$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C65791642D7761AA97BA0FF1A29DB316A279B37.cer File: 9C65791642D7761AA97BA0FF1A29DB316A279B37.cer (raw, json) Hash identifier: dUUQ/514fOKuNtdTatYldfz4J808fRWjODtGHZk6yyw= Subject key identifier: 9C:65:79:16:42:D7:76:1A:A9:7B:A0:FF:1A:29:DB:31:6A:27:9B:37 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 68336E373CEC78BACA4BB26EDA20E98CCE570E0D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/4C8637342C36E875CF6231D4E56AA6D8F2A9DA6FDF1119B41BF35AD3D5C2F597/0/9C65791642D7761AA97BA0FF1A29DB316A279B37.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/4C8637342C36E875CF6231D4E56AA6D8F2A9DA6FDF1119B41BF35AD3D5C2F597/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Fri 10 Jul 2026 02:10:01 +0000 Certificate not after: Fri 09 Jul 2027 02:15:01 +0000 Subordinate resources: AS: 5639 IP: 186.44.0.0/15 IP: 190.58.0.0/15 IP: 196.3.132.0 -- 196.3.147.255 IP: 200.108.0.0/19 IP: 201.238.64.0 -- 201.238.123.255 IP: 209.94.192.0/19 IP: 2800:420::/30 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 28 Jul 2026 03:34:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:33:6e:37:3c:ec:78:ba:ca:4b:b2:6e:da:20:e9:8c:ce:57:0e:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jul 10 02:10:01 2026 GMT Not After : Jul 9 02:15:01 2027 GMT Subject: CN=9C65791642D7761AA97BA0FF1A29DB316A279B37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:8e:4f:d4:f6:d8:86:86:92:d3:4d:cf:fd:32: c1:8b:11:8e:80:ef:98:f7:f5:fc:6c:31:73:05:26: 08:50:1a:b4:23:65:2b:08:26:18:ce:62:f3:09:f8: 62:30:05:d7:86:53:2d:45:b5:df:59:9f:ce:43:16: b2:09:ef:5e:b5:9c:30:0d:54:de:d5:60:20:20:d1: 45:29:60:7d:52:c2:d5:f6:e8:df:63:02:bc:6c:e5: f2:6e:82:e2:9e:6c:6d:1c:bb:f1:0b:2f:59:79:8a: 77:c6:2f:f7:c2:03:f3:9f:86:94:f5:c7:68:6b:96: a4:d5:e2:49:e6:cb:d4:c7:ac:58:1c:64:d7:c0:d9: 07:74:d7:77:a3:e6:c9:28:8f:85:87:98:00:af:fe: 1a:f4:88:6d:5b:b6:a5:b2:03:8e:97:23:75:83:09: 62:88:55:3d:cd:14:d1:00:96:b3:ac:4f:1b:e4:be: 42:93:9d:89:ca:56:32:32:06:d2:65:fe:0e:fd:6e: b2:ce:4a:c6:b6:8d:56:36:2c:0d:fe:b8:d9:90:20: 27:29:f8:52:22:f1:4f:dd:f7:f4:8f:d7:28:37:a5: a5:bb:ba:de:f1:11:c6:4b:98:bb:ed:b1:ce:37:32: 86:83:f9:d7:28:3d:d0:9d:d9:d4:2b:8d:46:98:05: 57:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9C:65:79:16:42:D7:76:1A:A9:7B:A0:FF:1A:29:DB:31:6A:27:9B:37 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/4C8637342C36E875CF6231D4E56AA6D8F2A9DA6FDF1119B41BF35AD3D5C2F597/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/4C8637342C36E875CF6231D4E56AA6D8F2A9DA6FDF1119B41BF35AD3D5C2F597/0/9C65791642D7761AA97BA0FF1A29DB316A279B37.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 186.44.0.0/15 190.58.0.0/15 196.3.132.0-196.3.147.255 200.108.0.0/19 201.238.64.0-201.238.123.255 209.94.192.0/19 IPv6: 2800:420::/30 sbgp-autonomousSysNum: critical Autonomous System Numbers: 5639 Signature Algorithm: sha256WithRSAEncryption 31:af:bd:71:07:75:94:e1:ab:17:7d:c3:b3:21:20:ec:73:c9: 3a:09:94:d1:1e:98:5a:a9:ca:e7:2e:1a:c7:da:ee:64:60:73: 3f:b9:ba:29:ce:df:11:2c:e2:a1:84:ab:49:f7:ff:ac:49:24: a5:9b:2c:2f:34:58:48:8e:9a:b9:8b:91:5d:f1:53:dc:51:a0: 3c:d8:1f:3b:1d:e0:a1:5c:55:20:75:8e:7f:61:80:c2:17:83: d3:f2:60:be:82:cb:2b:ee:ff:00:1e:7b:4d:c9:1e:5e:94:9d: 47:66:3b:f3:96:08:bb:b9:17:2c:5a:57:53:e7:e6:ea:8a:a4: 63:b2:3c:ee:57:60:4b:90:bd:6c:37:9f:f6:47:66:1d:16:1f: c6:af:30:de:27:97:b2:7f:c9:6c:84:33:b1:85:30:c3:99:2f: 32:d5:61:bb:26:13:4f:27:f6:48:c8:01:c7:8b:23:d1:ab:82: e6:70:c7:47:bc:0d:71:6b:46:cf:d1:0e:96:e0:4b:64:b4:b8: 59:a8:9c:95:c4:fb:14:e9:9d:ee:4d:74:63:ff:e4:4e:a1:05: ff:a5:c6:0e:17:d2:43:29:fc:26:c0:6c:3c:0b:bf:3c:5d:02: 85:50:1d:2c:68:c5:7f:31:8f:ec:4b:67:f3:d5:08:67:fd:b8: 39:75:98:7d -----BEGIN CERTIFICATE----- MIIG0DCCBbigAwIBAgIUaDNuNzzseLrKS7Ju2iDpjM5XDg0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjA3MTAwMjEwMDFaFw0yNzA3MDkwMjE1MDFaMDMxMTAvBgNV BAMTKDlDNjU3OTE2NDJENzc2MUFBOTdCQTBGRjFBMjlEQjMxNkEyNzlCMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChjk/U9tiGhpLTTc/9MsGLEY6A 75j39fxsMXMFJghQGrQjZSsIJhjOYvMJ+GIwBdeGUy1Ftd9Zn85DFrIJ7161nDAN VN7VYCAg0UUpYH1SwtX26N9jArxs5fJuguKebG0cu/ELL1l5infGL/fCA/OfhpT1 x2hrlqTV4knmy9THrFgcZNfA2Qd013ej5skoj4WHmACv/hr0iG1btqWyA46XI3WD CWKIVT3NFNEAlrOsTxvkvkKTnYnKVjIyBtJl/g79brLOSsa2jVY2LA3+uNmQICcp +FIi8U/d9/SP1yg3paW7ut7xEcZLmLvtsc43MoaD+dcoPdCd2dQrjUaYBVeBAgMB AAGjggPaMIID1jAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBScZXkWQtd2Gql7 oP8aKdsxaiebNzAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNEM4NjM3MzQyQzM2RTg3NUNGNjIzMUQ0 RTU2QUE2RDhGMkE5REE2RkRGMTExOUI0MUJGMzVBRDNENUMyRjU5Ny8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80Qzg2MzczNDJDMzZFODc1Q0Y2MjMxRDRFNTZBQTZEOEYyQTlEQTZGREYx MTE5QjQxQkYzNUFEM0Q1QzJGNTk3LzAvOUM2NTc5MTY0MkQ3NzYxQUE5N0JBMEZG MUEyOURCMzE2QTI3OUIzNy5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFoGCCsGAQUFBwEHAQH/BEswSTA4BAIAATAyAwMBuiwDAwG+OjAM AwQCxAOEAwQCxAOQAwQFyGwAMAwDBAbJ7kADBALJ7ngDBAXRXsAwDQQCAAIwBwMF AigABCAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICFgcwDQYJKoZIhvcNAQELBQAD ggEBADGvvXEHdZThqxd9w7MhIOxzyToJlNEemFqpyucuGsfa7mRgcz+5uinO3xEs 4qGEq0n3/6xJJKWbLC80WEiOmrmLkV3xU9xRoDzYHzsd4KFcVSB1jn9hgMIXg9Py YL6Cyyvu/wAee03JHl6UnUdmO/OWCLu5FyxaV1Pn5uqKpGOyPO5XYEuQvWw3n/ZH Zh0WH8avMN4nl7J/yWyEM7GFMMOZLzLVYbsmE08n9kjIAceLI9GrguZwx0e8DXFr Rs/RDpbgS2S0uFmonJXE+xTpne5NdGP/5E6hBf+lxg4X0kMp/CbAbDwLvzxdAoVQ HSxoxX8xj+xLZ/PVCGf9uDl1mH0= -----END CERTIFICATE-----Generated at Thu Jul 23 23:26:46 2026 by rpki-client