$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B16178405CBAAB57A93A3A2FD376DE7B097DE9E3.cer File: B16178405CBAAB57A93A3A2FD376DE7B097DE9E3.cer (raw, json) Hash identifier: ljKRvmk/0nHLyl7FDjsYl/85dltq8MCkpsq33tbO2cc= Subject key identifier: B1:61:78:40:5C:BA:AB:57:A9:3A:3A:2F:D3:76:DE:7B:09:7D:E9:E3 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 70D57763A0EBF0F39E98C3CC89AB52AB5FA4EF81 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/C68BD236E3DFD509D4B890586DD69D51D842F7D50AA3355A5F94235EE884061D/0/B16178405CBAAB57A93A3A2FD376DE7B097DE9E3.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/C68BD236E3DFD509D4B890586DD69D51D842F7D50AA3355A5F94235EE884061D/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 15 Jul 2026 23:10:01 +0000 Certificate not after: Wed 14 Jul 2027 23:15:01 +0000 Subordinate resources: AS: 28420 IP: 45.7.28.0/22 IP: 2806:2e3::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 28 Jul 2026 01:13:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:d5:77:63:a0:eb:f0:f3:9e:98:c3:cc:89:ab:52:ab:5f:a4:ef:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jul 15 23:10:01 2026 GMT Not After : Jul 14 23:15:01 2027 GMT Subject: CN=B16178405CBAAB57A93A3A2FD376DE7B097DE9E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:b5:8e:b0:de:96:50:92:93:3a:f5:e8:67:0c: 32:c1:72:33:0d:c4:a3:ea:6a:7d:01:89:64:be:37: 99:e9:f8:a1:f0:fb:4a:ee:63:26:4a:8a:d1:7e:5d: 6c:71:a3:0f:97:4d:b2:16:73:77:e4:78:f9:47:e8: c3:02:46:41:d5:28:be:83:29:34:b7:16:f4:ed:f0: be:28:6e:fc:5b:b5:46:23:68:57:b1:bb:0a:21:58: 79:34:e3:18:a3:26:e7:bd:5c:4b:19:a8:62:cf:22: 26:3a:73:ac:e0:32:15:29:17:3c:47:4a:e3:e9:1c: 8f:97:05:8e:bd:72:1e:83:4e:4a:1c:a4:e3:4c:0a: 5a:e0:5b:9b:26:00:a6:d2:34:09:32:e9:21:9a:2e: 2b:87:a9:8d:ed:b8:8a:8b:be:b1:e2:e9:d0:7d:ee: 81:d6:97:cc:d3:26:34:36:24:2a:c5:37:65:79:9b: 32:bd:d4:aa:a1:c7:1b:78:f4:62:3d:6d:af:22:35: 98:60:ea:61:cd:e7:b4:41:58:76:f6:d5:90:67:91: 2a:9d:f2:48:6e:79:23:db:48:11:6c:98:75:a3:3e: 93:b2:ba:c6:c4:7f:b6:2e:e1:05:6a:8d:91:6d:29: fa:db:46:da:1d:73:cb:a0:ec:6a:63:6d:c0:c4:15: 23:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B1:61:78:40:5C:BA:AB:57:A9:3A:3A:2F:D3:76:DE:7B:09:7D:E9:E3 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/C68BD236E3DFD509D4B890586DD69D51D842F7D50AA3355A5F94235EE884061D/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/C68BD236E3DFD509D4B890586DD69D51D842F7D50AA3355A5F94235EE884061D/0/B16178405CBAAB57A93A3A2FD376DE7B097DE9E3.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.7.28.0/22 IPv6: 2806:2e3::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28420 Signature Algorithm: sha256WithRSAEncryption 00:1a:d7:7b:81:ff:ee:a3:34:80:b2:d1:0e:ca:68:4a:37:1e: bb:5a:cb:db:b5:af:57:31:b6:3a:1b:7f:e7:db:a3:42:64:07: 2a:3a:22:12:27:4f:83:58:be:39:6c:c6:2d:fa:73:18:cf:8d: f5:00:40:ac:af:26:b3:84:2e:86:9c:1e:c4:5e:6e:45:06:ee: 68:7b:61:24:60:27:7e:ec:65:13:25:3d:a0:f9:f8:47:a5:49: 76:95:c9:d5:6f:51:69:47:8e:75:ce:4b:c2:c7:78:21:ef:09: 28:e8:44:1c:df:c5:b6:cb:a4:01:c2:46:46:5f:fb:f5:41:d7: b6:a5:fd:09:20:8f:2a:bb:65:76:f7:be:37:49:24:65:69:be: ea:98:a4:08:53:d5:eb:03:de:21:73:25:89:3a:94:ff:f7:dd: 5e:06:ef:b2:30:23:2a:d2:39:30:00:2d:f4:6d:56:0a:d0:2c: 71:46:1f:94:2a:d1:0e:c9:84:09:6d:ff:e1:20:4f:60:22:81: 19:e7:77:ab:55:1d:70:e5:d7:ea:62:72:4f:8b:2e:b4:fe:80: b7:0f:27:fd:df:f2:e4:c9:55:ec:30:5e:0b:e9:d2:8b:fe:63: c9:75:ae:b0:0d:5a:19:24:b6:39:f6:d0:d7:fe:bf:ce:ae:fb: b0:0c:5f:8f -----BEGIN CERTIFICATE----- MIIGpDCCBYygAwIBAgIUcNV3Y6Dr8POemMPMiatSq1+k74EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjA3MTUyMzEwMDFaFw0yNzA3MTQyMzE1MDFaMDMxMTAvBgNV BAMTKEIxNjE3ODQwNUNCQUFCNTdBOTNBM0EyRkQzNzZERTdCMDk3REU5RTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCctY6w3pZQkpM69ehnDDLBcjMN xKPqan0BiWS+N5np+KHw+0ruYyZKitF+XWxxow+XTbIWc3fkePlH6MMCRkHVKL6D KTS3FvTt8L4obvxbtUYjaFexuwohWHk04xijJue9XEsZqGLPIiY6c6zgMhUpFzxH SuPpHI+XBY69ch6DTkocpONMClrgW5smAKbSNAky6SGaLiuHqY3tuIqLvrHi6dB9 7oHWl8zTJjQ2JCrFN2V5mzK91Kqhxxt49GI9ba8iNZhg6mHN57RBWHb21ZBnkSqd 8khueSPbSBFsmHWjPpOyusbEf7Yu4QVqjZFtKfrbRtodc8ug7GpjbcDEFSNpAgMB AAGjggOuMIIDqjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSxYXhAXLqrV6k6 Oi/Tdt57CX3p4zAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQzY4QkQyMzZFM0RGRDUwOUQ0Qjg5MDU4 NkRENjlENTFEODQyRjdENTBBQTMzNTVBNUY5NDIzNUVFODg0MDYxRC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9DNjhCRDIzNkUzREZENTA5RDRCODkwNTg2REQ2OUQ1MUQ4NDJGN0Q1MEFB MzM1NUE1Rjk0MjM1RUU4ODQwNjFELzAvQjE2MTc4NDA1Q0JBQUI1N0E5M0EzQTJG RDM3NkRFN0IwOTdERTlFMy5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLQccMA0EAgAC MAcDBQAoBgLjMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAm8EMA0GCSqGSIb3DQEB CwUAA4IBAQAAGtd7gf/uozSAstEOymhKNx67Wsvbta9XMbY6G3/n26NCZAcqOiIS J0+DWL45bMYt+nMYz431AECsryazhC6GnB7EXm5FBu5oe2EkYCd+7GUTJT2g+fhH pUl2lcnVb1FpR451zkvCx3gh7wko6EQc38W2y6QBwkZGX/v1Qde2pf0JII8qu2V2 9743SSRlab7qmKQIU9XrA94hcyWJOpT/991eBu+yMCMq0jkwAC30bVYK0CxxRh+U KtEOyYQJbf/hIE9gIoEZ53erVR1w5dfqYnJPiy60/oC3Dyf93/LkyVXsMF4L6dKL /mPJda6wDVoZJLY59tDX/r/OrvuwDF+P -----END CERTIFICATE-----Generated at Fri Jul 24 14:08:58 2026 by rpki-client