$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69946F1DAE1FFF30D0BDC689850DD7DC696B416F.cer File: 69946F1DAE1FFF30D0BDC689850DD7DC696B416F.cer (raw, json) Hash identifier: /TpkSoSAk4l+SnZ12Y6DhK56b6LRhcfcwDp8Rw2vorA= Subject key identifier: 69:94:6F:1D:AE:1F:FF:30:D0:BD:C6:89:85:0D:D7:DC:69:6B:41:6F Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 07004D89F2D9506208E1001A9D706B45E60FBEC8 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/53DB9D6B752D6A5DD95AD2062233B48C15A2E2710C790AE5018607A9B34C4D4E/0/69946F1DAE1FFF30D0BDC689850DD7DC696B416F.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/53DB9D6B752D6A5DD95AD2062233B48C15A2E2710C790AE5018607A9B34C4D4E/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Thu 02 Jul 2026 19:05:01 +0000 Certificate not after: Thu 01 Jul 2027 19:10:01 +0000 Subordinate resources: AS: 27899 IP: 200.6.53.0/24 IP: 2801:0:10::/48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 28 Jul 2026 03:34:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:00:4d:89:f2:d9:50:62:08:e1:00:1a:9d:70:6b:45:e6:0f:be:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jul 2 19:05:01 2026 GMT Not After : Jul 1 19:10:01 2027 GMT Subject: CN=69946F1DAE1FFF30D0BDC689850DD7DC696B416F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:31:5c:a9:1f:5c:82:c3:fe:4a:ad:8e:cc:5e: 17:ed:b1:d3:c5:a6:1c:cb:65:c3:96:7a:77:2a:b7: 57:5c:72:bc:0c:45:e4:5d:20:15:32:4e:40:ee:8c: cd:63:c2:f0:50:bc:27:ff:ea:18:2f:55:9f:c3:d0: b1:2f:68:7a:14:c0:51:ad:53:55:92:16:47:19:2e: 0f:85:e9:7f:0f:29:ed:72:5d:ee:77:6e:49:d6:8f: 85:c1:4d:77:6e:9a:6d:68:ed:bf:aa:f9:dc:6a:b6: 53:8c:1c:57:19:cc:25:6a:74:a9:74:50:f7:2e:c0: 29:04:7f:d4:bc:f1:1f:c3:b7:94:b7:e3:25:35:5d: e0:c5:b1:0b:53:6a:ca:9d:1f:ab:cc:8c:84:94:7e: a6:3e:90:52:30:da:e8:c9:6f:9b:65:d7:10:9f:2e: 8e:9d:1c:10:7a:2f:cf:f2:51:58:6b:90:d3:0d:bb: 89:16:6b:4c:3a:c5:8d:77:1e:3a:9e:42:06:56:3b: 33:ad:65:be:93:54:c1:6d:4b:9f:91:ac:c8:f5:66: 80:ce:bb:35:e7:eb:c9:82:8c:a9:39:39:6b:bb:6c: 76:89:63:a9:47:36:0e:0c:99:ac:2e:e4:b4:ca:3a: 5f:1f:26:05:5d:38:33:c8:b6:2c:51:2b:33:f4:05: 7b:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 69:94:6F:1D:AE:1F:FF:30:D0:BD:C6:89:85:0D:D7:DC:69:6B:41:6F X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/53DB9D6B752D6A5DD95AD2062233B48C15A2E2710C790AE5018607A9B34C4D4E/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/53DB9D6B752D6A5DD95AD2062233B48C15A2E2710C790AE5018607A9B34C4D4E/0/69946F1DAE1FFF30D0BDC689850DD7DC696B416F.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.6.53.0/24 IPv6: 2801:0:10::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 27899 Signature Algorithm: sha256WithRSAEncryption 82:c0:31:88:99:38:89:c2:fa:48:ba:e9:61:5b:9e:05:37:5e: bf:b5:e0:93:af:4f:24:be:af:e1:87:85:ad:ff:ad:76:35:21: e5:24:c2:a0:23:3d:d3:f3:34:45:96:90:c8:b0:b1:a1:90:40: 17:e8:9e:d7:ae:06:d2:a6:83:0c:d7:ea:e1:0f:69:00:6c:11: 28:83:d2:35:cd:12:85:10:7c:1c:de:d7:1d:80:5d:bc:7d:71: bb:46:b2:16:64:ed:dd:32:6d:62:1c:5d:90:b2:78:bf:4f:a2: 4a:98:4e:e7:1d:51:ab:5e:e0:95:88:16:22:14:a9:0b:7c:b2: 8c:8c:b0:db:81:67:59:1d:67:85:aa:ae:ea:03:44:71:9e:74: 02:6a:36:ee:d9:8f:e7:8f:b8:fd:73:96:8d:e2:b1:34:cc:5f: aa:47:f6:25:1f:12:05:cd:e4:05:d1:86:0f:8c:29:7f:36:20: 78:0e:d3:fc:4c:2b:f6:7d:77:45:56:a1:6c:ed:b6:0f:68:76: f4:15:c7:53:ca:3d:3d:73:17:34:47:4a:52:c0:c4:0a:95:f5: 8f:ed:6d:40:d6:c2:97:be:1a:5f:c1:2b:f4:45:05:f4:62:6e: 5d:d0:67:9c:16:67:52:05:16:d5:f7:6e:4f:f6:7c:1b:78:b9: 3c:8c:1a:5b -----BEGIN CERTIFICATE----- MIIGpjCCBY6gAwIBAgIUBwBNifLZUGII4QAanXBrReYPvsgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjA3MDIxOTA1MDFaFw0yNzA3MDExOTEwMDFaMDMxMTAvBgNV BAMTKDY5OTQ2RjFEQUUxRkZGMzBEMEJEQzY4OTg1MEREN0RDNjk2QjQxNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjMVypH1yCw/5KrY7MXhftsdPF phzLZcOWencqt1dccrwMReRdIBUyTkDujM1jwvBQvCf/6hgvVZ/D0LEvaHoUwFGt U1WSFkcZLg+F6X8PKe1yXe53bknWj4XBTXdumm1o7b+q+dxqtlOMHFcZzCVqdKl0 UPcuwCkEf9S88R/Dt5S34yU1XeDFsQtTasqdH6vMjISUfqY+kFIw2ujJb5tl1xCf Lo6dHBB6L8/yUVhrkNMNu4kWa0w6xY13HjqeQgZWOzOtZb6TVMFtS5+RrMj1ZoDO uzXn68mCjKk5OWu7bHaJY6lHNg4Mmawu5LTKOl8fJgVdODPItixRKzP0BXvbAgMB AAGjggOwMIIDrDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRplG8drh//MNC9 xomFDdfcaWtBbzAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNTNEQjlENkI3NTJENkE1REQ5NUFEMjA2 MjIzM0I0OEMxNUEyRTI3MTBDNzkwQUU1MDE4NjA3QTlCMzRDNEQ0RS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy81M0RCOUQ2Qjc1MkQ2QTVERDk1QUQyMDYyMjMzQjQ4QzE1QTJFMjcxMEM3 OTBBRTUwMTg2MDdBOUIzNEM0RDRFLzAvNjk5NDZGMURBRTFGRkYzMEQwQkRDNjg5 ODUwREQ3REM2OTZCNDE2Ri5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAyAY1MA8EAgAC MAkDBwAoAQAAABAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICbPswDQYJKoZIhvcN AQELBQADggEBAILAMYiZOInC+ki66WFbngU3Xr+14JOvTyS+r+GHha3/rXY1IeUk wqAjPdPzNEWWkMiwsaGQQBfonteuBtKmgwzX6uEPaQBsESiD0jXNEoUQfBze1x2A Xbx9cbtGshZk7d0ybWIcXZCyeL9PokqYTucdUate4JWIFiIUqQt8soyMsNuBZ1kd Z4WqruoDRHGedAJqNu7Zj+ePuP1zlo3isTTMX6pH9iUfEgXN5AXRhg+MKX82IHgO 0/xMK/Z9d0VWoWzttg9odvQVx1PKPT1zFzRHSlLAxAqV9Y/tbUDWwpe+Gl/BK/RF BfRibl3QZ5wWZ1IFFtX3bk/2fBt4uTyMGls= -----END CERTIFICATE-----Generated at Thu Jul 23 23:03:57 2026 by rpki-client