$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/223503E91127009B3C571FE1297AAB965AEAC477.cer File: 223503E91127009B3C571FE1297AAB965AEAC477.cer (raw, json) Hash identifier: 1z5gipgcLhKz0MrQG9Lo3cxjJzlEzkiANNIHsuF1q6A= Subject key identifier: 22:35:03:E9:11:27:00:9B:3C:57:1F:E1:29:7A:AB:96:5A:EA:C4:77 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 3DAF0931D6337C7B4342598B74DB6EF50596272F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/61DACD51C6EB8DC4DA269088CE141FB85B165F3AC1C8261927C3471B57C48814/0/223503E91127009B3C571FE1297AAB965AEAC477.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/61DACD51C6EB8DC4DA269088CE141FB85B165F3AC1C8261927C3471B57C48814/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Sat 27 Jun 2026 19:30:01 +0000 Certificate not after: Sat 26 Jun 2027 19:35:01 +0000 Subordinate resources: AS: 274967 IP: 2803:e530::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 28 Jul 2026 03:34:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:af:09:31:d6:33:7c:7b:43:42:59:8b:74:db:6e:f5:05:96:27:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jun 27 19:30:01 2026 GMT Not After : Jun 26 19:35:01 2027 GMT Subject: CN=223503E91127009B3C571FE1297AAB965AEAC477 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:cd:cb:5a:07:93:ee:c3:e9:39:4e:11:c3:4e: 1a:a9:5a:51:1a:d2:cc:58:08:4f:78:78:65:b4:a2: e6:b3:f2:72:d4:97:ae:24:7f:c1:87:a2:24:22:5d: 74:80:4f:fa:e9:58:30:92:2f:e9:c4:e3:12:e8:0e: ba:a0:e7:12:9c:b5:89:42:b1:35:86:34:00:4d:2f: f3:23:73:d8:6a:fb:2d:69:26:45:8f:a9:44:74:fd: 16:41:de:3f:4d:ce:84:65:b6:cc:4c:9a:1f:06:25: 79:53:9a:b2:75:70:d2:a5:2c:48:26:4a:94:50:a3: 4d:07:91:c5:c3:7b:49:60:92:86:f7:dd:a1:36:e4: 4a:09:9f:01:85:53:a6:e8:58:08:d2:e8:30:e8:55: 41:4d:a2:5e:db:87:3f:41:2d:09:eb:75:42:83:c8: 82:86:e6:00:66:96:73:d5:bc:35:f5:d2:13:1b:91: b7:f6:9e:a8:cb:32:7d:a9:74:70:54:5e:3d:23:61: 90:42:4f:e1:bc:fb:02:a4:4b:9b:1a:ec:f8:e6:cb: 76:bd:a9:35:c1:44:73:23:93:d2:f7:a0:92:39:73: d8:17:5b:81:31:2f:76:45:3f:4a:cb:fb:52:1d:80: 95:b8:bd:96:23:e3:62:71:c5:7e:d7:7f:7b:50:11: ba:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 22:35:03:E9:11:27:00:9B:3C:57:1F:E1:29:7A:AB:96:5A:EA:C4:77 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/61DACD51C6EB8DC4DA269088CE141FB85B165F3AC1C8261927C3471B57C48814/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/61DACD51C6EB8DC4DA269088CE141FB85B165F3AC1C8261927C3471B57C48814/0/223503E91127009B3C571FE1297AAB965AEAC477.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:e530::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 274967 Signature Algorithm: sha256WithRSAEncryption 6a:84:b0:eb:2d:ac:ed:6b:d6:39:f5:3d:03:14:5d:99:7d:e2: 01:87:a5:77:3e:f6:d2:bf:c8:ff:e0:d3:d2:04:1a:27:81:fb: a9:d3:98:e4:58:33:ef:1e:f8:91:4d:fa:02:34:44:9a:9b:ec: f2:27:5d:8b:55:6a:b3:ff:30:59:a0:63:5d:6a:de:a4:8c:89: 65:53:42:ea:70:33:0d:68:17:83:f6:a2:98:da:21:51:50:fc: b2:ff:9f:c5:29:49:2e:a7:d5:10:9d:ba:38:d0:df:59:c9:b4: c3:79:41:d4:da:4e:df:64:e9:4e:32:5a:a6:58:28:f8:cd:5c: 97:d3:cf:80:35:b0:39:d6:12:a2:aa:f9:e4:77:24:53:d5:83: c1:b2:cf:be:31:0f:1a:2b:23:bc:86:8a:4a:72:fe:54:a0:c9: bd:f5:93:ba:d0:63:a5:1e:83:0b:3f:ff:bf:96:44:51:7c:06: 5b:17:6b:88:73:52:0d:0c:5f:ed:08:04:cf:64:c4:bf:d5:06: 05:7c:49:1f:b9:f4:13:98:4e:25:01:23:ec:8b:3b:52:bb:f9: 39:ff:1e:ec:a7:19:85:28:5c:e8:38:d3:72:22:8d:52:09:04: 7a:0a:ec:14:1a:38:b2:e7:b1:74:8f:b2:3f:0e:67:83:16:68: 09:08:ce:88 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUPa8JMdYzfHtDQlmLdNtu9QWWJy8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjA2MjcxOTMwMDFaFw0yNzA2MjYxOTM1MDFaMDMxMTAvBgNV BAMTKDIyMzUwM0U5MTEyNzAwOUIzQzU3MUZFMTI5N0FBQjk2NUFFQUM0NzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5zctaB5Puw+k5ThHDThqpWlEa 0sxYCE94eGW0ouaz8nLUl64kf8GHoiQiXXSAT/rpWDCSL+nE4xLoDrqg5xKctYlC sTWGNABNL/Mjc9hq+y1pJkWPqUR0/RZB3j9NzoRltsxMmh8GJXlTmrJ1cNKlLEgm SpRQo00HkcXDe0lgkob33aE25EoJnwGFU6boWAjS6DDoVUFNol7bhz9BLQnrdUKD yIKG5gBmlnPVvDX10hMbkbf2nqjLMn2pdHBUXj0jYZBCT+G8+wKkS5sa7Pjmy3a9 qTXBRHMjk9L3oJI5c9gXW4ExL3ZFP0rL+1IdgJW4vZYj42JxxX7Xf3tQEbp7AgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQiNQPpEScAmzxX H+EpequWWurEdzAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNjFEQUNENTFDNkVCOERDNERBMjY5MDg4 Q0UxNDFGQjg1QjE2NUYzQUMxQzgyNjE5MjdDMzQ3MUI1N0M0ODgxNC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy82MURBQ0Q1MUM2RUI4REM0REEyNjkwODhDRTE0MUZCODVCMTY1RjNBQzFD ODI2MTkyN0MzNDcxQjU3QzQ4ODE0LzAvMjIzNTAzRTkxMTI3MDA5QjNDNTcxRkUx Mjk3QUFCOTY1QUVBQzQ3Ny5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAPlMDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEMhcwDQYJKoZIhvcNAQELBQADggEBAGqEsOst rO1r1jn1PQMUXZl94gGHpXc+9tK/yP/g09IEGieB+6nTmORYM+8e+JFN+gI0RJqb 7PInXYtVarP/MFmgY11q3qSMiWVTQupwMw1oF4P2opjaIVFQ/LL/n8UpSS6n1RCd ujjQ31nJtMN5QdTaTt9k6U4yWqZYKPjNXJfTz4A1sDnWEqKq+eR3JFPVg8Gyz74x DxorI7yGikpy/lSgyb31k7rQY6Uegws//7+WRFF8BlsXa4hzUg0MX+0IBM9kxL/V BgV8SR+59BOYTiUBI+yLO1K7+Tn/HuynGYUoXOg403IijVIJBHoK7BQaOLLnsXSP sj8OZ4MWaAkIzog= -----END CERTIFICATE-----Generated at Thu Jul 23 23:26:41 2026 by rpki-client