$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC46C089D2308DED607F1405A1F7AD7A94C4B41A.cer File: EC46C089D2308DED607F1405A1F7AD7A94C4B41A.cer (raw, json) Hash identifier: KeIns0sVFGRhsSx8Kzk8GJ/s2oj+hzHMJMzceroOuCY= Subject key identifier: EC:46:C0:89:D2:30:8D:ED:60:7F:14:05:A1:F7:AD:7A:94:C4:B4:1A Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 7DE9C0870D47DABDA3E7A5A2C2BA752857E4952F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/D4CAF9074E38AD63270C4F77F8C4FADBC42DAD4F6AF90A4E9C19EFACB8A87DDA/0/EC46C089D2308DED607F1405A1F7AD7A94C4B41A.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/D4CAF9074E38AD63270C4F77F8C4FADBC42DAD4F6AF90A4E9C19EFACB8A87DDA/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Thu 18 Sep 2025 06:32:37 +0000 Certificate not after: Thu 17 Sep 2026 06:37:37 +0000 Subordinate resources: AS: 272871 IP: 2803:da90::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 21 Sep 2025 20:18:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:e9:c0:87:0d:47:da:bd:a3:e7:a5:a2:c2:ba:75:28:57:e4:95:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Sep 18 06:32:37 2025 GMT Not After : Sep 17 06:37:37 2026 GMT Subject: CN=EC46C089D2308DED607F1405A1F7AD7A94C4B41A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:bc:c7:e4:25:3c:43:00:f5:ef:1f:39:da:33: c3:fa:80:35:4c:de:6a:64:2a:34:e7:9f:76:9a:07: 4a:47:fe:bc:c0:d4:98:a8:e0:d4:7e:77:ff:ee:47: f3:45:ad:16:05:4b:88:2d:8d:99:e6:a8:ea:80:30: 3d:21:52:a8:bc:7e:87:09:47:04:da:2b:c5:97:55: 81:4b:71:f8:14:07:09:bc:20:84:9b:04:a3:51:f9: 51:8a:1b:2b:11:cb:36:37:7f:a9:9a:bb:09:58:83: 5a:38:f2:09:af:4a:30:77:65:9b:fb:48:0a:70:d5: d3:81:a6:a1:7c:b9:ca:d9:53:3d:86:26:d3:29:40: c2:58:fa:d9:5a:de:f2:c5:73:5b:bb:e1:38:77:15: b5:7d:bf:81:51:4a:bf:0c:12:38:ed:a7:3a:fd:97: 61:ac:3d:1d:89:62:36:a1:c0:0e:4d:ba:d4:a1:9d: ff:40:d4:c2:1c:6e:bd:6a:d6:d0:28:cd:c1:53:26: 8f:6f:fe:18:14:93:6a:ea:91:de:15:89:ff:31:93: cb:2e:c3:ad:7e:e5:d7:6f:ff:da:76:90:eb:74:73: fa:0f:66:3c:45:5a:be:b8:ba:7e:ca:46:7b:a3:4b: 17:8c:4d:2f:a4:ac:5e:80:5c:8f:06:ea:92:54:51: 97:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: EC:46:C0:89:D2:30:8D:ED:60:7F:14:05:A1:F7:AD:7A:94:C4:B4:1A X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/D4CAF9074E38AD63270C4F77F8C4FADBC42DAD4F6AF90A4E9C19EFACB8A87DDA/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/D4CAF9074E38AD63270C4F77F8C4FADBC42DAD4F6AF90A4E9C19EFACB8A87DDA/0/EC46C089D2308DED607F1405A1F7AD7A94C4B41A.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:da90::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 272871 Signature Algorithm: sha256WithRSAEncryption c4:a2:9e:70:ec:54:38:24:a8:48:79:7b:ff:44:98:9e:dd:67: a6:69:17:a9:b9:3d:3f:a4:ec:bc:fd:78:0d:e1:67:f9:4b:2c: f7:ba:c0:0d:40:76:e8:41:38:53:f2:73:f2:08:28:09:fd:8c: f9:f2:ee:62:cf:5c:4f:b1:fc:75:b9:12:61:f7:39:21:6b:c1: 13:03:60:eb:51:32:69:92:ea:e7:09:44:12:45:d9:14:5c:16: ef:b7:b2:58:13:12:5f:d3:57:19:51:ca:ce:91:a9:5d:9c:85: 89:27:a8:36:b4:52:86:de:8d:a7:62:f5:97:02:6a:41:43:ba: 3d:ac:22:2f:1e:d2:0e:5a:92:ba:6a:6e:de:af:cb:5f:92:57: cd:93:ea:bc:ea:86:43:fb:c9:29:87:30:30:61:86:b3:cb:fc: e4:0f:14:52:32:b4:26:c2:1f:70:bf:33:76:1f:e9:bf:2e:49: 25:6c:40:f1:52:c6:90:ef:b2:12:da:91:2f:44:9a:04:bb:8a: de:9e:40:37:84:a5:07:e0:f0:4d:46:27:ce:bb:74:b4:3b:5c: 25:af:f3:47:a0:cc:c6:e2:6e:35:0f:29:07:ff:8d:2c:1e:5c: 65:7e:92:7c:26:8d:6d:dd:c7:cb:aa:f4:2a:98:79:d2:79:9b: 56:89:ab:5d -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUfenAhw1H2r2j56Wiwrp1KFfklS8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTA5MTgwNjMyMzdaFw0yNjA5MTcwNjM3MzdaMDMxMTAvBgNV BAMTKEVDNDZDMDg5RDIzMDhERUQ2MDdGMTQwNUExRjdBRDdBOTRDNEI0MUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3vMfkJTxDAPXvHznaM8P6gDVM 3mpkKjTnn3aaB0pH/rzA1Jio4NR+d//uR/NFrRYFS4gtjZnmqOqAMD0hUqi8focJ RwTaK8WXVYFLcfgUBwm8IISbBKNR+VGKGysRyzY3f6mauwlYg1o48gmvSjB3ZZv7 SApw1dOBpqF8ucrZUz2GJtMpQMJY+tla3vLFc1u74Th3FbV9v4FRSr8MEjjtpzr9 l2GsPR2JYjahwA5NutShnf9A1MIcbr1q1tAozcFTJo9v/hgUk2rqkd4Vif8xk8su w61+5ddv/9p2kOt0c/oPZjxFWr64un7KRnujSxeMTS+krF6AXI8G6pJUUZcjAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTsRsCJ0jCN7WB/ FAWh9616lMS0GjAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRDRDQUY5MDc0RTM4QUQ2MzI3MEM0Rjc3 RjhDNEZBREJDNDJEQUQ0RjZBRjkwQTRFOUMxOUVGQUNCOEE4N0REQS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9ENENBRjkwNzRFMzhBRDYzMjcwQzRGNzdGOEM0RkFEQkM0MkRBRDRGNkFG OTBBNEU5QzE5RUZBQ0I4QTg3RERBLzAvRUM0NkMwODlEMjMwOERFRDYwN0YxNDA1 QTFGN0FEN0E5NEM0QjQxQS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAPakDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEKecwDQYJKoZIhvcNAQELBQADggEBAMSinnDs VDgkqEh5e/9EmJ7dZ6ZpF6m5PT+k7Lz9eA3hZ/lLLPe6wA1AduhBOFPyc/IIKAn9 jPny7mLPXE+x/HW5EmH3OSFrwRMDYOtRMmmS6ucJRBJF2RRcFu+3slgTEl/TVxlR ys6RqV2chYknqDa0Uobejadi9ZcCakFDuj2sIi8e0g5akrpqbt6vy1+SV82T6rzq hkP7ySmHMDBhhrPL/OQPFFIytCbCH3C/M3Yf6b8uSSVsQPFSxpDvshLakS9EmgS7 it6eQDeEpQfg8E1GJ867dLQ7XCWv80egzMbibjUPKQf/jSweXGV+knwmjW3dx8uq 9CqYedJ5m1aJq10= -----END CERTIFICATE-----Generated at Thu Sep 18 14:10:15 2025 by rpki-client