$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59239F1135AE5106ACDF5EFA334927DE8BC131C3.cer File: 59239F1135AE5106ACDF5EFA334927DE8BC131C3.cer (raw, json) Hash identifier: d74ywxqmUwBVDXLfSTuWI+uX+r93ZXq6ZiZBna+4J18= Subject key identifier: 59:23:9F:11:35:AE:51:06:AC:DF:5E:FA:33:49:27:DE:8B:C1:31:C3 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 67A0CE18D57CD52A1DF6986B9FFA0BD5DECFB1D5 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/91DF8AB571FC6D8A20DB668807B05D0D7A1B8602025B102BE4FF7B9A892F6DCC/0/59239F1135AE5106ACDF5EFA334927DE8BC131C3.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/91DF8AB571FC6D8A20DB668807B05D0D7A1B8602025B102BE4FF7B9A892F6DCC/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Thu 19 Mar 2026 00:00:01 +0000 Certificate not after: Thu 18 Mar 2027 00:05:01 +0000 Subordinate resources: AS: 274406 IP: 2806:45b::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 29 Mar 2026 17:17:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:a0:ce:18:d5:7c:d5:2a:1d:f6:98:6b:9f:fa:0b:d5:de:cf:b1:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Mar 19 00:00:01 2026 GMT Not After : Mar 18 00:05:01 2027 GMT Subject: CN=59239F1135AE5106ACDF5EFA334927DE8BC131C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:0e:20:26:a1:b9:b6:fa:b9:ac:c4:a0:db:65: 5c:b3:0b:e2:68:70:97:e3:32:59:41:a2:5f:9a:82: 23:69:46:3e:b7:81:9f:ba:62:72:ae:2c:87:2b:ed: 9c:06:85:eb:97:54:9d:6c:20:a4:ff:97:82:d5:66: c6:f0:8a:05:36:6d:b8:a4:45:99:3c:1d:d6:99:5f: c9:15:83:17:17:35:13:11:2b:01:bb:14:56:73:69: db:51:a3:7e:d8:d7:ec:6f:bd:85:3a:b6:f9:5f:62: e2:cd:6e:28:a0:bf:36:88:7f:f4:08:37:3a:75:4d: 8c:a8:72:49:23:8a:0a:25:d2:6b:f5:9d:95:80:a6: 68:b4:8f:cc:8c:4c:c6:90:b3:d5:89:c4:cc:c9:cb: 31:82:fa:5c:1c:2b:79:43:8c:73:55:33:e2:57:4c: 20:e5:17:20:c7:d0:c6:c3:9c:f2:0c:a9:be:b8:bb: 17:65:29:b7:d2:d6:df:72:92:9d:56:72:d6:1a:fc: 96:61:6d:f0:14:a7:7f:43:94:d4:8f:77:a4:08:d4: e2:b1:b8:ab:90:b3:97:25:00:88:87:ba:53:35:2a: 24:e1:2d:19:21:86:e6:dc:e6:d0:b7:82:25:08:c8: a0:66:d1:de:49:b1:2b:af:38:08:96:14:d4:24:1d: c4:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 59:23:9F:11:35:AE:51:06:AC:DF:5E:FA:33:49:27:DE:8B:C1:31:C3 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/91DF8AB571FC6D8A20DB668807B05D0D7A1B8602025B102BE4FF7B9A892F6DCC/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/91DF8AB571FC6D8A20DB668807B05D0D7A1B8602025B102BE4FF7B9A892F6DCC/0/59239F1135AE5106ACDF5EFA334927DE8BC131C3.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2806:45b::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 274406 Signature Algorithm: sha256WithRSAEncryption 41:9d:99:a1:23:61:88:4d:55:6d:4f:4a:1a:fe:f4:2d:9e:23: f8:eb:6e:aa:07:91:ea:a4:a6:cf:4d:3d:6b:0e:1a:c9:0f:05: a9:08:16:39:ec:79:30:f5:6b:cf:12:3b:5c:c4:52:14:36:c4: 5b:74:bb:40:9b:4d:27:2a:dd:bb:5f:28:f5:e1:75:f0:c4:6b: 40:14:f8:41:6a:9a:91:2f:47:7f:55:1d:a5:16:26:3c:e5:a8: 5f:64:2e:ff:53:01:e1:59:54:68:ae:2b:80:a5:83:b1:0b:4f: 6f:b9:18:bd:01:99:5a:3b:0d:81:37:34:b8:8a:93:69:18:a0: 58:01:50:46:30:40:e9:c8:22:3b:87:11:80:45:d1:7f:2a:96: a1:73:53:54:55:e4:d3:53:ea:25:30:f6:f8:a5:56:15:d5:14: fb:ad:5a:a8:0e:d3:e1:f0:19:41:cc:04:4a:e9:92:e4:8d:d5: 0b:dd:78:38:e1:af:5b:17:8d:b7:f4:5c:91:4f:51:c7:9e:61: 0f:b5:cd:f1:19:e4:b9:80:ff:dc:28:4e:d1:0b:0c:82:a1:4b: 92:66:ca:a1:3c:69:cb:d0:49:0e:e7:f6:a8:1c:0d:04:d4:3d: 61:93:ec:77:83:97:10:9a:2c:5e:6a:51:27:cc:2c:d1:2a:d6: 6f:00:68:e8 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUZ6DOGNV81Sod9phrn/oL1d7PsdUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAzMTkwMDAwMDFaFw0yNzAzMTgwMDA1MDFaMDMxMTAvBgNV BAMTKDU5MjM5RjExMzVBRTUxMDZBQ0RGNUVGQTMzNDkyN0RFOEJDMTMxQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4DiAmobm2+rmsxKDbZVyzC+Jo cJfjMllBol+agiNpRj63gZ+6YnKuLIcr7ZwGheuXVJ1sIKT/l4LVZsbwigU2bbik RZk8HdaZX8kVgxcXNRMRKwG7FFZzadtRo37Y1+xvvYU6tvlfYuLNbiigvzaIf/QI Nzp1TYyockkjigol0mv1nZWApmi0j8yMTMaQs9WJxMzJyzGC+lwcK3lDjHNVM+JX TCDlFyDH0MbDnPIMqb64uxdlKbfS1t9ykp1WctYa/JZhbfAUp39DlNSPd6QI1OKx uKuQs5clAIiHulM1KiThLRkhhubc5tC3giUIyKBm0d5JsSuvOAiWFNQkHcTZAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRZI58RNa5RBqzf XvozSSfei8ExwzAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvOTFERjhBQjU3MUZDNkQ4QTIwREI2Njg4 MDdCMDVEMEQ3QTFCODYwMjAyNUIxMDJCRTRGRjdCOUE4OTJGNkRDQy8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy85MURGOEFCNTcxRkM2RDhBMjBEQjY2ODgwN0IwNUQwRDdBMUI4NjAyMDI1 QjEwMkJFNEZGN0I5QTg5MkY2RENDLzAvNTkyMzlGMTEzNUFFNTEwNkFDREY1RUZB MzM0OTI3REU4QkMxMzFDMy5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAYEWzAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEL+YwDQYJKoZIhvcNAQELBQADggEBAEGdmaEj YYhNVW1PShr+9C2eI/jrbqoHkeqkps9NPWsOGskPBakIFjnseTD1a88SO1zEUhQ2 xFt0u0CbTScq3btfKPXhdfDEa0AU+EFqmpEvR39VHaUWJjzlqF9kLv9TAeFZVGiu K4Clg7ELT2+5GL0BmVo7DYE3NLiKk2kYoFgBUEYwQOnIIjuHEYBF0X8qlqFzU1RV 5NNT6iUw9vilVhXVFPutWqgO0+HwGUHMBErpkuSN1QvdeDjhr1sXjbf0XJFPUcee YQ+1zfEZ5LmA/9woTtELDIKhS5JmyqE8acvQSQ7n9qgcDQTUPWGT7HeDlxCaLF5q USfMLNEq1m8AaOg= -----END CERTIFICATE-----Generated at Thu Mar 26 18:33:46 2026 by rpki-client