$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FE87BC8E89919E936184D5BAC64AF9CFB437D9B6.cer File: FE87BC8E89919E936184D5BAC64AF9CFB437D9B6.cer (raw, json) Hash identifier: 1SeMhLhOZksKzJUwpWZ2zNAszc4CTX/TQmo1Y3HgZNc= Subject key identifier: FE:87:BC:8E:89:91:9E:93:61:84:D5:BA:C6:4A:F9:CF:B4:37:D9:B6 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 4AA0857CCC4D9B6FB942BBBD69D312890611A83B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/A0AC8CD11450429E740109FA9718682CEA14CB2AB07D6EB96D109D0E2B9590B9/0/FE87BC8E89919E936184D5BAC64AF9CFB437D9B6.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/A0AC8CD11450429E740109FA9718682CEA14CB2AB07D6EB96D109D0E2B9590B9/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 12:55:56 +0000 Certificate not after: Wed 04 Feb 2026 13:00:56 +0000 Subordinate resources: AS: 270122 IP: 138.122.184.0/22 IP: 2806:3c4::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:a0:85:7c:cc:4d:9b:6f:b9:42:bb:bd:69:d3:12:89:06:11:a8:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 12:55:56 2025 GMT Not After : Feb 4 13:00:56 2026 GMT Subject: CN=FE87BC8E89919E936184D5BAC64AF9CFB437D9B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:5a:13:95:73:80:c1:a5:5c:b5:36:08:57:37: 52:a1:df:71:18:7e:a9:8e:cb:f2:4e:b5:1c:93:35: b1:c2:43:e8:79:a7:2c:09:7a:7e:23:e2:50:70:68: 75:f0:56:b8:17:4b:6d:68:c4:69:5a:ad:de:d2:06: fd:d7:c2:a7:01:07:b8:ff:dd:ec:b9:f2:e2:d7:7b: 70:2d:49:a1:74:e4:1b:41:20:c2:fc:18:c9:4e:75: 69:ed:4b:06:17:61:bd:96:c5:39:d2:4a:e8:e9:07: d8:7e:c1:23:2a:89:61:76:3f:b3:d3:78:0c:c1:23: cf:4d:b9:e0:ff:15:c3:ea:f6:a8:a2:78:af:f8:94: ce:e8:6f:1d:3d:eb:47:c2:b1:85:c7:7a:77:b8:77: 22:f9:a7:0c:68:72:24:07:84:da:64:b3:05:2e:65: 0e:cf:51:55:fd:8c:8d:96:a4:44:36:35:79:c7:c1: 96:f2:0b:f0:38:27:ee:fd:83:5b:d4:9a:5d:27:ac: 25:e6:2e:15:35:ec:65:e4:00:61:a3:a3:d7:59:b9: c5:07:92:60:42:16:6a:30:a7:2c:9f:0d:a4:e2:65: d0:43:e3:b1:0c:69:c7:5f:0a:b2:9d:ec:ce:d1:68: 7d:26:76:ba:59:d4:a7:90:fe:c2:3b:01:66:b7:07: 4b:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FE:87:BC:8E:89:91:9E:93:61:84:D5:BA:C6:4A:F9:CF:B4:37:D9:B6 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/A0AC8CD11450429E740109FA9718682CEA14CB2AB07D6EB96D109D0E2B9590B9/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/A0AC8CD11450429E740109FA9718682CEA14CB2AB07D6EB96D109D0E2B9590B9/0/FE87BC8E89919E936184D5BAC64AF9CFB437D9B6.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.122.184.0/22 IPv6: 2806:3c4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 270122 Signature Algorithm: sha256WithRSAEncryption 5f:76:eb:d2:e2:a1:3b:f9:29:61:07:72:1b:19:23:fd:58:d6: 1a:a0:de:3a:75:04:18:58:74:34:84:34:62:c8:11:be:e5:8c: db:b1:8d:1a:2a:05:88:82:ae:5b:39:4f:e3:6d:a1:89:7e:1c: 6e:1f:17:33:37:d7:6f:70:b9:fe:23:e4:dd:c9:af:3e:84:b0: 15:83:ee:fc:92:4b:61:ab:db:94:a8:85:97:0e:47:79:3c:30: 6d:3e:3a:ac:d2:96:61:22:fe:cd:a2:6e:27:56:1d:e8:4d:ea: 22:c1:8f:1d:56:4e:69:36:e9:d3:aa:46:10:52:8c:96:ad:e4: e6:23:b4:c1:7a:8e:c5:4b:81:57:6c:b5:f0:c9:07:9a:8c:e1: b1:a5:a4:53:32:04:14:28:f3:b5:70:14:43:71:63:bb:83:04: 80:a6:69:ca:34:a1:ad:4c:5d:26:99:e8:c2:65:be:fa:bb:3c: 8d:f0:a5:c9:47:bd:d2:07:99:4e:15:0d:51:a3:8e:db:ed:42: 3f:8b:62:86:04:52:4a:5a:e7:d6:79:44:07:3a:7f:84:16:6f: e6:52:40:b7:a5:cb:a4:cf:c6:36:0f:87:0e:7e:74:a7:79:55: ce:cb:b8:0b:06:92:47:9c:2d:e2:d5:74:7d:2d:70:75:b2:9a: 1a:e1:b1:d8 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUSqCFfMxNm2+5Qru9adMSiQYRqDswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUxMjU1NTZaFw0yNjAyMDQxMzAwNTZaMDMxMTAvBgNV BAMTKEZFODdCQzhFODk5MTlFOTM2MTg0RDVCQUM2NEFGOUNGQjQzN0Q5QjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiWhOVc4DBpVy1NghXN1Kh33EY fqmOy/JOtRyTNbHCQ+h5pywJen4j4lBwaHXwVrgXS21oxGlard7SBv3XwqcBB7j/ 3ey58uLXe3AtSaF05BtBIML8GMlOdWntSwYXYb2WxTnSSujpB9h+wSMqiWF2P7PT eAzBI89NueD/FcPq9qiieK/4lM7obx0960fCsYXHene4dyL5pwxociQHhNpkswUu ZQ7PUVX9jI2WpEQ2NXnHwZbyC/A4J+79g1vUml0nrCXmLhU17GXkAGGjo9dZucUH kmBCFmowpyyfDaTiZdBD47EMacdfCrKd7M7RaH0mdrpZ1KeQ/sI7AWa3B0vbAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT+h7yOiZGek2GE 1brGSvnPtDfZtjAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQTBBQzhDRDExNDUwNDI5RTc0MDEwOUZB OTcxODY4MkNFQTE0Q0IyQUIwN0Q2RUI5NkQxMDlEMEUyQjk1OTBCOS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9BMEFDOENEMTE0NTA0MjlFNzQwMTA5RkE5NzE4NjgyQ0VBMTRDQjJBQjA3 RDZFQjk2RDEwOUQwRTJCOTU5MEI5LzAvRkU4N0JDOEU4OTkxOUU5MzYxODRENUJB QzY0QUY5Q0ZCNDM3RDlCNi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCinq4MA0EAgAC MAcDBQAoBgPEMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQfKjANBgkqhkiG9w0B AQsFAAOCAQEAX3br0uKhO/kpYQdyGxkj/VjWGqDeOnUEGFh0NIQ0YsgRvuWM27GN GioFiIKuWzlP422hiX4cbh8XMzfXb3C5/iPk3cmvPoSwFYPu/JJLYavblKiFlw5H eTwwbT46rNKWYSL+zaJuJ1Yd6E3qIsGPHVZOaTbp06pGEFKMlq3k5iO0wXqOxUuB V2y18MkHmozhsaWkUzIEFCjztXAUQ3Fju4MEgKZpyjShrUxdJpnowmW++rs8jfCl yUe90geZThUNUaOO2+1CP4tihgRSSlrn1nlEBzp/hBZv5lJAt6XLpM/GNg+HDn50 p3lVzsu4CwaSR5wt4tV0fS1wdbKaGuGx2A== -----END CERTIFICATE-----Generated at Tue Nov 4 21:38:12 2025 by rpki-client