$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/48EF3985F0D26B09DE0FDD17B3363697C59A9F9F.cer File: 48EF3985F0D26B09DE0FDD17B3363697C59A9F9F.cer (raw, json) Hash identifier: Q3yHIKL8UnGIuMUEMjCIKcay9j+S/ODD9c++j+ZG9uc= Subject key identifier: 48:EF:39:85:F0:D2:6B:09:DE:0F:DD:17:B3:36:36:97:C5:9A:9F:9F Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 451BB870A9B8A5D2A17D8D9BA02803EA1FA48DD1 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/0EE97CF55C4AAD1971F83B36D950CF6F2CC9EF05A69BAD68C7907822ADA53811/0/48EF3985F0D26B09DE0FDD17B3363697C59A9F9F.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/0EE97CF55C4AAD1971F83B36D950CF6F2CC9EF05A69BAD68C7907822ADA53811/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Fri 12 Sep 2025 12:45:03 +0000 Certificate not after: Fri 11 Sep 2026 12:50:03 +0000 Subordinate resources: AS: 61484 IP: 168.195.52.0/22 IP: 2803:5f40::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 22 Sep 2025 23:39:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:1b:b8:70:a9:b8:a5:d2:a1:7d:8d:9b:a0:28:03:ea:1f:a4:8d:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Sep 12 12:45:03 2025 GMT Not After : Sep 11 12:50:03 2026 GMT Subject: CN=48EF3985F0D26B09DE0FDD17B3363697C59A9F9F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:47:ba:42:ee:7f:3c:34:86:6d:0f:d4:53:13: 8a:80:64:ca:53:59:af:94:8a:b1:31:f8:7f:e4:f7: 55:57:d2:c1:09:cd:ea:30:71:ca:3d:01:05:5d:fb: 2c:6d:ea:77:fa:38:ea:28:91:73:07:56:55:9c:fe: 0f:a1:dd:91:eb:04:fe:a6:54:97:0f:06:4c:0c:d0: 54:bc:bf:c3:38:a6:ef:69:f4:1e:6c:63:ef:31:c6: d6:16:50:c4:06:f7:d2:7c:18:24:dd:41:30:b9:92: af:e6:d9:18:3c:da:b8:a5:c3:d7:ec:dd:c0:73:63: 21:70:33:b9:1a:47:68:f9:a9:55:57:cc:56:b2:53: e6:d4:2b:5e:3d:da:cc:55:f6:f7:72:78:26:97:3a: 6a:09:7b:f9:03:9f:47:3c:ed:ee:30:5b:00:d6:ad: 81:1e:08:6f:b5:38:35:78:f8:d6:d4:a8:c1:29:8a: 34:8c:ae:a2:7a:61:6a:fe:77:6f:8b:f8:b4:f9:81: 70:c2:53:71:0d:1e:e5:f6:6d:00:27:32:36:b4:10: 5a:aa:e3:0e:bb:36:87:5a:5d:95:d4:d9:05:63:4e: 0a:9f:49:41:0f:07:cd:3a:dd:68:2e:cf:d1:0d:b5: b8:73:cb:73:07:a2:6c:aa:33:07:40:4d:33:8e:dd: 75:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 48:EF:39:85:F0:D2:6B:09:DE:0F:DD:17:B3:36:36:97:C5:9A:9F:9F X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0EE97CF55C4AAD1971F83B36D950CF6F2CC9EF05A69BAD68C7907822ADA53811/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0EE97CF55C4AAD1971F83B36D950CF6F2CC9EF05A69BAD68C7907822ADA53811/0/48EF3985F0D26B09DE0FDD17B3363697C59A9F9F.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.195.52.0/22 IPv6: 2803:5f40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 61484 Signature Algorithm: sha256WithRSAEncryption 5d:29:c4:70:96:a2:ef:45:58:64:24:f1:9d:ea:8d:2b:60:49: 92:a4:49:4d:94:66:ad:76:b7:a1:a9:cb:da:17:2f:dc:c3:dc: 72:d9:2a:7c:ac:05:36:5a:27:65:70:2d:68:85:27:4c:44:82: af:44:d6:ca:03:93:29:27:25:b0:f4:ce:a6:5e:ba:0e:e4:2d: 85:a3:0b:b6:ff:39:e8:67:06:7c:27:b6:b1:66:3a:a6:a7:d3: 23:17:2f:79:17:78:76:df:28:cc:46:65:a1:94:19:ba:13:d1: f9:e9:ea:93:5e:a8:29:fc:c9:85:6e:c4:6d:99:cf:69:94:ac: b9:87:44:2b:e9:d3:ef:22:02:d0:07:ce:97:1f:3f:c3:fb:d5: b6:35:05:6b:d6:f3:cf:d8:fb:04:d6:ca:dd:2c:53:04:50:57: 6e:27:cf:7e:19:49:20:3e:23:01:5b:db:8b:75:10:47:58:ee: 98:1b:3f:ee:75:4a:88:91:46:1d:42:a6:0b:52:2a:10:fa:fc: 17:61:a4:77:61:46:a7:b8:06:b1:f5:b8:b6:a1:99:1e:fd:7d: 01:e9:95:03:56:a8:d1:53:c8:79:4e:35:af:57:41:63:ee:48: a2:a9:41:da:78:b2:f6:c8:80:cc:4d:a8:05:2f:75:34:4b:d7: 5f:53:d1:db -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIURRu4cKm4pdKhfY2boCgD6h+kjdEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTA5MTIxMjQ1MDNaFw0yNjA5MTExMjUwMDNaMDMxMTAvBgNV BAMTKDQ4RUYzOTg1RjBEMjZCMDlERTBGREQxN0IzMzYzNjk3QzU5QTlGOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+R7pC7n88NIZtD9RTE4qAZMpT Wa+UirEx+H/k91VX0sEJzeowcco9AQVd+yxt6nf6OOookXMHVlWc/g+h3ZHrBP6m VJcPBkwM0FS8v8M4pu9p9B5sY+8xxtYWUMQG99J8GCTdQTC5kq/m2Rg82rilw9fs 3cBzYyFwM7kaR2j5qVVXzFayU+bUK1492sxV9vdyeCaXOmoJe/kDn0c87e4wWwDW rYEeCG+1ODV4+NbUqMEpijSMrqJ6YWr+d2+L+LT5gXDCU3ENHuX2bQAnMja0EFqq 4w67NodaXZXU2QVjTgqfSUEPB8063Wguz9ENtbhzy3MHomyqMwdATTOO3XU7AgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRI7zmF8NJrCd4P 3RezNjaXxZqfnzAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMEVFOTdDRjU1QzRBQUQxOTcxRjgzQjM2 RDk1MENGNkYyQ0M5RUYwNUE2OUJBRDY4Qzc5MDc4MjJBREE1MzgxMS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8wRUU5N0NGNTVDNEFBRDE5NzFGODNCMzZEOTUwQ0Y2RjJDQzlFRjA1QTY5 QkFENjhDNzkwNzgyMkFEQTUzODExLzAvNDhFRjM5ODVGMEQyNkIwOURFMEZERDE3 QjMzNjM2OTdDNTlBOUY5Ri5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCqMM0MA0EAgAC MAcDBQAoA19AMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDwLDANBgkqhkiG9w0B AQsFAAOCAQEAXSnEcJai70VYZCTxneqNK2BJkqRJTZRmrXa3oanL2hcv3MPcctkq fKwFNlonZXAtaIUnTESCr0TWygOTKSclsPTOpl66DuQthaMLtv856GcGfCe2sWY6 pqfTIxcveRd4dt8ozEZloZQZuhPR+enqk16oKfzJhW7EbZnPaZSsuYdEK+nT7yIC 0AfOlx8/w/vVtjUFa9bzz9j7BNbK3SxTBFBXbifPfhlJID4jAVvbi3UQR1jumBs/ 7nVKiJFGHUKmC1IqEPr8F2Gkd2FGp7gGsfW4tqGZHv19AemVA1ao0VPIeU41r1dB Y+5IoqlB2niy9siAzE2oBS91NEvXX1PR2w== -----END CERTIFICATE-----Generated at Thu Sep 18 23:31:13 2025 by rpki-client