$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5C9DF92F5C156C10BB4B75EFAD5D3A26B6F2AD2B.cer File: 5C9DF92F5C156C10BB4B75EFAD5D3A26B6F2AD2B.cer (raw, json) Hash identifier: Sa6wIXPJ8/un//M9Tdxgd8F3p7DUoP2cZZxTgYGq7Qc= Subject key identifier: 5C:9D:F9:2F:5C:15:6C:10:BB:4B:75:EF:AD:5D:3A:26:B6:F2:AD:2B Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 418DBA508391AACD5EB2FC8123838A99ABCCE10E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/B0BB44AB7895F784DA90017CCF91E9FFE0CD3CDA666EB8C75558B8768EB89BAB/0/5C9DF92F5C156C10BB4B75EFAD5D3A26B6F2AD2B.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/B0BB44AB7895F784DA90017CCF91E9FFE0CD3CDA666EB8C75558B8768EB89BAB/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Fri 15 Aug 2025 12:59:03 +0000 Certificate not after: Fri 14 Aug 2026 13:04:03 +0000 Subordinate resources: AS: 273904 IP: 2803:8b50::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 26 Aug 2025 06:12:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:8d:ba:50:83:91:aa:cd:5e:b2:fc:81:23:83:8a:99:ab:cc:e1:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Aug 15 12:59:03 2025 GMT Not After : Aug 14 13:04:03 2026 GMT Subject: CN=5C9DF92F5C156C10BB4B75EFAD5D3A26B6F2AD2B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:bc:c7:97:44:d6:83:08:1f:3e:81:1f:be:63: 28:08:94:ec:bd:ba:d9:c3:91:5e:0c:ee:1a:e8:9b: f8:c3:f2:e3:89:fc:48:f0:ce:1a:09:9b:7f:fc:fa: 1f:02:81:6b:ee:be:80:cf:19:c2:5c:e1:fc:a1:e7: 6a:82:30:91:be:9d:e1:03:6d:e7:8e:8b:7a:20:68: 6e:eb:ec:3f:00:db:82:4f:b4:24:3d:b9:f7:c1:2e: 52:bd:c9:7d:f7:4e:66:a3:87:6b:fa:59:36:e1:9e: a6:14:e3:cf:2c:87:06:0b:cc:01:b7:5a:90:97:ff: ed:79:c1:99:73:14:ad:d6:43:5a:bb:83:b2:29:98: 71:35:1a:33:88:61:9a:b1:31:43:15:10:14:e9:a0: a7:c0:d1:db:3b:7f:ea:75:1b:ac:ca:c1:61:fa:69: 3e:02:63:4b:62:5c:91:7a:68:45:28:ed:90:2a:1e: 25:51:3f:ee:5b:bb:74:d8:17:b2:21:1b:7a:b2:1f: 80:8a:73:7c:22:b6:f8:f2:c5:ce:6e:e0:1b:72:00: 48:b2:1d:a5:8a:46:de:8c:d3:09:9d:84:43:62:20: 95:d8:c6:f6:ae:bc:83:16:29:1c:1c:5c:23:66:54: 68:43:14:42:65:6f:9f:6d:63:24:9d:64:b8:b1:af: bd:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5C:9D:F9:2F:5C:15:6C:10:BB:4B:75:EF:AD:5D:3A:26:B6:F2:AD:2B X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/B0BB44AB7895F784DA90017CCF91E9FFE0CD3CDA666EB8C75558B8768EB89BAB/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/B0BB44AB7895F784DA90017CCF91E9FFE0CD3CDA666EB8C75558B8768EB89BAB/0/5C9DF92F5C156C10BB4B75EFAD5D3A26B6F2AD2B.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:8b50::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273904 Signature Algorithm: sha256WithRSAEncryption 89:64:97:3e:65:49:85:8a:8f:7f:6d:7b:71:41:01:49:c4:8a: e7:5f:e6:37:9a:d6:f3:f8:63:b9:3b:56:e8:39:76:6f:35:21: 5c:7c:37:42:d3:ff:5f:ea:db:59:30:b6:df:97:69:29:3f:7a: b8:e0:8e:ef:eb:a8:a5:f3:7f:de:a7:37:5c:39:c9:6d:4f:3d: 08:7d:ea:9a:1f:b7:5a:d0:a1:30:7b:23:19:20:aa:59:04:9d: 5c:d4:34:8a:a7:e3:8a:5b:a4:05:6f:3c:63:9d:1c:32:ee:86: e8:43:ca:c5:7c:77:6e:ab:74:da:7d:2d:1f:93:e2:10:0c:38: 25:a1:89:6a:a3:61:14:ed:fc:ed:73:fa:a0:76:77:c6:fe:b3: fb:79:43:3b:68:bd:99:bc:a3:1e:6c:60:7f:82:8f:d6:b0:fd: 2d:fd:84:e9:16:90:0f:35:b7:0f:fa:ae:74:ba:93:9e:05:b2: f7:a9:9a:b5:0b:21:f7:8c:02:7a:15:ea:3b:ac:5d:e0:88:58: 23:2e:72:6f:ae:32:8a:ae:8a:59:2e:64:78:79:11:7b:75:58: 9d:40:18:be:dd:cf:24:ac:15:38:42:4b:af:c9:3c:4f:22:ff: f4:65:65:c0:06:01:51:13:ab:67:49:b9:8e:7d:a7:14:51:66: 14:6a:ce:2b -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUQY26UIORqs1esvyBI4OKmavM4Q4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTA4MTUxMjU5MDNaFw0yNjA4MTQxMzA0MDNaMDMxMTAvBgNV BAMTKDVDOURGOTJGNUMxNTZDMTBCQjRCNzVFRkFENUQzQTI2QjZGMkFEMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqvMeXRNaDCB8+gR++YygIlOy9 utnDkV4M7hrom/jD8uOJ/EjwzhoJm3/8+h8CgWvuvoDPGcJc4fyh52qCMJG+neED beeOi3ogaG7r7D8A24JPtCQ9uffBLlK9yX33Tmajh2v6WTbhnqYU488shwYLzAG3 WpCX/+15wZlzFK3WQ1q7g7IpmHE1GjOIYZqxMUMVEBTpoKfA0ds7f+p1G6zKwWH6 aT4CY0tiXJF6aEUo7ZAqHiVRP+5bu3TYF7IhG3qyH4CKc3witvjyxc5u4BtyAEiy HaWKRt6M0wmdhENiIJXYxvauvIMWKRwcXCNmVGhDFEJlb59tYySdZLixr71FAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRcnfkvXBVsELtL de+tXTomtvKtKzAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQjBCQjQ0QUI3ODk1Rjc4NERBOTAwMTdD Q0Y5MUU5RkZFMENEM0NEQTY2NkVCOEM3NTU1OEI4NzY4RUI4OUJBQi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9CMEJCNDRBQjc4OTVGNzg0REE5MDAxN0NDRjkxRTlGRkUwQ0QzQ0RBNjY2 RUI4Qzc1NTU4Qjg3NjhFQjg5QkFCLzAvNUM5REY5MkY1QzE1NkMxMEJCNEI3NUVG QUQ1RDNBMjZCNkYyQUQyQi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAOLUDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMELfAwDQYJKoZIhvcNAQELBQADggEBAIlklz5l SYWKj39te3FBAUnEiudf5jea1vP4Y7k7Vug5dm81IVx8N0LT/1/q21kwtt+XaSk/ erjgju/rqKXzf96nN1w5yW1PPQh96poft1rQoTB7IxkgqlkEnVzUNIqn44pbpAVv PGOdHDLuhuhDysV8d26rdNp9LR+T4hAMOCWhiWqjYRTt/O1z+qB2d8b+s/t5Qzto vZm8ox5sYH+Cj9aw/S39hOkWkA81tw/6rnS6k54FsvepmrULIfeMAnoV6jusXeCI WCMucm+uMoquilkuZHh5EXt1WJ1AGL7dzySsFThCS6/JPE8i//RlZcAGAVETq2dJ uY59pxRRZhRqzis= -----END CERTIFICATE-----Generated at Sat Aug 23 07:46:32 2025 by rpki-client