$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F0C11DDEE5C21DA13EDF212E50683DC6EAA5643.cer File: 1F0C11DDEE5C21DA13EDF212E50683DC6EAA5643.cer (raw, json) Hash identifier: KT1/peq1GdDn4ZoPECn6oISBW7sMxijrL5x6lMCuxwQ= Subject key identifier: 1F:0C:11:DD:EE:5C:21:DA:13:ED:F2:12:E5:06:83:DC:6E:AA:56:43 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 5F6A93E1603A592148A10F44E5D268DCB7EE8421 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/B1B4CA9F3E2A0CF5AF273EA653D3D495428E9BC57EBBF12F8391ACC29B88E32B/0/1F0C11DDEE5C21DA13EDF212E50683DC6EAA5643.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/B1B4CA9F3E2A0CF5AF273EA653D3D495428E9BC57EBBF12F8391ACC29B88E32B/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Thu 07 May 2026 00:00:00 +0000 Certificate not after: Thu 06 May 2027 00:05:00 +0000 Subordinate resources: AS: 274310 IP: 2803:1430::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 16 May 2026 11:23:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:6a:93:e1:60:3a:59:21:48:a1:0f:44:e5:d2:68:dc:b7:ee:84:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: May 7 00:00:00 2026 GMT Not After : May 6 00:05:00 2027 GMT Subject: CN=1F0C11DDEE5C21DA13EDF212E50683DC6EAA5643 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:2b:0f:25:cc:fb:0f:10:3a:54:53:1c:bb:f8: e3:85:fb:eb:36:9c:8b:ec:46:37:38:36:bd:98:2d: 2c:24:6e:8f:69:06:e9:11:8c:9c:21:65:11:cb:66: 69:d8:81:b8:43:cb:2f:7b:00:7f:db:b2:01:d9:ff: 76:d9:55:af:52:f4:32:49:b5:c4:41:7a:df:94:20: 51:61:8f:21:6a:93:6d:fb:ab:20:6b:a5:db:99:ce: e7:d4:3e:b8:09:78:cd:e5:17:72:f6:1a:bd:0e:91: 0d:12:f0:35:6f:84:2c:8e:31:a5:b1:cb:b1:15:e9: 68:c0:96:eb:49:e9:f8:b3:ea:f6:15:7e:aa:f5:e2: f8:cc:3b:31:8a:f6:99:d9:df:2b:99:84:d5:3e:78: e9:3a:56:21:0f:17:21:47:d4:8c:c1:d9:ef:da:76: 8d:0b:49:b8:85:7f:55:43:d4:41:35:18:d7:4e:2a: 29:89:5f:56:02:e3:08:b1:02:54:1d:99:b4:23:48: c1:30:45:3b:a3:90:ce:93:bd:3a:1d:b1:14:0c:7f: 96:4e:41:0f:15:4a:64:8e:e8:86:bc:c5:75:fb:f3: d6:82:2c:88:a8:e7:57:0c:80:eb:aa:7f:2b:60:74: 0f:f3:75:83:53:11:02:d3:59:73:72:10:67:fe:82: 29:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1F:0C:11:DD:EE:5C:21:DA:13:ED:F2:12:E5:06:83:DC:6E:AA:56:43 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/B1B4CA9F3E2A0CF5AF273EA653D3D495428E9BC57EBBF12F8391ACC29B88E32B/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/B1B4CA9F3E2A0CF5AF273EA653D3D495428E9BC57EBBF12F8391ACC29B88E32B/0/1F0C11DDEE5C21DA13EDF212E50683DC6EAA5643.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:1430::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 274310 Signature Algorithm: sha256WithRSAEncryption 7a:68:42:9f:2f:cc:34:52:8b:7b:1b:eb:e7:77:6d:e1:db:8a: b1:5d:84:0b:10:05:30:4f:78:11:41:5b:d3:80:63:56:38:8d: 07:61:e6:16:4f:7f:82:79:f2:05:07:55:23:e2:cc:6a:e5:a6: 0c:ce:34:49:93:76:71:bf:d5:a0:98:31:13:d3:a3:3f:ce:88: 56:ed:4d:32:a2:56:5f:04:5d:38:32:42:99:c9:06:57:bb:e0: 26:91:90:73:09:c7:7a:34:a5:ba:b3:03:fe:ce:28:1c:e9:07: 07:d6:da:2a:37:97:03:1d:39:df:4b:4a:e4:98:0b:63:2b:06: c6:33:75:36:85:bb:19:53:1a:65:1e:59:a6:d4:ce:a0:b5:ca: c2:6c:46:2c:5f:64:31:19:0e:d4:a7:2c:ad:ef:72:2e:29:1f: 5e:5d:c4:be:1d:0b:3c:39:70:d0:34:12:49:30:24:9c:59:ef: 66:ab:a5:0f:4a:51:da:40:d2:27:8b:f0:8a:aa:1d:ca:76:76: 02:1f:92:0d:f7:39:8f:18:61:17:d0:ef:5b:74:51:6f:ca:13: 5f:13:75:a2:5f:ae:f0:41:d6:5f:df:5a:b3:65:60:3d:13:36: c8:35:76:88:1f:63:38:57:83:8c:45:16:29:58:e2:06:78:e4: 12:ba:38:8e -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUX2qT4WA6WSFIoQ9E5dJo3LfuhCEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjA1MDcwMDAwMDBaFw0yNzA1MDYwMDA1MDBaMDMxMTAvBgNV BAMTKDFGMEMxMURERUU1QzIxREExM0VERjIxMkU1MDY4M0RDNkVBQTU2NDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8Kw8lzPsPEDpUUxy7+OOF++s2 nIvsRjc4Nr2YLSwkbo9pBukRjJwhZRHLZmnYgbhDyy97AH/bsgHZ/3bZVa9S9DJJ tcRBet+UIFFhjyFqk237qyBrpduZzufUPrgJeM3lF3L2Gr0OkQ0S8DVvhCyOMaWx y7EV6WjAlutJ6fiz6vYVfqr14vjMOzGK9pnZ3yuZhNU+eOk6ViEPFyFH1IzB2e/a do0LSbiFf1VD1EE1GNdOKimJX1YC4wixAlQdmbQjSMEwRTujkM6TvTodsRQMf5ZO QQ8VSmSO6Ia8xXX789aCLIio51cMgOuqfytgdA/zdYNTEQLTWXNyEGf+gimvAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQfDBHd7lwh2hPt 8hLlBoPcbqpWQzAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQjFCNENBOUYzRTJBMENGNUFGMjczRUE2 NTNEM0Q0OTU0MjhFOUJDNTdFQkJGMTJGODM5MUFDQzI5Qjg4RTMyQi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9CMUI0Q0E5RjNFMkEwQ0Y1QUYyNzNFQTY1M0QzRDQ5NTQyOEU5QkM1N0VC QkYxMkY4MzkxQUNDMjlCODhFMzJCLzAvMUYwQzExRERFRTVDMjFEQTEzRURGMjEy RTUwNjgzREM2RUFBNTY0My5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAMUMDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEL4YwDQYJKoZIhvcNAQELBQADggEBAHpoQp8v zDRSi3sb6+d3beHbirFdhAsQBTBPeBFBW9OAY1Y4jQdh5hZPf4J58gUHVSPizGrl pgzONEmTdnG/1aCYMRPToz/OiFbtTTKiVl8EXTgyQpnJBle74CaRkHMJx3o0pbqz A/7OKBzpBwfW2io3lwMdOd9LSuSYC2MrBsYzdTaFuxlTGmUeWabUzqC1ysJsRixf ZDEZDtSnLK3vci4pH15dxL4dCzw5cNA0EkkwJJxZ72arpQ9KUdpA0ieL8IqqHcp2 dgIfkg33OY8YYRfQ71t0UW/KE18TdaJfrvBB1l/fWrNlYD0TNsg1dogfYzhXg4xF FilY4gZ45BK6OI4= -----END CERTIFICATE-----Generated at Wed May 13 13:00:41 2026 by rpki-client