$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/95710A2B3DEBF374D2DF81D862066A74FFE49C9E.cer File: 95710A2B3DEBF374D2DF81D862066A74FFE49C9E.cer (raw, json) Hash identifier: hMexBDBWzjtiHVTjLj03bJShdErjeqqTkgBp6Hf1Gb0= Subject key identifier: 95:71:0A:2B:3D:EB:F3:74:D2:DF:81:D8:62:06:6A:74:FF:E4:9C:9E Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 4ACDF94C26B0BD30AC82C90127A5FC0CED15753D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/8932D131E7BE168280491EDC0D0F03DD235D59B58B3A49215E09DC13849F5B66/0/95710A2B3DEBF374D2DF81D862066A74FFE49C9E.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/8932D131E7BE168280491EDC0D0F03DD235D59B58B3A49215E09DC13849F5B66/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Fri 25 Sep 2026 20:05:01 +0000 Certificate not after: Fri 24 Sep 2027 20:10:01 +0000 Subordinate resources: AS: 61479 IP: 192.100.182.0/24 IP: 2801:15:2000::/48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 14 Oct 2026 11:50:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:cd:f9:4c:26:b0:bd:30:ac:82:c9:01:27:a5:fc:0c:ed:15:75:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Sep 25 20:05:01 2026 GMT Not After : Sep 24 20:10:01 2027 GMT Subject: CN=95710A2B3DEBF374D2DF81D862066A74FFE49C9E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f0:e2:1d:b4:0c:4e:fd:0a:41:90:05:5c:0c: dc:74:67:33:fb:09:58:38:6d:c9:b7:f0:09:42:24: 00:b1:75:6e:81:cf:fc:cd:71:ab:07:dd:dc:14:36: be:74:a8:53:0f:6d:4b:96:07:34:ed:14:1a:2c:4e: f5:39:8f:b8:fe:b2:7a:f3:aa:17:4d:2a:dd:13:dc: 30:6b:5e:d5:ee:56:8e:06:93:f4:90:f1:d2:91:b3: ba:6d:04:f3:94:4b:b7:3d:ca:dc:07:e7:c3:db:a9: 20:f9:71:70:00:d8:54:01:19:99:97:1e:a0:b5:1d: 39:49:bb:20:f9:07:ac:97:38:e2:3d:0a:4b:9e:8b: a7:3b:33:db:44:c0:e1:ac:08:e9:0d:f2:d9:86:f1: 1c:c5:f1:1c:7f:e5:44:b3:80:f7:f7:ac:dc:b1:18: c3:26:bc:99:2d:43:58:81:fb:6b:69:ac:9b:37:46: ac:8b:b9:13:b1:e6:e7:90:a5:3d:1d:c2:93:d4:b0: 66:52:c0:60:81:8f:c8:fe:2d:a7:63:b8:4d:80:99: 68:51:5a:a5:6d:fb:94:9b:fa:c9:06:ac:e5:73:dd: e0:27:b2:9f:d6:f1:cd:6f:d6:2b:db:9e:45:5c:bb: 76:87:f3:b1:f9:84:09:1e:0b:19:12:fc:e3:13:a9: d5:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 95:71:0A:2B:3D:EB:F3:74:D2:DF:81:D8:62:06:6A:74:FF:E4:9C:9E X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/8932D131E7BE168280491EDC0D0F03DD235D59B58B3A49215E09DC13849F5B66/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/8932D131E7BE168280491EDC0D0F03DD235D59B58B3A49215E09DC13849F5B66/0/95710A2B3DEBF374D2DF81D862066A74FFE49C9E.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.100.182.0/24 IPv6: 2801:15:2000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 61479 Signature Algorithm: sha256WithRSAEncryption 62:00:2f:10:ce:54:b7:69:18:f4:43:c3:c2:0d:50:31:d6:03: 8e:e9:d1:3d:2b:94:91:df:f0:10:10:4e:57:cd:fd:c5:11:1e: 74:88:98:c4:7b:5b:45:26:a0:41:d4:7a:fc:7e:b8:5a:cd:62: 17:64:b2:65:25:a2:db:89:42:0b:14:e3:ec:bc:c1:91:89:e0: fb:11:6d:84:ad:f1:06:a2:01:de:02:2f:bc:96:1f:9a:21:72: fc:47:33:60:27:ca:74:50:ea:26:12:14:67:65:9d:17:48:6b: 6c:c3:18:42:6a:bd:83:fb:4c:81:ac:d0:34:77:4e:af:6b:3a: 54:b0:5b:e2:0f:2a:57:c1:aa:ea:99:9c:08:42:ad:b0:c0:dd: 93:8f:2b:08:ff:c1:25:9a:17:92:99:d7:7b:1c:3e:9e:33:0d: 7d:b2:f8:f2:d4:db:30:d3:fa:15:cc:af:ee:4b:b6:0e:93:a9: db:31:45:46:03:e1:d9:27:a5:dd:3f:79:b5:83:44:cc:ab:53: 5d:f8:91:92:7f:f8:7c:ec:d1:99:6e:e5:09:ca:00:1f:3c:2c: d7:33:23:db:53:71:3e:00:54:04:44:f7:cf:4d:ec:61:13:e3: 62:c7:6e:09:bb:1e:cb:73:fa:7e:f7:fe:f7:ee:0c:2f:76:3e: ba:00:68:04 -----BEGIN CERTIFICATE----- MIIGpzCCBY+gAwIBAgIUSs35TCawvTCsgskBJ6X8DO0VdT0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjA5MjUyMDA1MDFaFw0yNzA5MjQyMDEwMDFaMDMxMTAvBgNV BAMTKDk1NzEwQTJCM0RFQkYzNzREMkRGODFEODYyMDY2QTc0RkZFNDlDOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH8OIdtAxO/QpBkAVcDNx0ZzP7 CVg4bcm38AlCJACxdW6Bz/zNcasH3dwUNr50qFMPbUuWBzTtFBosTvU5j7j+snrz qhdNKt0T3DBrXtXuVo4Gk/SQ8dKRs7ptBPOUS7c9ytwH58PbqSD5cXAA2FQBGZmX HqC1HTlJuyD5B6yXOOI9Ckuei6c7M9tEwOGsCOkN8tmG8RzF8Rx/5USzgPf3rNyx GMMmvJktQ1iB+2tprJs3RqyLuROx5ueQpT0dwpPUsGZSwGCBj8j+LadjuE2AmWhR WqVt+5Sb+skGrOVz3eAnsp/W8c1v1ivbnkVcu3aH87H5hAkeCxkS/OMTqdVJAgMB AAGjggOxMIIDrTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSVcQorPevzdNLf gdhiBmp0/+ScnjAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvODkzMkQxMzFFN0JFMTY4MjgwNDkxRURD MEQwRjAzREQyMzVENTlCNThCM0E0OTIxNUUwOURDMTM4NDlGNUI2Ni8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy84OTMyRDEzMUU3QkUxNjgyODA0OTFFREMwRDBGMDNERDIzNUQ1OUI1OEIz QTQ5MjE1RTA5REMxMzg0OUY1QjY2LzAvOTU3MTBBMkIzREVCRjM3NEQyREY4MUQ4 NjIwNjZBNzRGRkU0OUM5RS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwGS2MA8EAgAC MAkDBwAoAQAVIAAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAPAnMA0GCSqGSIb3 DQEBCwUAA4IBAQBiAC8QzlS3aRj0Q8PCDVAx1gOO6dE9K5SR3/AQEE5Xzf3FER50 iJjEe1tFJqBB1Hr8frhazWIXZLJlJaLbiUILFOPsvMGRieD7EW2ErfEGogHeAi+8 lh+aIXL8RzNgJ8p0UOomEhRnZZ0XSGtswxhCar2D+0yBrNA0d06vazpUsFviDypX warqmZwIQq2wwN2TjysI/8ElmheSmdd7HD6eMw19svjy1Nsw0/oVzK/uS7YOk6nb MUVGA+HZJ6XdP3m1g0TMq1Nd+JGSf/h87NGZbuUJygAfPCzXMyPbU3E+AFQERPfP TexhE+Nix24Jux7Lc/p+9/737gwvdj66AGgE -----END CERTIFICATE-----Generated at Sat Oct 10 16:55:35 2026 by rpki-client