$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA1140C02A7FAB6F57B2625AF34919FA84C782A0.cer File: FA1140C02A7FAB6F57B2625AF34919FA84C782A0.cer (raw, json) Hash identifier: PTLXzVz3HlkoEjrPnU/zEC/jVzWtBl7jJxOw6nPII68= Subject key identifier: FA:11:40:C0:2A:7F:AB:6F:57:B2:62:5A:F3:49:19:FA:84:C7:82:A0 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 1D65A31F670F46539B6950F235BCC3B4072F753C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/69F02DE56F7DD500CFEC111C8FBAA78897CCF11B6D66C08A07055C33F5423A16/0/FA1140C02A7FAB6F57B2625AF34919FA84C782A0.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/69F02DE56F7DD500CFEC111C8FBAA78897CCF11B6D66C08A07055C33F5423A16/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Fri 01 Aug 2025 11:09:53 +0000 Certificate not after: Fri 31 Jul 2026 11:14:53 +0000 Subordinate resources: AS: 269845 IP: 2801:1a2::/44 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:65:a3:1f:67:0f:46:53:9b:69:50:f2:35:bc:c3:b4:07:2f:75:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Aug 1 11:09:53 2025 GMT Not After : Jul 31 11:14:53 2026 GMT Subject: CN=FA1140C02A7FAB6F57B2625AF34919FA84C782A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:4e:06:2d:fb:76:fe:93:53:b0:d6:47:7f:9c: 47:c1:60:14:d3:09:1e:ab:ae:9a:b6:e8:70:1b:ad: 31:10:c9:89:3a:c4:7d:55:df:fb:16:29:a1:b4:10: d4:49:56:cb:70:35:d7:51:f8:98:67:d7:fb:fb:12: 4b:b2:6b:fc:f5:05:f4:7a:5c:51:bb:97:4d:90:75: b4:af:88:a7:a7:03:2e:d1:2f:22:4d:ad:ac:3c:62: b6:a8:58:97:9f:76:53:2d:bd:a4:6b:7c:e1:6b:ce: e3:2e:79:a8:aa:7e:b5:58:81:43:cf:d2:19:d4:09: 75:6a:cf:ab:07:d6:91:1b:a3:92:22:d8:cf:da:2e: 70:51:15:6c:be:f2:95:bf:3a:84:1b:ca:d9:40:36: 64:07:07:02:03:a9:71:45:7b:08:38:f7:3f:e4:03: 29:bd:ca:02:7b:4c:69:db:9b:6a:dd:3d:04:31:8d: 84:de:7c:4e:f4:77:f6:c0:af:56:12:ca:3e:24:90: 05:ef:e0:e7:77:b9:f3:5c:79:e3:b2:64:d1:3e:9f: 02:01:d4:aa:08:05:ce:de:da:a0:75:1a:c1:8c:9e: 76:c8:ed:35:2f:6e:02:50:49:bf:38:fb:63:06:01: cd:89:64:71:31:04:83:dd:f3:18:37:32:7b:82:7d: 3a:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FA:11:40:C0:2A:7F:AB:6F:57:B2:62:5A:F3:49:19:FA:84:C7:82:A0 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/69F02DE56F7DD500CFEC111C8FBAA78897CCF11B6D66C08A07055C33F5423A16/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/69F02DE56F7DD500CFEC111C8FBAA78897CCF11B6D66C08A07055C33F5423A16/0/FA1140C02A7FAB6F57B2625AF34919FA84C782A0.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2801:1a2::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 269845 Signature Algorithm: sha256WithRSAEncryption 63:51:f0:71:16:26:f6:1e:56:9d:c3:f5:32:e2:ac:1d:79:b8: 11:81:bc:4d:73:0e:d1:c5:22:63:fb:be:69:c7:06:86:98:86: 9f:e4:e3:37:0a:63:f5:bc:16:f0:3b:00:71:8f:10:d0:6a:63: 31:04:b4:da:e1:ac:b9:85:fd:33:fc:f9:da:61:08:e3:2c:00: fc:62:66:98:94:2b:bb:77:86:01:c7:11:a1:19:71:eb:90:ce: b7:70:56:b5:c1:1b:5e:67:39:df:d8:04:c3:85:37:4e:61:6d: 16:db:66:ef:f5:0c:27:e5:35:b5:db:7e:cb:fd:23:2f:32:eb: 33:28:d8:dd:42:0e:2f:73:07:a3:4d:a0:39:8a:eb:f1:e3:ed: 5e:01:fc:a6:31:0c:4e:a1:9b:df:6b:14:b1:87:d5:cd:9f:03: f5:c1:42:2a:84:73:af:1f:94:6a:17:8a:e2:11:94:c8:70:63: 38:6c:bc:86:7f:da:e7:a8:99:aa:7a:86:22:83:7a:b0:28:ab: f9:ca:86:64:ad:01:be:6d:7d:8e:5d:21:f7:b9:c2:f7:fb:7a: 51:5a:28:4b:5c:ea:1b:d4:54:c0:44:c5:b8:1f:4c:be:1b:03: f0:4f:43:25:d4:4b:a5:28:23:7c:0f:c3:2a:14:db:f1:8d:61: 94:55:b0:3d -----BEGIN CERTIFICATE----- MIIGmTCCBYGgAwIBAgIUHWWjH2cPRlObaVDyNbzDtAcvdTwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTA4MDExMTA5NTNaFw0yNjA3MzExMTE0NTNaMDMxMTAvBgNV BAMTKEZBMTE0MEMwMkE3RkFCNkY1N0IyNjI1QUYzNDkxOUZBODRDNzgyQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgTgYt+3b+k1Ow1kd/nEfBYBTT CR6rrpq26HAbrTEQyYk6xH1V3/sWKaG0ENRJVstwNddR+Jhn1/v7Ekuya/z1BfR6 XFG7l02QdbSviKenAy7RLyJNraw8YraoWJefdlMtvaRrfOFrzuMueaiqfrVYgUPP 0hnUCXVqz6sH1pEbo5Ii2M/aLnBRFWy+8pW/OoQbytlANmQHBwIDqXFFewg49z/k Aym9ygJ7TGnbm2rdPQQxjYTefE70d/bAr1YSyj4kkAXv4Od3ufNceeOyZNE+nwIB 1KoIBc7e2qB1GsGMnnbI7TUvbgJQSb84+2MGAc2JZHExBIPd8xg3MnuCfTozAgMB AAGjggOjMIIDnzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT6EUDAKn+rb1ey YlrzSRn6hMeCoDAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNjlGMDJERTU2RjdERDUwMENGRUMxMTFD OEZCQUE3ODg5N0NDRjExQjZENjZDMDhBMDcwNTVDMzNGNTQyM0ExNi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy82OUYwMkRFNTZGN0RENTAwQ0ZFQzExMUM4RkJBQTc4ODk3Q0NGMTFCNkQ2 NkMwOEEwNzA1NUMzM0Y1NDIzQTE2LzAvRkExMTQwQzAyQTdGQUI2RjU3QjI2MjVB RjM0OTE5RkE4NEM3ODJBMC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKAEBogAAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwQeFTANBgkqhkiG9w0BAQsFAAOCAQEAY1Hw cRYm9h5WncP1MuKsHXm4EYG8TXMO0cUiY/u+accGhpiGn+TjNwpj9bwW8DsAcY8Q 0GpjMQS02uGsuYX9M/z52mEI4ywA/GJmmJQru3eGAccRoRlx65DOt3BWtcEbXmc5 39gEw4U3TmFtFttm7/UMJ+U1tdt+y/0jLzLrMyjY3UIOL3MHo02gOYrr8ePtXgH8 pjEMTqGb32sUsYfVzZ8D9cFCKoRzrx+UaheK4hGUyHBjOGy8hn/a56iZqnqGIoN6 sCir+cqGZK0Bvm19jl0h97nC9/t6UVooS1zqG9RUwETFuB9MvhsD8E9DJdRLpSgj fA/DKhTb8Y1hlFWwPQ== -----END CERTIFICATE-----Generated at Tue Nov 4 21:39:18 2025 by rpki-client