$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C0D0F07C23255F587127FF3F4EB29D35CE6B9EDE.cer File: C0D0F07C23255F587127FF3F4EB29D35CE6B9EDE.cer (raw, json) Hash identifier: mwykcBavWHKPnYSgnOPoGrYKMHHI+ucI+7LmnIfx9iU= Subject key identifier: C0:D0:F0:7C:23:25:5F:58:71:27:FF:3F:4E:B2:9D:35:CE:6B:9E:DE Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 15AE7EC876737A19F418BC067D9E8E0983AE7222 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/6BE41C343FE3CD4BDF24B0404A4DAB741582B972620E6767D0615BC27F0B5DA6/0/C0D0F07C23255F587127FF3F4EB29D35CE6B9EDE.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/6BE41C343FE3CD4BDF24B0404A4DAB741582B972620E6767D0615BC27F0B5DA6/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 07 Jul 2026 14:20:01 +0000 Certificate not after: Tue 06 Jul 2027 14:25:01 +0000 Subordinate resources: AS: 27686 IP: 2800:a000::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 25 Jul 2026 05:19:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:ae:7e:c8:76:73:7a:19:f4:18:bc:06:7d:9e:8e:09:83:ae:72:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jul 7 14:20:01 2026 GMT Not After : Jul 6 14:25:01 2027 GMT Subject: CN=C0D0F07C23255F587127FF3F4EB29D35CE6B9EDE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2a:d6:6f:e4:91:51:da:6f:7a:b6:3c:52:63: de:2a:c4:d0:c0:04:f3:39:e2:e7:8d:b2:64:9c:bb: 0e:c8:a5:c9:95:0c:0b:36:73:35:dd:d0:a5:df:01: cd:8e:af:37:ea:3c:9b:d7:9f:54:12:67:09:78:eb: d5:75:84:6d:db:75:de:0c:b6:8c:cf:58:0a:bd:76: 0c:14:92:ca:57:a1:e0:c8:56:07:65:d9:5d:01:a9: 6e:4b:a8:27:55:39:fe:ee:a9:24:8b:17:8e:24:04: 53:26:cd:b8:8a:5e:84:50:28:35:ff:91:a1:a9:49: 2f:1d:e3:98:ba:8b:28:ae:2d:64:4a:90:cb:70:7f: 50:af:22:c0:44:a8:b6:58:d9:75:27:81:fc:4b:05: cd:19:06:67:3a:43:5a:a7:5e:70:cd:95:d0:47:03: 98:e0:90:76:d5:d7:7a:4e:20:7a:23:0e:82:30:60: e9:84:14:8b:23:95:24:02:ba:ae:62:34:5b:ce:c4: cf:b7:b2:14:2d:99:31:10:5c:c3:65:f0:30:e5:a2: 2c:91:a2:f4:c0:8a:75:bc:4f:7c:0b:b4:d6:77:ec: b7:2d:33:a4:88:fe:6c:3f:52:d8:7a:8e:15:45:39: 42:b5:d6:43:77:27:f8:98:13:a1:c8:23:5e:b0:9f: fe:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C0:D0:F0:7C:23:25:5F:58:71:27:FF:3F:4E:B2:9D:35:CE:6B:9E:DE X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6BE41C343FE3CD4BDF24B0404A4DAB741582B972620E6767D0615BC27F0B5DA6/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6BE41C343FE3CD4BDF24B0404A4DAB741582B972620E6767D0615BC27F0B5DA6/0/C0D0F07C23255F587127FF3F4EB29D35CE6B9EDE.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2800:a000::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 27686 Signature Algorithm: sha256WithRSAEncryption 7f:e3:39:54:a8:be:bb:41:14:51:ab:72:ff:21:2a:43:06:b7: 50:26:44:79:9d:de:95:fe:8f:96:48:80:10:d4:b7:93:93:2f: 62:10:38:dc:76:ee:21:9d:6a:2b:5f:8b:e5:20:61:b1:21:db: e0:a8:fb:26:ac:54:b3:67:0f:f9:1c:b4:d5:5b:00:d7:7f:b8: b9:b0:d1:81:99:5d:f2:2f:93:1c:e3:33:04:8b:de:07:ce:63: 52:db:5b:a9:65:a2:28:0d:03:59:2a:af:2b:46:b2:37:ae:f9: 0d:46:36:f3:b8:34:88:b3:0e:f3:14:9c:cd:8f:19:13:4e:ed: 46:4f:cd:fe:81:6f:db:01:ef:ce:f7:32:60:60:4e:d6:15:05: f6:bd:22:c2:52:59:95:6a:e7:05:e4:68:cf:12:c3:30:96:35: 8f:05:fd:e8:a5:e1:12:ab:2d:a2:a5:02:bb:f3:93:25:1e:91: b6:13:8c:07:ba:2c:7d:b2:d5:a5:bb:46:ec:92:5d:b7:a9:a8: 09:e5:ef:07:76:4d:96:ad:01:bd:59:95:bd:60:90:d9:3e:e7: c3:58:74:63:cc:e7:23:a7:d8:0f:2a:c0:ff:44:ff:26:d7:27: 03:2f:69:07:d6:7e:03:59:f5:36:0f:58:30:cf:23:b3:8b:91: a6:b7:b0:18 -----BEGIN CERTIFICATE----- MIIGljCCBX6gAwIBAgIUFa5+yHZzehn0GLwGfZ6OCYOuciIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjA3MDcxNDIwMDFaFw0yNzA3MDYxNDI1MDFaMDMxMTAvBgNV BAMTKEMwRDBGMDdDMjMyNTVGNTg3MTI3RkYzRjRFQjI5RDM1Q0U2QjlFREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzKtZv5JFR2m96tjxSY94qxNDA BPM54ueNsmScuw7IpcmVDAs2czXd0KXfAc2OrzfqPJvXn1QSZwl469V1hG3bdd4M tozPWAq9dgwUkspXoeDIVgdl2V0BqW5LqCdVOf7uqSSLF44kBFMmzbiKXoRQKDX/ kaGpSS8d45i6iyiuLWRKkMtwf1CvIsBEqLZY2XUngfxLBc0ZBmc6Q1qnXnDNldBH A5jgkHbV13pOIHojDoIwYOmEFIsjlSQCuq5iNFvOxM+3shQtmTEQXMNl8DDloiyR ovTAinW8T3wLtNZ37LctM6SI/mw/Uth6jhVFOUK11kN3J/iYE6HII16wn/5jAgMB AAGjggOgMIIDnDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTA0PB8IyVfWHEn /z9Osp01zmue3jAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNkJFNDFDMzQzRkUzQ0Q0QkRGMjRCMDQw NEE0REFCNzQxNTgyQjk3MjYyMEU2NzY3RDA2MTVCQzI3RjBCNURBNi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy82QkU0MUMzNDNGRTNDRDRCREYyNEIwNDA0QTREQUI3NDE1ODJCOTcyNjIw RTY3NjdEMDYxNUJDMjdGMEI1REE2LzAvQzBEMEYwN0MyMzI1NUY1ODcxMjdGRjNG NEVCMjlEMzVDRTZCOUVERS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKACgADAZBggr BgEFBQcBCAEB/wQKMAigBjAEAgJsJjANBgkqhkiG9w0BAQsFAAOCAQEAf+M5VKi+ u0EUUaty/yEqQwa3UCZEeZ3elf6PlkiAENS3k5MvYhA43HbuIZ1qK1+L5SBhsSHb 4Kj7JqxUs2cP+Ry01VsA13+4ubDRgZld8i+THOMzBIveB85jUttbqWWiKA0DWSqv K0ayN675DUY287g0iLMO8xSczY8ZE07tRk/N/oFv2wHvzvcyYGBO1hUF9r0iwlJZ lWrnBeRozxLDMJY1jwX96KXhEqstoqUCu/OTJR6RthOMB7osfbLVpbtG7JJdt6mo CeXvB3ZNlq0BvVmVvWCQ2T7nw1h0Y8znI6fYDyrA/0T/JtcnAy9pB9Z+A1n1Ng9Y MM8js4uRprewGA== -----END CERTIFICATE-----Generated at Tue Jul 21 11:35:16 2026 by rpki-client