:0c:48:bc: 55:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E9:7E:37:E9:0E:20:04:FF:86:5C:AD:09:87:1B:6A:3D:5A:B4:AC:6D X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/D50B444A47220AB9DB443F5014580ADFEAF36B28D96B80BB3A17705049BF6D5A/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/D50B444A47220AB9DB443F5014580ADFEAF36B28D96B80BB3A17705049BF6D5A/0/E97E37E90E2004FF865CAD09871B6A3D5AB4AC6D.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:21d0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 274129 Signature Algorithm: sha256WithRSAEncryption c7:44:6f:84:fa:06:d5:62:52:61:5e:4b:be:f5:20:f2:d6:f6: fa:9a:bd:7f:13:63:e1:20:f1:ac:c9:4e:2e:0c:39:db:56:65: f4:59:2d:d5:63:a5:e8:53:fe:0c:4f:29:81:7e:1f:4e:62:2a: 31:7f:00:2e:6b:86:74:23:2b:60:bc:78:ae:c5:eb:cd:be:53: 5d:00:64:da:58:61:97:ae:a9:8a:6e:9e:54:81:8f:e6:e6:b7: 84:fc:32:6a:d8:ef:45:2d:58:b0:1d:c8:0e:f7:fb:6f:fd:71: 80:67:0e:d3:74:e5:cf:3a:a8:a2:48:37:da:52:81:15:77:55: bd:08:ed:8e:b4:cc:9f:6c:4c:3c:93:9c:40:d7:4b:ca:08:a9: 63:00:a9:9d:bf:df:45:f7:bd:d3:55:86:bf:e0:b1:ce:ca:31: 0b:a4:d8:31:09:22:ca:bd:61:07:14:e8:7d:8f:bb:b9:d4:59: fb:cd:54:a0:08:77:36:d4:ba:35:01:46:f6:3d:7e:19:87:31: ca:bc:c1:80:76:85:a2:d2:0e:bc:ec:ac:96:4e:3e:9d:bf:bc: ff:89:d5:ac:ca:16:1b:9d:88:95:dc:22:27:8e:4e:77:02:0a: 27:ae:dc:94:6c:8c:6a:54:25:d3:ad:d9:52:1f:a5:58:2d:df: e6:64:63:7a -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUXC86kVvBNS2m0jD8ZzWbkN1bvs4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTA3MDQwMDEwMDFaFw0yNjA3MDMwMDE1MDFaMDMxMTAvBgNV BAMTKEU5N0UzN0U5MEUyMDA0RkY4NjVDQUQwOTg3MUI2QTNENUFCNEFDNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLtL3UedTMGSzJeKpsi9n4oDyd SISfzHf2PDuHzH99491FUY6HqF9gDRsnGDOU0jbrqap4Llk5hjIkDeQSJaZwjsud v3KTpJc5BY1iut/1eImvLV+QJQia/lwk2nXwCyVTQxD00tp2H/VZmveKSFqQhAfV P6Ob7Je4HXWZl8ncL0U5Q45Ktn9sGuXNU/36KOG3oJPzMRAz+qwd9XxDRQiJdN+A HwsLba/xPzYfua2sblT6YyHNTwC7tNfSh8DIajDZ5/MxYpxcon6pAWBKE0Ajs4fK lF9c/QxH80mlKPWvMsYuEOMddYoej0xAWxlD6E+3CluHmrkd/YYDZAxIvFWnAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTpfjfpDiAE/4Zc rQmHG2o9WrSsbTAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRDUwQjQ0NEE0NzIyMEFCOURCNDQzRjUw MTQ1ODBBREZFQUYzNkIyOEQ5NkI4MEJCM0ExNzcwNTA0OUJGNkQ1QS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9ENTBCNDQ0QTQ3MjIwQUI5REI0NDNGNTAxNDU4MEFERkVBRjM2QjI4RDk2 QjgwQkIzQTE3NzA1MDQ5QkY2RDVBLzAvRTk3RTM3RTkwRTIwMDRGRjg2NUNBRDA5 ODcxQjZBM0Q1QUI0QUM2RC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAMh0DAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMELtEwDQYJKoZIhvcNAQELBQADggEBAMdEb4T6 BtViUmFeS771IPLW9vqavX8TY+Eg8azJTi4MOdtWZfRZLdVjpehT/gxPKYF+H05i KjF/AC5rhnQjK2C8eK7F682+U10AZNpYYZeuqYpunlSBj+bmt4T8MmrY70UtWLAd yA73+2/9cYBnDtN05c86qKJIN9pSgRV3Vb0I7Y60zJ9sTDyTnEDXS8oIqWMAqZ2/ 30X3vdNVhr/gsc7KMQuk2DEJIsq9YQcU6H2Pu7nUWfvNVKAIdzbUujUBRvY9fhmH Mcq8wYB2haLSDrzsrJZOPp2/vP+J1azKFhudiJXcIieOTncCCieu3JRsjGpUJdOt 2VIfpVgt3+ZkY3o= -----END CERTIFICATE-----Generated at Sun Jul 6 04:56:51 2025 by rpki-client