$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4401FB356C9BA31ACC0B781201E29CDD245C8CB5.cer File: 4401FB356C9BA31ACC0B781201E29CDD245C8CB5.cer (raw, json) Hash identifier: aFsdrMSRV07U7zQ+0k0lhYtFPAHxKMD9Fdu4qwJbZtY= Subject key identifier: 44:01:FB:35:6C:9B:A3:1A:CC:0B:78:12:01:E2:9C:DD:24:5C:8C:B5 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 168C66C9081D89ABF62FB878B5F8A65FBFD31BA1 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/3075B35EC802BEAFB945E9AF1E1866D6BCAA025FC719D85F6DE9796AA8F1538D/0/4401FB356C9BA31ACC0B781201E29CDD245C8CB5.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/3075B35EC802BEAFB945E9AF1E1866D6BCAA025FC719D85F6DE9796AA8F1538D/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 12 Aug 2025 15:05:01 +0000 Certificate not after: Tue 11 Aug 2026 15:10:01 +0000 Subordinate resources: AS: 274001 IP: 2803:f8d0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 26 Aug 2025 06:12:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:8c:66:c9:08:1d:89:ab:f6:2f:b8:78:b5:f8:a6:5f:bf:d3:1b:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Aug 12 15:05:01 2025 GMT Not After : Aug 11 15:10:01 2026 GMT Subject: CN=4401FB356C9BA31ACC0B781201E29CDD245C8CB5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:51:2d:10:53:c3:d1:10:a5:33:f3:ff:6c:36: c5:4f:c2:38:e7:b8:f7:b6:47:94:c6:c3:0b:bf:5e: 28:82:54:cf:fa:40:0f:a1:24:61:c8:ea:c9:8a:9b: 30:3a:61:23:56:f5:be:5f:c1:33:85:5c:75:0b:88: 2c:ec:c8:d0:25:cb:85:30:f9:7f:50:66:4f:9d:8a: 70:a7:5f:cc:84:8e:f7:aa:87:ad:36:c4:bf:30:67: 8c:3e:ca:b1:f0:8a:32:c7:e9:a5:23:3d:b9:cb:56: aa:67:59:70:c6:84:fb:03:0c:33:b4:e9:0c:a4:75: 71:8c:b5:3b:3d:bc:4e:a9:ff:0d:0b:b7:4b:08:d7: 3d:03:7d:64:f8:17:e6:65:0d:c3:e0:a5:ea:8a:3d: be:0c:7c:c0:bc:30:05:6f:d3:42:31:9c:31:c5:97: e0:23:b3:ec:9c:0f:a0:e0:30:7d:bd:91:a1:b8:9f: 59:dc:f8:22:93:74:06:41:0c:be:7f:90:30:aa:0d: b2:99:0a:92:18:8a:90:e0:7c:e4:f0:a5:17:27:86: 40:66:40:b8:d4:2f:97:a4:b2:77:40:a0:00:29:00: 6e:5f:dd:4e:61:69:d3:77:08:6f:40:d9:d3:f4:5f: f1:0b:18:31:fc:48:8a:24:4b:06:40:aa:56:70:c6: 3d:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 44:01:FB:35:6C:9B:A3:1A:CC:0B:78:12:01:E2:9C:DD:24:5C:8C:B5 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/3075B35EC802BEAFB945E9AF1E1866D6BCAA025FC719D85F6DE9796AA8F1538D/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/3075B35EC802BEAFB945E9AF1E1866D6BCAA025FC719D85F6DE9796AA8F1538D/0/4401FB356C9BA31ACC0B781201E29CDD245C8CB5.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:f8d0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 274001 Signature Algorithm: sha256WithRSAEncryption 55:06:48:c5:30:fb:a9:60:15:6d:43:37:59:f4:88:30:8f:b0: 43:a2:dd:c7:6d:11:9f:8e:3b:0d:98:e4:2e:2c:bf:ef:5d:fc: 7a:29:c3:c1:56:5c:cb:66:d5:3b:10:87:de:08:02:d4:90:01: 87:82:59:00:ef:d3:df:2b:d1:d6:ac:7d:12:87:ee:53:b1:6a: d8:5d:30:a6:c0:ba:36:73:90:14:d6:d2:cd:76:f5:b3:f8:af: af:3c:6e:a2:94:1e:e8:44:c2:49:88:b7:ea:0c:23:80:16:d4: cd:52:b2:b7:51:3b:ba:9e:7a:ce:4e:89:70:99:25:98:e7:4d: 71:3f:e8:92:98:4d:23:96:9f:ed:72:78:a6:8f:27:80:30:f1: f2:41:db:b1:5e:d7:aa:9b:2c:03:30:92:50:58:65:a5:5c:df: ac:c2:32:9c:88:ab:a5:78:6c:06:38:00:7c:af:e6:dc:84:db: 37:27:e3:b5:94:e6:73:83:48:6b:83:70:32:86:3a:6d:1f:5b: 6a:fc:bf:d7:01:b5:6e:de:89:1d:94:09:76:33:31:90:b2:e8: dc:02:25:82:9e:03:67:32:83:ef:f9:da:82:9b:53:75:57:17: fb:87:c6:54:fe:cd:4c:21:34:25:26:ed:04:f8:fd:03:c8:f4: ff:57:b9:82 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUFoxmyQgdiav2L7h4tfimX7/TG6EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTA4MTIxNTA1MDFaFw0yNjA4MTExNTEwMDFaMDMxMTAvBgNV BAMTKDQ0MDFGQjM1NkM5QkEzMUFDQzBCNzgxMjAxRTI5Q0REMjQ1QzhDQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8US0QU8PREKUz8/9sNsVPwjjn uPe2R5TGwwu/XiiCVM/6QA+hJGHI6smKmzA6YSNW9b5fwTOFXHULiCzsyNAly4Uw +X9QZk+dinCnX8yEjveqh602xL8wZ4w+yrHwijLH6aUjPbnLVqpnWXDGhPsDDDO0 6QykdXGMtTs9vE6p/w0Lt0sI1z0DfWT4F+ZlDcPgpeqKPb4MfMC8MAVv00IxnDHF l+Ajs+ycD6DgMH29kaG4n1nc+CKTdAZBDL5/kDCqDbKZCpIYipDgfOTwpRcnhkBm QLjUL5eksndAoAApAG5f3U5hadN3CG9A2dP0X/ELGDH8SIokSwZAqlZwxj3VAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBREAfs1bJujGswL eBIB4pzdJFyMtTAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMzA3NUIzNUVDODAyQkVBRkI5NDVFOUFG MUUxODY2RDZCQ0FBMDI1RkM3MTlEODVGNkRFOTc5NkFBOEYxNTM4RC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8zMDc1QjM1RUM4MDJCRUFGQjk0NUU5QUYxRTE4NjZENkJDQUEwMjVGQzcx OUQ4NUY2REU5Nzk2QUE4RjE1MzhELzAvNDQwMUZCMzU2QzlCQTMxQUNDMEI3ODEy MDFFMjlDREQyNDVDOENCNS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAP40DAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMELlEwDQYJKoZIhvcNAQELBQADggEBAFUGSMUw +6lgFW1DN1n0iDCPsEOi3cdtEZ+OOw2Y5C4sv+9d/Hopw8FWXMtm1TsQh94IAtSQ AYeCWQDv098r0dasfRKH7lOxathdMKbAujZzkBTW0s129bP4r688bqKUHuhEwkmI t+oMI4AW1M1SsrdRO7qees5OiXCZJZjnTXE/6JKYTSOWn+1yeKaPJ4Aw8fJB27Fe 16qbLAMwklBYZaVc36zCMpyIq6V4bAY4AHyv5tyE2zcn47WU5nODSGuDcDKGOm0f W2r8v9cBtW7eiR2UCXYzMZCy6NwCJYKeA2cyg+/52oKbU3VXF/uHxlT+zUwhNCUm 7QT4/QPI9P9XuYI= -----END CERTIFICATE-----Generated at Sat Aug 23 07:36:14 2025 by rpki-client