$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E99B22CCF68622142CA1F92E8A488B9DC2B16E33.cer File: E99B22CCF68622142CA1F92E8A488B9DC2B16E33.cer (raw, json) Hash identifier: xiiOvdSuutg1VYL0morZaTik9nnslWhPL5z5nOshSp0= Subject key identifier: E9:9B:22:CC:F6:86:22:14:2C:A1:F9:2E:8A:48:8B:9D:C2:B1:6E:33 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 3F1A28A3184EA50E7ED2CE8DE4B018FC9AB7A1DC Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/C451155C9EC948FC3CAEDCA4204A8E18CFC0E06A78FACFB081EEB0554C647B96/0/E99B22CCF68622142CA1F92E8A488B9DC2B16E33.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/C451155C9EC948FC3CAEDCA4204A8E18CFC0E06A78FACFB081EEB0554C647B96/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Thu 23 Oct 2025 10:40:01 +0000 Certificate not after: Thu 22 Oct 2026 10:45:01 +0000 Subordinate resources: AS: 272982 IP: 190.9.68.0/23 IP: 2803:be90::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 29 Oct 2025 22:57:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:1a:28:a3:18:4e:a5:0e:7e:d2:ce:8d:e4:b0:18:fc:9a:b7:a1:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Oct 23 10:40:01 2025 GMT Not After : Oct 22 10:45:01 2026 GMT Subject: CN=E99B22CCF68622142CA1F92E8A488B9DC2B16E33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ac:67:07:12:c2:e5:0b:cb:fc:b2:4b:70:df: 29:77:9e:cf:b5:57:a6:4e:d4:0d:d4:c3:cf:fc:04: e7:f9:6d:86:9e:3a:df:b5:45:d3:86:f7:5b:53:33: 68:ac:a4:1e:6e:1a:be:54:6e:bf:ac:37:22:e3:a7: 8e:a6:67:be:80:37:f1:2f:6c:10:8f:be:52:f7:77: e2:6c:52:8d:d7:71:63:c3:f6:97:1c:b3:c4:6b:5f: 88:c2:ad:a7:77:65:aa:7c:6d:a9:c3:d0:d9:a9:44: 39:b7:55:72:6f:8b:b5:5d:c9:03:b2:b0:ef:86:16: ad:84:3e:90:6c:a4:1e:c4:2e:91:39:5f:50:9a:1b: 20:d8:a0:c4:a0:d7:dc:f7:36:d9:be:27:82:33:f6: d2:a2:bf:b6:e9:da:3c:eb:ff:28:a6:e0:1b:f3:75: 5f:42:7d:b6:e6:b7:3d:7c:37:1f:70:a0:a0:5f:33: d5:d3:d8:98:d6:74:de:30:a1:ce:92:4f:1a:ad:2a: 07:7d:cf:70:86:b6:5a:dd:c6:22:23:ec:86:53:b5: 3b:e4:8e:da:b6:d0:32:f9:ad:a9:c1:5f:ef:bc:a5: 10:dd:38:64:01:31:f4:d5:25:34:d4:cf:b8:2f:d2: e0:7d:aa:df:e8:a9:3b:93:5d:9c:f5:da:8a:f0:35: ba:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E9:9B:22:CC:F6:86:22:14:2C:A1:F9:2E:8A:48:8B:9D:C2:B1:6E:33 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/C451155C9EC948FC3CAEDCA4204A8E18CFC0E06A78FACFB081EEB0554C647B96/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/C451155C9EC948FC3CAEDCA4204A8E18CFC0E06A78FACFB081EEB0554C647B96/0/E99B22CCF68622142CA1F92E8A488B9DC2B16E33.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 190.9.68.0/23 IPv6: 2803:be90::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 272982 Signature Algorithm: sha256WithRSAEncryption c0:ab:fb:d2:28:dc:b0:7d:1f:d8:10:1a:ba:fb:72:ed:a3:28: c9:cb:ed:9d:44:ff:5d:32:58:46:70:49:d0:12:ef:98:b6:b5: 59:2f:d9:72:c1:48:8f:84:44:e3:d0:cd:08:df:1d:30:2c:47: 02:e5:0f:75:4d:18:25:2d:5f:ce:2b:10:0f:7e:d3:4e:8a:03: f6:b5:03:17:58:3e:34:c6:aa:d7:98:7d:7d:7c:4a:b0:61:bb: 79:f4:0c:d1:17:c8:de:c7:84:9f:7f:05:fd:82:5b:c8:cc:f4: e0:ea:6a:a3:0f:65:d3:94:b0:e0:22:f7:7a:0b:35:d5:19:95: 22:a2:c3:55:a0:8c:1a:ac:03:d8:e6:e3:52:87:f6:92:18:23: cc:dd:f1:d7:bb:ef:c0:4e:c1:8e:76:d7:12:8b:47:01:60:24: 80:ee:87:67:fc:18:8d:bc:9e:e3:37:e8:3c:61:be:9a:d6:fb: 00:24:07:87:db:e8:01:22:02:11:5b:21:3f:a9:2f:99:07:c7: 39:fc:7b:d8:4e:7d:bc:44:df:c3:de:30:f2:3f:8c:47:d4:ff: 4f:c5:2e:0f:48:29:d2:65:94:48:2c:6f:3d:c2:aa:68:19:8d: 42:e8:15:76:74:b2:e6:13:e9:2b:74:b5:af:cd:08:62:fd:b7: a0:d7:70:45 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUPxoooxhOpQ5+0s6N5LAY/Jq3odwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTEwMjMxMDQwMDFaFw0yNjEwMjIxMDQ1MDFaMDMxMTAvBgNV BAMTKEU5OUIyMkNDRjY4NjIyMTQyQ0ExRjkyRThBNDg4QjlEQzJCMTZFMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyrGcHEsLlC8v8sktw3yl3ns+1 V6ZO1A3Uw8/8BOf5bYaeOt+1RdOG91tTM2ispB5uGr5Ubr+sNyLjp46mZ76AN/Ev bBCPvlL3d+JsUo3XcWPD9pccs8RrX4jCrad3Zap8banD0NmpRDm3VXJvi7VdyQOy sO+GFq2EPpBspB7ELpE5X1CaGyDYoMSg19z3Ntm+J4Iz9tKiv7bp2jzr/yim4Bvz dV9Cfbbmtz18Nx9woKBfM9XT2JjWdN4woc6STxqtKgd9z3CGtlrdxiIj7IZTtTvk jtq20DL5ranBX++8pRDdOGQBMfTVJTTUz7gv0uB9qt/oqTuTXZz12orwNbplAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTpmyLM9oYiFCyh +S6KSIudwrFuMzAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQzQ1MTE1NUM5RUM5NDhGQzNDQUVEQ0E0 MjA0QThFMThDRkMwRTA2QTc4RkFDRkIwODFFRUIwNTU0QzY0N0I5Ni8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9DNDUxMTU1QzlFQzk0OEZDM0NBRURDQTQyMDRBOEUxOENGQzBFMDZBNzhG QUNGQjA4MUVFQjA1NTRDNjQ3Qjk2LzAvRTk5QjIyQ0NGNjg2MjIxNDJDQTFGOTJF OEE0ODhCOURDMkIxNkUzMy5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBvglEMA0EAgAC MAcDBQAoA76QMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQqVjANBgkqhkiG9w0B AQsFAAOCAQEAwKv70ijcsH0f2BAauvty7aMoycvtnUT/XTJYRnBJ0BLvmLa1WS/Z csFIj4RE49DNCN8dMCxHAuUPdU0YJS1fzisQD37TTooD9rUDF1g+NMaq15h9fXxK sGG7efQM0RfI3seEn38F/YJbyMz04Opqow9l05Sw4CL3egs11RmVIqLDVaCMGqwD 2ObjUof2khgjzN3x17vvwE7BjnbXEotHAWAkgO6HZ/wYjbye4zfoPGG+mtb7ACQH h9voASICEVshP6kvmQfHOfx72E59vETfw94w8j+MR9T/T8UuD0gp0mWUSCxvPcKq aBmNQugVdnSy5hPpK3S1r80IYv23oNdwRQ== -----END CERTIFICATE-----Generated at Sun Oct 26 08:59:30 2025 by rpki-client