$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F8D2895F468C3C97A67EC29230C3641FB8C84F08.cer File: F8D2895F468C3C97A67EC29230C3641FB8C84F08.cer (raw, json) Hash identifier: LyfRmMEDV05QslgwiCTT8mc1kdl+lXMs9iqxoCbkiHA= Subject key identifier: F8:D2:89:5F:46:8C:3C:97:A6:7E:C2:92:30:C3:64:1F:B8:C8:4F:08 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 225BFB599A482338C7C99D5615F49AAC9E154EE0 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/6B2D55AC0055812A507290BE49EAC0AF6A691C782E83FCFCE61B0CB357D2ED82/0/F8D2895F468C3C97A67EC29230C3641FB8C84F08.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/6B2D55AC0055812A507290BE49EAC0AF6A691C782E83FCFCE61B0CB357D2ED82/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Fri 03 Oct 2025 15:55:01 +0000 Certificate not after: Fri 02 Oct 2026 16:00:01 +0000 Subordinate resources: AS: 273009 IP: 2803:7d90::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 24 Oct 2025 00:51:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:5b:fb:59:9a:48:23:38:c7:c9:9d:56:15:f4:9a:ac:9e:15:4e:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Oct 3 15:55:01 2025 GMT Not After : Oct 2 16:00:01 2026 GMT Subject: CN=F8D2895F468C3C97A67EC29230C3641FB8C84F08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ae:e4:86:d0:c3:d8:c6:8e:06:7a:d8:6c:14: a3:bc:f6:82:03:ac:16:a0:3d:03:e4:d9:80:54:35: 50:76:fa:18:ae:5e:a7:a0:a6:1d:14:dc:29:68:c1: 23:b8:f4:c4:3b:5a:e1:25:b5:8d:7c:62:2e:2d:e3: 59:87:53:7e:34:54:61:29:91:7c:55:92:62:45:1f: b7:66:cf:a5:21:d8:01:42:99:d6:07:82:fe:8b:94: b1:db:06:8c:4b:ef:cb:a8:29:c8:f6:73:d9:1c:06: 88:dc:46:ce:67:b4:fd:d6:ad:84:35:80:15:c5:3d: c4:48:4f:10:1c:6f:29:48:18:ba:54:7d:e1:3f:19: f7:be:ac:10:5c:ca:d9:cc:69:cc:3d:56:67:20:2d: 3b:5b:07:2d:25:2b:3f:14:a8:ba:f8:69:ad:e4:13: 67:63:e6:2a:20:cf:71:05:d2:f8:2a:00:3c:87:5f: 12:48:c4:f0:3a:27:ec:b2:6a:f9:14:eb:6a:57:a5: 7c:f5:20:40:1b:a1:42:dd:42:e0:63:6e:8f:4e:dc: 44:2c:a2:80:36:80:ec:18:2a:ee:bb:85:01:d7:4f: 5f:9d:d6:25:4b:30:46:b6:bc:a9:66:28:86:c5:e2: ac:b0:04:64:b6:90:eb:21:c6:4e:58:7e:56:af:b5: 83:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F8:D2:89:5F:46:8C:3C:97:A6:7E:C2:92:30:C3:64:1F:B8:C8:4F:08 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6B2D55AC0055812A507290BE49EAC0AF6A691C782E83FCFCE61B0CB357D2ED82/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6B2D55AC0055812A507290BE49EAC0AF6A691C782E83FCFCE61B0CB357D2ED82/0/F8D2895F468C3C97A67EC29230C3641FB8C84F08.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:7d90::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273009 Signature Algorithm: sha256WithRSAEncryption 7e:bd:59:7a:13:87:20:11:b2:c0:f7:1a:11:23:23:77:ff:c1: 7f:01:ab:0a:d4:a0:db:f8:b7:fd:65:38:ab:00:ff:ae:ef:95: b7:84:47:ef:cb:32:d4:90:f9:7d:c4:67:c4:70:22:d2:3f:37: 4f:ea:d1:ad:16:e1:16:4e:ac:4d:70:55:48:f4:c0:9d:d8:9f: 91:4a:0f:38:63:9c:88:7a:56:78:bb:66:af:b6:76:41:41:f5: c0:16:06:dd:91:8e:79:61:a0:3e:56:fe:ab:ee:60:f9:bb:87: aa:0c:fe:d2:13:b6:99:af:3e:ad:84:18:46:ca:fa:d7:45:9a: c6:91:b0:46:94:5d:9b:12:b1:a1:fc:8e:83:6b:7d:04:fb:70: da:6b:66:c3:f7:71:71:e0:4c:f6:08:0c:f5:1b:12:2c:1c:b4: 40:c2:3d:c8:25:9b:3a:7e:98:ed:41:bc:d1:98:53:b4:50:44: 71:91:2b:fe:c0:36:fd:ab:2d:be:25:85:d6:ee:9a:85:cf:85: 4c:0a:96:7b:72:f2:0b:23:46:7f:7b:15:c1:2b:71:08:30:2e: 97:d6:51:b7:1b:98:af:10:4c:34:a9:a2:d1:c2:10:ab:76:5c: 7e:c5:8d:33:a7:51:f8:7c:4d:55:a0:c0:99:7a:86:46:8f:a3: 20:6c:99:d6 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUIlv7WZpIIzjHyZ1WFfSarJ4VTuAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTEwMDMxNTU1MDFaFw0yNjEwMDIxNjAwMDFaMDMxMTAvBgNV BAMTKEY4RDI4OTVGNDY4QzNDOTdBNjdFQzI5MjMwQzM2NDFGQjhDODRGMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbruSG0MPYxo4GethsFKO89oID rBagPQPk2YBUNVB2+hiuXqegph0U3ClowSO49MQ7WuEltY18Yi4t41mHU340VGEp kXxVkmJFH7dmz6Uh2AFCmdYHgv6LlLHbBoxL78uoKcj2c9kcBojcRs5ntP3WrYQ1 gBXFPcRITxAcbylIGLpUfeE/Gfe+rBBcytnMacw9VmcgLTtbBy0lKz8UqLr4aa3k E2dj5iogz3EF0vgqADyHXxJIxPA6J+yyavkU62pXpXz1IEAboULdQuBjbo9O3EQs ooA2gOwYKu67hQHXT1+d1iVLMEa2vKlmKIbF4qywBGS2kOshxk5YflavtYN7AgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT40olfRow8l6Z+ wpIww2QfuMhPCDAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNkIyRDU1QUMwMDU1ODEyQTUwNzI5MEJF NDlFQUMwQUY2QTY5MUM3ODJFODNGQ0ZDRTYxQjBDQjM1N0QyRUQ4Mi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy82QjJENTVBQzAwNTU4MTJBNTA3MjkwQkU0OUVBQzBBRjZBNjkxQzc4MkU4 M0ZDRkNFNjFCMENCMzU3RDJFRDgyLzAvRjhEMjg5NUY0NjhDM0M5N0E2N0VDMjky MzBDMzY0MUZCOEM4NEYwOC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAN9kDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEKnEwDQYJKoZIhvcNAQELBQADggEBAH69WXoT hyARssD3GhEjI3f/wX8BqwrUoNv4t/1lOKsA/67vlbeER+/LMtSQ+X3EZ8RwItI/ N0/q0a0W4RZOrE1wVUj0wJ3Yn5FKDzhjnIh6Vni7Zq+2dkFB9cAWBt2RjnlhoD5W /qvuYPm7h6oM/tITtpmvPq2EGEbK+tdFmsaRsEaUXZsSsaH8joNrfQT7cNprZsP3 cXHgTPYIDPUbEiwctEDCPcglmzp+mO1BvNGYU7RQRHGRK/7ANv2rLb4lhdbumoXP hUwKlnty8gsjRn97FcErcQgwLpfWUbcbmK8QTDSpotHCEKt2XH7FjTOnUfh8TVWg wJl6hkaPoyBsmdY= -----END CERTIFICATE-----Generated at Sun Oct 19 20:11:11 2025 by rpki-client