$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/49986AF9BE70C9F7A7BBDEB5E3E872038F597D4E.cer File: 49986AF9BE70C9F7A7BBDEB5E3E872038F597D4E.cer (raw, json) Hash identifier: WlLTkxOo1YNoPHTQp9MCQTnk156ECcbm74tybzSULGE= Subject key identifier: 49:98:6A:F9:BE:70:C9:F7:A7:BB:DE:B5:E3:E8:72:03:8F:59:7D:4E Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 6BAF19C0C16145A486B5DBB0784D0E97316B8595 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/278B39519F38D9CF4B886A90BEA8C666D8C3215F50353FC7D2121D5E936EAF17/0/49986AF9BE70C9F7A7BBDEB5E3E872038F597D4E.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/278B39519F38D9CF4B886A90BEA8C666D8C3215F50353FC7D2121D5E936EAF17/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 16:49:15 +0000 Certificate not after: Wed 04 Feb 2026 16:54:15 +0000 Subordinate resources: AS: 27751 IP: 190.108.224.0/19 IP: 190.121.176.0/20 IP: 200.59.224.0/19 IP: 2803:b600::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:af:19:c0:c1:61:45:a4:86:b5:db:b0:78:4d:0e:97:31:6b:85:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 16:49:15 2025 GMT Not After : Feb 4 16:54:15 2026 GMT Subject: CN=49986AF9BE70C9F7A7BBDEB5E3E872038F597D4E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:4c:a7:2f:71:ab:00:b1:16:ff:94:82:20:69: 56:fd:d1:ac:66:17:bd:9d:bd:ab:c5:60:eb:08:30: e9:b9:24:4b:ac:12:4a:a6:02:e3:d3:f4:4c:7c:03: 82:c1:3e:90:f8:4a:38:89:01:3e:fd:9c:5a:30:6d: 75:35:ad:a7:36:d8:28:63:0e:2a:d8:24:e3:20:03: 5c:93:fa:50:18:c8:46:ac:86:3d:02:0f:2e:38:0f: 3a:9c:09:11:54:6e:ac:1b:b5:76:c9:f7:92:e5:88: 73:fe:c0:97:06:21:ad:66:51:da:6d:e6:43:62:fc: 8f:e2:dc:d9:ad:f4:c1:62:bc:33:b3:8b:4c:db:a9: 02:5c:e1:94:74:94:91:b3:e4:88:6f:83:80:be:58: b2:68:0d:ef:61:26:e5:62:49:6e:83:a2:56:b0:5a: 39:7c:b8:1f:b8:a7:1c:fb:02:15:f8:df:62:69:ce: 49:30:51:f2:ea:bb:2a:da:4b:7c:08:8b:51:e7:1a: a7:f5:1b:ff:f4:60:69:f9:31:96:cc:24:3d:17:6e: dd:08:80:22:8e:ef:24:a0:58:6c:34:91:ac:44:f5: 5a:cb:7b:90:74:0f:55:74:c9:55:f4:c9:ff:ac:02: c8:9c:15:82:b6:4f:92:0f:8c:85:fc:78:31:09:ff: 77:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 49:98:6A:F9:BE:70:C9:F7:A7:BB:DE:B5:E3:E8:72:03:8F:59:7D:4E X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/278B39519F38D9CF4B886A90BEA8C666D8C3215F50353FC7D2121D5E936EAF17/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/278B39519F38D9CF4B886A90BEA8C666D8C3215F50353FC7D2121D5E936EAF17/0/49986AF9BE70C9F7A7BBDEB5E3E872038F597D4E.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 190.108.224.0/19 190.121.176.0/20 200.59.224.0/19 IPv6: 2803:b600::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 27751 Signature Algorithm: sha256WithRSAEncryption 14:47:48:ed:21:0b:76:33:8d:db:1c:08:5f:8b:d2:cb:1b:5c: 79:75:c4:26:ad:6c:2f:a3:85:54:91:4a:ea:f2:9a:6e:af:06: f8:36:b7:23:62:93:af:5a:a2:25:e5:b9:80:54:98:0c:e1:4c: 6e:3f:7e:12:a6:d1:79:6e:92:02:4f:6e:fa:20:95:83:32:6d: 25:4f:fa:cb:d1:cc:3f:30:32:45:d1:40:1b:c3:6a:97:a8:e2: 86:68:7e:74:90:ac:af:09:f0:fd:9e:35:42:95:02:b9:d2:75: b4:ee:3d:c4:bb:bc:ed:03:36:22:a0:ac:7a:45:eb:36:9c:05: 41:80:99:92:ac:1a:6f:33:a6:80:d1:92:dc:0f:49:9a:f6:8e: e5:bc:2c:71:5e:fd:b4:6c:28:da:c3:84:f1:f1:53:44:f6:38: 31:27:a5:86:c8:06:cd:78:eb:52:1e:7c:34:84:0d:93:a7:c0: e8:c0:b0:82:9e:38:18:de:29:2d:c2:d6:5b:69:a1:07:a6:f1: c5:ab:4e:9d:cf:8a:04:7f:52:47:fb:64:2b:fc:8e:9d:1e:36: f1:73:19:00:00:dd:4b:eb:83:60:12:a0:9b:c3:48:c3:41:21: f3:e2:27:7f:42:8f:6b:4d:ee:a6:b1:9c:d3:d3:ae:8b:f2:a9: 3f:f8:13:21 -----BEGIN CERTIFICATE----- MIIGsDCCBZigAwIBAgIUa68ZwMFhRaSGtduweE0OlzFrhZUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUxNjQ5MTVaFw0yNjAyMDQxNjU0MTVaMDMxMTAvBgNV BAMTKDQ5OTg2QUY5QkU3MEM5RjdBN0JCREVCNUUzRTg3MjAzOEY1OTdENEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5TKcvcasAsRb/lIIgaVb90axm F72dvavFYOsIMOm5JEusEkqmAuPT9Ex8A4LBPpD4SjiJAT79nFowbXU1rac22Chj DirYJOMgA1yT+lAYyEashj0CDy44DzqcCRFUbqwbtXbJ95LliHP+wJcGIa1mUdpt 5kNi/I/i3Nmt9MFivDOzi0zbqQJc4ZR0lJGz5Ihvg4C+WLJoDe9hJuViSW6Dolaw Wjl8uB+4pxz7AhX432JpzkkwUfLquyraS3wIi1HnGqf1G//0YGn5MZbMJD0Xbt0I gCKO7ySgWGw0kaxE9VrLe5B0D1V0yVX0yf+sAsicFYK2T5IPjIX8eDEJ/3cNAgMB AAGjggO6MIIDtjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRJmGr5vnDJ96e7 3rXj6HIDj1l9TjAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMjc4QjM5NTE5RjM4RDlDRjRCODg2QTkw QkVBOEM2NjZEOEMzMjE1RjUwMzUzRkM3RDIxMjFENUU5MzZFQUYxNy8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8yNzhCMzk1MTlGMzhEOUNGNEI4ODZBOTBCRUE4QzY2NkQ4QzMyMTVGNTAz NTNGQzdEMjEyMUQ1RTkzNkVBRjE3LzAvNDk5ODZBRjlCRTcwQzlGN0E3QkJERUI1 RTNFODcyMDM4RjU5N0Q0RS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQFvmzgAwQEvnmw AwQFyDvgMA0EAgACMAcDBQAoA7YAMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAmxn MA0GCSqGSIb3DQEBCwUAA4IBAQAUR0jtIQt2M43bHAhfi9LLG1x5dcQmrWwvo4VU kUrq8ppurwb4NrcjYpOvWqIl5bmAVJgM4UxuP34SptF5bpICT276IJWDMm0lT/rL 0cw/MDJF0UAbw2qXqOKGaH50kKyvCfD9njVClQK50nW07j3Eu7ztAzYioKx6Res2 nAVBgJmSrBpvM6aA0ZLcD0ma9o7lvCxxXv20bCjaw4Tx8VNE9jgxJ6WGyAbNeOtS Hnw0hA2Tp8DowLCCnjgY3iktwtZbaaEHpvHFq06dz4oEf1JH+2Qr/I6dHjbxcxkA AN1L64NgEqCbw0jDQSHz4id/Qo9rTe6msZzT066L8qk/+BMh -----END CERTIFICATE-----Generated at Wed Nov 5 15:18:01 2025 by rpki-client