$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1205CA5F6F28151F1D891E15B3F992D524D5BF63.cer File: 1205CA5F6F28151F1D891E15B3F992D524D5BF63.cer (raw, json) Hash identifier: zFUZg5aYtrlh1FrQUAp1oShuH58qxAy0ry3q67F9GAY= Subject key identifier: 12:05:CA:5F:6F:28:15:1F:1D:89:1E:15:B3:F9:92:D5:24:D5:BF:63 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 01F1166EBA785A4D46BD6DAFA08D3C2B52D2A7F4 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/36CC63D3A8B8969E09E7279A5F5D6917BD8B062B644F7EFA18BCBDEC63661E3E/0/1205CA5F6F28151F1D891E15B3F992D524D5BF63.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/36CC63D3A8B8969E09E7279A5F5D6917BD8B062B644F7EFA18BCBDEC63661E3E/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 26 Aug 2026 13:35:01 +0000 Certificate not after: Wed 25 Aug 2027 13:40:01 +0000 Subordinate resources: AS: 274992 IP: 2803:7d30::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Sep 2026 08:52:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:f1:16:6e:ba:78:5a:4d:46:bd:6d:af:a0:8d:3c:2b:52:d2:a7:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Aug 26 13:35:01 2026 GMT Not After : Aug 25 13:40:01 2027 GMT Subject: CN=1205CA5F6F28151F1D891E15B3F992D524D5BF63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c1:ed:e9:7c:f8:d8:5e:e8:fc:f3:75:b5:49: 90:a2:6e:4d:34:d9:d1:a7:54:76:d6:52:cd:48:a6: 41:99:a1:ab:23:05:7e:84:c0:e0:21:b4:f0:35:5a: b9:fc:7d:bd:da:6f:64:6c:9d:6e:35:cf:5e:9a:ce: f0:9b:02:92:c7:2e:02:2a:8f:f0:4d:9c:21:15:3f: 9f:d1:bb:a7:cc:a9:28:9c:e4:48:1a:a1:77:b8:61: 18:3b:94:ae:b9:22:5e:8e:ee:3f:b0:da:00:bc:3d: b9:c3:32:c9:90:64:a6:45:21:41:c3:6e:1a:82:db: f3:a8:78:93:bb:91:3c:8d:72:14:d9:5a:44:95:7a: 2c:63:15:3b:eb:d1:70:2c:f6:01:3a:aa:0e:a1:af: 19:64:e7:bf:90:35:5b:86:7d:71:de:f5:75:ac:1d: 5c:52:22:86:63:42:66:21:82:2a:85:6d:8f:b2:99: 48:34:a4:49:b9:12:2d:1f:24:ab:52:85:45:41:c9: 0b:1c:21:cf:0e:fe:00:88:f3:0e:7c:36:04:02:b0: 5b:af:5b:ec:05:87:86:c8:b9:da:a8:2a:39:a5:ac: 5d:0c:de:64:ea:f1:21:41:89:a1:8b:7a:bc:4d:f9: 10:e5:70:a4:78:67:d2:d1:ff:dc:52:5f:f1:a6:a6: fa:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 12:05:CA:5F:6F:28:15:1F:1D:89:1E:15:B3:F9:92:D5:24:D5:BF:63 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/36CC63D3A8B8969E09E7279A5F5D6917BD8B062B644F7EFA18BCBDEC63661E3E/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/36CC63D3A8B8969E09E7279A5F5D6917BD8B062B644F7EFA18BCBDEC63661E3E/0/1205CA5F6F28151F1D891E15B3F992D524D5BF63.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:7d30::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 274992 Signature Algorithm: sha256WithRSAEncryption 5d:05:e0:bd:ed:11:8b:08:ec:d0:8b:c2:40:25:8c:ad:83:14: 33:e9:31:c8:5c:99:84:e5:0d:18:0c:12:b1:66:3a:9b:04:1c: 95:07:8f:e2:7b:55:44:85:07:6f:1d:f9:2a:5f:06:e9:a8:d4: f0:9a:f2:ee:1f:b0:19:25:67:47:05:ff:88:d0:7d:35:a6:4c: c1:94:a3:dc:ac:ec:2f:48:45:fb:26:66:c2:cb:65:8f:09:79: fd:4c:47:ec:2b:ff:4a:62:0b:54:22:f7:43:c7:04:be:36:34: 94:2f:1e:4b:70:c3:3b:cd:29:97:50:09:56:76:66:2e:26:aa: 4e:7d:4f:5c:ab:29:a2:5a:9e:85:8c:cd:c1:51:b0:bd:8f:d2: 4e:e6:35:be:60:97:6c:a6:e3:50:0a:f8:7b:2f:1d:9a:9c:34: c6:c6:a0:c6:86:e6:87:e6:f6:63:b5:55:a7:6e:e4:bf:5b:50: da:c4:00:8e:66:7d:ae:a7:2f:2f:ae:20:de:b9:ce:f7:d5:a6: 19:22:6e:56:28:4a:93:8e:07:3f:e6:5e:83:0d:cf:d2:16:fd: 81:4e:05:e4:9e:79:5c:9c:c6:89:f0:a5:f1:85:14:07:2a:52: cb:75:2d:41:21:95:1f:2e:17:75:d5:a4:f6:47:45:d1:8b:1a: 29:21:63:bc -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUAfEWbrp4Wk1GvW2voI08K1LSp/QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjA4MjYxMzM1MDFaFw0yNzA4MjUxMzQwMDFaMDMxMTAvBgNV BAMTKDEyMDVDQTVGNkYyODE1MUYxRDg5MUUxNUIzRjk5MkQ1MjRENUJGNjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFwe3pfPjYXuj883W1SZCibk00 2dGnVHbWUs1IpkGZoasjBX6EwOAhtPA1Wrn8fb3ab2RsnW41z16azvCbApLHLgIq j/BNnCEVP5/Ru6fMqSic5EgaoXe4YRg7lK65Il6O7j+w2gC8PbnDMsmQZKZFIUHD bhqC2/OoeJO7kTyNchTZWkSVeixjFTvr0XAs9gE6qg6hrxlk57+QNVuGfXHe9XWs HVxSIoZjQmYhgiqFbY+ymUg0pEm5Ei0fJKtShUVByQscIc8O/gCI8w58NgQCsFuv W+wFh4bIudqoKjmlrF0M3mTq8SFBiaGLerxN+RDlcKR4Z9LR/9xSX/GmpvqFAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQSBcpfbygVHx2J HhWz+ZLVJNW/YzAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMzZDQzYzRDNBOEI4OTY5RTA5RTcyNzlB NUY1RDY5MTdCRDhCMDYyQjY0NEY3RUZBMThCQ0JERUM2MzY2MUUzRS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8zNkNDNjNEM0E4Qjg5NjlFMDlFNzI3OUE1RjVENjkxN0JEOEIwNjJCNjQ0 RjdFRkExOEJDQkRFQzYzNjYxRTNFLzAvMTIwNUNBNUY2RjI4MTUxRjFEODkxRTE1 QjNGOTkyRDUyNEQ1QkY2My5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAN9MDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEMjAwDQYJKoZIhvcNAQELBQADggEBAF0F4L3t EYsI7NCLwkAljK2DFDPpMchcmYTlDRgMErFmOpsEHJUHj+J7VUSFB28d+SpfBumo 1PCa8u4fsBklZ0cF/4jQfTWmTMGUo9ys7C9IRfsmZsLLZY8Jef1MR+wr/0piC1Qi 90PHBL42NJQvHktwwzvNKZdQCVZ2Zi4mqk59T1yrKaJanoWMzcFRsL2P0k7mNb5g l2ym41AK+HsvHZqcNMbGoMaG5ofm9mO1Vadu5L9bUNrEAI5mfa6nLy+uIN65zvfV phkiblYoSpOOBz/mXoMNz9IW/YFOBeSeeVycxonwpfGFFAcqUst1LUEhlR8uF3XV pPZHRdGLGikhY7w= -----END CERTIFICATE-----Generated at Fri Sep 18 18:04:50 2026 by rpki-client