$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F96423B779A5F1FE37297ADC4D1568C15225A2F1.cer File: F96423B779A5F1FE37297ADC4D1568C15225A2F1.cer (raw, json) Hash identifier: NEo1DMn2c7Tr2PgYGLeTkuJFncRR1NfbuGsR//10fUM= Subject key identifier: F9:64:23:B7:79:A5:F1:FE:37:29:7A:DC:4D:15:68:C1:52:25:A2:F1 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 1334BB7A36B13E4CAFD746E4E41D902C449C5A18 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/AB82ACCD88AEAB473B35EB93CA2D63E8708ECAFFBA07F5D19BCA9F8A3FF2A4B8/0/F96423B779A5F1FE37297ADC4D1568C15225A2F1.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/AB82ACCD88AEAB473B35EB93CA2D63E8708ECAFFBA07F5D19BCA9F8A3FF2A4B8/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 26 Aug 2026 12:45:03 +0000 Certificate not after: Wed 25 Aug 2027 12:50:03 +0000 Subordinate resources: AS: 21756 IP: 200.1.117.0/24 IP: 200.9.229.0/24 IP: 2801:188::/40 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 09 Sep 2026 22:12:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:34:bb:7a:36:b1:3e:4c:af:d7:46:e4:e4:1d:90:2c:44:9c:5a:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Aug 26 12:45:03 2026 GMT Not After : Aug 25 12:50:03 2027 GMT Subject: CN=F96423B779A5F1FE37297ADC4D1568C15225A2F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:da:76:9b:71:fc:f1:b7:37:34:fa:40:c6:7d: 56:c2:4f:90:e2:a4:02:73:bc:ef:cf:31:28:08:f8: cc:20:96:ce:33:cb:68:01:c6:9c:a7:57:2b:f3:e6: 74:47:30:45:79:36:98:f6:df:2e:94:c6:2a:8d:c5: d8:81:e2:23:b2:39:0f:bc:31:02:fb:07:0e:d6:1f: 10:05:33:15:8e:9c:e6:15:23:96:61:8e:e3:99:1e: 1a:6f:d9:5b:55:21:ee:8b:2b:73:92:54:79:b7:02: 23:4b:af:ca:d8:6d:8b:a7:ec:3a:30:5b:34:fb:65: 9e:40:ca:f3:14:76:ce:e4:b2:72:8c:dc:8c:87:bd: 09:f7:ce:8c:3b:23:3a:0d:47:0e:e7:33:1f:04:93: bb:db:ab:74:4c:70:2e:b5:3d:59:4e:ae:de:e6:7f: 89:0a:f7:dd:14:34:8b:90:b3:74:25:c4:87:e3:d3: 7a:82:5c:61:d1:8a:39:ac:4b:20:81:51:54:c2:49: 53:43:57:98:2e:b2:ad:8c:18:a6:4e:75:13:53:4b: 4a:43:d5:18:25:72:05:c5:65:fe:2d:0c:86:c3:50: e3:21:ac:dd:9a:c5:d5:ed:28:a2:5c:f0:b4:16:29: b4:24:dc:dd:f8:8f:5c:ab:38:56:7e:1b:1b:6f:fc: 71:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F9:64:23:B7:79:A5:F1:FE:37:29:7A:DC:4D:15:68:C1:52:25:A2:F1 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/AB82ACCD88AEAB473B35EB93CA2D63E8708ECAFFBA07F5D19BCA9F8A3FF2A4B8/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/AB82ACCD88AEAB473B35EB93CA2D63E8708ECAFFBA07F5D19BCA9F8A3FF2A4B8/0/F96423B779A5F1FE37297ADC4D1568C15225A2F1.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.1.117.0/24 200.9.229.0/24 IPv6: 2801:188::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 21756 Signature Algorithm: sha256WithRSAEncryption 20:ea:2a:75:a7:67:e7:57:d9:6b:91:59:e9:85:73:92:b1:a0: 8b:b7:bc:d3:5f:c5:02:c7:49:2a:a8:d5:fc:20:cd:23:0e:1c: 5c:91:c8:70:21:b5:38:89:19:8c:f2:3b:70:c0:33:53:4e:81: cb:89:fc:01:4f:6a:50:fb:1e:34:54:fa:ec:fd:32:9a:f4:0f: 34:f0:40:5f:1a:15:2f:56:ec:6d:f7:3a:7b:00:05:0b:1c:e9: da:f7:42:f5:df:ae:c7:04:35:4c:66:3a:d1:20:85:d9:24:dc: 89:cf:6f:90:f7:c1:19:f0:0d:80:7c:1c:1b:fe:c2:a3:a4:d5: 0c:fa:ef:74:2e:a6:62:b5:5c:fa:9b:4c:de:5a:64:89:63:55: 9c:8a:0a:6b:57:c6:99:98:1b:c5:a3:e8:27:6d:1e:74:e3:b7: ee:98:b9:67:5a:c1:37:05:d1:b3:28:24:bb:b7:9f:a8:98:92: 61:16:de:1f:c7:b1:03:84:89:4d:52:78:f2:e3:73:24:0f:35: 36:74:69:80:00:bc:78:19:e5:3e:47:85:a3:39:5e:a9:ee:e5: 7b:3b:88:0e:1c:4f:2d:52:90:ea:05:39:c4:61:aa:d7:96:a0: 97:97:32:b5:1e:fa:e1:d6:f3:76:0d:7c:9b:02:93:6c:17:c1: ab:cd:f4:3c -----BEGIN CERTIFICATE----- MIIGqzCCBZOgAwIBAgIUEzS7ejaxPkyv10bk5B2QLEScWhgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjA4MjYxMjQ1MDNaFw0yNzA4MjUxMjUwMDNaMDMxMTAvBgNV BAMTKEY5NjQyM0I3NzlBNUYxRkUzNzI5N0FEQzREMTU2OEMxNTIyNUEyRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu2nabcfzxtzc0+kDGfVbCT5Di pAJzvO/PMSgI+Mwgls4zy2gBxpynVyvz5nRHMEV5Npj23y6UxiqNxdiB4iOyOQ+8 MQL7Bw7WHxAFMxWOnOYVI5ZhjuOZHhpv2VtVIe6LK3OSVHm3AiNLr8rYbYun7Dow WzT7ZZ5AyvMUds7ksnKM3IyHvQn3zow7IzoNRw7nMx8Ek7vbq3RMcC61PVlOrt7m f4kK990UNIuQs3QlxIfj03qCXGHRijmsSyCBUVTCSVNDV5gusq2MGKZOdRNTS0pD 1RglcgXFZf4tDIbDUOMhrN2axdXtKKJc8LQWKbQk3N34j1yrOFZ+Gxtv/HELAgMB AAGjggO1MIIDsTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT5ZCO3eaXx/jcp etxNFWjBUiWi8TAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQUI4MkFDQ0Q4OEFFQUI0NzNCMzVFQjkz Q0EyRDYzRTg3MDhFQ0FGRkJBMDdGNUQxOUJDQTlGOEEzRkYyQTRCOC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9BQjgyQUNDRDg4QUVBQjQ3M0IzNUVCOTNDQTJENjNFODcwOEVDQUZGQkEw N0Y1RDE5QkNBOUY4QTNGRjJBNEI4LzAvRjk2NDIzQjc3OUE1RjFGRTM3Mjk3QURD NEQxNTY4QzE1MjI1QTJGMS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQAyAF1AwQAyAnl MA4EAgACMAgDBgAoAQGIADAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgJU/DANBgkq hkiG9w0BAQsFAAOCAQEAIOoqdadn51fZa5FZ6YVzkrGgi7e801/FAsdJKqjV/CDN Iw4cXJHIcCG1OIkZjPI7cMAzU06By4n8AU9qUPseNFT67P0ymvQPNPBAXxoVL1bs bfc6ewAFCxzp2vdC9d+uxwQ1TGY60SCF2STcic9vkPfBGfANgHwcG/7Co6TVDPrv dC6mYrVc+ptM3lpkiWNVnIoKa1fGmZgbxaPoJ20edOO37pi5Z1rBNwXRsygku7ef qJiSYRbeH8exA4SJTVJ48uNzJA81NnRpgAC8eBnlPkeFozleqe7lezuIDhxPLVKQ 6gU5xGGq15agl5cytR764dbzdg18mwKTbBfBq830PA== -----END CERTIFICATE-----Generated at Sat Sep 5 13:24:19 2026 by rpki-client