$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C49792A535C3870BDA2A89A00898F9EA1F1F61F0.cer File: C49792A535C3870BDA2A89A00898F9EA1F1F61F0.cer (raw, json) Hash identifier: 9F0zSUSlbvFyll4dl+jv71uFO5+FRYPzQSL0sp9LtbM= Subject key identifier: C4:97:92:A5:35:C3:87:0B:DA:2A:89:A0:08:98:F9:EA:1F:1F:61:F0 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 2EE13E2ECFD2E93D4BCB8C5EE3D00B527D3E9747 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/1E5FDB59006F1F42ECD187BE769E3CFA507E34FB73C0492C5BB04543CD43109C/0/C49792A535C3870BDA2A89A00898F9EA1F1F61F0.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/1E5FDB59006F1F42ECD187BE769E3CFA507E34FB73C0492C5BB04543CD43109C/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 04 Feb 2025 22:40:04 +0000 Certificate not after: Tue 03 Feb 2026 22:45:04 +0000 Subordinate resources: AS: 270012 IP: 200.39.148.0/23 IP: 2803:c9e0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 21:38:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:e1:3e:2e:cf:d2:e9:3d:4b:cb:8c:5e:e3:d0:0b:52:7d:3e:97:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 4 22:40:04 2025 GMT Not After : Feb 3 22:45:04 2026 GMT Subject: CN=C49792A535C3870BDA2A89A00898F9EA1F1F61F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:93:92:09:af:15:d3:64:04:4e:bc:fa:1e:57: 67:61:53:bb:6c:0b:b9:ce:18:65:67:6e:fb:0f:68: 6e:96:b3:6d:8d:04:45:8b:d9:eb:18:3f:c4:6d:bb: 37:f0:0f:67:2b:67:9d:8b:8b:a3:2e:b4:3b:03:3b: 3f:50:3d:a2:2f:16:ec:b5:08:e0:51:08:c2:15:48: 55:8e:f4:1a:86:e3:6c:39:e6:8c:9e:77:f2:36:ea: 6a:0c:91:ef:7d:fe:10:1a:68:8e:87:07:2c:86:1a: ba:98:0f:9b:d7:a0:cf:94:8b:a8:7c:7f:73:03:48: 14:ae:b0:a4:62:6f:ef:92:d6:30:6c:07:cf:ce:68: 6b:42:30:22:10:c6:dd:b5:e4:18:93:85:e2:95:a6: f4:b6:ab:1b:1c:1f:d5:a8:b7:07:f2:f0:70:1a:ac: cc:53:be:eb:fb:0e:92:18:65:49:5d:29:26:d6:9e: de:71:43:38:c0:4e:88:c2:b8:e7:e4:ce:e3:02:51: b2:28:87:e6:e4:e1:4a:99:e4:19:06:ae:94:24:be: b6:5c:a9:bc:63:f7:63:3a:73:48:99:e1:b9:91:aa: 31:3c:b8:67:57:2c:11:c8:2f:d8:64:c5:9f:78:bb: 3b:07:a8:1c:e4:25:2f:d3:63:f4:f0:a4:11:d0:cd: 41:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C4:97:92:A5:35:C3:87:0B:DA:2A:89:A0:08:98:F9:EA:1F:1F:61:F0 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1E5FDB59006F1F42ECD187BE769E3CFA507E34FB73C0492C5BB04543CD43109C/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1E5FDB59006F1F42ECD187BE769E3CFA507E34FB73C0492C5BB04543CD43109C/0/C49792A535C3870BDA2A89A00898F9EA1F1F61F0.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.39.148.0/23 IPv6: 2803:c9e0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 270012 Signature Algorithm: sha256WithRSAEncryption 11:77:45:8d:cd:b3:54:fe:fb:8a:5c:c7:11:a2:06:35:2c:11: c7:40:11:b3:49:13:f0:8e:d5:1c:a2:15:67:b8:24:f7:36:09: af:44:fd:5a:51:37:39:3a:82:07:1f:b6:f3:4a:c2:95:8a:3b: 89:73:9d:1a:72:41:bc:9a:c0:ce:ed:da:0d:23:03:c2:bc:21: c7:7a:a9:fe:a8:b0:a5:98:16:c8:de:6d:10:9b:bd:16:40:db: aa:7c:08:a9:55:04:7c:c9:0a:20:1a:1a:9c:9f:96:40:57:ae: e6:ed:b4:98:81:95:2d:eb:ba:57:30:59:8e:9b:83:a2:6e:5d: f2:0c:b7:f9:b9:e6:4e:da:0f:3e:9f:52:c6:f2:8b:8d:68:fc: 31:b5:01:68:b4:ed:5c:c9:10:2f:6e:54:42:a1:d8:b4:77:05: 49:24:43:cf:af:48:4a:d9:dc:bc:96:b7:2b:73:2e:af:a4:43: 4e:25:de:5b:8c:05:9a:bd:ad:d0:5e:8f:6d:f7:a6:f2:56:2b: 86:d8:68:b1:de:c1:42:fc:18:8d:38:57:51:61:c0:c0:95:41: e8:c5:d2:a4:dd:a4:79:67:dd:5b:ee:e5:bc:ed:49:e7:47:64: bd:12:eb:a5:fd:51:05:48:df:56:0b:b4:4f:b4:c2:3f:7c:b7: ad:f9:9b:07 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIULuE+Ls/S6T1Ly4xe49ALUn0+l0cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDQyMjQwMDRaFw0yNjAyMDMyMjQ1MDRaMDMxMTAvBgNV BAMTKEM0OTc5MkE1MzVDMzg3MEJEQTJBODlBMDA4OThGOUVBMUYxRjYxRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCok5IJrxXTZAROvPoeV2dhU7ts C7nOGGVnbvsPaG6Ws22NBEWL2esYP8RtuzfwD2crZ52Li6MutDsDOz9QPaIvFuy1 COBRCMIVSFWO9BqG42w55oyed/I26moMke99/hAaaI6HByyGGrqYD5vXoM+Ui6h8 f3MDSBSusKRib++S1jBsB8/OaGtCMCIQxt215BiTheKVpvS2qxscH9Wotwfy8HAa rMxTvuv7DpIYZUldKSbWnt5xQzjATojCuOfkzuMCUbIoh+bk4UqZ5BkGrpQkvrZc qbxj92M6c0iZ4bmRqjE8uGdXLBHIL9hkxZ94uzsHqBzkJS/TY/TwpBHQzUGRAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTEl5KlNcOHC9oq iaAImPnqHx9h8DAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMUU1RkRCNTkwMDZGMUY0MkVDRDE4N0JF NzY5RTNDRkE1MDdFMzRGQjczQzA0OTJDNUJCMDQ1NDNDRDQzMTA5Qy8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8xRTVGREI1OTAwNkYxRjQyRUNEMTg3QkU3NjlFM0NGQTUwN0UzNEZCNzND MDQ5MkM1QkIwNDU0M0NENDMxMDlDLzAvQzQ5NzkyQTUzNUMzODcwQkRBMkE4OUEw MDg5OEY5RUExRjFGNjFGMC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQByCeUMA0EAgAC MAcDBQAoA8ngMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQevDANBgkqhkiG9w0B AQsFAAOCAQEAEXdFjc2zVP77ilzHEaIGNSwRx0ARs0kT8I7VHKIVZ7gk9zYJr0T9 WlE3OTqCBx+280rClYo7iXOdGnJBvJrAzu3aDSMDwrwhx3qp/qiwpZgWyN5tEJu9 FkDbqnwIqVUEfMkKIBoanJ+WQFeu5u20mIGVLeu6VzBZjpuDom5d8gy3+bnmTtoP Pp9SxvKLjWj8MbUBaLTtXMkQL25UQqHYtHcFSSRDz69IStncvJa3K3Mur6RDTiXe W4wFmr2t0F6Pbfem8lYrhthosd7BQvwYjThXUWHAwJVB6MXSpN2keWfdW+7lvO1J 50dkvRLrpf1RBUjfVgu0T7TCP3y3rfmbBw== -----END CERTIFICATE-----Generated at Sun Nov 2 04:20:50 2025 by rpki-client