$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3097EEAE62A8D1441BC16E818D96E6882345B703.cer File: 3097EEAE62A8D1441BC16E818D96E6882345B703.cer (raw, json) Hash identifier: PeyApiS/ImX5phwycsVBj4mt70yF/j1HZQSbdOgxWVs= Subject key identifier: 30:97:EE:AE:62:A8:D1:44:1B:C1:6E:81:8D:96:E6:88:23:45:B7:03 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 2D89B7A329095E69D47F5E70F299F2D520D061C7 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/30B9D111C367C57C13E2C26B61EB9F05F662B23BE53F9E793810DE1611566D6C/0/3097EEAE62A8D1441BC16E818D96E6882345B703.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/30B9D111C367C57C13E2C26B61EB9F05F662B23BE53F9E793810DE1611566D6C/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Mon 16 Mar 2026 22:55:19 +0000 Certificate not after: Mon 15 Mar 2027 23:00:19 +0000 Subordinate resources: AS: 28096 IP: 190.9.56.0/21 IP: 2803:f230::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 29 Mar 2026 13:37:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:89:b7:a3:29:09:5e:69:d4:7f:5e:70:f2:99:f2:d5:20:d0:61:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Mar 16 22:55:19 2026 GMT Not After : Mar 15 23:00:19 2027 GMT Subject: CN=3097EEAE62A8D1441BC16E818D96E6882345B703 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:67:7a:ef:0d:74:e6:42:74:4d:a0:79:fd:68: 5c:e3:38:30:e5:91:29:81:9f:5c:11:22:c8:8f:ce: b2:8a:6c:a6:e5:cc:a2:da:61:03:ed:55:71:60:03: 0f:b8:40:a5:7b:5b:7d:38:8c:bb:55:a0:ed:da:35: 92:ac:b9:6f:f1:4d:d3:8e:c1:c4:3a:1f:9e:a2:70: 69:08:1f:91:e6:42:97:e0:bd:f9:a6:09:7b:1e:2e: cf:a6:2e:71:47:86:ed:c7:fc:ad:0c:8d:06:ab:e0: 64:34:e9:30:65:6e:02:64:bb:90:cd:0e:8c:31:bc: 7e:91:bb:01:35:1b:23:3a:e9:e9:68:5c:4d:1b:02: 7c:21:84:a3:ec:fb:89:23:3f:62:77:b5:5b:6a:cf: e6:53:b6:9b:76:45:b4:bf:36:b8:38:eb:db:a9:e1: 6f:3b:3f:23:a4:80:91:d7:04:dc:a6:15:11:b7:a7: 17:3e:bb:e6:ca:92:04:4e:ff:ac:2c:0b:bd:c3:18: 51:df:56:50:f1:18:22:37:92:83:c2:fa:5c:f3:fc: 8a:f1:3a:64:40:59:ff:09:ac:5a:b0:74:30:ca:b6: 54:86:90:48:f0:72:6b:c3:ef:ea:9e:ad:17:01:ef: 6b:c5:23:4f:ec:03:d2:9a:3a:45:c3:23:2a:32:54: 23:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 30:97:EE:AE:62:A8:D1:44:1B:C1:6E:81:8D:96:E6:88:23:45:B7:03 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/30B9D111C367C57C13E2C26B61EB9F05F662B23BE53F9E793810DE1611566D6C/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/30B9D111C367C57C13E2C26B61EB9F05F662B23BE53F9E793810DE1611566D6C/0/3097EEAE62A8D1441BC16E818D96E6882345B703.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 190.9.56.0/21 IPv6: 2803:f230::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28096 Signature Algorithm: sha256WithRSAEncryption 7c:43:32:2d:91:f2:e5:88:68:36:bc:7d:45:c5:d8:e1:22:36: 4a:8d:8b:68:d5:a2:f1:2e:d7:eb:f5:d9:45:b5:6f:77:96:1a: 1b:69:3b:b2:5a:9e:d4:cc:22:47:df:4d:a1:52:db:13:70:31: 8c:e0:e6:fa:1a:3d:74:0b:59:7e:2b:ee:f0:97:9f:76:f6:17: bc:d6:53:a2:b9:0e:81:61:44:d9:24:3a:a8:59:9f:01:30:4b: 88:ef:a7:b6:f9:82:a3:dd:e4:31:ab:0b:e5:a1:0b:b9:aa:f6: 1d:18:1f:c8:ee:3b:c0:59:a9:ce:f8:8d:e6:a1:70:eb:ae:c6: 28:98:6a:56:e3:bd:32:67:de:ab:cf:2b:e0:4c:29:13:b5:c6: d9:2d:63:fc:0b:e0:40:da:bd:fc:42:8b:97:d4:80:d1:0d:5b: 46:50:a7:24:45:9b:be:67:ac:56:2a:68:38:3f:6e:b9:35:e6: da:d4:51:b6:f7:18:26:d7:88:ee:da:e0:46:96:03:0f:d6:7a: 2f:7f:64:26:00:14:f7:78:77:83:7f:58:cb:da:13:cb:e4:c4: e8:7d:a0:84:de:0d:c0:c7:2a:f7:fe:0e:35:19:4d:7a:46:51: 80:cf:eb:39:0d:55:46:9d:8e:8f:c0:1f:9d:b6:39:61:aa:fd: 2d:a9:9e:ee -----BEGIN CERTIFICATE----- MIIGpDCCBYygAwIBAgIULYm3oykJXmnUf15w8pny1SDQYccwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAzMTYyMjU1MTlaFw0yNzAzMTUyMzAwMTlaMDMxMTAvBgNV BAMTKDMwOTdFRUFFNjJBOEQxNDQxQkMxNkU4MThEOTZFNjg4MjM0NUI3MDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3Z3rvDXTmQnRNoHn9aFzjODDl kSmBn1wRIsiPzrKKbKblzKLaYQPtVXFgAw+4QKV7W304jLtVoO3aNZKsuW/xTdOO wcQ6H56icGkIH5HmQpfgvfmmCXseLs+mLnFHhu3H/K0MjQar4GQ06TBlbgJku5DN DowxvH6RuwE1GyM66eloXE0bAnwhhKPs+4kjP2J3tVtqz+ZTtpt2RbS/Nrg469up 4W87PyOkgJHXBNymFRG3pxc+u+bKkgRO/6wsC73DGFHfVlDxGCI3koPC+lzz/Irx OmRAWf8JrFqwdDDKtlSGkEjwcmvD7+qerRcB72vFI0/sA9KaOkXDIyoyVCMfAgMB AAGjggOuMIIDqjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQwl+6uYqjRRBvB boGNluaII0W3AzAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMzBCOUQxMTFDMzY3QzU3QzEzRTJDMjZC NjFFQjlGMDVGNjYyQjIzQkU1M0Y5RTc5MzgxMERFMTYxMTU2NkQ2Qy8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8zMEI5RDExMUMzNjdDNTdDMTNFMkMyNkI2MUVCOUYwNUY2NjJCMjNCRTUz RjlFNzkzODEwREUxNjExNTY2RDZDLzAvMzA5N0VFQUU2MkE4RDE0NDFCQzE2RTgx OEQ5NkU2ODgyMzQ1QjcwMy5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDvgk4MA0EAgAC MAcDBQAoA/IwMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAm3AMA0GCSqGSIb3DQEB CwUAA4IBAQB8QzItkfLliGg2vH1FxdjhIjZKjYto1aLxLtfr9dlFtW93lhobaTuy Wp7UzCJH302hUtsTcDGM4Ob6Gj10C1l+K+7wl5929he81lOiuQ6BYUTZJDqoWZ8B MEuI76e2+YKj3eQxqwvloQu5qvYdGB/I7jvAWanO+I3moXDrrsYomGpW470yZ96r zyvgTCkTtcbZLWP8C+BA2r38QouX1IDRDVtGUKckRZu+Z6xWKmg4P265Neba1FG2 9xgm14ju2uBGlgMP1novf2QmABT3eHeDf1jL2hPL5MTofaCE3g3Axyr3/g41GU16 RlGAz+s5DVVGnY6PwB+dtjlhqv0tqZ7u -----END CERTIFICATE-----Generated at Thu Mar 26 02:50:52 2026 by rpki-client