$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F999939EA7A7C95A2214DA0B4748120B3056374C.cer File: F999939EA7A7C95A2214DA0B4748120B3056374C.cer (raw, json) Hash identifier: E5so1e3tnZHoYnFCJ6VzxLxZZY+qbIZZNzMhX1G2TtA= Subject key identifier: F9:99:93:9E:A7:A7:C9:5A:22:14:DA:0B:47:48:12:0B:30:56:37:4C Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 0CE7CACEE7B25A0000B04871BD2834EFF9D7EB40 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/AF74B287C6B05C585887F6B9FA16839C5C64F2221C1B5920F723B91E55059390/0/F999939EA7A7C95A2214DA0B4748120B3056374C.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/AF74B287C6B05C585887F6B9FA16839C5C64F2221C1B5920F723B91E55059390/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Mon 06 Apr 2026 18:40:01 +0000 Certificate not after: Mon 05 Apr 2027 18:45:01 +0000 Subordinate resources: AS: 272872 IP: 2803:ca30::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 12 Apr 2026 05:52:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:e7:ca:ce:e7:b2:5a:00:00:b0:48:71:bd:28:34:ef:f9:d7:eb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Apr 6 18:40:01 2026 GMT Not After : Apr 5 18:45:01 2027 GMT Subject: CN=F999939EA7A7C95A2214DA0B4748120B3056374C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:14:87:71:b0:76:55:0b:c2:9a:3a:5a:a2:b5: 75:23:51:a4:3f:40:00:4a:e4:68:dd:73:ff:d5:11: 90:f2:69:24:ab:bf:aa:f0:ea:db:7d:56:9f:39:06: 7d:37:44:f2:e6:b1:2c:ad:63:40:28:4b:26:17:58: 0d:cb:15:37:a8:da:d9:84:ca:7a:96:2e:bb:58:c4: 13:99:ea:3d:26:aa:dd:a3:ab:80:ad:4f:1a:e6:28: d4:a6:04:b1:e2:f2:4b:97:7a:e7:36:6d:1f:4b:ca: 8c:b3:26:0e:c8:b4:fc:b1:3c:77:83:70:36:d1:86: d3:23:a0:96:fc:f8:06:27:64:41:56:e9:4d:64:b2: 91:59:97:ff:0a:8e:a9:ee:4c:39:4f:16:08:d5:90: 4c:b4:ed:10:38:69:99:62:86:08:0f:03:8a:9a:7c: 7a:b9:1b:a4:d4:24:9a:db:f0:aa:8e:c9:16:b6:df: 5b:09:5f:cb:b0:aa:82:bd:02:5a:7b:0e:3e:e3:ff: 1f:e5:30:cd:c5:d0:65:f5:55:e7:12:5b:0f:7d:04: 78:9b:43:61:13:72:20:dc:3a:ae:87:dc:bf:2f:26: aa:c5:f2:19:56:e3:f6:d4:77:54:58:1f:fe:ea:fe: 69:a2:12:e3:b5:02:36:fd:0d:4f:2d:f4:ef:11:49: 5b:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F9:99:93:9E:A7:A7:C9:5A:22:14:DA:0B:47:48:12:0B:30:56:37:4C X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/AF74B287C6B05C585887F6B9FA16839C5C64F2221C1B5920F723B91E55059390/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/AF74B287C6B05C585887F6B9FA16839C5C64F2221C1B5920F723B91E55059390/0/F999939EA7A7C95A2214DA0B4748120B3056374C.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:ca30::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 272872 Signature Algorithm: sha256WithRSAEncryption 46:f7:0b:7c:0b:32:c9:60:b7:c2:41:f3:36:e1:46:51:26:a4: e6:b0:fc:02:0b:95:70:71:2d:c6:90:4c:42:82:a1:40:64:53: 89:3c:66:83:33:59:fb:25:f2:70:c7:54:6d:70:51:2e:60:a0: 97:1d:26:eb:af:dd:79:e0:54:35:44:4c:0e:9e:71:55:a6:76: 1f:f5:6d:2b:a9:c4:2f:4c:98:4f:f0:00:ac:b2:38:13:d0:62: 1c:89:65:4d:8d:e8:bc:f4:64:8a:c6:61:09:c2:f2:20:6a:34: 59:52:c9:b3:7c:a3:7f:e9:ec:7d:49:41:72:62:b4:2b:00:f7: 36:5f:88:bc:ae:95:c1:e2:e1:43:eb:7c:59:79:03:df:82:7f: 04:bc:0b:66:8d:e4:d8:7c:6a:2c:b0:42:4c:66:02:d2:51:d3: 77:13:1d:c8:95:ef:12:ff:41:dd:45:44:39:4b:d0:a1:c9:9d: c4:86:22:b0:de:5a:50:4d:4d:ed:38:3b:ef:ef:7f:1b:b5:95: b9:57:16:b0:c5:9a:b3:d3:28:b2:63:18:3d:be:2a:74:ab:1f: 7e:f6:2c:8f:bf:3c:b6:b9:b2:75:cb:ff:16:86:d3:be:96:d8: 15:ea:c6:4b:16:c0:e3:aa:6b:c7:4b:68:60:2a:3f:0c:05:b2: 9d:13:e6:68 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUDOfKzueyWgAAsEhxvSg07/nX60AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjA0MDYxODQwMDFaFw0yNzA0MDUxODQ1MDFaMDMxMTAvBgNV BAMTKEY5OTk5MzlFQTdBN0M5NUEyMjE0REEwQjQ3NDgxMjBCMzA1NjM3NEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZFIdxsHZVC8KaOlqitXUjUaQ/ QABK5Gjdc//VEZDyaSSrv6rw6tt9Vp85Bn03RPLmsSytY0AoSyYXWA3LFTeo2tmE ynqWLrtYxBOZ6j0mqt2jq4CtTxrmKNSmBLHi8kuXeuc2bR9LyoyzJg7ItPyxPHeD cDbRhtMjoJb8+AYnZEFW6U1kspFZl/8KjqnuTDlPFgjVkEy07RA4aZlihggPA4qa fHq5G6TUJJrb8KqOyRa231sJX8uwqoK9Alp7Dj7j/x/lMM3F0GX1VecSWw99BHib Q2ETciDcOq6H3L8vJqrF8hlW4/bUd1RYH/7q/mmiEuO1Ajb9DU8t9O8RSVv/AgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT5mZOep6fJWiIU 2gtHSBILMFY3TDAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQUY3NEIyODdDNkIwNUM1ODU4ODdGNkI5 RkExNjgzOUM1QzY0RjIyMjFDMUI1OTIwRjcyM0I5MUU1NTA1OTM5MC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9BRjc0QjI4N0M2QjA1QzU4NTg4N0Y2QjlGQTE2ODM5QzVDNjRGMjIyMUMx QjU5MjBGNzIzQjkxRTU1MDU5MzkwLzAvRjk5OTkzOUVBN0E3Qzk1QTIyMTREQTBC NDc0ODEyMEIzMDU2Mzc0Qy5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAPKMDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEKegwDQYJKoZIhvcNAQELBQADggEBAEb3C3wL Mslgt8JB8zbhRlEmpOaw/AILlXBxLcaQTEKCoUBkU4k8ZoMzWfsl8nDHVG1wUS5g oJcdJuuv3XngVDVETA6ecVWmdh/1bSupxC9MmE/wAKyyOBPQYhyJZU2N6Lz0ZIrG YQnC8iBqNFlSybN8o3/p7H1JQXJitCsA9zZfiLyulcHi4UPrfFl5A9+CfwS8C2aN 5Nh8aiywQkxmAtJR03cTHciV7xL/Qd1FRDlL0KHJncSGIrDeWlBNTe04O+/vfxu1 lblXFrDFmrPTKLJjGD2+KnSrH372LI+/PLa5snXL/xaG076W2BXqxksWwOOqa8dL aGAqPwwFsp0T5mg= -----END CERTIFICATE-----Generated at Wed Apr 8 10:26:41 2026 by rpki-client