$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC9DD0E87EF2F26EE3177696A25789D0A68599EF.cer File: FC9DD0E87EF2F26EE3177696A25789D0A68599EF.cer (raw, json) Hash identifier: 9UxvHIB+fDr27rRfNWWgQH+Pxe5UC2toW0gZPMQeUkw= Subject key identifier: FC:9D:D0:E8:7E:F2:F2:6E:E3:17:76:96:A2:57:89:D0:A6:85:99:EF Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 5CDB101A6701885F53347F3D5DDE33ABC9A670CB Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/A1CFB9CC05A650683E2547043E71965E85C3582FDBE6051B283EA7F356F68F92/0/FC9DD0E87EF2F26EE3177696A25789D0A68599EF.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/A1CFB9CC05A650683E2547043E71965E85C3582FDBE6051B283EA7F356F68F92/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 03:31:07 +0000 Certificate not after: Wed 04 Feb 2026 03:36:07 +0000 Subordinate resources: AS: 270074 IP: 200.1.112.0/24 IP: 2801:1b:2800::/48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:db:10:1a:67:01:88:5f:53:34:7f:3d:5d:de:33:ab:c9:a6:70:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 03:31:07 2025 GMT Not After : Feb 4 03:36:07 2026 GMT Subject: CN=FC9DD0E87EF2F26EE3177696A25789D0A68599EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a2:10:1f:13:71:b4:b2:af:71:9e:28:7e:27: a0:99:9a:8c:4b:00:60:39:ab:25:9f:2a:ae:d8:05: fc:3d:27:70:a7:38:71:15:b3:dd:af:9a:9f:e4:88: 51:b2:a1:fe:df:ac:d5:29:81:85:9a:6a:83:2b:f7: e7:be:5b:bf:71:a1:ea:d6:58:74:37:ce:d6:a2:91: be:bc:c7:3c:2c:8e:f6:f3:c9:9f:c5:90:bd:36:18: 73:b0:13:dc:66:6e:c2:cc:63:77:a5:bd:ad:36:9b: a3:d2:11:a3:83:14:5f:09:b9:ab:ca:3f:2d:68:53: bc:23:3a:3e:39:59:96:41:7b:62:54:bb:bf:5c:c4: 1f:88:48:8f:77:8c:93:70:28:4c:8e:56:d5:ea:da: 97:d1:0a:e2:ec:73:18:fe:7f:64:7c:9e:85:fa:12: 56:75:16:11:c4:c2:fb:2e:85:3c:c6:4e:4b:7a:55: 28:b9:46:9d:10:4b:14:ed:b7:c2:e3:da:78:49:c2: 5f:0a:c7:c8:43:92:5d:37:59:b7:f1:d2:de:3c:ae: 7b:a5:dc:15:84:90:ea:9f:5b:c2:f1:e8:c2:70:e4: a2:0b:8f:29:f3:74:e9:93:97:08:1f:d1:58:b8:ef: ce:b5:65:bb:1d:10:42:be:72:16:69:d2:4c:52:d7: 2a:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FC:9D:D0:E8:7E:F2:F2:6E:E3:17:76:96:A2:57:89:D0:A6:85:99:EF X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/A1CFB9CC05A650683E2547043E71965E85C3582FDBE6051B283EA7F356F68F92/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/A1CFB9CC05A650683E2547043E71965E85C3582FDBE6051B283EA7F356F68F92/0/FC9DD0E87EF2F26EE3177696A25789D0A68599EF.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.1.112.0/24 IPv6: 2801:1b:2800::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 270074 Signature Algorithm: sha256WithRSAEncryption 50:53:0f:ec:7c:67:d5:37:ac:fd:15:d6:7c:b8:60:67:8c:42: c4:36:e3:c7:e1:8e:23:32:2b:46:ae:92:55:17:de:7b:67:1c: 06:ab:2f:b2:b9:27:2c:70:87:fd:c2:59:b8:ad:b3:bd:f9:67: 07:6a:8e:fc:0d:53:ef:fd:88:13:c0:67:cb:de:c1:ea:ef:a0: 00:64:eb:60:bd:fc:47:b1:9e:ef:92:48:cc:23:48:7b:74:a9: 9c:de:ef:90:4c:29:db:d5:57:07:1b:87:6b:8e:c8:78:eb:4e: 07:c4:6b:2c:2a:6b:46:9a:82:8f:0c:73:a4:0b:d4:1f:02:cb: af:e0:18:62:97:9e:4a:6d:27:bb:39:b3:4d:65:98:62:06:37: 43:fc:56:e0:8f:76:44:ac:e3:67:75:c0:30:af:63:35:42:29: 38:b2:8b:7d:e3:ef:43:d8:1b:b3:d1:7e:01:87:d2:f5:d0:1f: 70:80:87:75:97:0d:0f:e4:9b:d0:49:08:b9:b0:f1:29:81:b3: 11:4e:8b:1d:fe:06:07:90:48:8e:3d:58:df:39:5e:d6:be:37: a7:c7:5b:50:d7:f8:07:64:55:ca:5f:a3:86:7f:10:c3:0c:ea: 3a:43:63:75:1e:e5:1d:3b:c2:22:0d:4d:04:53:2f:c8:bd:d3: 64:10:32:18 -----BEGIN CERTIFICATE----- MIIGpzCCBY+gAwIBAgIUXNsQGmcBiF9TNH89Xd4zq8mmcMswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUwMzMxMDdaFw0yNjAyMDQwMzM2MDdaMDMxMTAvBgNV BAMTKEZDOUREMEU4N0VGMkYyNkVFMzE3NzY5NkEyNTc4OUQwQTY4NTk5RUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2ohAfE3G0sq9xnih+J6CZmoxL AGA5qyWfKq7YBfw9J3CnOHEVs92vmp/kiFGyof7frNUpgYWaaoMr9+e+W79xoerW WHQ3ztaikb68xzwsjvbzyZ/FkL02GHOwE9xmbsLMY3elva02m6PSEaODFF8JuavK Py1oU7wjOj45WZZBe2JUu79cxB+ISI93jJNwKEyOVtXq2pfRCuLscxj+f2R8noX6 ElZ1FhHEwvsuhTzGTkt6VSi5Rp0QSxTtt8Lj2nhJwl8Kx8hDkl03Wbfx0t48rnul 3BWEkOqfW8Lx6MJw5KILjynzdOmTlwgf0Vi47861ZbsdEEK+chZp0kxS1yo1AgMB AAGjggOxMIIDrTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT8ndDofvLybuMX dpaiV4nQpoWZ7zAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQTFDRkI5Q0MwNUE2NTA2ODNFMjU0NzA0 M0U3MTk2NUU4NUMzNTgyRkRCRTYwNTFCMjgzRUE3RjM1NkY2OEY5Mi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9BMUNGQjlDQzA1QTY1MDY4M0UyNTQ3MDQzRTcxOTY1RTg1QzM1ODJGREJF NjA1MUIyODNFQTdGMzU2RjY4RjkyLzAvRkM5REQwRTg3RUYyRjI2RUUzMTc3Njk2 QTI1Nzg5RDBBNjg1OTlFRi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAyAFwMA8EAgAC MAkDBwAoAQAbKAAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBB76MA0GCSqGSIb3 DQEBCwUAA4IBAQBQUw/sfGfVN6z9FdZ8uGBnjELENuPH4Y4jMitGrpJVF957ZxwG qy+yuScscIf9wlm4rbO9+WcHao78DVPv/YgTwGfL3sHq76AAZOtgvfxHsZ7vkkjM I0h7dKmc3u+QTCnb1VcHG4drjsh4604HxGssKmtGmoKPDHOkC9QfAsuv4Bhil55K bSe7ObNNZZhiBjdD/Fbgj3ZErONndcAwr2M1Qik4sot94+9D2Buz0X4Bh9L10B9w gId1lw0P5JvQSQi5sPEpgbMRTosd/gYHkEiOPVjfOV7Wvjenx1tQ1/gHZFXKX6OG fxDDDOo6Q2N1HuUdO8IiDU0EUy/IvdNkEDIY -----END CERTIFICATE-----Generated at Tue Nov 4 21:38:19 2025 by rpki-client