$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1595F73DFB87BA563655DE9D91711998FE094901.cer File: 1595F73DFB87BA563655DE9D91711998FE094901.cer (raw, json) Hash identifier: EHzQ9ToPkK3MZDezqhDz0EzBMeo6bJ8aGxzqK3cLoIQ= Subject key identifier: 15:95:F7:3D:FB:87:BA:56:36:55:DE:9D:91:71:19:98:FE:09:49:01 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 671E9600FCF2EC1891B2863A4CCC3C3A84585192 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/DD38D0649978ADD881266F6A1512EB73C94D5BE83588AA19A1C6C694B8BA1602/0/1595F73DFB87BA563655DE9D91711998FE094901.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/DD38D0649978ADD881266F6A1512EB73C94D5BE83588AA19A1C6C694B8BA1602/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 12 Aug 2026 17:55:44 +0000 Certificate not after: Wed 11 Aug 2027 18:00:44 +0000 Subordinate resources: AS: 64175 -- 64176 AS: 274920 IP: 45.68.120.0/22 IP: 2801:1dd::/40 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 15 Sep 2026 10:15:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:1e:96:00:fc:f2:ec:18:91:b2:86:3a:4c:cc:3c:3a:84:58:51:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Aug 12 17:55:44 2026 GMT Not After : Aug 11 18:00:44 2027 GMT Subject: CN=1595F73DFB87BA563655DE9D91711998FE094901 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:7e:5d:d4:8b:5f:53:72:0c:cd:41:18:34:ec: 66:7a:84:67:bb:38:1b:86:52:72:56:f3:0d:47:6d: e3:ff:d5:8b:44:af:38:c1:e0:14:a6:82:70:60:ed: 85:38:50:4e:c8:ea:78:c0:4a:70:98:84:6f:f7:b0: 05:30:0f:64:8d:06:38:ab:3f:82:d2:eb:a2:fe:47: 14:c2:ba:d2:ca:f2:a8:ee:c9:da:2e:e4:10:8f:04: d1:5b:17:c5:9a:1c:0c:d1:54:09:49:b4:b4:4e:f4: 8a:5c:5f:6e:45:65:e3:8d:71:ce:a6:6c:7e:e1:8f: dd:a3:ea:ef:79:2a:00:aa:fe:85:19:27:7e:d8:07: 1e:10:a9:72:ed:20:84:d6:04:fa:f6:75:ed:d5:80: c8:d7:1d:3e:04:4b:00:55:74:3e:6f:15:9c:f7:05: e1:38:cd:ca:34:f2:b0:15:a6:4e:13:27:75:f1:92: 24:c5:aa:3e:8c:be:5f:fa:33:d8:1d:89:5a:5e:0f: 96:45:d3:43:95:af:f7:7d:57:7c:29:4f:ee:b1:bc: 43:05:88:de:09:25:d4:2c:53:04:34:b1:bb:ab:60: 66:c6:f7:ec:78:8a:68:95:c1:05:a8:5f:11:79:c0: 01:56:24:a1:58:e6:17:dc:ff:5d:a3:39:45:f4:f9: 62:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 15:95:F7:3D:FB:87:BA:56:36:55:DE:9D:91:71:19:98:FE:09:49:01 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/DD38D0649978ADD881266F6A1512EB73C94D5BE83588AA19A1C6C694B8BA1602/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/DD38D0649978ADD881266F6A1512EB73C94D5BE83588AA19A1C6C694B8BA1602/0/1595F73DFB87BA563655DE9D91711998FE094901.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.68.120.0/22 IPv6: 2801:1dd::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 64175-64176 274920 Signature Algorithm: sha256WithRSAEncryption 55:78:4c:00:84:a0:e2:e1:02:59:1f:8a:c2:1d:1c:96:2e:ca: 22:3d:65:92:b7:c0:7d:b9:31:a3:c6:2f:49:a0:d0:07:b5:6a: 72:ca:d2:31:69:ea:66:8c:3d:df:f3:bd:e0:a0:40:4f:87:82: 68:c0:17:5a:ce:cd:4c:e0:3f:de:7f:3b:b7:ba:c2:10:98:4f: cf:33:b8:df:f9:76:e1:ad:da:5e:6b:a1:e4:2a:41:7f:fc:16: 9e:ed:e0:08:96:40:d5:7a:9c:cd:37:eb:ec:a8:ef:06:19:c4: 47:c0:e1:69:53:10:e6:9c:0c:8f:81:3b:36:6d:e3:b5:d4:fd: 24:17:62:29:2c:0e:4c:23:3b:ad:6b:98:2f:a3:7d:b2:9e:c1: 1f:7a:63:51:fb:54:5a:a2:05:5a:d2:14:8b:9e:85:b3:89:89: ee:be:64:ed:96:bc:85:60:78:04:7c:6d:cb:9f:59:71:f6:a7: 59:96:d5:79:2c:5c:d6:c5:7f:e0:e7:2c:28:6d:ba:37:36:d0: d0:b7:bd:5d:3f:64:de:da:77:08:d6:fe:1d:01:f1:23:05:6c: d3:dc:43:14:b8:2e:97:1e:ca:0e:8a:6a:7b:1b:e4:5c:69:27: ab:ca:cc:81:c6:e9:fe:44:45:41:fc:18:78:b4:52:20:28:50: 66:11:42:9a -----BEGIN CERTIFICATE----- MIIGsjCCBZqgAwIBAgIUZx6WAPzy7BiRsoY6TMw8OoRYUZIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjA4MTIxNzU1NDRaFw0yNzA4MTExODAwNDRaMDMxMTAvBgNV BAMTKDE1OTVGNzNERkI4N0JBNTYzNjU1REU5RDkxNzExOTk4RkUwOTQ5MDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDofl3Ui19TcgzNQRg07GZ6hGe7 OBuGUnJW8w1HbeP/1YtErzjB4BSmgnBg7YU4UE7I6njASnCYhG/3sAUwD2SNBjir P4LS66L+RxTCutLK8qjuydou5BCPBNFbF8WaHAzRVAlJtLRO9IpcX25FZeONcc6m bH7hj92j6u95KgCq/oUZJ37YBx4QqXLtIITWBPr2de3VgMjXHT4ESwBVdD5vFZz3 BeE4zco08rAVpk4TJ3XxkiTFqj6Mvl/6M9gdiVpeD5ZF00OVr/d9V3wpT+6xvEMF iN4JJdQsUwQ0sburYGbG9+x4imiVwQWoXxF5wAFWJKFY5hfc/12jOUX0+WLnAgMB AAGjggO8MIIDuDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQVlfc9+4e6VjZV 3p2RcRmY/glJATAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvREQzOEQwNjQ5OTc4QUREODgxMjY2RjZB MTUxMkVCNzNDOTRENUJFODM1ODhBQTE5QTFDNkM2OTRCOEJBMTYwMi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9ERDM4RDA2NDk5NzhBREQ4ODEyNjZGNkExNTEyRUI3M0M5NEQ1QkU4MzU4 OEFBMTlBMUM2QzY5NEI4QkExNjAyLzAvMTU5NUY3M0RGQjg3QkE1NjM2NTVERTlE OTE3MTE5OThGRTA5NDkwMS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQCLUR4MA4EAgAC MAgDBgAoAQHdADAmBggrBgEFBQcBCAEB/wQXMBWgEzARMAoCAwD6rwIDAPqwAgME MegwDQYJKoZIhvcNAQELBQADggEBAFV4TACEoOLhAlkfisIdHJYuyiI9ZZK3wH25 MaPGL0mg0Ae1anLK0jFp6maMPd/zveCgQE+HgmjAF1rOzUzgP95/O7e6whCYT88z uN/5duGt2l5roeQqQX/8Fp7t4AiWQNV6nM036+yo7wYZxEfA4WlTEOacDI+BOzZt 47XU/SQXYiksDkwjO61rmC+jfbKewR96Y1H7VFqiBVrSFIuehbOJie6+ZO2WvIVg eAR8bcufWXH2p1mW1XksXNbFf+DnLChtujc20NC3vV0/ZN7adwjW/h0B8SMFbNPc QxS4Lpceyg6Kansb5FxpJ6vKzIHG6f5ERUH8GHi0UiAoUGYRQpo= -----END CERTIFICATE-----Generated at Fri Sep 11 06:13:31 2026 by rpki-client