$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F24481CDEF53A8F81B5BE8FDEA43EA96591CB99E.cer File: F24481CDEF53A8F81B5BE8FDEA43EA96591CB99E.cer (raw, json) Hash identifier: cfgtj07/2JsPCvFVSxGsJE+jCxRIqVMWow4HVX39daY= Subject key identifier: F2:44:81:CD:EF:53:A8:F8:1B:5B:E8:FD:EA:43:EA:96:59:1C:B9:9E Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 11A9A224C465BA00C09B59BA2ABF6B718AF60C0F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/DDDAC44E65086C7403E579BCB0D76B6B12A446BC801F4A2E95C1A08ACCA4F64F/0/F24481CDEF53A8F81B5BE8FDEA43EA96591CB99E.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/DDDAC44E65086C7403E579BCB0D76B6B12A446BC801F4A2E95C1A08ACCA4F64F/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 23 Sep 2026 04:00:01 +0000 Certificate not after: Wed 22 Sep 2027 04:05:01 +0000 Subordinate resources: AS: 275015 IP: 2803:cb30::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 01 Oct 2026 19:56:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:a9:a2:24:c4:65:ba:00:c0:9b:59:ba:2a:bf:6b:71:8a:f6:0c:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Sep 23 04:00:01 2026 GMT Not After : Sep 22 04:05:01 2027 GMT Subject: CN=F24481CDEF53A8F81B5BE8FDEA43EA96591CB99E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ce:2b:83:c4:ed:b7:cf:16:a6:eb:8b:b4:06: 77:9a:7a:98:72:53:0e:b9:09:a2:33:a2:ef:4a:5d: a2:10:7d:6b:ac:34:a2:67:73:0d:bc:cf:e7:7f:d0: ee:68:18:65:f0:45:1a:48:1d:72:46:7d:db:05:41: 6f:88:e2:be:42:5a:11:a2:04:b7:eb:eb:d8:88:00: f3:52:b0:c2:85:36:54:02:1d:5e:4c:53:b7:63:92: 26:5b:e2:77:1f:0f:92:4b:32:78:2e:46:ca:a1:83: e8:fc:15:d1:f9:ad:fe:9d:e1:dd:d1:ec:f3:b8:f6: ea:5e:bf:48:84:3d:4e:72:0d:de:5d:11:2f:e9:9c: 8c:50:93:31:bc:10:da:eb:63:38:3d:d0:64:bf:a9: f1:85:41:a9:d1:7b:9b:fb:85:a6:dd:35:59:b8:1c: 61:1f:43:c5:7e:48:9f:9f:eb:ee:7f:e4:8d:1f:c6: 98:11:7d:3c:8a:0f:cf:ec:ea:26:8f:0f:0b:63:6d: 08:5a:3f:6e:06:20:60:b3:48:a1:03:35:e9:40:16: b5:09:57:e3:01:a8:ca:14:dd:85:4d:49:af:6b:29: 80:73:28:95:9a:72:5b:ff:04:ee:f8:28:80:03:ed: 11:f0:93:e3:9e:3b:5b:15:d8:4a:b4:75:71:af:08: df:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F2:44:81:CD:EF:53:A8:F8:1B:5B:E8:FD:EA:43:EA:96:59:1C:B9:9E X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/DDDAC44E65086C7403E579BCB0D76B6B12A446BC801F4A2E95C1A08ACCA4F64F/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/DDDAC44E65086C7403E579BCB0D76B6B12A446BC801F4A2E95C1A08ACCA4F64F/0/F24481CDEF53A8F81B5BE8FDEA43EA96591CB99E.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:cb30::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 275015 Signature Algorithm: sha256WithRSAEncryption 23:c3:2e:6d:21:59:47:b1:75:7c:d0:0e:a5:ff:49:f4:c4:27: 52:af:9c:24:02:f6:51:63:19:81:c2:a4:32:73:f9:e3:3d:da: f5:22:13:06:23:52:0b:af:03:a4:39:6f:3b:39:e2:31:2c:67: 70:28:61:0b:82:20:4d:07:d3:54:f3:ee:e5:74:8c:37:b8:90: 61:a8:dc:dd:cf:fb:64:31:6a:4a:54:c7:00:53:3f:48:f1:85: 77:56:3a:f9:ae:a6:4c:84:5d:f6:b8:ba:75:ef:ee:fc:41:ad: 9a:13:a3:dd:b3:7c:d3:43:bc:2d:e9:e8:b8:35:20:12:be:45: 3b:bc:0e:aa:17:a6:2f:16:58:50:f3:3f:99:fb:da:9b:60:57: 38:4d:dc:52:35:d6:38:e7:ab:dd:09:91:cf:23:ef:45:91:2c: c8:6a:f9:df:3e:d0:57:2d:bf:3d:ab:ab:ad:94:c7:7c:3d:3e: 01:f7:93:1d:7f:ae:72:5e:d3:b3:b7:dd:3d:77:d3:bc:82:15: 98:1a:67:38:aa:a8:c7:7a:91:e8:87:2b:58:e1:ad:9a:02:5b: 37:36:4c:68:16:ac:ba:ea:ee:9b:ea:d2:81:c1:01:92:35:1c: c0:55:cd:7c:64:18:87:bb:c4:b7:e9:3d:3b:ea:30:2d:b6:1b: 0f:58:51:90 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUEamiJMRlugDAm1m6Kr9rcYr2DA8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjA5MjMwNDAwMDFaFw0yNzA5MjIwNDA1MDFaMDMxMTAvBgNV BAMTKEYyNDQ4MUNERUY1M0E4RjgxQjVCRThGREVBNDNFQTk2NTkxQ0I5OUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYziuDxO23zxam64u0Bneaephy Uw65CaIzou9KXaIQfWusNKJncw28z+d/0O5oGGXwRRpIHXJGfdsFQW+I4r5CWhGi BLfr69iIAPNSsMKFNlQCHV5MU7djkiZb4ncfD5JLMnguRsqhg+j8FdH5rf6d4d3R 7PO49upev0iEPU5yDd5dES/pnIxQkzG8ENrrYzg90GS/qfGFQanRe5v7habdNVm4 HGEfQ8V+SJ+f6+5/5I0fxpgRfTyKD8/s6iaPDwtjbQhaP24GIGCzSKEDNelAFrUJ V+MBqMoU3YVNSa9rKYBzKJWaclv/BO74KIAD7RHwk+OeO1sV2Eq0dXGvCN/fAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTyRIHN71Oo+Btb 6P3qQ+qWWRy5njAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvREREQUM0NEU2NTA4NkM3NDAzRTU3OUJD QjBENzZCNkIxMkE0NDZCQzgwMUY0QTJFOTVDMUEwOEFDQ0E0RjY0Ri8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9ERERBQzQ0RTY1MDg2Qzc0MDNFNTc5QkNCMEQ3NkI2QjEyQTQ0NkJDODAx RjRBMkU5NUMxQTA4QUNDQTRGNjRGLzAvRjI0NDgxQ0RFRjUzQThGODFCNUJFOEZE RUE0M0VBOTY1OTFDQjk5RS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAPLMDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEMkcwDQYJKoZIhvcNAQELBQADggEBACPDLm0h WUexdXzQDqX/SfTEJ1KvnCQC9lFjGYHCpDJz+eM92vUiEwYjUguvA6Q5bzs54jEs Z3AoYQuCIE0H01Tz7uV0jDe4kGGo3N3P+2QxakpUxwBTP0jxhXdWOvmupkyEXfa4 unXv7vxBrZoTo92zfNNDvC3p6Lg1IBK+RTu8DqoXpi8WWFDzP5n72ptgVzhN3FI1 1jjnq90Jkc8j70WRLMhq+d8+0Fctvz2rq62Ux3w9PgH3kx1/rnJe07O33T1307yC FZgaZziqqMd6keiHK1jhrZoCWzc2TGgWrLrq7pvq0oHBAZI1HMBVzXxkGIe7xLfp PTvqMC22Gw9YUZA= -----END CERTIFICATE-----Generated at Mon Sep 28 05:58:09 2026 by rpki-client