$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1304DD2FE71402233748074E72F35131F305B65B.cer File: 1304DD2FE71402233748074E72F35131F305B65B.cer (raw, json) Hash identifier: WPQ9wSMCfma7Zhlum2sKS9cyUQKebvC4yXcHkhY/ZGA= Subject key identifier: 13:04:DD:2F:E7:14:02:23:37:48:07:4E:72:F3:51:31:F3:05:B6:5B Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 7132A9FBEC1990759CE3C436AAA75CE47D9A4EAB Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/18996CD265BA3420B2CB203F5543526EC9E5ADB3E33D99DA8DEB31DA23223EEB/0/1304DD2FE71402233748074E72F35131F305B65B.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/18996CD265BA3420B2CB203F5543526EC9E5ADB3E33D99DA8DEB31DA23223EEB/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Sat 26 Sep 2026 00:50:01 +0000 Certificate not after: Sat 25 Sep 2027 00:55:01 +0000 Subordinate resources: AS: 28546 IP: 201.150.32.0/20 IP: 2806:322::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 15 Oct 2026 06:54:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:32:a9:fb:ec:19:90:75:9c:e3:c4:36:aa:a7:5c:e4:7d:9a:4e:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Sep 26 00:50:01 2026 GMT Not After : Sep 25 00:55:01 2027 GMT Subject: CN=1304DD2FE71402233748074E72F35131F305B65B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:b7:6b:58:41:b6:8c:b9:fc:16:9c:b7:d8:48: cf:5a:e5:bb:65:a5:fb:04:ee:93:50:bc:c0:ec:10: 97:82:bd:86:3c:42:9d:ac:17:1a:c6:7c:b0:bc:2c: 61:f4:91:3f:0a:c4:b1:e9:c2:60:f1:a4:93:ca:c2: 96:bc:37:16:c8:e3:16:22:e6:7f:af:0a:f8:8a:9c: 69:7e:60:11:20:6b:f6:73:6c:19:e2:1b:36:93:26: d3:40:b6:0f:52:49:57:5e:ad:c5:91:c3:a8:2f:76: e0:ca:21:66:49:c4:13:14:d2:bd:cc:fb:6d:ee:3f: 46:22:d4:e7:12:5f:a2:45:8b:ab:a3:8f:20:2c:18: d1:03:89:4c:8a:25:d3:77:a9:3e:3d:ac:d7:8d:d1: 09:3b:ac:ad:e8:8e:2a:3c:56:bb:10:07:e5:b7:d8: 71:d5:11:cd:28:76:85:08:d9:14:e3:c7:4c:00:44: a3:ee:13:b1:c0:c8:43:19:f9:58:75:70:c2:66:bf: e7:be:5c:07:e3:ef:e9:f8:8f:f7:5e:04:1b:09:ed: c1:a9:a4:10:14:59:c3:25:2b:2d:c0:25:df:b4:0b: 78:03:98:e7:00:80:36:69:34:04:82:bd:98:1e:7c: c6:68:67:a3:c8:bf:b2:3e:5e:05:ea:b6:8b:ef:1d: aa:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 13:04:DD:2F:E7:14:02:23:37:48:07:4E:72:F3:51:31:F3:05:B6:5B X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/18996CD265BA3420B2CB203F5543526EC9E5ADB3E33D99DA8DEB31DA23223EEB/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/18996CD265BA3420B2CB203F5543526EC9E5ADB3E33D99DA8DEB31DA23223EEB/0/1304DD2FE71402233748074E72F35131F305B65B.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 201.150.32.0/20 IPv6: 2806:322::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28546 Signature Algorithm: sha256WithRSAEncryption 21:bb:88:ea:ac:bf:98:f6:67:5f:4b:66:37:53:81:6c:91:22: a4:02:74:00:c2:c8:10:92:d3:b3:83:62:83:9a:05:b7:3c:b7: bf:48:1a:7d:9b:99:ca:73:98:0e:00:03:8a:57:b4:5c:de:93: dc:f8:3d:84:a3:f1:71:e6:aa:62:43:6e:fd:96:a1:dd:66:40: a3:5e:94:7e:eb:99:fb:2f:53:da:49:54:e8:4c:6f:c2:34:a8: cb:04:b5:10:a2:3b:1d:dc:6e:27:42:0e:a6:e8:d7:9a:f1:3e: 80:cf:80:7d:ed:cc:f2:f0:a1:01:59:7b:db:9e:e5:97:da:b1: fa:53:65:b7:2c:c9:51:12:84:31:a5:9b:4a:a9:99:a1:4b:f5: d2:3f:55:32:54:1e:70:71:91:59:3d:03:ec:24:5a:6a:a1:f1: ef:09:32:48:c8:7f:78:d8:e5:3e:f8:c2:0d:29:62:c3:17:55: 72:31:ea:d9:82:0a:b3:20:be:9b:47:bb:1d:18:34:64:fb:bc: 91:87:cd:ab:e2:f6:b9:36:78:05:f7:92:18:dd:bc:c0:d9:36: d4:62:94:e7:a2:83:9f:2b:70:f2:22:23:16:f0:de:63:00:5d: c7:c2:a2:67:da:08:a0:e7:46:29:63:f5:e6:d0:2e:e8:6e:46: f0:d1:3b:ef -----BEGIN CERTIFICATE----- MIIGpDCCBYygAwIBAgIUcTKp++wZkHWc48Q2qqdc5H2aTqswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjA5MjYwMDUwMDFaFw0yNzA5MjUwMDU1MDFaMDMxMTAvBgNV BAMTKDEzMDRERDJGRTcxNDAyMjMzNzQ4MDc0RTcyRjM1MTMxRjMwNUI2NUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCat2tYQbaMufwWnLfYSM9a5btl pfsE7pNQvMDsEJeCvYY8Qp2sFxrGfLC8LGH0kT8KxLHpwmDxpJPKwpa8NxbI4xYi 5n+vCviKnGl+YBEga/ZzbBniGzaTJtNAtg9SSVdercWRw6gvduDKIWZJxBMU0r3M +23uP0Yi1OcSX6JFi6ujjyAsGNEDiUyKJdN3qT49rNeN0Qk7rK3ojio8VrsQB+W3 2HHVEc0odoUI2RTjx0wARKPuE7HAyEMZ+Vh1cMJmv+e+XAfj7+n4j/deBBsJ7cGp pBAUWcMlKy3AJd+0C3gDmOcAgDZpNASCvZgefMZoZ6PIv7I+XgXqtovvHaqtAgMB AAGjggOuMIIDqjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQTBN0v5xQCIzdI B05y81Ex8wW2WzAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMTg5OTZDRDI2NUJBMzQyMEIyQ0IyMDNG NTU0MzUyNkVDOUU1QURCM0UzM0Q5OURBOERFQjMxREEyMzIyM0VFQi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8xODk5NkNEMjY1QkEzNDIwQjJDQjIwM0Y1NTQzNTI2RUM5RTVBREIzRTMz RDk5REE4REVCMzFEQTIzMjIzRUVCLzAvMTMwNEREMkZFNzE0MDIyMzM3NDgwNzRF NzJGMzUxMzFGMzA1QjY1Qi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQEyZYgMA0EAgAC MAcDBQAoBgMiMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAm+CMA0GCSqGSIb3DQEB CwUAA4IBAQAhu4jqrL+Y9mdfS2Y3U4FskSKkAnQAwsgQktOzg2KDmgW3PLe/SBp9 m5nKc5gOAAOKV7Rc3pPc+D2Eo/Fx5qpiQ279lqHdZkCjXpR+65n7L1PaSVToTG/C NKjLBLUQojsd3G4nQg6m6Nea8T6Az4B97czy8KEBWXvbnuWX2rH6U2W3LMlREoQx pZtKqZmhS/XSP1UyVB5wcZFZPQPsJFpqofHvCTJIyH942OU++MINKWLDF1VyMerZ ggqzIL6bR7sdGDRk+7yRh82r4va5NngF95IY3bzA2TbUYpTnooOfK3DyIiMW8N5j AF3HwqJn2gig50YpY/Xm0C7obkbw0Tvv -----END CERTIFICATE-----Generated at Sun Oct 11 15:28:55 2026 by rpki-client