$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12E8CC282DD83975DFF26BB4C71CF450292C9A67.cer File: 12E8CC282DD83975DFF26BB4C71CF450292C9A67.cer (raw, json) Hash identifier: d+DYjz4lSArDFtp6oJXvEO9y0iI1A1BA+Lib0goUJuU= Subject key identifier: 12:E8:CC:28:2D:D8:39:75:DF:F2:6B:B4:C7:1C:F4:50:29:2C:9A:67 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 4F9AC226C9C12EFDE3509311E22F4792140B61CD Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/90A8E49F43ABA05AB98BC83A4358440EF701B03C6947CBF715695AC5ABFE0A72/0/12E8CC282DD83975DFF26BB4C71CF450292C9A67.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/90A8E49F43ABA05AB98BC83A4358440EF701B03C6947CBF715695AC5ABFE0A72/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Sat 12 Sep 2026 03:20:01 +0000 Certificate not after: Sat 11 Sep 2027 03:25:01 +0000 Subordinate resources: AS: 272876 IP: 2803:ca90::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Sep 2026 08:52:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:9a:c2:26:c9:c1:2e:fd:e3:50:93:11:e2:2f:47:92:14:0b:61:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Sep 12 03:20:01 2026 GMT Not After : Sep 11 03:25:01 2027 GMT Subject: CN=12E8CC282DD83975DFF26BB4C71CF450292C9A67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:0f:35:61:15:cd:63:0c:c5:69:15:2e:99:b7: f4:fb:c3:42:f7:a7:c6:4a:7b:11:d2:af:bb:e6:61: 3c:7a:a4:39:eb:9f:bf:d5:10:a6:55:ad:c6:e5:c9: 83:4f:bd:eb:a3:be:d7:38:5d:1e:6c:66:66:ed:0d: b8:53:58:70:c9:f1:16:79:49:c2:b6:83:62:8f:12: 90:bf:e1:53:9c:d2:99:29:10:3d:0a:9a:95:0d:2a: 14:bc:d7:02:00:1d:d1:7a:f0:7c:b0:20:94:4e:ec: 81:08:98:f1:47:d3:48:26:08:f9:17:db:4a:0d:90: 9b:82:ae:cf:a7:73:c5:4e:a9:9d:07:df:e1:da:11: 31:0b:cc:c5:a6:81:d3:8e:90:84:9e:be:4e:d6:a3: a7:ec:30:c1:bc:48:f4:75:96:11:d8:9a:40:6b:be: 6c:66:b9:02:ee:7a:b1:63:cc:98:16:7c:4e:10:c5: 23:fa:ea:78:80:ed:62:bf:2c:0b:ae:25:81:dd:6c: 6f:b3:57:43:43:b8:2f:d3:10:af:c5:8d:d7:23:c0: ca:9e:36:f0:e6:31:ba:fd:13:cc:7b:e9:54:57:47: 17:3b:54:5a:a8:a3:ef:9e:c4:2d:5a:5d:43:8d:d2: ca:70:93:65:0c:3a:46:49:7a:74:11:55:eb:6f:9a: ed:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 12:E8:CC:28:2D:D8:39:75:DF:F2:6B:B4:C7:1C:F4:50:29:2C:9A:67 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/90A8E49F43ABA05AB98BC83A4358440EF701B03C6947CBF715695AC5ABFE0A72/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/90A8E49F43ABA05AB98BC83A4358440EF701B03C6947CBF715695AC5ABFE0A72/0/12E8CC282DD83975DFF26BB4C71CF450292C9A67.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:ca90::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 272876 Signature Algorithm: sha256WithRSAEncryption 5a:4f:38:9f:e0:3a:64:72:05:da:69:16:9d:38:ba:85:52:69: fc:9c:1a:03:c5:47:c2:fa:c9:ba:bf:e2:4d:a1:82:44:a9:bc: 1a:4b:df:8b:0a:e7:51:fe:79:29:65:bb:f9:b2:45:98:fc:39: db:ce:be:71:e7:92:5b:eb:54:a6:52:b2:89:40:33:6d:3a:90: 76:c1:06:29:14:ad:6f:5e:64:0c:73:a9:c0:c7:e2:c3:cf:1d: 2d:09:86:61:77:f3:52:36:d5:b6:80:51:90:5e:68:0b:c0:ff: ee:02:b1:19:25:17:13:43:33:f5:8b:46:93:ad:6d:a2:2d:71: 69:65:cd:bc:66:25:ae:4b:41:92:1c:d1:4a:14:99:f0:7a:33: 8d:14:93:35:9a:7a:12:1b:97:81:61:98:ea:e5:a7:5f:4a:f2: a9:95:21:64:ed:7f:83:86:f7:49:fe:9a:ab:a6:cb:f8:9a:eb: 73:e7:d1:19:67:24:10:7f:48:cd:16:c9:5f:79:f7:51:cd:25: 2b:8f:43:18:c8:75:35:50:e0:18:0e:ee:54:06:74:b9:04:5d: 3b:0f:3c:ba:45:87:8d:09:83:51:90:b5:cb:59:54:04:62:34: 41:3b:d8:25:5a:ec:5f:0d:ec:27:86:f0:43:fa:70:de:b4:1f: 7c:40:8c:94 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUT5rCJsnBLv3jUJMR4i9HkhQLYc0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjA5MTIwMzIwMDFaFw0yNzA5MTEwMzI1MDFaMDMxMTAvBgNV BAMTKDEyRThDQzI4MkREODM5NzVERkYyNkJCNEM3MUNGNDUwMjkyQzlBNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDDzVhFc1jDMVpFS6Zt/T7w0L3 p8ZKexHSr7vmYTx6pDnrn7/VEKZVrcblyYNPveujvtc4XR5sZmbtDbhTWHDJ8RZ5 ScK2g2KPEpC/4VOc0pkpED0KmpUNKhS81wIAHdF68HywIJRO7IEImPFH00gmCPkX 20oNkJuCrs+nc8VOqZ0H3+HaETELzMWmgdOOkISevk7Wo6fsMMG8SPR1lhHYmkBr vmxmuQLuerFjzJgWfE4QxSP66niA7WK/LAuuJYHdbG+zV0NDuC/TEK/FjdcjwMqe NvDmMbr9E8x76VRXRxc7VFqoo++exC1aXUON0spwk2UMOkZJenQRVetvmu0jAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQS6MwoLdg5dd/y a7THHPRQKSyaZzAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvOTBBOEU0OUY0M0FCQTA1QUI5OEJDODNB NDM1ODQ0MEVGNzAxQjAzQzY5NDdDQkY3MTU2OTVBQzVBQkZFMEE3Mi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy85MEE4RTQ5RjQzQUJBMDVBQjk4QkM4M0E0MzU4NDQwRUY3MDFCMDNDNjk0 N0NCRjcxNTY5NUFDNUFCRkUwQTcyLzAvMTJFOENDMjgyREQ4Mzk3NURGRjI2QkI0 QzcxQ0Y0NTAyOTJDOUE2Ny5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAPKkDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEKewwDQYJKoZIhvcNAQELBQADggEBAFpPOJ/g OmRyBdppFp04uoVSafycGgPFR8L6ybq/4k2hgkSpvBpL34sK51H+eSllu/myRZj8 OdvOvnHnklvrVKZSsolAM206kHbBBikUrW9eZAxzqcDH4sPPHS0JhmF381I21baA UZBeaAvA/+4CsRklFxNDM/WLRpOtbaItcWllzbxmJa5LQZIc0UoUmfB6M40UkzWa ehIbl4FhmOrlp19K8qmVIWTtf4OG90n+mqumy/ia63Pn0RlnJBB/SM0WyV9591HN JSuPQxjIdTVQ4BgO7lQGdLkEXTsPPLpFh40Jg1GQtctZVARiNEE72CVa7F8N7CeG 8EP6cN60H3xAjJQ= -----END CERTIFICATE-----Generated at Fri Sep 18 18:05:19 2026 by rpki-client