$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7489502E9C93E7627B8B1E82253DDAD215C92549.cer File: 7489502E9C93E7627B8B1E82253DDAD215C92549.cer (raw, json) Hash identifier: 5zE1LLGBXquW8VoHys55l0C2AjfSLk+ntDGByvQqt/M= Subject key identifier: 74:89:50:2E:9C:93:E7:62:7B:8B:1E:82:25:3D:DA:D2:15:C9:25:49 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 4B7FFDC261322CA18371B565F3B9E0C5CCA67D63 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/5E2C7EE2FB1EB7FF20A8369EE667EB69FC2F882A1E6127F5DB09B11452D7FD7B/0/7489502E9C93E7627B8B1E82253DDAD215C92549.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/5E2C7EE2FB1EB7FF20A8369EE667EB69FC2F882A1E6127F5DB09B11452D7FD7B/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Fri 26 Jun 2026 02:50:01 +0000 Certificate not after: Fri 25 Jun 2027 02:55:01 +0000 Subordinate resources: AS: 274965 IP: 2803:a530::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 28 Jul 2026 01:13:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:7f:fd:c2:61:32:2c:a1:83:71:b5:65:f3:b9:e0:c5:cc:a6:7d:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jun 26 02:50:01 2026 GMT Not After : Jun 25 02:55:01 2027 GMT Subject: CN=7489502E9C93E7627B8B1E82253DDAD215C92549 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:44:e2:f4:cd:b3:82:8f:d7:7d:e8:fe:e8:eb: bf:8e:67:04:e5:6f:2f:b1:12:f0:2e:ac:04:d9:8b: 13:94:d0:93:ce:34:d5:2d:41:ce:ef:30:63:ee:a8: f3:ba:d4:5a:83:90:5d:6a:18:d6:76:84:51:58:cb: 40:09:5c:33:b6:aa:d3:11:72:29:2c:bf:ba:b6:1f: 87:d7:70:38:7c:23:fe:d9:a4:67:91:37:5c:a1:b7: 3a:b1:34:d0:01:82:5c:b0:3a:4d:07:f1:4b:86:eb: 79:00:93:8c:12:9b:6b:1f:e2:61:dd:63:29:05:0a: 0c:1e:da:d5:e4:c0:f1:45:03:d8:be:4a:d9:c8:22: 45:39:67:20:2d:9f:ec:9d:5a:37:62:f1:1f:de:3f: 80:b2:7c:19:da:b1:b5:a5:d2:f5:7f:e1:6e:0b:29: 20:22:26:40:7e:02:0c:73:a4:0d:1c:77:b7:2a:a8: 48:38:2d:6c:16:69:c5:4a:bb:1e:0b:7f:e1:5b:f8: ab:4d:5c:4f:b4:45:0a:58:41:60:a2:f5:03:09:7e: 44:88:62:c8:f1:42:01:81:f4:8c:23:12:ce:7c:c7: 28:11:2c:c5:9f:49:0f:5e:7e:f5:f7:52:2d:06:f0: 8f:7d:3a:16:99:fa:73:25:e1:c7:82:e4:cb:b5:23: df:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 74:89:50:2E:9C:93:E7:62:7B:8B:1E:82:25:3D:DA:D2:15:C9:25:49 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/5E2C7EE2FB1EB7FF20A8369EE667EB69FC2F882A1E6127F5DB09B11452D7FD7B/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/5E2C7EE2FB1EB7FF20A8369EE667EB69FC2F882A1E6127F5DB09B11452D7FD7B/0/7489502E9C93E7627B8B1E82253DDAD215C92549.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:a530::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 274965 Signature Algorithm: sha256WithRSAEncryption 52:e3:02:d8:df:b9:d5:ba:f1:1a:ab:b3:78:38:67:f1:e6:17: 25:a8:9e:a2:f7:2f:3e:49:e7:49:8d:e2:67:a7:15:8b:c6:b1: cb:e0:e1:f7:84:a3:40:d3:dc:33:3b:4e:66:ba:77:9f:fb:e8: cf:de:4b:35:a1:33:2d:b3:24:1c:a9:01:cb:cd:2c:51:ee:dc: af:2b:d5:a7:ed:18:b0:b6:05:8a:b5:a2:c7:f5:75:45:3a:62: dc:18:bd:b5:de:03:bb:cc:ff:77:22:2b:68:1b:94:4a:47:f4: 83:9e:0e:32:fd:c9:9f:a0:fb:bc:69:e2:6c:bb:71:8c:1a:7d: 2e:e1:c9:6c:f2:f3:70:1c:02:96:a6:8d:d7:66:28:02:ee:26: ec:20:cd:77:10:52:26:aa:45:ee:11:37:51:34:05:4d:50:d4: 88:57:bb:ed:47:dc:59:3e:4c:71:ee:e4:0f:f7:3c:89:2f:57: 11:2d:9e:b6:a9:5c:00:3a:c2:5c:9b:30:96:be:9f:ab:9e:bd: fa:bc:0a:32:c6:ae:5d:34:5b:e2:25:a1:c0:32:d2:9b:41:c5: ee:e9:f0:f4:79:df:82:83:0f:e6:45:69:72:e8:ad:53:b1:d9: 15:61:69:8d:c5:9f:45:4a:68:c9:f7:53:10:22:b0:b1:29:41: 5d:83:8d:a2 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUS3/9wmEyLKGDcbVl87ngxcymfWMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjA2MjYwMjUwMDFaFw0yNzA2MjUwMjU1MDFaMDMxMTAvBgNV BAMTKDc0ODk1MDJFOUM5M0U3NjI3QjhCMUU4MjI1M0REQUQyMTVDOTI1NDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKROL0zbOCj9d96P7o67+OZwTl by+xEvAurATZixOU0JPONNUtQc7vMGPuqPO61FqDkF1qGNZ2hFFYy0AJXDO2qtMR ciksv7q2H4fXcDh8I/7ZpGeRN1yhtzqxNNABglywOk0H8UuG63kAk4wSm2sf4mHd YykFCgwe2tXkwPFFA9i+StnIIkU5ZyAtn+ydWjdi8R/eP4CyfBnasbWl0vV/4W4L KSAiJkB+AgxzpA0cd7cqqEg4LWwWacVKux4Lf+Fb+KtNXE+0RQpYQWCi9QMJfkSI YsjxQgGB9IwjEs58xygRLMWfSQ9efvX3Ui0G8I99OhaZ+nMl4ceC5Mu1I9+ZAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR0iVAunJPnYnuL HoIlPdrSFcklSTAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNUUyQzdFRTJGQjFFQjdGRjIwQTgzNjlF RTY2N0VCNjlGQzJGODgyQTFFNjEyN0Y1REIwOUIxMTQ1MkQ3RkQ3Qi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy81RTJDN0VFMkZCMUVCN0ZGMjBBODM2OUVFNjY3RUI2OUZDMkY4ODJBMUU2 MTI3RjVEQjA5QjExNDUyRDdGRDdCLzAvNzQ4OTUwMkU5QzkzRTc2MjdCOEIxRTgy MjUzRERBRDIxNUM5MjU0OS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAOlMDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEMhUwDQYJKoZIhvcNAQELBQADggEBAFLjAtjf udW68Rqrs3g4Z/HmFyWonqL3Lz5J50mN4menFYvGscvg4feEo0DT3DM7Tma6d5/7 6M/eSzWhMy2zJBypAcvNLFHu3K8r1aftGLC2BYq1osf1dUU6YtwYvbXeA7vM/3ci K2gblEpH9IOeDjL9yZ+g+7xp4my7cYwafS7hyWzy83AcApamjddmKALuJuwgzXcQ UiaqRe4RN1E0BU1Q1IhXu+1H3Fk+THHu5A/3PIkvVxEtnrapXAA6wlybMJa+n6ue vfq8CjLGrl00W+IlocAy0ptBxe7p8PR534KDD+ZFaXLorVOx2RVhaY3Fn0VKaMn3 UxAisLEpQV2DjaI= -----END CERTIFICATE-----Generated at Fri Jul 24 15:46:10 2026 by rpki-client