$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/18DB359343E9AC49851A4078F74DFD3DCA36BFF8.cer File: 18DB359343E9AC49851A4078F74DFD3DCA36BFF8.cer (raw, json) Hash identifier: l42DzEVUVePCoi0ebwXsLvJf600LQwEdYVIw3OKyyR4= Subject key identifier: 18:DB:35:93:43:E9:AC:49:85:1A:40:78:F7:4D:FD:3D:CA:36:BF:F8 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 59C300E7E16ADBEE18008CF597638C984E966F41 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/A6650281B34535E2266DC69D33F9D88A5822A8D8FF0AC5ECCF2FF8F849CBF6E0/0/18DB359343E9AC49851A4078F74DFD3DCA36BFF8.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/A6650281B34535E2266DC69D33F9D88A5822A8D8FF0AC5ECCF2FF8F849CBF6E0/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 21 Apr 2026 20:40:00 +0000 Certificate not after: Tue 20 Apr 2027 20:45:00 +0000 Subordinate resources: AS: 28381 IP: 200.79.176.0/21 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 04 May 2026 10:13:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:c3:00:e7:e1:6a:db:ee:18:00:8c:f5:97:63:8c:98:4e:96:6f:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Apr 21 20:40:00 2026 GMT Not After : Apr 20 20:45:00 2027 GMT Subject: CN=18DB359343E9AC49851A4078F74DFD3DCA36BFF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:54:0f:05:c2:2f:84:e7:dc:fd:5c:99:24:20: 8a:e5:38:2a:87:86:55:d2:31:66:86:87:43:05:d6: f0:53:0c:41:91:bc:fb:c8:7e:7d:2a:55:31:d2:e7: bb:50:24:50:3b:58:4f:16:3f:70:b1:02:14:50:82: 65:70:6b:d3:e2:b2:da:32:7e:dc:71:0e:b9:1b:89: c7:db:5a:71:32:e1:96:8e:b5:9a:bd:0f:7b:a2:77: fe:0b:b9:c8:8c:90:71:38:19:1c:e7:ff:d9:11:a7: 7d:92:f9:a6:b1:36:f3:79:95:1a:76:62:ba:8f:69: a5:01:e3:75:e6:ad:02:2f:ff:ef:43:d9:af:ab:ab: 4a:f4:8c:a5:8d:3c:70:9e:d7:c9:53:d8:b3:a2:e2: 12:04:3d:4a:35:55:44:3b:fe:6e:aa:26:ba:c1:1e: fe:6b:05:af:97:8b:98:56:c9:df:55:fe:6f:ff:77: 2a:b4:18:4f:5b:a5:19:6a:73:2c:1e:3b:47:66:62: 80:22:97:33:ab:92:4e:d0:71:68:d9:7c:69:5b:e6: 40:35:9b:2e:c2:8f:91:84:44:d7:b0:35:9b:3f:87: 45:e2:af:3a:bf:ee:e0:86:86:7b:ad:54:1c:0b:95: df:97:a4:9c:b9:96:96:74:15:bb:55:ea:9c:a0:85: 3e:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 18:DB:35:93:43:E9:AC:49:85:1A:40:78:F7:4D:FD:3D:CA:36:BF:F8 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/A6650281B34535E2266DC69D33F9D88A5822A8D8FF0AC5ECCF2FF8F849CBF6E0/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/A6650281B34535E2266DC69D33F9D88A5822A8D8FF0AC5ECCF2FF8F849CBF6E0/0/18DB359343E9AC49851A4078F74DFD3DCA36BFF8.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.79.176.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28381 Signature Algorithm: sha256WithRSAEncryption 28:dd:47:28:86:b1:b9:b3:3d:9d:85:21:ba:91:93:05:99:e4: 55:1d:11:57:3e:45:7f:10:59:3d:c0:79:97:2e:e5:52:89:71: 78:bd:32:bc:eb:a3:8c:dd:4e:af:81:54:5a:ac:97:90:00:d4: 50:64:85:1b:a8:1d:1c:0f:37:e0:46:ae:16:bf:5e:22:de:5e: ec:05:ea:96:ff:bc:8e:d4:4b:45:d4:db:d8:e6:c6:6d:e4:7c: 46:f5:8b:97:2b:19:41:f7:04:d2:a9:45:96:64:b3:b2:98:e9: 9e:a2:1e:3d:9b:cd:d0:99:b9:ad:d2:ae:67:61:d8:3a:d5:a6: 39:bc:4f:94:30:e5:da:8f:04:67:99:f0:69:3f:5e:ea:3d:8d: 39:67:a1:a4:06:19:fc:c2:f0:0f:4d:7b:38:a3:62:56:39:eb: cb:d6:cb:6f:0c:e0:59:28:56:46:83:19:2f:be:5e:f2:39:36: 9d:fd:1c:8e:84:97:c9:03:55:b7:25:04:b1:ca:1f:05:b7:71: f3:b5:9d:df:51:da:28:61:73:b0:1e:ce:08:a4:c9:59:d9:04: a7:25:cf:29:81:bd:eb:3e:47:f0:27:c8:6f:19:bb:a7:66:3f: 46:45:da:b4:10:61:f1:6c:e7:87:00:d1:b6:60:80:5b:22:ae: 9d:15:cc:69 -----BEGIN CERTIFICATE----- MIIGlTCCBX2gAwIBAgIUWcMA5+Fq2+4YAIz1l2OMmE6Wb0EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjA0MjEyMDQwMDBaFw0yNzA0MjAyMDQ1MDBaMDMxMTAvBgNV BAMTKDE4REIzNTkzNDNFOUFDNDk4NTFBNDA3OEY3NERGRDNEQ0EzNkJGRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZVA8Fwi+E59z9XJkkIIrlOCqH hlXSMWaGh0MF1vBTDEGRvPvIfn0qVTHS57tQJFA7WE8WP3CxAhRQgmVwa9Pistoy ftxxDrkbicfbWnEy4ZaOtZq9D3uid/4LuciMkHE4GRzn/9kRp32S+aaxNvN5lRp2 YrqPaaUB43XmrQIv/+9D2a+rq0r0jKWNPHCe18lT2LOi4hIEPUo1VUQ7/m6qJrrB Hv5rBa+Xi5hWyd9V/m//dyq0GE9bpRlqcyweO0dmYoAilzOrkk7QcWjZfGlb5kA1 my7Cj5GERNewNZs/h0Xirzq/7uCGhnutVBwLld+XpJy5lpZ0FbtV6pyghT41AgMB AAGjggOfMIIDmzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQY2zWTQ+msSYUa QHj3Tf09yja/+DAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQTY2NTAyODFCMzQ1MzVFMjI2NkRDNjlE MzNGOUQ4OEE1ODIyQThEOEZGMEFDNUVDQ0YyRkY4Rjg0OUNCRjZFMC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9BNjY1MDI4MUIzNDUzNUUyMjY2REM2OUQzM0Y5RDg4QTU4MjJBOEQ4RkYw QUM1RUNDRjJGRjhGODQ5Q0JGNkUwLzAvMThEQjM1OTM0M0U5QUM0OTg1MUE0MDc4 Rjc0REZEM0RDQTM2QkZGOC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDyE+wMBkGCCsG AQUFBwEIAQH/BAowCKAGMAQCAm7dMA0GCSqGSIb3DQEBCwUAA4IBAQAo3UcohrG5 sz2dhSG6kZMFmeRVHRFXPkV/EFk9wHmXLuVSiXF4vTK866OM3U6vgVRarJeQANRQ ZIUbqB0cDzfgRq4Wv14i3l7sBeqW/7yO1EtF1NvY5sZt5HxG9YuXKxlB9wTSqUWW ZLOymOmeoh49m83Qmbmt0q5nYdg61aY5vE+UMOXajwRnmfBpP17qPY05Z6GkBhn8 wvAPTXs4o2JWOevL1stvDOBZKFZGgxkvvl7yOTad/RyOhJfJA1W3JQSxyh8Ft3Hz tZ3fUdooYXOwHs4IpMlZ2QSnJc8pgb3rPkfwJ8hvGbunZj9GRdq0EGHxbOeHANG2 YIBbIq6dFcxp -----END CERTIFICATE-----Generated at Thu Apr 30 04:54:22 2026 by rpki-client