$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/41E71CB9B9B99AA38331C331E7612FD0D013BCAC.cer File: 41E71CB9B9B99AA38331C331E7612FD0D013BCAC.cer (raw, json) Hash identifier: OGlzVGqQ2eKg78CrOoHHtSwUlfG0F2hJmpXAQlgv/TA= Subject key identifier: 41:E7:1C:B9:B9:B9:9A:A3:83:31:C3:31:E7:61:2F:D0:D0:13:BC:AC Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 22FE1DDC616CE3F4464D8173EF62F132955CE3BD Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/EE60B5D5A470B7D0603D2FF83AFFE20ECE1064D26AFE586B84212B68A2BE0306/0/41E71CB9B9B99AA38331C331E7612FD0D013BCAC.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/EE60B5D5A470B7D0603D2FF83AFFE20ECE1064D26AFE586B84212B68A2BE0306/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 29 Sep 2026 22:20:01 +0000 Certificate not after: Tue 28 Sep 2027 22:25:01 +0000 Subordinate resources: AS: 275034 IP: 2803:9b30::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 23 Oct 2026 22:52:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:fe:1d:dc:61:6c:e3:f4:46:4d:81:73:ef:62:f1:32:95:5c:e3:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Sep 29 22:20:01 2026 GMT Not After : Sep 28 22:25:01 2027 GMT Subject: CN=41E71CB9B9B99AA38331C331E7612FD0D013BCAC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:a9:01:c3:1c:87:c7:9d:a1:d3:cf:bd:4c:30: ab:45:2a:24:67:42:34:14:10:44:6e:41:ac:bf:92: 21:e8:37:b7:09:fe:99:79:d6:a3:d8:ee:a4:5b:a4: be:ab:77:82:3a:02:6e:39:c8:ed:f9:90:8f:9f:12: e5:5e:a1:65:58:e9:18:8a:d1:8b:5a:ed:cb:c6:7c: 24:0b:cc:cd:a9:1b:7a:4f:e1:27:a8:78:e8:e8:35: f6:9b:49:16:18:b3:9e:a1:b0:55:42:a6:e3:e3:f1: 49:e0:bd:51:b1:f0:e6:fa:0b:88:54:a8:64:48:86: 11:2e:79:02:0f:46:5d:c9:37:9c:48:76:dd:eb:be: ac:13:ac:d4:d9:36:45:ba:92:db:d7:df:7a:a6:c5: ec:85:f1:a5:a9:65:57:d5:37:d4:16:12:36:98:fc: 86:35:bb:f2:ef:5f:2c:9c:b1:ec:02:af:ea:65:e5: 95:3e:5f:74:f1:df:ea:c3:4c:f5:28:63:0f:5d:fb: 58:83:4e:37:be:6c:57:75:9a:8a:94:4d:e8:07:22: a6:22:32:66:7e:46:ce:31:18:0d:87:89:18:ac:3e: c6:3e:fe:6e:65:97:8b:ab:92:bc:2e:bb:58:0e:54: c7:8d:61:bb:e7:04:63:b7:b5:d1:21:5e:b2:ac:e5: 12:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 41:E7:1C:B9:B9:B9:9A:A3:83:31:C3:31:E7:61:2F:D0:D0:13:BC:AC X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/EE60B5D5A470B7D0603D2FF83AFFE20ECE1064D26AFE586B84212B68A2BE0306/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/EE60B5D5A470B7D0603D2FF83AFFE20ECE1064D26AFE586B84212B68A2BE0306/0/41E71CB9B9B99AA38331C331E7612FD0D013BCAC.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:9b30::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 275034 Signature Algorithm: sha256WithRSAEncryption 59:f9:3c:cb:fc:ad:4f:09:25:d1:c7:53:64:0e:e8:88:2a:38: a3:13:f1:2b:e5:7e:e0:7e:a0:b1:3f:37:d7:19:e8:00:ea:b9: f5:03:7e:6b:22:89:26:da:67:da:e0:b1:fe:8f:8f:85:cf:41: 6b:fc:0f:8f:e5:f0:fc:25:a3:d8:40:6c:4f:93:e9:7d:02:14: 1c:24:b9:29:9d:e9:cb:71:d0:11:bd:db:4e:34:40:14:a0:52: 91:87:84:df:b0:41:26:a2:6c:36:5b:c9:91:8c:58:dd:14:58: f9:22:4b:b1:52:4c:03:69:97:ad:b8:43:b9:65:55:d4:20:c7: 21:2a:9d:1f:8d:6c:76:02:0b:b8:54:7b:d0:ed:51:cf:de:2f: dc:59:40:4c:cb:e6:6a:e6:a8:c8:0d:94:ac:9d:bb:6a:69:e2: 5e:2e:e1:7c:cb:c8:51:38:8c:a2:a5:d6:eb:c7:27:9d:09:3e: 2b:89:29:16:9a:19:f7:ea:4d:b4:1c:ab:ee:16:7d:7a:f1:7f: 41:40:d6:ce:cd:9c:86:e8:f2:9c:8a:a2:bc:28:23:7a:74:2c: b1:7a:b1:76:49:9d:cd:fc:8e:7f:8c:eb:80:60:4e:a1:74:16: 2e:65:e4:37:c0:88:f0:27:72:5d:2d:c9:9b:8f:3a:02:80:b8: 37:e0:52:ad -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUIv4d3GFs4/RGTYFz72LxMpVc470wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjA5MjkyMjIwMDFaFw0yNzA5MjgyMjI1MDFaMDMxMTAvBgNV BAMTKDQxRTcxQ0I5QjlCOTlBQTM4MzMxQzMzMUU3NjEyRkQwRDAxM0JDQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZqQHDHIfHnaHTz71MMKtFKiRn QjQUEERuQay/kiHoN7cJ/pl51qPY7qRbpL6rd4I6Am45yO35kI+fEuVeoWVY6RiK 0Yta7cvGfCQLzM2pG3pP4SeoeOjoNfabSRYYs56hsFVCpuPj8UngvVGx8Ob6C4hU qGRIhhEueQIPRl3JN5xIdt3rvqwTrNTZNkW6ktvX33qmxeyF8aWpZVfVN9QWEjaY /IY1u/LvXyycsewCr+pl5ZU+X3Tx3+rDTPUoYw9d+1iDTje+bFd1moqUTegHIqYi MmZ+Rs4xGA2HiRisPsY+/m5ll4urkrwuu1gOVMeNYbvnBGO3tdEhXrKs5RIRAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRB5xy5ubmao4Mx wzHnYS/Q0BO8rDAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRUU2MEI1RDVBNDcwQjdEMDYwM0QyRkY4 M0FGRkUyMEVDRTEwNjREMjZBRkU1ODZCODQyMTJCNjhBMkJFMDMwNi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9FRTYwQjVENUE0NzBCN0QwNjAzRDJGRjgzQUZGRTIwRUNFMTA2NEQyNkFG RTU4NkI4NDIxMkI2OEEyQkUwMzA2LzAvNDFFNzFDQjlCOUI5OUFBMzgzMzFDMzMx RTc2MTJGRDBEMDEzQkNBQy5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAObMDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEMlowDQYJKoZIhvcNAQELBQADggEBAFn5PMv8 rU8JJdHHU2QO6IgqOKMT8SvlfuB+oLE/N9cZ6ADqufUDfmsiiSbaZ9rgsf6Pj4XP QWv8D4/l8Pwlo9hAbE+T6X0CFBwkuSmd6ctx0BG92040QBSgUpGHhN+wQSaibDZb yZGMWN0UWPkiS7FSTANpl624Q7llVdQgxyEqnR+NbHYCC7hUe9DtUc/eL9xZQEzL 5mrmqMgNlKydu2pp4l4u4XzLyFE4jKKl1uvHJ50JPiuJKRaaGffqTbQcq+4WfXrx f0FA1s7NnIbo8pyKorwoI3p0LLF6sXZJnc38jn+M64BgTqF0Fi5l5DfAiPAncl0t yZuPOgKAuDfgUq0= -----END CERTIFICATE-----Generated at Tue Oct 20 19:04:56 2026 by rpki-client