$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1A2102354A6A1C78C1C17E4CB659C3AFCDDC037.cer File: F1A2102354A6A1C78C1C17E4CB659C3AFCDDC037.cer (raw, json) Hash identifier: 8c5IMMckZEirxPV75QwVmc8lkfVJU5uCMwL9HVycGH4= Subject key identifier: F1:A2:10:23:54:A6:A1:C7:8C:1C:17:E4:CB:65:9C:3A:FC:DD:C0:37 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 5AEF91760ABD086BBBB7B59FC8B64485F8958864 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/4F481BA40F3CC682406A8D9565CEFFFF352BF9B51EACAEDEB1C26A38EF5D88BF/0/F1A2102354A6A1C78C1C17E4CB659C3AFCDDC037.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/4F481BA40F3CC682406A8D9565CEFFFF352BF9B51EACAEDEB1C26A38EF5D88BF/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Thu 11 Sep 2025 22:15:01 +0000 Certificate not after: Thu 10 Sep 2026 22:20:01 +0000 Subordinate resources: AS: 273200 IP: 2803:e650::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 21 Sep 2025 20:18:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:ef:91:76:0a:bd:08:6b:bb:b7:b5:9f:c8:b6:44:85:f8:95:88:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Sep 11 22:15:01 2025 GMT Not After : Sep 10 22:20:01 2026 GMT Subject: CN=F1A2102354A6A1C78C1C17E4CB659C3AFCDDC037 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:9b:69:f2:0a:ed:fd:7a:2d:5c:d3:95:77:e4: 5e:8a:51:65:9c:6c:10:8f:e9:e0:1b:74:38:bf:54: 48:82:f5:b8:bd:28:fb:20:1c:2d:fb:67:60:31:9f: 59:1f:47:2e:39:59:bd:bb:b0:5e:8e:6a:1b:f1:10: 3e:07:6e:ab:4d:fe:5f:1c:f9:1e:03:4f:3b:9a:36: 6e:a5:12:3a:5a:c9:46:96:6f:8f:a7:45:53:5f:fb: 9c:09:ce:70:c0:69:bd:aa:35:2b:bc:bd:30:ad:35: ac:1f:9a:03:04:65:b9:9c:5c:72:22:56:fd:8d:33: d4:a9:24:78:f2:7e:5d:ff:18:c9:6b:75:c8:b9:1a: 9d:28:92:4b:fc:ab:af:a3:34:2c:99:f4:67:f2:33: 35:27:c9:56:cc:05:1d:06:fe:1e:e2:3b:d4:f0:f2: b2:25:32:85:94:48:23:86:ba:4f:dd:a9:3b:c7:a1: e5:ef:78:33:82:f3:25:94:fc:01:c8:5f:2f:92:cd: 61:f2:b9:a9:b7:f5:de:92:b2:8d:c0:c1:bf:52:84: a1:ab:39:19:da:9b:28:5c:e7:77:16:c0:74:9d:45: 95:b4:e9:b1:66:0a:b7:70:de:1f:13:9c:6c:33:82: 6d:76:8b:fe:46:4b:78:41:e6:40:92:fc:f9:1c:42: a1:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F1:A2:10:23:54:A6:A1:C7:8C:1C:17:E4:CB:65:9C:3A:FC:DD:C0:37 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/4F481BA40F3CC682406A8D9565CEFFFF352BF9B51EACAEDEB1C26A38EF5D88BF/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/4F481BA40F3CC682406A8D9565CEFFFF352BF9B51EACAEDEB1C26A38EF5D88BF/0/F1A2102354A6A1C78C1C17E4CB659C3AFCDDC037.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:e650::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273200 Signature Algorithm: sha256WithRSAEncryption a9:77:ca:bc:18:25:ef:72:03:86:e1:20:c8:75:34:32:4d:9d: 44:ac:c0:07:51:8c:d0:3c:ca:cf:01:94:d7:6f:f2:03:78:1a: ab:41:78:30:27:61:1d:1b:c9:6c:df:70:d5:5e:5c:21:86:82: 55:d4:54:9d:95:3e:65:d7:91:29:32:16:38:d9:6c:8d:56:e7: 6f:d8:60:4a:86:2a:ca:f5:f5:38:b9:5f:02:c0:ab:b6:91:53: e2:0f:81:24:e2:55:24:1d:97:e2:b0:fc:38:d1:99:b6:77:97: 71:3b:bb:65:a6:5b:13:28:4d:ed:30:56:f8:1e:1b:a1:74:d1: 54:f0:84:17:2b:ff:ac:9c:3e:a5:d8:99:f7:5c:97:8c:ac:28: 83:fc:d1:15:aa:de:84:11:96:5a:5b:86:c5:45:15:4c:ad:47: c5:4f:60:a9:49:53:1c:41:57:c3:c2:64:9a:77:d7:ad:60:26: 9a:93:03:f2:5b:82:ae:00:fb:40:d8:62:0d:68:9c:7c:c1:06: 06:f7:c1:0e:7b:2e:36:0d:0e:18:17:5b:e6:eb:9a:d1:a1:11: 0c:9b:89:50:8d:dd:97:bb:7b:31:e5:bc:31:d1:30:a3:3d:cf: 33:1e:c6:74:9f:37:c2:ce:8f:48:24:c7:f1:47:7a:5d:de:64: f6:bb:f4:26 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUWu+Rdgq9CGu7t7WfyLZEhfiViGQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTA5MTEyMjE1MDFaFw0yNjA5MTAyMjIwMDFaMDMxMTAvBgNV BAMTKEYxQTIxMDIzNTRBNkExQzc4QzFDMTdFNENCNjU5QzNBRkNEREMwMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEm2nyCu39ei1c05V35F6KUWWc bBCP6eAbdDi/VEiC9bi9KPsgHC37Z2Axn1kfRy45Wb27sF6OahvxED4HbqtN/l8c +R4DTzuaNm6lEjpayUaWb4+nRVNf+5wJznDAab2qNSu8vTCtNawfmgMEZbmcXHIi Vv2NM9SpJHjyfl3/GMlrdci5Gp0okkv8q6+jNCyZ9GfyMzUnyVbMBR0G/h7iO9Tw 8rIlMoWUSCOGuk/dqTvHoeXveDOC8yWU/AHIXy+SzWHyuam39d6Sso3Awb9ShKGr ORnamyhc53cWwHSdRZW06bFmCrdw3h8TnGwzgm12i/5GS3hB5kCS/PkcQqEhAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTxohAjVKahx4wc F+TLZZw6/N3ANzAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNEY0ODFCQTQwRjNDQzY4MjQwNkE4RDk1 NjVDRUZGRkYzNTJCRjlCNTFFQUNBRURFQjFDMjZBMzhFRjVEODhCRi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80RjQ4MUJBNDBGM0NDNjgyNDA2QThEOTU2NUNFRkZGRjM1MkJGOUI1MUVB Q0FFREVCMUMyNkEzOEVGNUQ4OEJGLzAvRjFBMjEwMjM1NEE2QTFDNzhDMUMxN0U0 Q0I2NTlDM0FGQ0REQzAzNy5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAPmUDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEKzAwDQYJKoZIhvcNAQELBQADggEBAKl3yrwY Je9yA4bhIMh1NDJNnUSswAdRjNA8ys8BlNdv8gN4GqtBeDAnYR0byWzfcNVeXCGG glXUVJ2VPmXXkSkyFjjZbI1W52/YYEqGKsr19Ti5XwLAq7aRU+IPgSTiVSQdl+Kw /DjRmbZ3l3E7u2WmWxMoTe0wVvgeG6F00VTwhBcr/6ycPqXYmfdcl4ysKIP80RWq 3oQRllpbhsVFFUytR8VPYKlJUxxBV8PCZJp3161gJpqTA/Jbgq4A+0DYYg1onHzB Bgb3wQ57LjYNDhgXW+brmtGhEQybiVCN3Ze7ezHlvDHRMKM9zzMexnSfN8LOj0gk x/FHel3eZPa79CY= -----END CERTIFICATE-----Generated at Thu Sep 18 19:02:10 2025 by rpki-client