$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C99EE6D1A0F620704EFC6221292957B1BB7EC536.cer File: C99EE6D1A0F620704EFC6221292957B1BB7EC536.cer (raw, json) Hash identifier: 45CRQPTRKE4Xy/0Qx+CI4gjEgPZgoeNse7l6tY1Mnc8= Subject key identifier: C9:9E:E6:D1:A0:F6:20:70:4E:FC:62:21:29:29:57:B1:BB:7E:C5:36 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 2460A125AB9BC15A8F4E721AB0D5893D195EF221 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/4B006D1F00D0285AE58E0CD3DF6C27C55B8E7ABB43F505E8CB839F22A69EAD38/0/C99EE6D1A0F620704EFC6221292957B1BB7EC536.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/4B006D1F00D0285AE58E0CD3DF6C27C55B8E7ABB43F505E8CB839F22A69EAD38/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 06 Aug 2025 15:00:01 +0000 Certificate not after: Wed 05 Aug 2026 15:05:01 +0000 Subordinate resources: AS: 273944 IP: 2803:cf50::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 26 Aug 2025 06:12:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:60:a1:25:ab:9b:c1:5a:8f:4e:72:1a:b0:d5:89:3d:19:5e:f2:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Aug 6 15:00:01 2025 GMT Not After : Aug 5 15:05:01 2026 GMT Subject: CN=C99EE6D1A0F620704EFC6221292957B1BB7EC536 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:50:b6:99:a7:92:2d:de:05:37:0b:e3:b5:ce: 3b:d5:5d:11:b4:26:4a:4d:2d:cc:99:c3:16:9a:5f: 64:51:b7:59:9e:f8:69:29:26:02:e6:1e:b4:24:ad: 9f:77:a2:f2:91:41:0e:0c:f1:14:51:65:e9:87:77: 24:8c:00:2e:aa:61:79:76:e6:67:99:27:a9:9a:18: 35:77:b5:08:9a:30:2b:95:13:3e:66:c1:63:4d:ac: 30:d0:c6:b3:e4:87:51:b1:bb:f1:10:a4:6b:64:f9: 7a:7f:c8:66:e2:35:14:8f:46:1d:df:45:f1:5b:be: 7a:d8:bb:10:a2:0f:77:3a:78:65:34:3d:d7:f2:78: 6f:c5:ba:5c:1e:b7:45:0c:79:35:98:20:d0:4a:bc: 7c:64:2d:0e:81:36:e4:c2:e7:a2:ad:82:17:82:53: 7e:2e:d5:a9:40:00:db:92:f4:53:a1:de:e8:9c:dc: 9b:5d:1f:25:1c:55:33:f6:de:ac:1a:95:9d:ce:a6: 8b:83:fc:bd:d7:40:cd:5d:5d:25:ff:22:03:6e:cc: 3b:30:1d:14:30:a5:92:9a:bd:fb:d1:e1:01:aa:cb: 16:01:74:ae:07:97:4c:b4:bd:ae:25:91:6a:d0:03: ef:23:15:05:4b:dc:85:d0:8d:bc:51:26:78:a9:c6: 92:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C9:9E:E6:D1:A0:F6:20:70:4E:FC:62:21:29:29:57:B1:BB:7E:C5:36 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/4B006D1F00D0285AE58E0CD3DF6C27C55B8E7ABB43F505E8CB839F22A69EAD38/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/4B006D1F00D0285AE58E0CD3DF6C27C55B8E7ABB43F505E8CB839F22A69EAD38/0/C99EE6D1A0F620704EFC6221292957B1BB7EC536.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:cf50::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273944 Signature Algorithm: sha256WithRSAEncryption 04:87:41:95:49:0c:8a:0f:a6:9a:62:19:b5:38:5d:db:04:12: 6d:e4:2e:15:06:3c:5b:b0:20:84:68:e1:c2:28:28:14:38:59: 55:e8:9c:98:20:b6:08:87:ab:2e:00:6c:2c:2a:6e:59:81:a2: 60:b4:f9:57:69:2f:37:a0:f7:b9:4d:87:c5:1e:e5:4a:be:6a: 83:f9:a3:60:9c:b5:9c:01:86:67:42:45:34:8a:c3:a5:54:66: d2:23:d9:45:fb:80:75:be:0c:ad:b5:e3:e1:72:07:0b:9b:40: c2:09:c7:ca:1f:e2:3b:87:42:37:2a:c7:10:0d:86:6b:18:54: a0:b5:4c:3d:1a:69:1d:ec:0b:73:aa:e2:d8:b6:fc:fa:ab:51: 2f:f3:b8:19:e7:19:d6:26:49:5d:8a:2c:1f:0b:45:5a:d8:21: 71:d3:17:39:6b:05:3a:06:a7:b6:b4:31:78:4b:eb:68:90:b9: 33:d1:15:e6:f8:ef:ba:ef:7e:87:cd:a4:b7:60:2a:4c:b4:59: e1:4c:93:ca:a0:60:af:b4:2c:c1:e1:c2:7e:48:7e:cc:6c:69: 08:9a:59:e9:6b:e0:20:e9:ea:96:f1:d7:4d:9a:21:6d:13:3b: 27:0d:80:44:47:62:77:4d:8c:57:84:07:2f:3c:57:f9:08:27: 64:c8:53:71 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUJGChJaubwVqPTnIasNWJPRle8iEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTA4MDYxNTAwMDFaFw0yNjA4MDUxNTA1MDFaMDMxMTAvBgNV BAMTKEM5OUVFNkQxQTBGNjIwNzA0RUZDNjIyMTI5Mjk1N0IxQkI3RUM1MzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJULaZp5It3gU3C+O1zjvVXRG0 JkpNLcyZwxaaX2RRt1me+GkpJgLmHrQkrZ93ovKRQQ4M8RRRZemHdySMAC6qYXl2 5meZJ6maGDV3tQiaMCuVEz5mwWNNrDDQxrPkh1Gxu/EQpGtk+Xp/yGbiNRSPRh3f RfFbvnrYuxCiD3c6eGU0PdfyeG/Fulwet0UMeTWYINBKvHxkLQ6BNuTC56KtgheC U34u1alAANuS9FOh3uic3JtdHyUcVTP23qwalZ3OpouD/L3XQM1dXSX/IgNuzDsw HRQwpZKavfvR4QGqyxYBdK4Hl0y0va4lkWrQA+8jFQVL3IXQjbxRJnipxpKXAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTJnubRoPYgcE78 YiEpKVexu37FNjAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNEIwMDZEMUYwMEQwMjg1QUU1OEUwQ0Qz REY2QzI3QzU1QjhFN0FCQjQzRjUwNUU4Q0I4MzlGMjJBNjlFQUQzOC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80QjAwNkQxRjAwRDAyODVBRTU4RTBDRDNERjZDMjdDNTVCOEU3QUJCNDNG NTA1RThDQjgzOUYyMkE2OUVBRDM4LzAvQzk5RUU2RDFBMEY2MjA3MDRFRkM2MjIx MjkyOTU3QjFCQjdFQzUzNi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAPPUDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMELhgwDQYJKoZIhvcNAQELBQADggEBAASHQZVJ DIoPpppiGbU4XdsEEm3kLhUGPFuwIIRo4cIoKBQ4WVXonJggtgiHqy4AbCwqblmB omC0+VdpLzeg97lNh8Ue5Uq+aoP5o2CctZwBhmdCRTSKw6VUZtIj2UX7gHW+DK21 4+FyBwubQMIJx8of4juHQjcqxxANhmsYVKC1TD0aaR3sC3Oq4ti2/PqrUS/zuBnn GdYmSV2KLB8LRVrYIXHTFzlrBToGp7a0MXhL62iQuTPRFeb477rvfofNpLdgKky0 WeFMk8qgYK+0LMHhwn5IfsxsaQiaWelr4CDp6pbx102aIW0TOycNgERHYndNjFeE By88V/kIJ2TIU3E= -----END CERTIFICATE-----Generated at Sat Aug 23 07:36:16 2025 by rpki-client