$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D45B9E5913265B79B2EDCFC2150D0F2151B7F4DB.cer File: D45B9E5913265B79B2EDCFC2150D0F2151B7F4DB.cer (raw, json) Hash identifier: GV4u4hwpYqjjJZkXq8e6Mk6OIrLHRhf2xjDF3EXZNpc= Subject key identifier: D4:5B:9E:59:13:26:5B:79:B2:ED:CF:C2:15:0D:0F:21:51:B7:F4:DB Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 6CFA02A4C094E6B4CDA80682F66875562BAC1088 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/754328579E16B3B1149189D751FA63FC76EF2353548AE4844C3134767333B5C9/0/D45B9E5913265B79B2EDCFC2150D0F2151B7F4DB.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/754328579E16B3B1149189D751FA63FC76EF2353548AE4844C3134767333B5C9/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Mon 11 May 2026 20:20:01 +0000 Certificate not after: Mon 10 May 2027 20:25:01 +0000 Subordinate resources: AS: 274227 IP: 2803:5bd0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 16 May 2026 11:23:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:fa:02:a4:c0:94:e6:b4:cd:a8:06:82:f6:68:75:56:2b:ac:10:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: May 11 20:20:01 2026 GMT Not After : May 10 20:25:01 2027 GMT Subject: CN=D45B9E5913265B79B2EDCFC2150D0F2151B7F4DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:77:6e:2e:84:25:f9:bd:70:9f:5b:b3:3b:f1: 8d:1d:6e:8c:ab:19:56:38:af:3b:f8:b4:78:75:30: 55:c0:89:28:72:2e:d4:55:67:65:a6:73:9e:95:56: 9d:56:9f:88:24:79:a6:62:ee:2c:99:1e:53:3e:1b: b9:a9:18:c1:95:67:85:7a:f0:d7:d1:d3:9f:0d:fc: c5:e6:4a:e0:e2:b3:d8:38:8b:90:08:c7:2c:cc:68: 92:eb:16:66:6f:68:f0:a7:72:0c:47:72:0c:85:2f: ee:7e:20:0d:c7:22:f4:00:7a:8f:0d:2a:2e:78:ec: 3a:47:c4:fa:fd:3b:33:58:49:db:0f:2e:e1:9e:b2: 03:7b:b7:75:2a:b4:ba:4f:00:f2:53:be:96:9c:2f: 2e:d1:ab:d9:97:75:11:c4:a8:f3:b9:1f:9b:c5:be: 63:42:4e:e7:35:1f:29:01:02:5c:97:2c:40:3f:12: ca:13:0b:42:64:24:41:f4:a4:99:68:6a:99:09:4a: 58:f1:ec:eb:d7:a2:9d:4f:6d:af:15:a4:31:c8:8a: 33:88:91:d7:36:bb:4a:08:cd:46:76:1f:c3:5b:d4: fa:fd:c4:01:a9:cd:be:48:b2:40:72:61:4d:e4:5e: 01:8b:bd:72:f9:1f:89:25:87:db:b4:7f:44:ee:0a: d3:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D4:5B:9E:59:13:26:5B:79:B2:ED:CF:C2:15:0D:0F:21:51:B7:F4:DB X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/754328579E16B3B1149189D751FA63FC76EF2353548AE4844C3134767333B5C9/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/754328579E16B3B1149189D751FA63FC76EF2353548AE4844C3134767333B5C9/0/D45B9E5913265B79B2EDCFC2150D0F2151B7F4DB.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:5bd0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 274227 Signature Algorithm: sha256WithRSAEncryption 05:a0:ad:c7:da:78:b5:09:66:b9:ad:a8:72:69:b9:71:d7:a9: ba:df:01:d3:ab:ee:9c:2a:cd:30:b7:eb:85:5b:96:29:f3:6e: f1:63:c4:66:ed:59:9d:d0:8f:75:28:0e:73:d3:aa:98:1d:2b: 6a:3a:47:c5:7f:9d:55:fb:13:94:b1:60:64:b2:26:83:62:8b: 42:1a:e3:1b:32:d7:67:af:b4:40:d8:81:03:6e:16:a5:06:45: a2:be:2c:7f:ec:38:0a:b5:f0:a9:54:69:f4:71:fb:5e:5e:2c: 9f:28:98:7d:5a:5c:9f:33:6f:86:76:99:c7:5a:ec:35:93:d7: b1:b6:d2:33:34:01:c4:ee:d5:f9:9b:ea:d6:c0:03:a0:45:e8: 42:74:74:eb:45:d6:87:92:39:c1:5d:a5:b1:ab:a0:ba:d4:41: 18:9f:e6:86:f6:a0:dc:69:a8:90:f5:67:d4:0a:c0:83:f2:b2: 81:22:ea:0a:54:34:86:c7:25:e3:98:ca:1a:80:ca:5f:b3:db: fa:d9:35:98:a0:a3:d0:91:d4:68:72:92:02:d0:34:89:1c:74: c7:a0:b2:5f:cc:57:c4:64:bf:b2:76:ef:b6:94:6f:71:84:e9: c0:b7:68:9c:3c:7d:a3:db:13:83:67:88:c6:d7:59:03:76:f3: 2d:65:3b:8b -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUbPoCpMCU5rTNqAaC9mh1ViusEIgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjA1MTEyMDIwMDFaFw0yNzA1MTAyMDI1MDFaMDMxMTAvBgNV BAMTKEQ0NUI5RTU5MTMyNjVCNzlCMkVEQ0ZDMjE1MEQwRjIxNTFCN0Y0REIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYd24uhCX5vXCfW7M78Y0dboyr GVY4rzv4tHh1MFXAiShyLtRVZ2Wmc56VVp1Wn4gkeaZi7iyZHlM+G7mpGMGVZ4V6 8NfR058N/MXmSuDis9g4i5AIxyzMaJLrFmZvaPCncgxHcgyFL+5+IA3HIvQAeo8N Ki547DpHxPr9OzNYSdsPLuGesgN7t3UqtLpPAPJTvpacLy7Rq9mXdRHEqPO5H5vF vmNCTuc1HykBAlyXLEA/EsoTC0JkJEH0pJloapkJSljx7OvXop1Pba8VpDHIijOI kdc2u0oIzUZ2H8Nb1Pr9xAGpzb5IskByYU3kXgGLvXL5H4klh9u0f0TuCtNHAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTUW55ZEyZbebLt z8IVDQ8hUbf02zAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNzU0MzI4NTc5RTE2QjNCMTE0OTE4OUQ3 NTFGQTYzRkM3NkVGMjM1MzU0OEFFNDg0NEMzMTM0NzY3MzMzQjVDOS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy83NTQzMjg1NzlFMTZCM0IxMTQ5MTg5RDc1MUZBNjNGQzc2RUYyMzUzNTQ4 QUU0ODQ0QzMxMzQ3NjczMzNCNUM5LzAvRDQ1QjlFNTkxMzI2NUI3OUIyRURDRkMy MTUwRDBGMjE1MUI3RjREQi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKANb0DAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMELzMwDQYJKoZIhvcNAQELBQADggEBAAWgrcfa eLUJZrmtqHJpuXHXqbrfAdOr7pwqzTC364VblinzbvFjxGbtWZ3Qj3UoDnPTqpgd K2o6R8V/nVX7E5SxYGSyJoNii0Ia4xsy12evtEDYgQNuFqUGRaK+LH/sOAq18KlU afRx+15eLJ8omH1aXJ8zb4Z2mcda7DWT17G20jM0AcTu1fmb6tbAA6BF6EJ0dOtF 1oeSOcFdpbGroLrUQRif5ob2oNxpqJD1Z9QKwIPysoEi6gpUNIbHJeOYyhqAyl+z 2/rZNZigo9CR1GhykgLQNIkcdMegsl/MV8Rkv7J277aUb3GE6cC3aJw8faPbE4Nn iMbXWQN28y1lO4s= -----END CERTIFICATE-----Generated at Wed May 13 12:39:54 2026 by rpki-client