$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7CFCC38DB6CFC0A7E38DEC33E7BF4E4AF18F304D.cer File: 7CFCC38DB6CFC0A7E38DEC33E7BF4E4AF18F304D.cer (raw, json) Hash identifier: dLh/L/PVcxQdRaBduHFXQGBmo2nyAFfysmjIJIRbPms= Subject key identifier: 7C:FC:C3:8D:B6:CF:C0:A7:E3:8D:EC:33:E7:BF:4E:4A:F1:8F:30:4D Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 58DA46E6F0757D911891901F371A9FD97DE0A5A5 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/F99E2C9A712C113941A648FEF55DD31B0CC6264320185BA71AA3B999F2445BD0/0/7CFCC38DB6CFC0A7E38DEC33E7BF4E4AF18F304D.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/F99E2C9A712C113941A648FEF55DD31B0CC6264320185BA71AA3B999F2445BD0/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Thu 01 Oct 2026 15:35:01 +0000 Certificate not after: Thu 30 Sep 2027 15:40:01 +0000 Subordinate resources: AS: 275042 IP: 2803:b730::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 23 Oct 2026 16:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:da:46:e6:f0:75:7d:91:18:91:90:1f:37:1a:9f:d9:7d:e0:a5:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Oct 1 15:35:01 2026 GMT Not After : Sep 30 15:40:01 2027 GMT Subject: CN=7CFCC38DB6CFC0A7E38DEC33E7BF4E4AF18F304D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:fe:5e:8a:1d:d3:0f:22:0a:ac:fd:7e:85:84: 30:38:ea:73:45:7a:ab:23:ba:2c:fc:3f:c0:35:85: cf:f0:40:24:6e:3c:e4:f3:b2:43:73:09:dd:66:25: 95:b0:d9:59:c8:14:78:b8:03:e5:76:f8:b3:af:1f: 15:95:d5:41:4f:6d:f8:fd:d3:9f:d8:0b:0d:16:97: ab:c5:73:be:16:43:11:7e:50:aa:e6:83:d2:75:79: 59:08:c0:95:95:2e:a2:95:5b:cb:60:3b:71:e6:81: 1f:81:30:a4:27:07:1f:61:f8:c4:8a:bc:25:bf:d9: 17:e7:82:70:47:29:68:a0:b3:82:1d:78:44:74:dc: 5b:8f:14:20:c1:1d:e3:c4:1d:0a:49:20:08:13:2e: 6a:17:d0:c5:33:27:db:d1:8b:af:76:1c:0a:78:d4: 38:27:94:0b:55:ff:ff:3a:eb:f9:fa:e9:8e:37:1d: 69:c3:0f:af:23:4a:76:b6:80:24:22:29:b5:75:6e: 62:1b:3c:0f:fb:c0:1a:05:e5:6f:60:63:63:cf:4c: de:34:94:0e:ec:24:7f:52:0c:77:f7:b1:b4:17:8e: af:39:0b:8f:ea:a9:8d:71:0a:c6:fc:70:65:89:fc: 1c:a8:ea:cc:76:a2:ba:15:33:a6:1f:fc:28:7d:a2: 0c:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7C:FC:C3:8D:B6:CF:C0:A7:E3:8D:EC:33:E7:BF:4E:4A:F1:8F:30:4D X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/F99E2C9A712C113941A648FEF55DD31B0CC6264320185BA71AA3B999F2445BD0/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/F99E2C9A712C113941A648FEF55DD31B0CC6264320185BA71AA3B999F2445BD0/0/7CFCC38DB6CFC0A7E38DEC33E7BF4E4AF18F304D.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:b730::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 275042 Signature Algorithm: sha256WithRSAEncryption 64:36:3b:9c:8d:ae:30:0a:57:5e:53:8f:c6:b2:8d:a0:d6:16: cf:7a:c2:bc:80:e2:df:a4:e1:c3:a2:56:50:df:1b:fe:b9:5a: 4f:7c:2b:6e:ee:f2:1a:5d:12:ce:c0:f4:92:5e:4e:f7:f3:2e: 99:21:2e:81:62:c5:f6:52:09:09:00:9e:9d:2b:c7:96:15:9a: 76:cf:5f:4c:7d:70:22:2a:35:f1:dc:b9:c7:90:24:8e:03:23: e8:b4:9a:62:2e:f0:b8:8e:dd:bb:9a:2b:f4:25:16:88:7f:62: d4:6a:53:39:66:45:bd:34:07:43:d6:0b:d5:b4:94:bd:21:3c: 57:82:5a:7d:78:c5:8e:a4:52:17:0d:48:96:a1:c3:ad:e9:a6: d4:46:b0:dd:34:12:0a:92:2e:2a:af:ae:7b:3b:22:b0:bd:38: a9:37:41:6b:8e:fa:50:dd:2c:32:85:2f:3c:29:16:8d:2a:8b: 11:b5:a7:9a:e1:1b:59:dc:46:25:5c:79:dc:b5:44:dd:88:bd: 7b:7c:e1:91:1f:c0:8a:ce:a8:10:f1:d9:56:29:17:53:ac:f9: 57:ea:c5:21:a5:20:65:a2:ea:28:80:6c:4b:e1:9d:8d:f2:6a: 8c:0a:2e:4c:e9:55:d4:2a:7d:65:d5:2a:b6:cd:c3:f0:b0:ab: 57:23:bd:f2 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUWNpG5vB1fZEYkZAfNxqf2X3gpaUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjEwMDExNTM1MDFaFw0yNzA5MzAxNTQwMDFaMDMxMTAvBgNV BAMTKDdDRkNDMzhEQjZDRkMwQTdFMzhERUMzM0U3QkY0RTRBRjE4RjMwNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC//l6KHdMPIgqs/X6FhDA46nNF eqsjuiz8P8A1hc/wQCRuPOTzskNzCd1mJZWw2VnIFHi4A+V2+LOvHxWV1UFPbfj9 05/YCw0Wl6vFc74WQxF+UKrmg9J1eVkIwJWVLqKVW8tgO3HmgR+BMKQnBx9h+MSK vCW/2RfngnBHKWigs4IdeER03FuPFCDBHePEHQpJIAgTLmoX0MUzJ9vRi692HAp4 1DgnlAtV//866/n66Y43HWnDD68jSna2gCQiKbV1bmIbPA/7wBoF5W9gY2PPTN40 lA7sJH9SDHf3sbQXjq85C4/qqY1xCsb8cGWJ/Byo6sx2oroVM6Yf/Ch9ogzlAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR8/MONts/Ap+ON 7DPnv05K8Y8wTTAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRjk5RTJDOUE3MTJDMTEzOTQxQTY0OEZF RjU1REQzMUIwQ0M2MjY0MzIwMTg1QkE3MUFBM0I5OTlGMjQ0NUJEMC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9GOTlFMkM5QTcxMkMxMTM5NDFBNjQ4RkVGNTVERDMxQjBDQzYyNjQzMjAx ODVCQTcxQUEzQjk5OUYyNDQ1QkQwLzAvN0NGQ0MzOERCNkNGQzBBN0UzOERFQzMz RTdCRjRFNEFGMThGMzA0RC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAO3MDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEMmIwDQYJKoZIhvcNAQELBQADggEBAGQ2O5yN rjAKV15Tj8ayjaDWFs96wryA4t+k4cOiVlDfG/65Wk98K27u8hpdEs7A9JJeTvfz LpkhLoFixfZSCQkAnp0rx5YVmnbPX0x9cCIqNfHcuceQJI4DI+i0mmIu8LiO3bua K/QlFoh/YtRqUzlmRb00B0PWC9W0lL0hPFeCWn14xY6kUhcNSJahw63pptRGsN00 EgqSLiqvrns7IrC9OKk3QWuO+lDdLDKFLzwpFo0qixG1p5rhG1ncRiVcedy1RN2I vXt84ZEfwIrOqBDx2VYpF1Os+VfqxSGlIGWi6iiAbEvhnY3yaowKLkzpVdQqfWXV KrbNw/Cwq1cjvfI= -----END CERTIFICATE-----Generated at Mon Oct 19 21:06:07 2026 by rpki-client