$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E48AFD9B71B883E7D0F953CC116B1F94E953785.cer File: 0E48AFD9B71B883E7D0F953CC116B1F94E953785.cer (raw, json) Hash identifier: v+BOgh7ccxBUCSMJei9F6cIGiZ/0PVkGrhGe8v4tkso= Subject key identifier: 0E:48:AF:D9:B7:1B:88:3E:7D:0F:95:3C:C1:16:B1:F9:4E:95:37:85 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 738ADBBA2FF39842CBD74FCDD6A296500C848DD9 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/2FA9A01EB0CE8B2F041DFC1BCF2D08012BBD0A240A37DAA06510C30AD9CE6160/0/0E48AFD9B71B883E7D0F953CC116B1F94E953785.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/2FA9A01EB0CE8B2F041DFC1BCF2D08012BBD0A240A37DAA06510C30AD9CE6160/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 20:01:22 +0000 Certificate not after: Wed 04 Feb 2026 20:06:22 +0000 Subordinate resources: IP: 2801:111::/44 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:8a:db:ba:2f:f3:98:42:cb:d7:4f:cd:d6:a2:96:50:0c:84:8d:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 20:01:22 2025 GMT Not After : Feb 4 20:06:22 2026 GMT Subject: CN=0E48AFD9B71B883E7D0F953CC116B1F94E953785 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:3e:1e:23:2e:3a:99:b0:d6:9b:eb:aa:17:91: 38:62:82:34:5e:41:ad:22:76:58:a6:fc:48:57:0d: bd:4d:b3:69:69:ca:f6:1f:81:9d:c7:7a:e8:1f:0f: e5:07:6e:06:3e:84:8f:45:86:63:30:ca:80:09:17: 13:91:cb:57:ec:55:ba:06:ea:2a:87:a5:c9:04:5a: fa:ea:d4:d1:0d:59:ce:46:f2:3d:12:b6:01:e1:a3: 4b:a6:bd:2a:a3:10:bb:81:f5:dd:d5:45:a1:6c:a7: 15:cb:ea:54:21:1d:23:5e:0c:d0:c3:8c:46:70:20: 4c:85:18:23:b8:a9:56:13:35:8f:ae:d9:e5:2b:16: 59:cd:92:bf:1d:d1:ac:f5:c4:35:e4:4a:d8:60:a4: 7a:64:d3:13:1c:ea:b2:40:86:d5:2b:47:4e:07:82: f0:27:77:77:98:a9:e1:78:1c:97:4b:c7:0b:f7:ff: 63:26:68:10:94:c5:96:ae:c9:9c:17:8c:88:01:0d: 88:ae:ba:ab:69:1b:45:57:44:ad:d8:08:5a:e6:fb: a8:73:a2:b1:78:eb:cf:5e:ea:c8:f2:75:08:00:c2: 65:7a:9d:e9:12:79:50:a9:00:e9:e3:49:be:3b:da: ac:7e:5e:2a:de:5b:de:5c:1d:98:a0:73:5d:78:f5: 13:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 0E:48:AF:D9:B7:1B:88:3E:7D:0F:95:3C:C1:16:B1:F9:4E:95:37:85 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/2FA9A01EB0CE8B2F041DFC1BCF2D08012BBD0A240A37DAA06510C30AD9CE6160/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/2FA9A01EB0CE8B2F041DFC1BCF2D08012BBD0A240A37DAA06510C30AD9CE6160/0/0E48AFD9B71B883E7D0F953CC116B1F94E953785.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2801:111::/44 Signature Algorithm: sha256WithRSAEncryption 13:b4:65:54:90:d3:0c:f0:8e:d1:27:7d:2f:2e:26:e8:24:7c: d2:3e:3f:3f:be:cb:44:8d:fe:1a:2a:f8:a1:15:ad:d9:c2:ab: 1b:41:12:fb:31:b3:ad:93:72:a7:93:e4:1e:90:90:e4:8a:92: f9:20:3f:a6:be:d8:d7:9d:bd:ca:64:9b:89:7c:1f:46:35:e0: 66:1b:16:25:3d:2e:50:9d:ed:24:92:98:14:14:33:76:70:2b: 17:8f:88:6d:14:a2:7a:34:8c:3a:db:ec:09:e8:ab:fc:8c:52: 3e:72:40:6b:9a:67:ce:82:45:36:98:c9:c6:a4:89:c1:6e:da: f5:7e:f0:6c:37:12:cb:fa:6b:f6:d4:db:c7:82:38:c4:87:63: d5:a9:fc:68:99:77:20:c0:0a:8e:b2:9e:2a:d6:ea:1b:de:29: 22:e7:ee:e9:1a:2e:9e:3e:69:e4:81:4a:3f:db:ce:e6:91:37: 84:e4:f2:7a:1d:a1:1d:1e:71:72:7b:ae:f7:08:97:e7:ce:80: 9f:c2:bd:f6:46:bc:2b:be:b4:3f:01:52:0b:45:f5:29:c0:d4: 6c:e9:bf:73:fb:62:2c:e9:20:48:d1:c2:da:c6:74:cf:fc:11: 4e:ca:19:88:9b:6d:9e:40:a8:75:51:55:be:a2:42:04:3b:f4: 9e:45:61:08 -----BEGIN CERTIFICATE----- MIIGfTCCBWWgAwIBAgIUc4rbui/zmELL10/N1qKWUAyEjdkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUyMDAxMjJaFw0yNjAyMDQyMDA2MjJaMDMxMTAvBgNV BAMTKDBFNDhBRkQ5QjcxQjg4M0U3RDBGOTUzQ0MxMTZCMUY5NEU5NTM3ODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVPh4jLjqZsNab66oXkThigjRe Qa0idlim/EhXDb1Ns2lpyvYfgZ3HeugfD+UHbgY+hI9FhmMwyoAJFxORy1fsVboG 6iqHpckEWvrq1NENWc5G8j0StgHho0umvSqjELuB9d3VRaFspxXL6lQhHSNeDNDD jEZwIEyFGCO4qVYTNY+u2eUrFlnNkr8d0az1xDXkSthgpHpk0xMc6rJAhtUrR04H gvAnd3eYqeF4HJdLxwv3/2MmaBCUxZauyZwXjIgBDYiuuqtpG0VXRK3YCFrm+6hz orF4689e6sjydQgAwmV6nekSeVCpAOnjSb472qx+XireW95cHZigc1149ROBAgMB AAGjggOHMIIDgzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQOSK/ZtxuIPn0P lTzBFrH5TpU3hTAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMkZBOUEwMUVCMENFOEIyRjA0MURGQzFC Q0YyRDA4MDEyQkJEMEEyNDBBMzdEQUEwNjUxMEMzMEFEOUNFNjE2MC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8yRkE5QTAxRUIwQ0U4QjJGMDQxREZDMUJDRjJEMDgwMTJCQkQwQTI0MEEz N0RBQTA2NTEwQzMwQUQ5Q0U2MTYwLzAvMEU0OEFGRDlCNzFCODgzRTdEMEY5NTND QzExNkIxRjk0RTk1Mzc4NS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKAEBEQAAMA0G CSqGSIb3DQEBCwUAA4IBAQATtGVUkNMM8I7RJ30vLiboJHzSPj8/vstEjf4aKvih Fa3ZwqsbQRL7MbOtk3Knk+QekJDkipL5ID+mvtjXnb3KZJuJfB9GNeBmGxYlPS5Q ne0kkpgUFDN2cCsXj4htFKJ6NIw62+wJ6Kv8jFI+ckBrmmfOgkU2mMnGpInBbtr1 fvBsNxLL+mv21NvHgjjEh2PVqfxomXcgwAqOsp4q1uob3iki5+7pGi6ePmnkgUo/ 287mkTeE5PJ6HaEdHnFye673CJfnzoCfwr32RrwrvrQ/AVILRfUpwNRs6b9z+2Is 6SBI0cLaxnTP/BFOyhmIm22eQKh1UVW+okIEO/SeRWEI -----END CERTIFICATE-----Generated at Tue Nov 4 21:39:04 2025 by rpki-client