$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/856E3A36CF2E7B4FC53C8A40A608EC358539F14D.cer File: 856E3A36CF2E7B4FC53C8A40A608EC358539F14D.cer (raw, json) Hash identifier: B5fRt5PeBFGlM2OV0JVWjOkTuXPx58APobs6lDZWMIE= Subject key identifier: 85:6E:3A:36:CF:2E:7B:4F:C5:3C:8A:40:A6:08:EC:35:85:39:F1:4D Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 63AA1ACCDD3257F669B4E2B28D955A1D70A2D0BD Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/D7371F3C45EBE09A1E5E4A07CC27B4A09D1437C331687FCA660D4A7BDF34D096/0/856E3A36CF2E7B4FC53C8A40A608EC358539F14D.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/D7371F3C45EBE09A1E5E4A07CC27B4A09D1437C331687FCA660D4A7BDF34D096/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Thu 18 Sep 2025 13:00:01 +0000 Certificate not after: Thu 17 Sep 2026 13:05:01 +0000 Subordinate resources: AS: 274200 IP: 2803:3d0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 24 Oct 2025 00:51:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:aa:1a:cc:dd:32:57:f6:69:b4:e2:b2:8d:95:5a:1d:70:a2:d0:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Sep 18 13:00:01 2025 GMT Not After : Sep 17 13:05:01 2026 GMT Subject: CN=856E3A36CF2E7B4FC53C8A40A608EC358539F14D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:84:23:7e:54:c2:7a:f3:36:7e:dd:35:f6:69: e8:a9:d6:7e:f1:32:76:b7:72:be:65:fe:3e:d0:73: f0:dc:9d:8d:bd:af:30:c8:d8:6b:37:65:3b:e7:ac: a1:58:b7:35:93:15:a4:bb:6c:6f:99:fb:25:38:b5: eb:cf:d7:fc:2b:6e:8a:85:12:de:6f:49:7f:ec:3f: e8:b7:61:82:5b:bc:3f:37:a1:ea:58:f9:b4:be:0e: b5:65:07:da:67:6f:3b:5c:58:a1:ae:5a:8b:7b:de: db:b4:d8:89:26:fa:b4:74:59:e2:de:d0:c2:e6:ce: 80:32:0e:54:5f:cf:b2:0b:53:b3:8f:7b:2e:f8:04: 80:3f:6d:83:2a:77:bf:c6:94:0e:ac:8e:43:9b:20: 5f:08:9b:f3:65:9d:26:df:85:53:5e:f2:87:1b:85: f2:d0:ea:51:88:e9:22:5d:0f:77:1b:22:00:f3:ad: 24:91:bc:24:4b:af:4c:8d:4f:bf:2f:98:95:2f:1c: 83:b0:b6:a4:19:f3:1a:f0:93:26:30:fb:55:85:53: 77:67:ee:76:ae:2f:ae:dc:c5:9e:ab:bb:52:b4:ab: 88:83:0d:2e:97:f2:72:96:1c:3e:ad:88:93:f9:94: 8d:96:d0:b2:b6:e7:f5:78:d0:cd:29:ea:dc:dd:c8: 7a:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 85:6E:3A:36:CF:2E:7B:4F:C5:3C:8A:40:A6:08:EC:35:85:39:F1:4D X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/D7371F3C45EBE09A1E5E4A07CC27B4A09D1437C331687FCA660D4A7BDF34D096/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/D7371F3C45EBE09A1E5E4A07CC27B4A09D1437C331687FCA660D4A7BDF34D096/0/856E3A36CF2E7B4FC53C8A40A608EC358539F14D.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:3d0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 274200 Signature Algorithm: sha256WithRSAEncryption 11:db:6d:5e:22:be:79:c2:54:a6:40:f0:c4:70:1f:26:4f:8d: dd:bf:b8:49:1e:63:2e:da:4e:a0:d0:c0:5f:86:8f:d3:e7:1b: c9:7f:f1:7e:3c:6a:df:e5:63:6e:7a:f9:4e:7f:9e:0c:5a:5a: d3:1c:9c:ff:9d:55:c8:df:96:b4:4c:d7:07:e4:b6:c7:84:f6: af:09:d4:88:a5:5d:24:19:73:ff:a6:e5:db:da:b4:e1:40:96: b5:2c:3c:dc:c1:3a:fc:fe:3e:a0:a8:95:f7:c2:2d:12:a9:6e: 9c:cf:74:11:d1:5d:8e:ff:47:a1:76:7d:43:7f:26:65:12:42: 9e:c2:29:dd:e8:7e:0a:16:fd:bb:4c:7e:7b:5a:48:6b:a9:b6: 87:97:45:24:87:f3:d5:78:de:7e:2a:0f:9f:19:4e:2a:db:b5: 8b:e2:01:36:7e:7a:e9:d4:b8:fa:d8:ae:70:66:a3:c8:b4:f8: 94:76:b7:2f:07:21:b2:5b:3a:31:e8:e6:b8:e2:7f:0f:68:52: 3d:e2:c1:41:6f:83:c6:c1:46:4b:8c:82:19:88:3a:e5:c8:c2: 1d:f7:5e:4a:27:ed:b2:49:9c:22:12:36:ff:49:d6:17:57:2f: b7:fc:32:0a:5b:bc:6f:cf:71:05:d4:4e:ff:c5:92:42:f2:dc: 33:d5:6f:c5 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUY6oazN0yV/ZptOKyjZVaHXCi0L0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTA5MTgxMzAwMDFaFw0yNjA5MTcxMzA1MDFaMDMxMTAvBgNV BAMTKDg1NkUzQTM2Q0YyRTdCNEZDNTNDOEE0MEE2MDhFQzM1ODUzOUYxNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJhCN+VMJ68zZ+3TX2aeip1n7x Mna3cr5l/j7Qc/DcnY29rzDI2Gs3ZTvnrKFYtzWTFaS7bG+Z+yU4tevP1/wrboqF Et5vSX/sP+i3YYJbvD83oepY+bS+DrVlB9pnbztcWKGuWot73tu02Ikm+rR0WeLe 0MLmzoAyDlRfz7ILU7OPey74BIA/bYMqd7/GlA6sjkObIF8Im/NlnSbfhVNe8ocb hfLQ6lGI6SJdD3cbIgDzrSSRvCRLr0yNT78vmJUvHIOwtqQZ8xrwkyYw+1WFU3dn 7nauL67cxZ6ru1K0q4iDDS6X8nKWHD6tiJP5lI2W0LK25/V40M0p6tzdyHoBAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSFbjo2zy57T8U8 ikCmCOw1hTnxTTAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRDczNzFGM0M0NUVCRTA5QTFFNUU0QTA3 Q0MyN0I0QTA5RDE0MzdDMzMxNjg3RkNBNjYwRDRBN0JERjM0RDA5Ni8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9ENzM3MUYzQzQ1RUJFMDlBMUU1RTRBMDdDQzI3QjRBMDlEMTQzN0MzMzE2 ODdGQ0E2NjBENEE3QkRGMzREMDk2LzAvODU2RTNBMzZDRjJFN0I0RkM1M0M4QTQw QTYwOEVDMzU4NTM5RjE0RC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAMD0DAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMELxgwDQYJKoZIhvcNAQELBQADggEBABHbbV4i vnnCVKZA8MRwHyZPjd2/uEkeYy7aTqDQwF+Gj9PnG8l/8X48at/lY256+U5/ngxa WtMcnP+dVcjflrRM1wfktseE9q8J1IilXSQZc/+m5dvatOFAlrUsPNzBOvz+PqCo lffCLRKpbpzPdBHRXY7/R6F2fUN/JmUSQp7CKd3ofgoW/btMfntaSGuptoeXRSSH 89V43n4qD58ZTirbtYviATZ+eunUuPrYrnBmo8i0+JR2ty8HIbJbOjHo5rjifw9o Uj3iwUFvg8bBRkuMghmIOuXIwh33Xkon7bJJnCISNv9J1hdXL7f8MgpbvG/PcQXU Tv/FkkLy3DPVb8U= -----END CERTIFICATE-----Generated at Sun Oct 19 20:11:14 2025 by rpki-client