$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/863D5F7EB9BB2A5309A1F8CB1C8209D9FBC55D20.cer File: 863D5F7EB9BB2A5309A1F8CB1C8209D9FBC55D20.cer (raw, json) Hash identifier: Ph3v8N/n/wMoWGmVNA7rldTZGRJn2ra+mgQYLtGPsGA= Subject key identifier: 86:3D:5F:7E:B9:BB:2A:53:09:A1:F8:CB:1C:82:09:D9:FB:C5:5D:20 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 4AD26946B0C703A23D3FBD354700857DB7858B4B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/B6AC5F5369D37487E526BDC129212B6016F5E6B928C68D1308A029FAFC9CD20D/0/863D5F7EB9BB2A5309A1F8CB1C8209D9FBC55D20.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/B6AC5F5369D37487E526BDC129212B6016F5E6B928C68D1308A029FAFC9CD20D/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Sat 09 May 2026 15:45:01 +0000 Certificate not after: Sat 08 May 2027 15:50:01 +0000 Subordinate resources: AS: 3132 IP: 161.132.0.0/16 IP: 200.1.176.0/21 IP: 209.45.0.0/17 IP: 2801:150::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 17 May 2026 14:28:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:d2:69:46:b0:c7:03:a2:3d:3f:bd:35:47:00:85:7d:b7:85:8b:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: May 9 15:45:01 2026 GMT Not After : May 8 15:50:01 2027 GMT Subject: CN=863D5F7EB9BB2A5309A1F8CB1C8209D9FBC55D20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:5d:5e:80:ad:d1:55:c5:c8:22:c9:96:a6:34: c0:d1:f0:38:44:8c:32:95:6f:47:9e:6d:be:35:f1: 96:5a:17:6e:c4:59:fb:a8:21:d9:c9:6f:09:c1:d9: b8:2e:bc:69:dc:cf:02:36:bb:40:56:f7:95:4a:a4: 19:fc:15:76:17:ac:62:1c:16:4b:66:a0:ee:a2:e3: 73:00:95:00:14:a4:65:34:e4:82:eb:e9:b7:7f:72: cc:d9:fa:bf:90:52:0b:7e:44:02:11:70:b9:52:af: 0c:c0:35:c9:8e:62:28:82:ad:0a:60:6a:46:37:2d: ff:93:1a:75:cc:b8:0d:b0:0f:3a:da:b7:38:ca:86: 28:5f:57:26:97:c8:d5:4e:2d:0b:81:28:61:3e:9d: ba:5b:1d:9c:bc:3e:04:a0:a3:91:38:fc:4d:58:ee: 86:6d:21:99:1c:98:46:ba:a6:86:d5:a4:8e:24:11: 21:53:77:b0:ca:9b:43:4d:a8:13:2a:21:04:42:a1: 84:75:3d:94:20:e1:fd:5d:4f:2e:d9:1b:ff:21:0c: 20:98:7d:da:54:64:1e:2c:06:50:dc:6f:c9:f3:dd: 59:be:51:5c:44:60:63:07:c5:5c:9f:7b:48:8e:2f: 94:fd:0a:fb:b0:45:f2:02:61:9f:26:11:a7:ba:c7: 5e:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 86:3D:5F:7E:B9:BB:2A:53:09:A1:F8:CB:1C:82:09:D9:FB:C5:5D:20 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/B6AC5F5369D37487E526BDC129212B6016F5E6B928C68D1308A029FAFC9CD20D/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/B6AC5F5369D37487E526BDC129212B6016F5E6B928C68D1308A029FAFC9CD20D/0/863D5F7EB9BB2A5309A1F8CB1C8209D9FBC55D20.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 161.132.0.0/16 200.1.176.0/21 209.45.0.0/17 IPv6: 2801:150::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 3132 Signature Algorithm: sha256WithRSAEncryption 54:bc:65:e2:28:e2:1a:e6:f2:e5:52:8b:6c:c5:ed:9b:99:39: 0d:69:b9:9e:99:52:0e:32:06:54:19:95:87:87:74:cb:52:aa: e4:7c:ec:96:65:2a:81:50:27:e0:e8:64:c8:02:17:12:10:9d: 54:13:f8:d6:e6:91:26:6d:b7:68:0a:d2:4e:f9:fb:9e:a7:ae: 38:7b:89:fc:25:60:81:0d:7f:5b:64:0f:8f:a4:aa:47:ca:5d: 4c:6d:1f:27:b3:99:1d:90:2e:f6:d9:c0:7e:d0:b8:56:be:13: 30:70:9b:d3:66:be:ba:5d:29:0f:2e:95:2a:76:f1:13:3c:67: b2:46:e1:82:d5:b6:1c:5b:ab:b6:1c:47:49:33:6f:fa:37:32: 95:33:5a:e6:a9:d9:a1:6d:0e:46:ea:16:38:4f:fb:c1:47:ea: f9:d1:82:90:e9:2b:62:a5:51:12:98:1c:8b:e6:a7:fa:78:9e: 6d:55:f0:b5:8c:7c:64:03:dd:49:17:c0:76:c5:dd:26:98:a0: 7b:1e:15:94:7f:51:3f:1f:d6:41:1a:b6:f5:2c:01:7b:7d:91: bc:f0:73:53:b2:06:1d:e3:c0:8a:34:5f:64:72:db:ad:01:8a: 43:62:cd:ac:c5:5e:26:9b:7b:85:33:3f:2a:95:1b:87:bb:f3: 76:ea:e4:5c -----BEGIN CERTIFICATE----- MIIGrzCCBZegAwIBAgIUStJpRrDHA6I9P701RwCFfbeFi0swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjA1MDkxNTQ1MDFaFw0yNzA1MDgxNTUwMDFaMDMxMTAvBgNV BAMTKDg2M0Q1RjdFQjlCQjJBNTMwOUExRjhDQjFDODIwOUQ5RkJDNTVEMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIXV6ArdFVxcgiyZamNMDR8DhE jDKVb0eebb418ZZaF27EWfuoIdnJbwnB2bguvGnczwI2u0BW95VKpBn8FXYXrGIc FktmoO6i43MAlQAUpGU05ILr6bd/cszZ+r+QUgt+RAIRcLlSrwzANcmOYiiCrQpg akY3Lf+TGnXMuA2wDzratzjKhihfVyaXyNVOLQuBKGE+nbpbHZy8PgSgo5E4/E1Y 7oZtIZkcmEa6pobVpI4kESFTd7DKm0NNqBMqIQRCoYR1PZQg4f1dTy7ZG/8hDCCY fdpUZB4sBlDcb8nz3Vm+UVxEYGMHxVyfe0iOL5T9CvuwRfICYZ8mEae6x14bAgMB AAGjggO5MIIDtTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSGPV9+ubsqUwmh +MscggnZ+8VdIDAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQjZBQzVGNTM2OUQzNzQ4N0U1MjZCREMx MjkyMTJCNjAxNkY1RTZCOTI4QzY4RDEzMDhBMDI5RkFGQzlDRDIwRC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9CNkFDNUY1MzY5RDM3NDg3RTUyNkJEQzEyOTIxMkI2MDE2RjVFNkI5MjhD NjhEMTMwOEEwMjlGQUZDOUNEMjBELzAvODYzRDVGN0VCOUJCMkE1MzA5QTFGOENC MUM4MjA5RDlGQkM1NUQyMC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAXBAIAATARAwMAoYQDBAPIAbAD BAfRLQAwDQQCAAIwBwMFACgBAVAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICDDww DQYJKoZIhvcNAQELBQADggEBAFS8ZeIo4hrm8uVSi2zF7ZuZOQ1puZ6ZUg4yBlQZ lYeHdMtSquR87JZlKoFQJ+DoZMgCFxIQnVQT+NbmkSZtt2gK0k75+56nrjh7ifwl YIENf1tkD4+kqkfKXUxtHyezmR2QLvbZwH7QuFa+EzBwm9NmvrpdKQ8ulSp28RM8 Z7JG4YLVthxbq7YcR0kzb/o3MpUzWuap2aFtDkbqFjhP+8FH6vnRgpDpK2KlURKY HIvmp/p4nm1V8LWMfGQD3UkXwHbF3SaYoHseFZR/UT8f1kEatvUsAXt9kbzwc1Oy Bh3jwIo0X2Ry260BikNizazFXiabe4UzPyqVG4e783bq5Fw= -----END CERTIFICATE-----Generated at Wed May 13 15:35:35 2026 by rpki-client