$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A2A3A093AD5049E10F5570EC6C081605AFC67822.cer File: A2A3A093AD5049E10F5570EC6C081605AFC67822.cer (raw, json) Hash identifier: S0DbLtfNULsy6HTW5uVKMrHrv1n2zcvrP8DLeFG9+UQ= Subject key identifier: A2:A3:A0:93:AD:50:49:E1:0F:55:70:EC:6C:08:16:05:AF:C6:78:22 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 4B7622F30B8D175E7D4274D7AE8AD21788385D56 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/859D2C0609C871DD9AF1B5D81D2CCF15A04E40AFC79DD534FAD59497197F12D9/0/A2A3A093AD5049E10F5570EC6C081605AFC67822.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/859D2C0609C871DD9AF1B5D81D2CCF15A04E40AFC79DD534FAD59497197F12D9/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Fri 18 Sep 2026 14:40:01 +0000 Certificate not after: Fri 17 Sep 2027 14:45:01 +0000 Subordinate resources: AS: 272406 IP: 2806:42a::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 30 Sep 2026 17:33:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:76:22:f3:0b:8d:17:5e:7d:42:74:d7:ae:8a:d2:17:88:38:5d:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Sep 18 14:40:01 2026 GMT Not After : Sep 17 14:45:01 2027 GMT Subject: CN=A2A3A093AD5049E10F5570EC6C081605AFC67822 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:0e:1d:2e:95:9b:11:c7:f1:6a:a3:d5:de:cf: f4:6b:f8:dc:24:cc:aa:00:32:55:97:e1:ba:72:8c: 03:70:14:43:e1:17:d3:b1:ed:ba:bc:81:57:9e:8e: b0:c3:20:8f:f1:da:5d:25:d2:ba:38:e6:88:0b:ad: 02:ce:a0:07:e1:33:0d:46:ef:8b:b1:0f:cf:9c:84: 12:5f:81:5d:7a:80:70:1e:b4:84:8d:bc:5a:23:74: 19:01:ab:e8:21:a1:70:8d:00:f7:e5:5a:4d:30:b8: 3a:e7:72:5e:c7:3d:f6:a8:4c:3a:c9:3c:ce:fc:9f: 4d:a5:da:3a:f6:a8:c9:fd:d9:ec:49:7a:00:ae:71: 0f:a1:4b:d6:8f:0d:6d:b7:6e:05:35:fb:c1:fc:67: 6b:d2:78:33:ff:81:09:00:1f:e2:5f:73:5f:da:f5: c1:6c:9f:0a:bf:68:c8:8a:88:b1:98:1e:5c:46:31: a5:c4:6f:b2:f9:cd:2a:10:38:8d:e8:75:9d:40:62: ae:fb:1e:f2:0f:09:b6:e4:4c:d4:21:c3:e2:e9:72: 83:61:16:d3:b3:1b:f2:54:49:a1:88:52:e4:36:e3: 46:aa:3d:e3:06:25:df:fa:40:be:d9:38:0e:7f:57: 45:d6:c2:8d:a8:5b:db:c2:bb:22:fa:d5:a5:86:4c: 49:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A2:A3:A0:93:AD:50:49:E1:0F:55:70:EC:6C:08:16:05:AF:C6:78:22 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/859D2C0609C871DD9AF1B5D81D2CCF15A04E40AFC79DD534FAD59497197F12D9/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/859D2C0609C871DD9AF1B5D81D2CCF15A04E40AFC79DD534FAD59497197F12D9/0/A2A3A093AD5049E10F5570EC6C081605AFC67822.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2806:42a::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 272406 Signature Algorithm: sha256WithRSAEncryption 7d:a2:3b:81:c9:0a:60:e6:a1:e4:0d:d2:9b:40:45:9e:84:c4: 45:f1:e3:60:aa:06:ef:27:a4:2a:2c:d1:fc:5f:44:87:7f:fc: 33:e0:8b:a3:d3:37:f2:0a:18:5a:57:b2:8e:51:87:17:62:f4: ef:79:08:9e:a5:29:60:b8:85:09:5e:c5:31:5b:d5:26:bc:0a: 53:ca:5f:b3:7d:49:e6:05:31:8f:2e:f4:30:23:de:0b:35:f1: 33:6e:fe:de:44:2d:19:86:aa:b4:7c:07:66:15:29:d5:51:19: 59:0e:20:e0:c1:88:cd:26:cf:6c:7a:95:eb:78:a2:c0:24:3e: bd:84:77:f6:4d:4d:ad:3d:c7:56:74:a3:35:c2:29:c1:a9:86: ba:bb:fb:55:97:75:c9:ae:a2:87:48:9c:3f:8c:67:68:43:89: cb:a6:4f:2e:63:60:d5:4f:77:bc:d5:83:37:90:37:18:f8:e7: a1:aa:56:ec:8d:a8:83:e1:a5:c7:af:df:6b:2a:2d:0c:3e:8d: 27:73:9d:e0:9b:f5:70:40:8c:32:55:3d:32:17:6e:15:cf:b2: 2b:9a:fb:56:92:ad:45:96:a8:41:35:cf:9d:e0:92:85:53:3e: c5:8b:ca:1c:39:d1:90:9b:b0:6a:b6:02:05:24:60:17:46:77: 5e:8b:3f:f3 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUS3Yi8wuNF159QnTXrorSF4g4XVYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjA5MTgxNDQwMDFaFw0yNzA5MTcxNDQ1MDFaMDMxMTAvBgNV BAMTKEEyQTNBMDkzQUQ1MDQ5RTEwRjU1NzBFQzZDMDgxNjA1QUZDNjc4MjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlDh0ulZsRx/Fqo9Xez/Rr+Nwk zKoAMlWX4bpyjANwFEPhF9Ox7bq8gVeejrDDII/x2l0l0ro45ogLrQLOoAfhMw1G 74uxD8+chBJfgV16gHAetISNvFojdBkBq+ghoXCNAPflWk0wuDrncl7HPfaoTDrJ PM78n02l2jr2qMn92exJegCucQ+hS9aPDW23bgU1+8H8Z2vSeDP/gQkAH+Jfc1/a 9cFsnwq/aMiKiLGYHlxGMaXEb7L5zSoQOI3odZ1AYq77HvIPCbbkTNQhw+LpcoNh FtOzG/JUSaGIUuQ240aqPeMGJd/6QL7ZOA5/V0XWwo2oW9vCuyL61aWGTEnlAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSio6CTrVBJ4Q9V cOxsCBYFr8Z4IjAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvODU5RDJDMDYwOUM4NzFERDlBRjFCNUQ4 MUQyQ0NGMTVBMDRFNDBBRkM3OURENTM0RkFENTk0OTcxOTdGMTJEOS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy84NTlEMkMwNjA5Qzg3MUREOUFGMUI1RDgxRDJDQ0YxNUEwNEU0MEFGQzc5 REQ1MzRGQUQ1OTQ5NzE5N0YxMkQ5LzAvQTJBM0EwOTNBRDUwNDlFMTBGNTU3MEVD NkMwODE2MDVBRkM2NzgyMi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAYEKjAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEKBYwDQYJKoZIhvcNAQELBQADggEBAH2iO4HJ CmDmoeQN0ptARZ6ExEXx42CqBu8npCos0fxfRId//DPgi6PTN/IKGFpXso5Rhxdi 9O95CJ6lKWC4hQlexTFb1Sa8ClPKX7N9SeYFMY8u9DAj3gs18TNu/t5ELRmGqrR8 B2YVKdVRGVkOIODBiM0mz2x6let4osAkPr2Ed/ZNTa09x1Z0ozXCKcGphrq7+1WX dcmuoodInD+MZ2hDicumTy5jYNVPd7zVgzeQNxj456GqVuyNqIPhpcev32sqLQw+ jSdzneCb9XBAjDJVPTIXbhXPsiua+1aSrUWWqEE1z53gkoVTPsWLyhw50ZCbsGq2 AgUkYBdGd16LP/M= -----END CERTIFICATE-----Generated at Sat Sep 26 16:34:56 2026 by rpki-client