$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28D387F63AEAE0AA9E95541BC0B6AF1F11CE5476.cer File: 28D387F63AEAE0AA9E95541BC0B6AF1F11CE5476.cer (raw, json) Hash identifier: KWRB/5xc9yvbXhGSxJ5HrFtv8Pdc/Se4GR0A9YfkaBw= Subject key identifier: 28:D3:87:F6:3A:EA:E0:AA:9E:95:54:1B:C0:B6:AF:1F:11:CE:54:76 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 39F41FE9AECAF4CBC29DD2C787B16CE3BC1EC954 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/BA476AC3215C47B00A088A0D47270A7827502DC35CF5475F7C850EBBA5209FEE/0/28D387F63AEAE0AA9E95541BC0B6AF1F11CE5476.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/BA476AC3215C47B00A088A0D47270A7827502DC35CF5475F7C850EBBA5209FEE/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Mon 29 Jun 2026 13:35:01 +0000 Certificate not after: Mon 28 Jun 2027 13:40:01 +0000 Subordinate resources: AS: 274945 IP: 2803:2930::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 28 Jul 2026 01:13:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:f4:1f:e9:ae:ca:f4:cb:c2:9d:d2:c7:87:b1:6c:e3:bc:1e:c9:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jun 29 13:35:01 2026 GMT Not After : Jun 28 13:40:01 2027 GMT Subject: CN=28D387F63AEAE0AA9E95541BC0B6AF1F11CE5476 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:cc:09:ab:43:35:7f:a0:38:bc:99:c7:56:0f: dd:ce:e5:38:c9:c8:b4:c8:78:ec:66:2f:3a:c5:e3: 0b:b5:bc:6a:ec:18:42:5d:72:30:9b:82:f1:8f:16: e1:c5:4e:be:7d:a2:b8:fd:f8:ec:9a:c8:01:64:70: c6:e0:22:b8:7a:19:28:0b:2e:c8:ef:6f:80:d2:77: ee:79:c3:42:05:d1:6b:f3:de:72:8f:34:e6:0a:4c: 02:92:08:80:c1:37:9f:a9:45:b9:fd:64:5c:91:8c: 0d:84:68:3c:2b:d2:7c:76:af:4b:7f:a3:92:61:5f: af:f0:e8:bb:3d:46:3d:58:44:40:39:4f:60:74:2f: dc:37:b2:15:36:e8:94:e4:6b:61:b1:df:0d:7c:dc: e5:50:c8:7b:8b:d4:73:72:af:3f:71:63:7d:a8:d9: 91:5d:59:30:ed:c2:3c:3e:6e:a6:6f:9e:31:71:7a: 41:01:fd:7d:2b:c9:5b:0f:10:30:d9:a7:6c:0f:2d: f4:b0:a5:11:d7:16:8f:33:0b:71:21:73:48:06:5f: e2:42:ea:ca:b4:47:b3:a7:40:24:54:a2:e3:2f:f4: 79:5b:b4:5d:58:f2:4e:c0:99:5c:8e:8f:a1:a8:89: a0:42:40:e5:28:b7:a8:c8:a3:c6:eb:b5:e7:f5:cc: c0:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 28:D3:87:F6:3A:EA:E0:AA:9E:95:54:1B:C0:B6:AF:1F:11:CE:54:76 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/BA476AC3215C47B00A088A0D47270A7827502DC35CF5475F7C850EBBA5209FEE/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/BA476AC3215C47B00A088A0D47270A7827502DC35CF5475F7C850EBBA5209FEE/0/28D387F63AEAE0AA9E95541BC0B6AF1F11CE5476.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:2930::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 274945 Signature Algorithm: sha256WithRSAEncryption 35:94:55:e4:92:de:15:44:a1:4f:e3:1d:7e:3d:3e:b7:6d:52: 76:89:95:7d:6f:73:16:6c:6c:9b:dd:0d:c4:83:0a:8e:77:17: b5:07:22:e6:e4:52:1f:8d:92:0c:75:fe:f9:c2:9d:2b:8f:bc: e7:69:d1:3b:65:f7:84:77:43:92:f4:7b:3b:0a:08:ad:c3:cb: 43:01:cf:ce:01:20:6a:b6:d7:a3:91:cf:a8:61:8f:63:cc:02: d0:38:bf:97:2c:79:bc:71:18:d2:5f:c2:36:7b:02:06:5a:4b: cf:04:69:19:9e:dc:cc:5f:00:fb:a3:9a:1a:e3:d9:55:90:37: 93:30:c1:17:e9:4e:cd:e9:51:ea:dc:ee:c3:12:bf:dd:3d:65: 65:6f:e9:c9:2c:9d:a3:7b:18:88:3c:c2:b0:82:b7:46:33:9b: b6:6b:6c:10:2e:5b:be:c4:ae:6b:11:10:ad:0a:72:30:87:37: 6b:42:e2:04:3a:67:93:71:c8:ab:98:fd:66:99:08:9c:a5:09: 86:db:86:42:13:18:be:47:2e:bb:43:e3:4e:cd:2e:52:dd:87: b2:a8:ae:14:58:e2:15:83:c0:30:81:35:d7:8d:f2:b1:e6:e1: b3:42:96:a7:6d:22:fc:74:d4:3e:20:a5:9f:65:ad:bf:fd:95: 27:4f:54:1d -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUOfQf6a7K9MvCndLHh7Fs47weyVQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjA2MjkxMzM1MDFaFw0yNzA2MjgxMzQwMDFaMDMxMTAvBgNV BAMTKDI4RDM4N0Y2M0FFQUUwQUE5RTk1NTQxQkMwQjZBRjFGMTFDRTU0NzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBzAmrQzV/oDi8mcdWD93O5TjJ yLTIeOxmLzrF4wu1vGrsGEJdcjCbgvGPFuHFTr59orj9+OyayAFkcMbgIrh6GSgL Lsjvb4DSd+55w0IF0Wvz3nKPNOYKTAKSCIDBN5+pRbn9ZFyRjA2EaDwr0nx2r0t/ o5JhX6/w6Ls9Rj1YREA5T2B0L9w3shU26JTka2Gx3w183OVQyHuL1HNyrz9xY32o 2ZFdWTDtwjw+bqZvnjFxekEB/X0ryVsPEDDZp2wPLfSwpRHXFo8zC3Ehc0gGX+JC 6sq0R7OnQCRUouMv9HlbtF1Y8k7AmVyOj6GoiaBCQOUot6jIo8brtef1zMBXAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQo04f2Ourgqp6V VBvAtq8fEc5UdjAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQkE0NzZBQzMyMTVDNDdCMDBBMDg4QTBE NDcyNzBBNzgyNzUwMkRDMzVDRjU0NzVGN0M4NTBFQkJBNTIwOUZFRS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9CQTQ3NkFDMzIxNUM0N0IwMEEwODhBMEQ0NzI3MEE3ODI3NTAyREMzNUNG NTQ3NUY3Qzg1MEVCQkE1MjA5RkVFLzAvMjhEMzg3RjYzQUVBRTBBQTlFOTU1NDFC QzBCNkFGMUYxMUNFNTQ3Ni5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAMpMDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEMgEwDQYJKoZIhvcNAQELBQADggEBADWUVeSS 3hVEoU/jHX49PrdtUnaJlX1vcxZsbJvdDcSDCo53F7UHIubkUh+Nkgx1/vnCnSuP vOdp0Ttl94R3Q5L0ezsKCK3Dy0MBz84BIGq216ORz6hhj2PMAtA4v5csebxxGNJf wjZ7AgZaS88EaRme3MxfAPujmhrj2VWQN5MwwRfpTs3pUerc7sMSv909ZWVv6cks naN7GIg8wrCCt0Yzm7ZrbBAuW77ErmsREK0KcjCHN2tC4gQ6Z5NxyKuY/WaZCJyl CYbbhkITGL5HLrtD407NLlLdh7KorhRY4hWDwDCBNdeN8rHm4bNClqdtIvx01D4g pZ9lrb/9lSdPVB0= -----END CERTIFICATE-----Generated at Fri Jul 24 16:43:44 2026 by rpki-client