$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA7A92609CADE6A78C1E178DEFE7C9C24CF75169.cer File: FA7A92609CADE6A78C1E178DEFE7C9C24CF75169.cer (raw, json) Hash identifier: OWlJtcj+OoX2/2OY+Lu9JL9xoba9OXgJ2Vys2nSvW4Y= Subject key identifier: FA:7A:92:60:9C:AD:E6:A7:8C:1E:17:8D:EF:E7:C9:C2:4C:F7:51:69 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 03CFE02ABF69F332B9BD64341ED281D5E8521F6A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/59F0FD8273BD179246780F8BF2D7DB0AE56FE33EEE020D07550D60E23FD01F2E/0/FA7A92609CADE6A78C1E178DEFE7C9C24CF75169.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/59F0FD8273BD179246780F8BF2D7DB0AE56FE33EEE020D07550D60E23FD01F2E/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 05:35:59 +0000 Certificate not after: Wed 04 Feb 2026 05:40:59 +0000 Subordinate resources: AS: 264850 IP: 138.0.240.0/22 IP: 138.186.136.0/22 IP: 168.90.196.0/22 IP: 170.83.176.0/22 IP: 200.10.32.0/20 IP: 2803:6180::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:cf:e0:2a:bf:69:f3:32:b9:bd:64:34:1e:d2:81:d5:e8:52:1f:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 05:35:59 2025 GMT Not After : Feb 4 05:40:59 2026 GMT Subject: CN=FA7A92609CADE6A78C1E178DEFE7C9C24CF75169 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:27:a0:09:53:73:69:06:09:b7:fd:8f:b7:13: 95:4f:e6:b6:cd:72:22:3a:24:86:9b:5b:9f:64:86: 38:7c:1a:f1:6e:29:28:d8:7b:89:2d:62:e4:2e:89: 4f:31:2b:d3:90:df:bb:ad:e7:13:d1:28:da:de:f5: dd:26:4e:e8:1f:e7:35:dd:86:f9:ab:f1:41:ef:2f: e9:a1:17:5e:b0:2e:4c:60:b1:87:f0:c6:e9:a7:2f: ff:b1:4b:71:a0:bf:23:86:92:9d:95:7d:72:49:6a: 0a:cf:1b:8b:b6:f8:3b:dc:31:4f:34:97:96:23:f1: d7:fd:7d:9c:7e:c9:ee:94:7c:a5:1d:16:03:c3:8e: 2e:f3:75:9b:d9:c5:70:42:25:3b:bb:de:4f:8b:b3: 6c:45:22:54:c8:ed:4d:72:66:bc:ca:06:42:3b:d7: 97:85:00:4b:45:e1:79:51:75:04:dc:7f:19:31:5e: 31:48:2e:be:43:94:91:99:32:ca:5f:95:00:09:f4: 7e:08:33:a9:e3:c8:fb:c3:6b:84:76:fd:2c:a0:bc: c4:fb:03:48:a8:41:f7:0f:6c:db:f9:f9:cf:c1:1d: 08:3d:59:18:cb:c4:9a:d1:68:89:05:2d:a2:23:8c: 6b:0c:2f:02:f3:cc:dd:ee:df:db:08:f9:be:8a:6a: 6a:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FA:7A:92:60:9C:AD:E6:A7:8C:1E:17:8D:EF:E7:C9:C2:4C:F7:51:69 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/59F0FD8273BD179246780F8BF2D7DB0AE56FE33EEE020D07550D60E23FD01F2E/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/59F0FD8273BD179246780F8BF2D7DB0AE56FE33EEE020D07550D60E23FD01F2E/0/FA7A92609CADE6A78C1E178DEFE7C9C24CF75169.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.0.240.0/22 138.186.136.0/22 168.90.196.0/22 170.83.176.0/22 200.10.32.0/20 IPv6: 2803:6180::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264850 Signature Algorithm: sha256WithRSAEncryption 7d:ce:27:f2:b5:d1:a3:36:b3:b9:33:d0:af:00:7d:8c:41:f8: 52:b2:85:6d:38:f6:ee:6a:f4:95:09:1c:49:58:93:a0:00:92: 44:64:c6:8d:1b:2d:ce:9c:76:5b:93:c1:1c:f2:84:86:83:c6: 72:2f:7c:95:96:5d:0b:f2:23:03:7b:14:89:99:11:89:c0:a0: d9:d8:ad:ec:3f:f6:1c:f1:bf:3a:0e:1c:fe:44:17:bf:d0:2f: 0a:9d:a0:ed:fa:be:2b:f7:58:59:2a:2c:f5:68:9e:db:49:24: 9d:1b:10:bb:06:93:97:6a:e1:75:a4:d2:8e:7b:c2:9f:89:81: 10:17:00:39:f9:3f:42:c7:83:3e:78:16:b1:73:d9:70:84:2f: 18:42:dc:c6:e6:03:71:05:e1:ef:93:4d:5a:3a:f7:54:1f:ed: 20:99:f4:7f:30:86:0e:94:01:0d:b8:26:fe:0f:0a:43:61:75: a2:d8:0b:5c:8c:3b:03:b6:87:94:65:73:c4:4d:75:0f:cd:68: 3d:68:e6:25:c1:ed:e7:bb:5c:5e:c6:db:3b:3d:50:46:55:61: 5a:71:b2:17:8b:49:dc:0f:82:7d:29:10:67:48:b0:37:12:43: 56:c8:dd:0f:72:d9:63:9a:47:64:ce:9a:04:47:59:8d:82:5d: c8:43:37:01 -----BEGIN CERTIFICATE----- MIIGvTCCBaWgAwIBAgIUA8/gKr9p8zK5vWQ0HtKB1ehSH2owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUwNTM1NTlaFw0yNjAyMDQwNTQwNTlaMDMxMTAvBgNV BAMTKEZBN0E5MjYwOUNBREU2QTc4QzFFMTc4REVGRTdDOUMyNENGNzUxNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOJ6AJU3NpBgm3/Y+3E5VP5rbN ciI6JIabW59khjh8GvFuKSjYe4ktYuQuiU8xK9OQ37ut5xPRKNre9d0mTugf5zXd hvmr8UHvL+mhF16wLkxgsYfwxumnL/+xS3GgvyOGkp2VfXJJagrPG4u2+DvcMU80 l5Yj8df9fZx+ye6UfKUdFgPDji7zdZvZxXBCJTu73k+Ls2xFIlTI7U1yZrzKBkI7 15eFAEtF4XlRdQTcfxkxXjFILr5DlJGZMspflQAJ9H4IM6njyPvDa4R2/SygvMT7 A0ioQfcPbNv5+c/BHQg9WRjLxJrRaIkFLaIjjGsMLwLzzN3u39sI+b6KamrHAgMB AAGjggPHMIIDwzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT6epJgnK3mp4we F43v58nCTPdRaTAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNTlGMEZEODI3M0JEMTc5MjQ2NzgwRjhC RjJEN0RCMEFFNTZGRTMzRUVFMDIwRDA3NTUwRDYwRTIzRkQwMUYyRS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy81OUYwRkQ4MjczQkQxNzkyNDY3ODBGOEJGMkQ3REIwQUU1NkZFMzNFRUUw MjBEMDc1NTBENjBFMjNGRDAxRjJFLzAvRkE3QTkyNjA5Q0FERTZBNzhDMUUxNzhE RUZFN0M5QzI0Q0Y3NTE2OS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQCigDwAwQCirqI AwQCqFrEAwQCqlOwAwQEyAogMA0EAgACMAcDBQAoA2GAMBoGCCsGAQUFBwEIAQH/ BAswCaAHMAUCAwQKkjANBgkqhkiG9w0BAQsFAAOCAQEAfc4n8rXRozazuTPQrwB9 jEH4UrKFbTj27mr0lQkcSViToACSRGTGjRstzpx2W5PBHPKEhoPGci98lZZdC/Ij A3sUiZkRicCg2dit7D/2HPG/Og4c/kQXv9AvCp2g7fq+K/dYWSos9Wie20kknRsQ uwaTl2rhdaTSjnvCn4mBEBcAOfk/QseDPngWsXPZcIQvGELcxuYDcQXh75NNWjr3 VB/tIJn0fzCGDpQBDbgm/g8KQ2F1otgLXIw7A7aHlGVzxE11D81oPWjmJcHt57tc XsbbOz1QRlVhWnGyF4tJ3A+CfSkQZ0iwNxJDVsjdD3LZY5pHZM6aBEdZjYJdyEM3 AQ== -----END CERTIFICATE-----Generated at Tue Nov 4 21:39:09 2025 by rpki-client