$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4C36552D17EEEB8CC65AE8FB33251E48AA0B2089.cer File: 4C36552D17EEEB8CC65AE8FB33251E48AA0B2089.cer (raw, json) Hash identifier: 8S5/Lth7iYz/MSaTC6dnyFG8fXJERRbCkYC4Ha3suFU= Subject key identifier: 4C:36:55:2D:17:EE:EB:8C:C6:5A:E8:FB:33:25:1E:48:AA:0B:20:89 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 0A5443546F911ACBEB7E58D2B35D8A9D31A57AE8 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/EDBE0634B402CF8C4B2D42B8B231D0FC09FA039BB667AD6AE8B2EFED737B605D/0/4C36552D17EEEB8CC65AE8FB33251E48AA0B2089.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/EDBE0634B402CF8C4B2D42B8B231D0FC09FA039BB667AD6AE8B2EFED737B605D/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Sat 11 Oct 2025 03:08:47 +0000 Certificate not after: Sat 10 Oct 2026 03:13:47 +0000 Subordinate resources: AS: 64165 IP: 2803:d0d0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 24 Oct 2025 00:51:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:54:43:54:6f:91:1a:cb:eb:7e:58:d2:b3:5d:8a:9d:31:a5:7a:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Oct 11 03:08:47 2025 GMT Not After : Oct 10 03:13:47 2026 GMT Subject: CN=4C36552D17EEEB8CC65AE8FB33251E48AA0B2089 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:9c:22:9c:2d:3e:60:ee:e6:df:8e:50:66:2f: f2:59:13:36:13:29:14:a7:d3:38:7b:f8:05:83:ec: 78:5c:6d:f5:64:b9:3c:35:32:11:16:27:d9:96:c6: 8a:c2:ed:f4:ad:3b:76:04:d7:29:47:7b:33:a3:84: 72:b3:b4:63:16:85:8c:44:11:14:08:65:c7:6d:49: e8:c3:68:20:75:38:49:9f:59:5d:b3:d3:93:7e:5e: 7a:12:5c:40:3a:97:08:48:1d:11:fd:fa:e1:4d:1a: 60:c1:11:f2:39:13:80:08:57:56:85:b7:4c:69:0b: 35:6a:2b:f5:94:d0:b0:6e:02:6e:84:3a:1b:7e:16: de:23:d4:09:99:49:b1:92:e1:ad:70:9e:b9:d6:fe: 41:b6:9d:e3:ff:fd:20:16:30:92:d5:4c:9d:2c:b6: 72:5b:5f:27:cb:dd:2a:bf:8b:2b:27:bd:01:18:50: af:c6:41:15:39:af:8f:8a:92:ee:f9:1d:20:b1:5f: 5f:7e:f4:96:aa:db:64:de:30:07:db:8d:20:bd:43: 50:e0:01:d7:c2:5c:04:33:26:17:6a:b0:8b:91:1e: 80:a2:eb:f6:af:18:fc:a1:52:60:56:01:68:32:36: 08:a5:a3:9d:4c:b8:21:2b:ce:f2:48:58:85:3a:ac: 64:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4C:36:55:2D:17:EE:EB:8C:C6:5A:E8:FB:33:25:1E:48:AA:0B:20:89 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/EDBE0634B402CF8C4B2D42B8B231D0FC09FA039BB667AD6AE8B2EFED737B605D/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/EDBE0634B402CF8C4B2D42B8B231D0FC09FA039BB667AD6AE8B2EFED737B605D/0/4C36552D17EEEB8CC65AE8FB33251E48AA0B2089.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:d0d0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 64165 Signature Algorithm: sha256WithRSAEncryption 0f:7a:0e:43:36:9d:b4:87:3f:0c:d0:90:a6:65:03:a7:66:ab: f8:ad:d2:f2:08:a8:3c:58:d2:84:ed:6f:91:de:00:cf:47:cc: 8e:6e:03:95:95:dc:0c:1c:d8:5a:03:03:3e:43:68:73:12:6e: 3e:83:c3:b5:7f:d4:5f:3d:23:c5:e9:16:e2:b6:82:00:b3:a7: 4e:a6:c1:af:3b:84:3e:0f:80:e3:07:32:70:90:c9:86:14:20: 1c:14:f2:26:b0:19:1e:04:32:4d:ff:85:b2:86:b6:c8:b0:0f: 08:55:6a:39:77:8c:de:75:7e:fa:3e:2c:d4:50:5c:bd:7a:f5: f9:ad:1e:14:aa:d2:f1:ee:4d:28:06:a9:be:e8:ee:f6:47:25: a0:cb:f4:3b:9d:90:99:06:0b:09:a1:78:3d:7d:ec:f2:95:72: 38:f6:49:6e:e3:61:66:05:1c:73:79:77:e3:7b:b0:60:8d:90: f4:8a:e5:84:19:14:56:92:d7:21:cd:80:c9:ad:95:a9:74:23: 65:40:9c:6f:c2:d7:ad:b6:ad:f9:c2:86:4e:9c:30:3e:d6:02: 76:f6:f9:31:16:3c:02:e7:77:86:8f:20:91:35:8e:9c:48:8f: 1d:9e:d3:4a:41:40:4e:72:4a:03:7c:24:10:db:11:24:c4:58: cf:b0:ac:24 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUClRDVG+RGsvrfljSs12KnTGleugwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTEwMTEwMzA4NDdaFw0yNjEwMTAwMzEzNDdaMDMxMTAvBgNV BAMTKDRDMzY1NTJEMTdFRUVCOENDNjVBRThGQjMzMjUxRTQ4QUEwQjIwODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhnCKcLT5g7ubfjlBmL/JZEzYT KRSn0zh7+AWD7HhcbfVkuTw1MhEWJ9mWxorC7fStO3YE1ylHezOjhHKztGMWhYxE ERQIZcdtSejDaCB1OEmfWV2z05N+XnoSXEA6lwhIHRH9+uFNGmDBEfI5E4AIV1aF t0xpCzVqK/WU0LBuAm6EOht+Ft4j1AmZSbGS4a1wnrnW/kG2neP//SAWMJLVTJ0s tnJbXyfL3Sq/iysnvQEYUK/GQRU5r4+Kku75HSCxX19+9Jaq22TeMAfbjSC9Q1Dg AdfCXAQzJhdqsIuRHoCi6/avGPyhUmBWAWgyNgilo51MuCErzvJIWIU6rGR3AgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRMNlUtF+7rjMZa 6PszJR5IqgsgiTAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRURCRTA2MzRCNDAyQ0Y4QzRCMkQ0MkI4 QjIzMUQwRkMwOUZBMDM5QkI2NjdBRDZBRThCMkVGRUQ3MzdCNjA1RC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9FREJFMDYzNEI0MDJDRjhDNEIyRDQyQjhCMjMxRDBGQzA5RkEwMzlCQjY2 N0FENkFFOEIyRUZFRDczN0I2MDVELzAvNEMzNjU1MkQxN0VFRUI4Q0M2NUFFOEZC MzMyNTFFNDhBQTBCMjA4OS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAPQ0DAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMA+qUwDQYJKoZIhvcNAQELBQADggEBAA96DkM2 nbSHPwzQkKZlA6dmq/it0vIIqDxY0oTtb5HeAM9HzI5uA5WV3Awc2FoDAz5DaHMS bj6Dw7V/1F89I8XpFuK2ggCzp06mwa87hD4PgOMHMnCQyYYUIBwU8iawGR4EMk3/ hbKGtsiwDwhVajl3jN51fvo+LNRQXL169fmtHhSq0vHuTSgGqb7o7vZHJaDL9Dud kJkGCwmheD197PKVcjj2SW7jYWYFHHN5d+N7sGCNkPSK5YQZFFaS1yHNgMmtlal0 I2VAnG/C1622rfnChk6cMD7WAnb2+TEWPALnd4aPIJE1jpxIjx2e00pBQE5ySgN8 JBDbESTEWM+wrCQ= -----END CERTIFICATE-----Generated at Mon Oct 20 00:23:54 2025 by rpki-client