$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F4E0CA2F1B9642882339256848988B596C38C52.cer File: 0F4E0CA2F1B9642882339256848988B596C38C52.cer (raw, json) Hash identifier: kjwTBfSdidamkkmyx+Yfojx2A3ZNQOynOS10kvQm/bk= Subject key identifier: 0F:4E:0C:A2:F1:B9:64:28:82:33:92:56:84:89:88:B5:96:C3:8C:52 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 36D309170C5578915944ED55AB4744EB916B647E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/8E47A63680FF539506E1DE34EFA40D3495FDA22C329E5E1FAD74EBBEBA2B1DC6/0/0F4E0CA2F1B9642882339256848988B596C38C52.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/8E47A63680FF539506E1DE34EFA40D3495FDA22C329E5E1FAD74EBBEBA2B1DC6/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 21 Oct 2026 14:45:01 +0000 Certificate not after: Wed 20 Oct 2027 14:50:01 +0000 Subordinate resources: AS: 274038 IP: 2803:34d0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 01 Nov 2026 15:06:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:d3:09:17:0c:55:78:91:59:44:ed:55:ab:47:44:eb:91:6b:64:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Oct 21 14:45:01 2026 GMT Not After : Oct 20 14:50:01 2027 GMT Subject: CN=0F4E0CA2F1B9642882339256848988B596C38C52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f2:ab:ff:25:46:9c:74:a5:72:5a:35:19:32: 12:8f:7f:5e:7f:ed:06:95:cf:f1:08:88:7e:22:1f: bc:25:29:b3:b4:cb:80:38:9c:22:0e:07:d3:e2:bf: 6a:eb:e4:5a:78:da:6f:bb:ba:77:7c:c4:d3:e8:a5: 9e:5d:c7:1f:d9:7d:a1:51:6f:6c:20:4c:ae:b4:8d: 3d:c7:d6:f8:11:02:ba:30:fd:50:1c:3e:7e:55:c4: 8f:ff:31:b4:08:e8:c0:25:65:8a:20:73:41:77:e0: 9c:e4:84:8f:23:6f:bd:85:c6:0e:98:0f:cb:21:01: af:38:d3:4a:ea:15:5a:7a:b4:fd:ef:77:f4:5b:0f: 4a:d0:e6:98:0e:aa:de:04:8f:cb:88:e1:36:a4:3c: 44:a4:8e:59:24:25:f7:b8:16:6b:be:b5:2e:5c:15: b9:04:2a:2b:f9:db:18:81:dc:b0:64:7e:9d:68:3a: ee:8b:15:b1:4a:d5:30:40:ca:37:62:02:71:3a:45: cd:92:9c:77:64:ec:e8:9f:f4:7e:4f:da:77:22:42: 9a:c5:23:91:e8:b3:38:48:ec:d8:62:87:1a:36:06: 91:77:b3:93:6c:d2:b0:a6:ea:47:25:4f:cd:72:2a: e9:04:38:1e:3f:22:3f:88:1d:2d:5f:5b:54:a0:ae: eb:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 0F:4E:0C:A2:F1:B9:64:28:82:33:92:56:84:89:88:B5:96:C3:8C:52 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/8E47A63680FF539506E1DE34EFA40D3495FDA22C329E5E1FAD74EBBEBA2B1DC6/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/8E47A63680FF539506E1DE34EFA40D3495FDA22C329E5E1FAD74EBBEBA2B1DC6/0/0F4E0CA2F1B9642882339256848988B596C38C52.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:34d0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 274038 Signature Algorithm: sha256WithRSAEncryption 34:e7:fd:a2:e7:df:77:7a:6f:3a:46:c7:96:e2:a4:90:6a:42: d9:e0:88:6f:d9:47:f3:ef:ca:42:d5:43:2b:c1:15:f0:66:96: 72:ef:d8:3a:35:83:74:3e:61:8c:cc:60:26:af:ba:0c:30:ce: ee:8b:42:9c:86:a2:ff:53:b4:ba:76:3e:f0:f1:e7:2b:43:a7: 6c:33:3d:7a:6b:27:37:0d:62:fb:a1:f2:95:76:22:60:a8:13: fc:5b:d3:ce:cf:41:c3:30:92:ba:64:be:87:3d:90:57:7b:1a: 56:e9:b8:4d:6e:39:9c:bf:6e:96:26:80:9a:5b:41:60:fb:2c: 5a:d8:45:9a:67:8c:a0:e5:d1:5e:11:e0:df:80:cb:c9:4c:72: f6:ae:ce:26:f8:d2:2e:66:66:25:e7:1c:4f:e3:e8:f9:32:45: 9b:8f:50:42:8e:f6:e8:f2:44:1c:6b:11:5c:0e:a3:4e:6a:ae: 3f:a4:bc:9a:24:b0:58:c7:91:d0:78:e3:a0:8b:69:59:94:01: 78:6f:ca:b4:1f:20:f9:ea:97:d2:70:33:8d:a4:61:3b:b9:7e: 48:e3:ef:c5:d2:6c:b6:06:b4:d1:4a:3a:14:90:f3:c7:de:25: db:05:46:2d:f0:a1:00:e3:2f:21:12:7b:f5:b0:bd:26:dd:ff: d7:0b:17:0a -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUNtMJFwxVeJFZRO1Vq0dE65FrZH4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjEwMjExNDQ1MDFaFw0yNzEwMjAxNDUwMDFaMDMxMTAvBgNV BAMTKDBGNEUwQ0EyRjFCOTY0Mjg4MjMzOTI1Njg0ODk4OEI1OTZDMzhDNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk8qv/JUacdKVyWjUZMhKPf15/ 7QaVz/EIiH4iH7wlKbO0y4A4nCIOB9Piv2rr5Fp42m+7und8xNPopZ5dxx/ZfaFR b2wgTK60jT3H1vgRArow/VAcPn5VxI//MbQI6MAlZYogc0F34JzkhI8jb72Fxg6Y D8shAa8400rqFVp6tP3vd/RbD0rQ5pgOqt4Ej8uI4TakPESkjlkkJfe4Fmu+tS5c FbkEKiv52xiB3LBkfp1oOu6LFbFK1TBAyjdiAnE6Rc2SnHdk7Oif9H5P2nciQprF I5HoszhI7Nhihxo2BpF3s5Ns0rCm6kclT81yKukEOB4/Ij+IHS1fW1SgruthAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQPTgyi8blkKIIz klaEiYi1lsOMUjAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvOEU0N0E2MzY4MEZGNTM5NTA2RTFERTM0 RUZBNDBEMzQ5NUZEQTIyQzMyOUU1RTFGQUQ3NEVCQkVCQTJCMURDNi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy84RTQ3QTYzNjgwRkY1Mzk1MDZFMURFMzRFRkE0MEQzNDk1RkRBMjJDMzI5 RTVFMUZBRDc0RUJCRUJBMkIxREM2LzAvMEY0RTBDQTJGMUI5NjQyODgyMzM5MjU2 ODQ4OTg4QjU5NkMzOEM1Mi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAM00DAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMELnYwDQYJKoZIhvcNAQELBQADggEBADTn/aLn 33d6bzpGx5bipJBqQtngiG/ZR/PvykLVQyvBFfBmlnLv2Do1g3Q+YYzMYCavugww zu6LQpyGov9TtLp2PvDx5ytDp2wzPXprJzcNYvuh8pV2ImCoE/xb087PQcMwkrpk voc9kFd7GlbpuE1uOZy/bpYmgJpbQWD7LFrYRZpnjKDl0V4R4N+Ay8lMcvauzib4 0i5mZiXnHE/j6PkyRZuPUEKO9ujyRBxrEVwOo05qrj+kvJoksFjHkdB446CLaVmU AXhvyrQfIPnql9JwM42kYTu5fkjj78XSbLYGtNFKOhSQ88feJdsFRi3woQDjLyES e/WwvSbd/9cLFwo= -----END CERTIFICATE-----Generated at Wed Oct 28 05:22:41 2026 by rpki-client