$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1835B744338D1D3CF4275EF6C6406F020B5075CA.cer File: 1835B744338D1D3CF4275EF6C6406F020B5075CA.cer (raw, json) Hash identifier: 1X5Mzt70JkuUMCLW6wcTQTdlMH7/6eKqT2cylYrkrxk= Subject key identifier: 18:35:B7:44:33:8D:1D:3C:F4:27:5E:F6:C6:40:6F:02:0B:50:75:CA Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 4E10FA53A498CFE7A55950F2238033D0ADA819E7 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/4B7567C5640AC9DB6B37499AFECD6149E4D15BB67C378E3701A0BCEBABB663C2/0/1835B744338D1D3CF4275EF6C6406F020B5075CA.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/4B7567C5640AC9DB6B37499AFECD6149E4D15BB67C378E3701A0BCEBABB663C2/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 26 May 2026 22:40:01 +0000 Certificate not after: Tue 25 May 2027 22:45:01 +0000 Subordinate resources: AS: 263791 IP: 138.121.112.0/22 IP: 2803:cc40::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 17 Jun 2026 16:50:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:10:fa:53:a4:98:cf:e7:a5:59:50:f2:23:80:33:d0:ad:a8:19:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: May 26 22:40:01 2026 GMT Not After : May 25 22:45:01 2027 GMT Subject: CN=1835B744338D1D3CF4275EF6C6406F020B5075CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:75:3c:83:c5:79:5e:a7:e1:0f:ff:e3:68:45: 7f:a0:8f:f8:99:b3:83:24:ee:de:24:57:f7:22:15: f4:c3:fb:69:41:de:09:7a:3a:08:7d:42:21:8b:ec: 8b:de:af:70:53:65:86:8e:75:5e:7b:8b:77:01:4a: 98:5c:55:83:57:70:1c:f4:f0:a2:67:4b:42:3a:b2: c3:ec:65:3c:cb:58:0a:c2:7c:5e:49:74:cf:e3:29: d4:e2:b0:a9:99:20:7d:20:05:d5:74:26:44:64:4e: 00:76:ab:40:e0:db:ae:38:42:48:2a:91:74:5c:2a: 0f:dc:78:d7:65:99:90:94:03:e6:e7:10:0b:07:d4: db:83:c6:f7:76:d2:9c:26:da:d9:96:a5:c3:0e:94: 62:8b:40:b0:60:54:30:88:41:82:36:b7:81:40:ab: 09:40:fb:48:22:e4:bb:2b:e0:a6:ae:d4:5b:c9:15: 9d:a3:73:dd:ec:0d:1e:53:18:41:b1:f5:2b:a2:25: ab:2a:99:54:ff:d7:48:08:ae:64:58:3e:d9:a1:a5: 07:db:5e:8a:bd:ea:3c:de:05:7a:ef:43:42:52:11: c8:24:ec:7b:cc:50:90:99:e3:4d:7d:ad:a7:e0:ed: fd:03:3f:0c:5c:e5:8c:ea:48:50:d7:d4:b7:d3:61: 12:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 18:35:B7:44:33:8D:1D:3C:F4:27:5E:F6:C6:40:6F:02:0B:50:75:CA X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/4B7567C5640AC9DB6B37499AFECD6149E4D15BB67C378E3701A0BCEBABB663C2/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/4B7567C5640AC9DB6B37499AFECD6149E4D15BB67C378E3701A0BCEBABB663C2/0/1835B744338D1D3CF4275EF6C6406F020B5075CA.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.121.112.0/22 IPv6: 2803:cc40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263791 Signature Algorithm: sha256WithRSAEncryption 6e:aa:0f:e2:80:81:33:00:2a:6f:06:d9:78:9d:8d:f0:a9:4a: c0:05:a8:e5:b9:a3:8b:b7:f2:81:e7:82:cd:37:a8:52:08:4a: 64:ed:6f:2d:b5:4e:ab:06:cc:f5:52:b7:74:cb:fb:c9:f8:e8: 62:ec:ce:a9:02:f2:3c:1a:95:f2:d4:f2:c4:bf:a1:22:33:04: e7:4a:8a:c5:9d:e3:22:1d:e1:d2:a5:13:12:01:a1:61:f8:ae: e9:86:79:8c:21:5e:30:d0:a0:b2:aa:66:d9:b3:65:fb:34:df: d6:23:e2:52:8e:90:37:af:a3:cc:94:29:3e:8e:9b:bc:a5:bb: eb:9d:e8:5a:fa:45:68:22:5a:d0:7b:10:9f:c6:d2:a1:4a:b6: 4b:bc:85:27:90:39:b0:21:80:ab:a0:6e:1c:d9:de:7b:f4:c0: cd:27:5e:67:dd:59:32:68:f3:16:39:82:81:ae:eb:25:ba:c2: e8:cb:de:ae:2d:9c:a4:9f:fc:f1:e8:6f:77:9b:06:f7:73:88: 32:9d:37:73:77:ed:e8:81:e5:5f:61:dd:87:cc:17:04:26:53: 3a:8d:e2:96:08:f9:43:02:60:94:12:13:e8:53:c3:f4:e3:0b: 21:85:90:68:83:3a:10:02:db:ff:28:9a:75:27:62:a6:54:a7: 22:2e:83:36 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUThD6U6SYz+elWVDyI4Az0K2oGecwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjA1MjYyMjQwMDFaFw0yNzA1MjUyMjQ1MDFaMDMxMTAvBgNV BAMTKDE4MzVCNzQ0MzM4RDFEM0NGNDI3NUVGNkM2NDA2RjAyMEI1MDc1Q0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfdTyDxXlep+EP/+NoRX+gj/iZ s4Mk7t4kV/ciFfTD+2lB3gl6Ogh9QiGL7Iver3BTZYaOdV57i3cBSphcVYNXcBz0 8KJnS0I6ssPsZTzLWArCfF5JdM/jKdTisKmZIH0gBdV0JkRkTgB2q0Dg2644Qkgq kXRcKg/ceNdlmZCUA+bnEAsH1NuDxvd20pwm2tmWpcMOlGKLQLBgVDCIQYI2t4FA qwlA+0gi5Lsr4Kau1FvJFZ2jc93sDR5TGEGx9SuiJasqmVT/10gIrmRYPtmhpQfb Xoq96jzeBXrvQ0JSEcgk7HvMUJCZ4019rafg7f0DPwxc5YzqSFDX1LfTYRKZAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQYNbdEM40dPPQn XvbGQG8CC1B1yjAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNEI3NTY3QzU2NDBBQzlEQjZCMzc0OTlB RkVDRDYxNDlFNEQxNUJCNjdDMzc4RTM3MDFBMEJDRUJBQkI2NjNDMi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80Qjc1NjdDNTY0MEFDOURCNkIzNzQ5OUFGRUNENjE0OUU0RDE1QkI2N0Mz NzhFMzcwMUEwQkNFQkFCQjY2M0MyLzAvMTgzNUI3NDQzMzhEMUQzQ0Y0Mjc1RUY2 QzY0MDZGMDIwQjUwNzVDQS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCinlwMA0EAgAC MAcDBQAoA8xAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQGbzANBgkqhkiG9w0B AQsFAAOCAQEAbqoP4oCBMwAqbwbZeJ2N8KlKwAWo5bmji7fygeeCzTeoUghKZO1v LbVOqwbM9VK3dMv7yfjoYuzOqQLyPBqV8tTyxL+hIjME50qKxZ3jIh3h0qUTEgGh Yfiu6YZ5jCFeMNCgsqpm2bNl+zTf1iPiUo6QN6+jzJQpPo6bvKW7653oWvpFaCJa 0HsQn8bSoUq2S7yFJ5A5sCGAq6BuHNnee/TAzSdeZ91ZMmjzFjmCga7rJbrC6Mve ri2cpJ/88ehvd5sG93OIMp03c3ft6IHlX2Hdh8wXBCZTOo3ilgj5QwJglBIT6FPD 9OMLIYWQaIM6EALb/yiadSdiplSnIi6DNg== -----END CERTIFICATE-----Generated at Sun Jun 14 06:43:27 2026 by rpki-client