$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/75B0AF807E5F7997F7F27C2C804CCCE101F92DBF.cer File: 75B0AF807E5F7997F7F27C2C804CCCE101F92DBF.cer (raw, json) Hash identifier: g11ZH+T0m3AJ06y02yBDPIei8HtQpl7kFazvj5R4eN0= Subject key identifier: 75:B0:AF:80:7E:5F:79:97:F7:F2:7C:2C:80:4C:CC:E1:01:F9:2D:BF Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 5B5A968D6ADDEE073FD4344D2906FAF8B740A481 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/DFD644316D58FB5EFBF46DED156841F5DF705337C8B98F5018B92FFA1DD63938/0/75B0AF807E5F7997F7F27C2C804CCCE101F92DBF.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/DFD644316D58FB5EFBF46DED156841F5DF705337C8B98F5018B92FFA1DD63938/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 May 2026 12:45:01 +0000 Certificate not after: Tue 04 May 2027 12:50:01 +0000 Subordinate resources: AS: 274910 IP: 2803:5e30::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 16 May 2026 11:23:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:5a:96:8d:6a:dd:ee:07:3f:d4:34:4d:29:06:fa:f8:b7:40:a4:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: May 5 12:45:01 2026 GMT Not After : May 4 12:50:01 2027 GMT Subject: CN=75B0AF807E5F7997F7F27C2C804CCCE101F92DBF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:9f:97:39:90:6e:a3:36:f9:81:91:4c:06:da: cb:64:74:b8:c6:a0:8e:a2:be:5f:bd:45:82:71:14: 62:de:85:db:a1:d5:c8:e8:a8:d7:4a:23:b9:35:32: e6:59:c8:4e:94:4f:26:c7:ed:bb:58:2a:e4:a5:8b: c4:90:4b:b9:7e:97:78:84:ad:4a:b9:24:d8:9b:ef: 56:d1:c3:02:be:3f:25:52:2d:19:aa:0c:45:7d:35: 2a:98:a8:ce:87:5f:d8:78:7e:d2:92:82:3a:39:c0: 27:dd:80:cf:e5:c4:67:43:7d:75:c2:1a:e7:eb:8c: 3f:9e:1e:d9:3e:ba:fd:9a:57:51:fc:14:a6:56:b2: 62:44:30:56:9a:9f:3c:44:84:d9:ff:8d:6b:d8:03: e4:6b:b8:a2:42:ce:0a:0d:c3:1a:d2:e9:3c:7e:c4: 84:2d:3d:3c:cb:ed:99:b5:69:13:1e:55:88:3b:51: ae:ef:cf:d7:59:0e:08:f4:16:1d:2c:40:7f:08:f8: 39:56:54:f1:93:a7:3a:ea:3c:d9:a4:28:5e:08:d8: 7c:58:6b:aa:9e:43:85:20:af:89:96:07:1a:4b:c7: 25:3b:4a:70:06:90:91:e7:b4:0f:f6:f3:10:4d:58: 9d:8a:0e:0d:e2:ed:fe:e3:58:9f:86:53:c5:9f:38: 07:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 75:B0:AF:80:7E:5F:79:97:F7:F2:7C:2C:80:4C:CC:E1:01:F9:2D:BF X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/DFD644316D58FB5EFBF46DED156841F5DF705337C8B98F5018B92FFA1DD63938/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/DFD644316D58FB5EFBF46DED156841F5DF705337C8B98F5018B92FFA1DD63938/0/75B0AF807E5F7997F7F27C2C804CCCE101F92DBF.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:5e30::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 274910 Signature Algorithm: sha256WithRSAEncryption 72:d4:5d:7f:92:ca:d1:d9:df:1a:ba:92:14:6e:0a:c9:9f:05: 34:dc:d2:08:7b:b2:de:9c:94:3d:da:60:dc:0f:e2:f0:c5:c9: 91:aa:ab:3c:bb:01:6c:40:ff:ee:21:f1:38:ed:c5:79:51:64: 63:bc:84:d1:26:43:cc:f3:32:a9:c5:0a:82:ab:43:62:49:ef: d5:eb:ef:7f:92:d9:de:15:62:90:37:92:4f:e1:85:66:12:bc: 56:b1:f3:35:84:d1:de:20:a7:4e:51:e2:3d:dd:22:bf:5d:26: 83:3b:4f:bb:d4:b2:43:e9:fd:87:65:0e:2d:3e:67:91:47:13: 86:ad:b7:5b:24:c3:91:43:32:e9:a8:1e:eb:06:67:c2:38:5a: b7:25:4b:3a:f4:c7:f7:9e:71:72:99:5d:8c:47:ba:b6:26:67: 36:55:b2:c0:bb:8c:5b:5c:1c:ce:4f:64:67:6a:c0:2a:1f:6e: 60:9d:9e:04:c5:d3:ac:43:c2:85:8f:9f:22:f7:08:cc:e0:38: 50:ed:8e:7a:4a:e1:ec:c3:85:32:50:7f:e8:4f:ef:fb:f3:0d: 43:6c:34:73:da:e1:39:87:6f:e9:0f:d6:6b:f8:09:cc:44:c0: 91:ec:b1:df:65:9d:48:4a:5a:8a:68:d6:0b:b2:37:2e:23:a3: bb:d2:63:b8 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUW1qWjWrd7gc/1DRNKQb6+LdApIEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjA1MDUxMjQ1MDFaFw0yNzA1MDQxMjUwMDFaMDMxMTAvBgNV BAMTKDc1QjBBRjgwN0U1Rjc5OTdGN0YyN0MyQzgwNENDQ0UxMDFGOTJEQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMn5c5kG6jNvmBkUwG2stkdLjG oI6ivl+9RYJxFGLehduh1cjoqNdKI7k1MuZZyE6UTybH7btYKuSli8SQS7l+l3iE rUq5JNib71bRwwK+PyVSLRmqDEV9NSqYqM6HX9h4ftKSgjo5wCfdgM/lxGdDfXXC GufrjD+eHtk+uv2aV1H8FKZWsmJEMFaanzxEhNn/jWvYA+RruKJCzgoNwxrS6Tx+ xIQtPTzL7Zm1aRMeVYg7Ua7vz9dZDgj0Fh0sQH8I+DlWVPGTpzrqPNmkKF4I2HxY a6qeQ4Ugr4mWBxpLxyU7SnAGkJHntA/28xBNWJ2KDg3i7f7jWJ+GU8WfOAdTAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR1sK+Afl95l/fy fCyATMzhAfktvzAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvREZENjQ0MzE2RDU4RkI1RUZCRjQ2REVE MTU2ODQxRjVERjcwNTMzN0M4Qjk4RjUwMThCOTJGRkExREQ2MzkzOC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9ERkQ2NDQzMTZENThGQjVFRkJGNDZERUQxNTY4NDFGNURGNzA1MzM3QzhC OThGNTAxOEI5MkZGQTFERDYzOTM4LzAvNzVCMEFGODA3RTVGNzk5N0Y3RjI3QzJD ODA0Q0NDRTEwMUY5MkRCRi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKANeMDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEMd4wDQYJKoZIhvcNAQELBQADggEBAHLUXX+S ytHZ3xq6khRuCsmfBTTc0gh7st6clD3aYNwP4vDFyZGqqzy7AWxA/+4h8TjtxXlR ZGO8hNEmQ8zzMqnFCoKrQ2JJ79Xr73+S2d4VYpA3kk/hhWYSvFax8zWE0d4gp05R 4j3dIr9dJoM7T7vUskPp/YdlDi0+Z5FHE4att1skw5FDMumoHusGZ8I4WrclSzr0 x/eecXKZXYxHurYmZzZVssC7jFtcHM5PZGdqwCofbmCdngTF06xDwoWPnyL3CMzg OFDtjnpK4ezDhTJQf+hP7/vzDUNsNHPa4TmHb+kP1mv4CcxEwJHssd9lnUhKWopo 1guyNy4jo7vSY7g= -----END CERTIFICATE-----Generated at Wed May 13 12:40:27 2026 by rpki-client