$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CF1757B269E35FD938A83FC994D18AC167C0FC8D.cer File: CF1757B269E35FD938A83FC994D18AC167C0FC8D.cer (raw, json) Hash identifier: h8QdXIdFjqhePszxB+U/4B72AAM1KkY5ODbzW5FUh7c= Subject key identifier: CF:17:57:B2:69:E3:5F:D9:38:A8:3F:C9:94:D1:8A:C1:67:C0:FC:8D Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 0D085A3A5E3BF1F144928DE3403D9BA6FA29B853 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/B8B529AD898024BB0317886E4225F782D21029F6DFE5CC3FE0C644E4E9FDDA32/0/CF1757B269E35FD938A83FC994D18AC167C0FC8D.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/B8B529AD898024BB0317886E4225F782D21029F6DFE5CC3FE0C644E4E9FDDA32/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Mon 11 Aug 2025 18:25:01 +0000 Certificate not after: Mon 10 Aug 2026 18:30:01 +0000 Subordinate resources: AS: 273172 IP: 2803:7250::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 26 Aug 2025 06:12:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:08:5a:3a:5e:3b:f1:f1:44:92:8d:e3:40:3d:9b:a6:fa:29:b8:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Aug 11 18:25:01 2025 GMT Not After : Aug 10 18:30:01 2026 GMT Subject: CN=CF1757B269E35FD938A83FC994D18AC167C0FC8D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:87:5b:c5:b0:08:c3:70:48:de:37:d5:e8:1e: d8:b6:1f:bf:e8:72:a3:70:4b:50:1b:3f:59:db:e1: d3:3d:7c:70:42:9a:f3:7a:a3:cc:48:c4:6f:92:97: c8:72:af:42:b5:91:e7:e9:a5:06:29:50:98:c4:98: 62:7d:3b:67:b5:a1:9c:03:d2:19:e2:85:e6:87:df: ca:e5:0b:0d:12:1f:cb:e8:d2:ac:fa:5d:a8:3d:3d: 72:d3:82:22:9b:d2:e4:ee:20:86:5e:28:f6:bd:f4: 82:76:fa:ee:4d:23:82:34:33:84:3f:9f:2b:69:c4: aa:f8:bc:af:f4:48:de:5b:9e:ba:cc:00:54:39:6e: 20:ee:eb:98:4a:cb:de:04:2d:0e:3b:5a:bc:b0:bd: dc:d3:de:a6:fd:25:9c:9f:c4:ed:ea:0c:f6:00:02: c0:6e:9d:a4:69:e5:f8:51:ae:e0:eb:62:08:bc:e9: ae:52:c8:59:50:a3:ab:95:93:25:c0:fe:2b:e2:59: f9:9b:8d:50:5a:00:9d:24:97:9b:c0:fa:5c:85:c1: 45:e9:e0:b5:65:6e:b7:f5:b4:33:be:0d:f0:7d:ea: f1:48:e2:be:dc:ae:f3:87:ad:3f:39:dc:45:bc:82: d2:19:84:2c:18:f4:ff:e8:d4:d0:24:93:5a:7a:a6: 37:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CF:17:57:B2:69:E3:5F:D9:38:A8:3F:C9:94:D1:8A:C1:67:C0:FC:8D X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/B8B529AD898024BB0317886E4225F782D21029F6DFE5CC3FE0C644E4E9FDDA32/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/B8B529AD898024BB0317886E4225F782D21029F6DFE5CC3FE0C644E4E9FDDA32/0/CF1757B269E35FD938A83FC994D18AC167C0FC8D.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:7250::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273172 Signature Algorithm: sha256WithRSAEncryption e5:ce:69:86:4f:77:9d:38:42:54:12:3e:80:f2:c9:a9:e7:0f: 26:83:dd:b0:9b:c4:69:bf:d6:ed:4f:3f:2d:2f:27:03:3d:04: dc:73:66:4d:ee:99:e5:d2:3f:f1:b5:9c:82:21:39:c1:c2:75: 31:c0:2e:ad:50:7d:b7:ef:6f:43:09:bf:77:4a:0e:cd:3e:39: 6a:45:1b:b6:ed:6d:0d:76:63:f6:b6:6f:ae:87:7a:73:f8:e0: 73:2d:c9:02:f6:30:f6:dd:50:55:6c:fa:7a:d5:2d:95:11:67: 0d:fc:b3:81:6a:1d:a9:21:c4:eb:3f:9a:92:1c:2f:6a:8a:01: 34:f0:46:08:aa:7c:db:0e:07:b0:fd:fb:2e:07:df:cb:22:d9: 84:6c:94:99:a2:02:0b:54:0d:9c:71:a0:c4:75:28:c2:05:a0: 2b:47:ed:55:b9:f8:a2:25:03:36:9a:63:62:76:dc:06:b0:f3: ba:40:5e:d6:17:cd:7a:31:d7:12:0d:b2:e8:6b:53:14:e5:e9: 5d:a6:aa:7b:1c:c0:e4:d1:e2:59:13:9c:f7:44:7b:23:71:2b: 76:2e:9d:50:72:e7:e1:4a:6c:cd:4e:3e:79:36:d3:99:b5:d9: 3a:c3:fe:4a:9f:c6:e9:f0:3c:5b:b6:df:f2:40:22:81:8f:ac: 92:7a:02:56 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUDQhaOl478fFEko3jQD2bpvopuFMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTA4MTExODI1MDFaFw0yNjA4MTAxODMwMDFaMDMxMTAvBgNV BAMTKENGMTc1N0IyNjlFMzVGRDkzOEE4M0ZDOTk0RDE4QUMxNjdDMEZDOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNh1vFsAjDcEjeN9XoHti2H7/o cqNwS1AbP1nb4dM9fHBCmvN6o8xIxG+Sl8hyr0K1kefppQYpUJjEmGJ9O2e1oZwD 0hniheaH38rlCw0SH8vo0qz6Xag9PXLTgiKb0uTuIIZeKPa99IJ2+u5NI4I0M4Q/ nytpxKr4vK/0SN5bnrrMAFQ5biDu65hKy94ELQ47WrywvdzT3qb9JZyfxO3qDPYA AsBunaRp5fhRruDrYgi86a5SyFlQo6uVkyXA/iviWfmbjVBaAJ0kl5vA+lyFwUXp 4LVlbrf1tDO+DfB96vFI4r7crvOHrT853EW8gtIZhCwY9P/o1NAkk1p6pjczAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTPF1eyaeNf2Tio P8mU0YrBZ8D8jTAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQjhCNTI5QUQ4OTgwMjRCQjAzMTc4ODZF NDIyNUY3ODJEMjEwMjlGNkRGRTVDQzNGRTBDNjQ0RTRFOUZEREEzMi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9COEI1MjlBRDg5ODAyNEJCMDMxNzg4NkU0MjI1Rjc4MkQyMTAyOUY2REZF NUNDM0ZFMEM2NDRFNEU5RkREQTMyLzAvQ0YxNzU3QjI2OUUzNUZEOTM4QTgzRkM5 OTREMThBQzE2N0MwRkM4RC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKANyUDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEKxQwDQYJKoZIhvcNAQELBQADggEBAOXOaYZP d504QlQSPoDyyannDyaD3bCbxGm/1u1PPy0vJwM9BNxzZk3umeXSP/G1nIIhOcHC dTHALq1Qfbfvb0MJv3dKDs0+OWpFG7btbQ12Y/a2b66HenP44HMtyQL2MPbdUFVs +nrVLZURZw38s4FqHakhxOs/mpIcL2qKATTwRgiqfNsOB7D9+y4H38si2YRslJmi AgtUDZxxoMR1KMIFoCtH7VW5+KIlAzaaY2J23Aaw87pAXtYXzXox1xINsuhrUxTl 6V2mqnscwOTR4lkTnPdEeyNxK3YunVBy5+FKbM1OPnk205m12TrD/kqfxunwPFu2 3/JAIoGPrJJ6AlY= -----END CERTIFICATE-----Generated at Sat Aug 23 07:27:57 2025 by rpki-client