$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D114DCF3C869D3F352B56B3D80E67EC7A59B3AC.cer File: 0D114DCF3C869D3F352B56B3D80E67EC7A59B3AC.cer (raw, json) Hash identifier: hInleQGRD5UCWYq1WAldFsgrWNgx23H3D5gZkxKaLU4= Subject key identifier: 0D:11:4D:CF:3C:86:9D:3F:35:2B:56:B3:D8:0E:67:EC:7A:59:B3:AC Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 3EA560A63438E986C4AA4F637744360E0DA2A67D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/1D7B4411EB77D61C4723CE4450511381530462B6D9534D4217E2BC8149DCC8DB/0/0D114DCF3C869D3F352B56B3D80E67EC7A59B3AC.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/1D7B4411EB77D61C4723CE4450511381530462B6D9534D4217E2BC8149DCC8DB/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Thu 22 Oct 2026 17:35:02 +0000 Certificate not after: Thu 21 Oct 2027 17:40:02 +0000 Subordinate resources: AS: 274245 IP: 2803:37d0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 01 Nov 2026 15:06:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:a5:60:a6:34:38:e9:86:c4:aa:4f:63:77:44:36:0e:0d:a2:a6:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Oct 22 17:35:02 2026 GMT Not After : Oct 21 17:40:02 2027 GMT Subject: CN=0D114DCF3C869D3F352B56B3D80E67EC7A59B3AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:3d:0d:10:bb:16:1c:d5:c9:e5:03:76:ba:22: 96:d4:a0:95:41:13:05:52:ba:5e:28:aa:ab:4b:59: 33:74:b8:74:7f:e7:4b:1a:d9:9d:f9:22:6e:76:08: 98:29:cc:c2:03:24:15:72:9a:73:e8:72:f9:91:fc: 2e:0a:14:a6:51:65:31:85:e2:24:68:54:70:b0:65: 33:21:f0:b8:a3:cd:23:3c:cb:5c:7c:8f:e1:e4:ba: 0e:69:83:11:3c:54:21:57:30:72:af:58:d2:c2:7b: 82:ce:ad:7b:c3:b7:2a:de:eb:e2:db:59:81:74:97: 84:83:0c:40:d5:77:0e:7c:b8:5a:c2:cb:38:07:ff: 46:dc:8e:3b:0d:b3:15:78:5a:67:44:80:ee:e1:e6: 98:a6:ec:8e:74:2c:06:b2:a7:6b:54:3a:2c:39:07: 4e:3b:67:25:41:4d:5f:29:a5:83:ec:d0:b9:47:e5: e4:5e:41:27:56:b7:3d:5a:9d:88:4c:75:75:4a:8f: 1b:28:32:a6:6c:35:07:d0:47:0a:ca:a9:5c:ad:86: 77:bb:d7:2a:ec:d6:c8:c0:66:41:99:5d:28:ac:23: c2:97:b6:cd:00:e0:51:05:29:35:10:2c:25:60:b9: e6:33:69:cc:a1:25:6f:53:e6:6d:76:a4:da:34:25: 5c:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 0D:11:4D:CF:3C:86:9D:3F:35:2B:56:B3:D8:0E:67:EC:7A:59:B3:AC X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1D7B4411EB77D61C4723CE4450511381530462B6D9534D4217E2BC8149DCC8DB/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1D7B4411EB77D61C4723CE4450511381530462B6D9534D4217E2BC8149DCC8DB/0/0D114DCF3C869D3F352B56B3D80E67EC7A59B3AC.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:37d0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 274245 Signature Algorithm: sha256WithRSAEncryption 6e:62:12:ec:4d:91:00:b1:63:f3:5e:69:7b:e1:b8:5e:07:5e: e8:1a:a4:f0:2b:b5:30:11:7b:fa:04:2a:8b:2f:d3:b6:80:a7: db:c4:37:64:88:41:5e:e5:76:de:49:98:fc:99:b4:76:7e:a6: ac:a7:2c:6b:42:55:2d:63:e8:b9:07:23:a7:e1:33:4f:4f:17: d3:ae:29:3e:12:ce:3b:07:cb:b5:53:1a:4d:1e:18:7f:3e:b2: 2d:8f:34:77:e5:93:6a:d5:40:95:36:61:ad:9e:b8:fe:d6:23: a2:3a:77:2d:9b:ae:95:86:45:f0:8d:e2:ef:d0:33:d8:7c:c8: 6a:c6:60:37:5a:26:be:af:d4:8c:c3:93:b3:e4:33:85:c3:a7: 49:f4:1d:17:b5:6f:eb:95:80:78:0d:62:44:7d:32:c9:5f:82: 4f:11:d7:18:7f:8c:0e:7d:a7:66:a1:5a:fa:c3:18:d1:29:1d: c7:8f:e5:d3:f5:c6:f3:a3:10:9c:64:00:1c:c2:69:ac:7f:2b: 11:10:d8:f0:03:0a:cc:be:98:fe:46:c6:be:98:b3:66:62:30: 73:25:3d:df:a2:74:47:a0:19:f5:f6:f0:b7:36:77:b1:f3:3f: ff:e5:0b:1a:27:1c:31:12:14:bc:d5:13:e6:24:7f:ac:5b:95: e4:77:22:e5 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUPqVgpjQ46YbEqk9jd0Q2Dg2ipn0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjEwMjIxNzM1MDJaFw0yNzEwMjExNzQwMDJaMDMxMTAvBgNV BAMTKDBEMTE0RENGM0M4NjlEM0YzNTJCNTZCM0Q4MEU2N0VDN0E1OUIzQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4PQ0QuxYc1cnlA3a6IpbUoJVB EwVSul4oqqtLWTN0uHR/50sa2Z35Im52CJgpzMIDJBVymnPocvmR/C4KFKZRZTGF 4iRoVHCwZTMh8LijzSM8y1x8j+Hkug5pgxE8VCFXMHKvWNLCe4LOrXvDtyre6+Lb WYF0l4SDDEDVdw58uFrCyzgH/0bcjjsNsxV4WmdEgO7h5pim7I50LAayp2tUOiw5 B047ZyVBTV8ppYPs0LlH5eReQSdWtz1anYhMdXVKjxsoMqZsNQfQRwrKqVythne7 1yrs1sjAZkGZXSisI8KXts0A4FEFKTUQLCVgueYzacyhJW9T5m12pNo0JVyhAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQNEU3PPIadPzUr VrPYDmfselmzrDAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMUQ3QjQ0MTFFQjc3RDYxQzQ3MjNDRTQ0 NTA1MTEzODE1MzA0NjJCNkQ5NTM0RDQyMTdFMkJDODE0OURDQzhEQi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8xRDdCNDQxMUVCNzdENjFDNDcyM0NFNDQ1MDUxMTM4MTUzMDQ2MkI2RDk1 MzRENDIxN0UyQkM4MTQ5RENDOERCLzAvMEQxMTREQ0YzQzg2OUQzRjM1MkI1NkIz RDgwRTY3RUM3QTU5QjNBQy5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAM30DAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEL0UwDQYJKoZIhvcNAQELBQADggEBAG5iEuxN kQCxY/NeaXvhuF4HXugapPArtTARe/oEKosv07aAp9vEN2SIQV7ldt5JmPyZtHZ+ pqynLGtCVS1j6LkHI6fhM09PF9OuKT4SzjsHy7VTGk0eGH8+si2PNHflk2rVQJU2 Ya2euP7WI6I6dy2brpWGRfCN4u/QM9h8yGrGYDdaJr6v1IzDk7PkM4XDp0n0HRe1 b+uVgHgNYkR9Mslfgk8R1xh/jA59p2ahWvrDGNEpHceP5dP1xvOjEJxkABzCaax/ KxEQ2PADCsy+mP5Gxr6Ys2ZiMHMlPd+idEegGfX28Lc2d7HzP//lCxonHDESFLzV E+Ykf6xbleR3IuU= -----END CERTIFICATE-----Generated at Wed Oct 28 16:30:11 2026 by rpki-client