$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/374193CBA9F2789EEAD8F4332D8C61B9E274DB1C.cer File: 374193CBA9F2789EEAD8F4332D8C61B9E274DB1C.cer (raw, json) Hash identifier: 41h1QI0sBnoKPjX7pY4+sEd28L1SrYk1/Qe8uu6bwTY= Subject key identifier: 37:41:93:CB:A9:F2:78:9E:EA:D8:F4:33:2D:8C:61:B9:E2:74:DB:1C Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 7AB2699AA675BB3AD33863FB987398F866B65DAF Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/624A8B9BFE663C452B74DB18265BB268AB482F1EAD9E0283496A00925F59583E/0/374193CBA9F2789EEAD8F4332D8C61B9E274DB1C.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/624A8B9BFE663C452B74DB18265BB268AB482F1EAD9E0283496A00925F59583E/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Sat 27 Sep 2025 19:48:24 +0000 Certificate not after: Sat 26 Sep 2026 19:53:24 +0000 Subordinate resources: AS: 273967 IP: 192.141.128.0/22 IP: 2803:e820::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 24 Oct 2025 00:51:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:b2:69:9a:a6:75:bb:3a:d3:38:63:fb:98:73:98:f8:66:b6:5d:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Sep 27 19:48:24 2025 GMT Not After : Sep 26 19:53:24 2026 GMT Subject: CN=374193CBA9F2789EEAD8F4332D8C61B9E274DB1C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a5:23:86:3b:47:22:33:40:ae:54:05:fd:34: c6:e5:ee:9a:0a:86:dc:04:7e:b5:08:35:47:79:16: 8d:9e:5b:d0:ca:d8:d0:c6:af:ea:bb:a8:8e:a3:c3: 2b:95:6a:f1:02:9f:f1:cc:19:52:1b:ae:b7:ed:69: 96:31:32:37:26:c2:d9:b6:fe:d1:2e:05:f0:18:fd: 80:95:5d:0a:c9:17:eb:ea:00:8d:49:e6:50:97:24: 6d:e4:8b:2e:2c:37:c1:83:d4:fb:6a:21:e0:81:d6: b0:7e:98:ff:6b:b7:eb:f3:7c:96:67:f2:95:7c:37: 92:ec:a9:f7:17:0c:65:81:82:94:94:33:4a:27:df: 68:24:2f:51:4a:f9:7f:a2:e2:9d:f5:3b:dc:22:1f: 2b:6d:fb:95:49:62:6a:3a:0f:00:99:1c:af:31:7e: c5:93:c6:67:90:87:84:67:6d:24:f9:cb:12:84:65: 46:a2:a4:2b:b5:b9:53:6c:3d:b8:d3:28:b9:ec:a4: 9f:ba:6e:03:0d:2d:72:cf:83:a5:1a:eb:f1:eb:a6: b1:09:bc:c4:0a:c0:67:c8:84:b2:fd:9c:17:73:86: 25:a4:80:ec:34:d3:33:6c:c8:b2:42:c5:22:64:28: b0:7c:b5:19:cc:20:0c:5c:75:b5:0b:e0:b8:e0:01: ba:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 37:41:93:CB:A9:F2:78:9E:EA:D8:F4:33:2D:8C:61:B9:E2:74:DB:1C X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/624A8B9BFE663C452B74DB18265BB268AB482F1EAD9E0283496A00925F59583E/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/624A8B9BFE663C452B74DB18265BB268AB482F1EAD9E0283496A00925F59583E/0/374193CBA9F2789EEAD8F4332D8C61B9E274DB1C.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.141.128.0/22 IPv6: 2803:e820::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273967 Signature Algorithm: sha256WithRSAEncryption e6:d8:e2:e4:ed:ea:00:3c:17:59:55:4b:2c:0e:c0:b4:ed:ab: 50:eb:4e:68:27:56:00:fc:7e:0a:ca:c5:6b:be:d2:18:66:d3: 4b:9a:70:1d:81:6f:82:41:bb:74:c1:38:ff:93:cc:e3:d0:ba: 02:07:37:36:5c:89:f3:34:d4:cd:c0:02:4a:05:c0:86:96:4e: 05:9c:35:ab:4d:33:0f:57:d1:9d:91:5b:36:2c:bd:cd:5f:45: c0:83:61:78:59:4a:24:e0:1a:ca:6e:56:e9:f2:bf:28:64:a5: d8:02:64:ce:77:99:f2:86:14:53:ff:96:3e:d0:b4:46:3d:19: 48:3c:6e:a6:1d:69:92:93:2d:fc:bf:03:90:a5:b3:12:40:bb: 4a:b0:10:c7:70:aa:0d:f7:45:ae:bc:9a:3e:bf:0f:14:f4:06: ab:3a:f9:fe:69:08:1f:83:f6:85:47:42:5e:b3:8b:cf:9b:a0: 3d:a8:a3:57:09:a1:0b:92:10:38:77:db:86:0b:98:df:fc:26: 78:b2:e8:76:19:b8:c1:9c:e4:73:29:aa:e7:d4:4f:e7:94:77: 4c:c9:64:9f:f0:ed:5d:9f:1a:27:16:9a:3f:79:ea:aa:46:d0: 10:b3:13:d9:ba:1f:6d:ea:56:c5:3a:d3:95:bb:69:cb:0a:f4: 25:ba:7f:89 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUerJpmqZ1uzrTOGP7mHOY+Ga2Xa8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTA5MjcxOTQ4MjRaFw0yNjA5MjYxOTUzMjRaMDMxMTAvBgNV BAMTKDM3NDE5M0NCQTlGMjc4OUVFQUQ4RjQzMzJEOEM2MUI5RTI3NERCMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKpSOGO0ciM0CuVAX9NMbl7poK htwEfrUINUd5Fo2eW9DK2NDGr+q7qI6jwyuVavECn/HMGVIbrrftaZYxMjcmwtm2 /tEuBfAY/YCVXQrJF+vqAI1J5lCXJG3kiy4sN8GD1PtqIeCB1rB+mP9rt+vzfJZn 8pV8N5LsqfcXDGWBgpSUM0on32gkL1FK+X+i4p31O9wiHytt+5VJYmo6DwCZHK8x fsWTxmeQh4RnbST5yxKEZUaipCu1uVNsPbjTKLnspJ+6bgMNLXLPg6Ua6/HrprEJ vMQKwGfIhLL9nBdzhiWkgOw00zNsyLJCxSJkKLB8tRnMIAxcdbUL4LjgAbpRAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ3QZPLqfJ4nurY 9DMtjGG54nTbHDAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNjI0QThCOUJGRTY2M0M0NTJCNzREQjE4 MjY1QkIyNjhBQjQ4MkYxRUFEOUUwMjgzNDk2QTAwOTI1RjU5NTgzRS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy82MjRBOEI5QkZFNjYzQzQ1MkI3NERCMTgyNjVCQjI2OEFCNDgyRjFFQUQ5 RTAyODM0OTZBMDA5MjVGNTk1ODNFLzAvMzc0MTkzQ0JBOUYyNzg5RUVBRDhGNDMz MkQ4QzYxQjlFMjc0REIxQy5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCwI2AMA0EAgAC MAcDBQAoA+ggMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQuLzANBgkqhkiG9w0B AQsFAAOCAQEA5tji5O3qADwXWVVLLA7AtO2rUOtOaCdWAPx+CsrFa77SGGbTS5pw HYFvgkG7dME4/5PM49C6Agc3NlyJ8zTUzcACSgXAhpZOBZw1q00zD1fRnZFbNiy9 zV9FwINheFlKJOAaym5W6fK/KGSl2AJkzneZ8oYUU/+WPtC0Rj0ZSDxuph1pkpMt /L8DkKWzEkC7SrAQx3CqDfdFrryaPr8PFPQGqzr5/mkIH4P2hUdCXrOLz5ugPaij VwmhC5IQOHfbhguY3/wmeLLodhm4wZzkcymq59RP55R3TMlkn/DtXZ8aJxaaP3nq qkbQELMT2bofbepWxTrTlbtpywr0Jbp/iQ== -----END CERTIFICATE-----Generated at Sun Oct 19 21:03:12 2025 by rpki-client