$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/19976E5BA74FB247FC4055C5D407269E0EE49686.cer File: 19976E5BA74FB247FC4055C5D407269E0EE49686.cer (raw, json) Hash identifier: eKHfSdXNpCbAedWLhq1qUzTyH9IOhVctNHUtwdMd/WM= Subject key identifier: 19:97:6E:5B:A7:4F:B2:47:FC:40:55:C5:D4:07:26:9E:0E:E4:96:86 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 2A81F7803F1909AA3F9CC64BC6C03EC011F374D3 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/858F66A5B527A36883A8D3ED7CD4AC02AA2F80006C55CE4019563808C0C0BFAC/0/19976E5BA74FB247FC4055C5D407269E0EE49686.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/858F66A5B527A36883A8D3ED7CD4AC02AA2F80006C55CE4019563808C0C0BFAC/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Fri 24 Apr 2026 20:10:01 +0000 Certificate not after: Fri 23 Apr 2027 20:15:01 +0000 Subordinate resources: AS: 272063 IP: 2803:6310::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 01 May 2026 01:56:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:81:f7:80:3f:19:09:aa:3f:9c:c6:4b:c6:c0:3e:c0:11:f3:74:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Apr 24 20:10:01 2026 GMT Not After : Apr 23 20:15:01 2027 GMT Subject: CN=19976E5BA74FB247FC4055C5D407269E0EE49686 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:2f:4d:7d:ad:18:54:57:de:bf:d5:b7:14:13: 77:0c:bb:4d:d6:1c:72:c8:51:d9:d1:3f:ca:07:70: 06:f8:d2:78:52:b5:31:7e:90:f6:39:e3:a5:d3:f6: 5f:36:d8:6a:50:84:a7:2e:19:86:e7:d2:95:01:84: 4c:9e:89:5d:84:08:ce:6e:9f:e1:a4:70:08:6c:f2: 76:42:bb:cd:de:dc:b9:84:2e:d5:6f:3a:2b:c5:82: fb:4c:b2:b5:eb:b3:99:cc:c1:0f:0c:6b:a1:e9:34: 1e:3a:62:39:0f:2f:bf:d5:55:ed:f1:56:9a:d5:9b: 1a:50:89:9e:04:c4:d8:85:7b:b9:5a:cd:2c:c1:40: 61:98:1d:7c:68:83:4f:17:b1:b9:ed:16:de:5c:91: b6:a0:31:51:e5:1d:fe:62:2e:b5:ab:f9:3c:ae:51: a6:a6:62:80:51:84:0f:b7:f0:77:1d:23:b0:c9:a9: 79:1f:e4:a6:73:2b:64:02:40:d0:73:af:af:71:49: fc:8b:96:bf:77:c1:da:f5:f2:53:02:25:67:60:5d: 5f:5a:0d:37:5c:25:64:b0:cf:c1:11:6a:66:cf:21: 2e:7c:31:f8:ca:cd:d1:a5:2d:d8:96:53:44:6f:41: 94:59:49:49:ff:b9:28:06:1b:a0:6c:92:b0:df:0f: 3f:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 19:97:6E:5B:A7:4F:B2:47:FC:40:55:C5:D4:07:26:9E:0E:E4:96:86 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/858F66A5B527A36883A8D3ED7CD4AC02AA2F80006C55CE4019563808C0C0BFAC/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/858F66A5B527A36883A8D3ED7CD4AC02AA2F80006C55CE4019563808C0C0BFAC/0/19976E5BA74FB247FC4055C5D407269E0EE49686.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:6310::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 272063 Signature Algorithm: sha256WithRSAEncryption 58:45:03:f6:8d:48:60:43:e3:17:aa:23:6d:25:6a:6b:e0:86: ed:18:79:f2:17:df:ac:51:31:e0:d3:97:82:56:92:4e:92:bd: 0c:0c:d7:f7:6e:0e:d5:a5:75:a6:f2:a8:00:52:cf:1d:0e:58: 32:86:0e:9a:68:c7:8b:4b:7c:91:46:dd:74:1f:99:a4:f3:40: b1:59:5f:e9:ce:a0:d4:eb:52:55:40:2a:2b:fd:f9:b3:36:fc: a0:32:71:dd:48:2e:28:2b:0c:1e:8f:24:71:c1:06:b6:be:a2: 7e:06:f8:de:2f:24:79:30:e7:ed:ac:85:86:33:10:7d:b7:c3: b5:02:db:8a:4b:e4:4c:03:e3:c1:67:83:46:01:c4:a0:c9:49: fc:19:ed:70:f0:39:7b:38:31:1f:f9:0a:b6:5d:23:ba:14:88: 92:bb:97:32:9b:41:a3:5a:7d:ea:f5:58:0e:dc:58:5a:fe:b0: cd:da:f3:43:9a:ea:5d:8b:10:1e:24:f3:0c:61:01:c5:09:e6: 7c:34:f8:d2:ad:be:6c:52:79:27:88:b9:2b:ce:0e:18:f0:32: f7:12:d2:28:0e:43:e2:3d:e2:a5:4e:9a:de:f5:83:32:18:7e: 70:63:a5:0d:44:1b:94:78:bf:65:a2:88:9d:b1:4e:6d:4b:0e: bb:60:1c:89 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUKoH3gD8ZCao/nMZLxsA+wBHzdNMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjA0MjQyMDEwMDFaFw0yNzA0MjMyMDE1MDFaMDMxMTAvBgNV BAMTKDE5OTc2RTVCQTc0RkIyNDdGQzQwNTVDNUQ0MDcyNjlFMEVFNDk2ODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFL019rRhUV96/1bcUE3cMu03W HHLIUdnRP8oHcAb40nhStTF+kPY546XT9l822GpQhKcuGYbn0pUBhEyeiV2ECM5u n+GkcAhs8nZCu83e3LmELtVvOivFgvtMsrXrs5nMwQ8Ma6HpNB46YjkPL7/VVe3x VprVmxpQiZ4ExNiFe7lazSzBQGGYHXxog08XsbntFt5ckbagMVHlHf5iLrWr+Tyu UaamYoBRhA+38HcdI7DJqXkf5KZzK2QCQNBzr69xSfyLlr93wdr18lMCJWdgXV9a DTdcJWSwz8ERambPIS58MfjKzdGlLdiWU0RvQZRZSUn/uSgGG6BskrDfDz+zAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQZl25bp0+yR/xA VcXUByaeDuSWhjAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvODU4RjY2QTVCNTI3QTM2ODgzQThEM0VE N0NENEFDMDJBQTJGODAwMDZDNTVDRTQwMTk1NjM4MDhDMEMwQkZBQy8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy84NThGNjZBNUI1MjdBMzY4ODNBOEQzRUQ3Q0Q0QUMwMkFBMkY4MDAwNkM1 NUNFNDAxOTU2MzgwOEMwQzBCRkFDLzAvMTk5NzZFNUJBNzRGQjI0N0ZDNDA1NUM1 RDQwNzI2OUUwRUU0OTY4Ni5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKANjEDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEJr8wDQYJKoZIhvcNAQELBQADggEBAFhFA/aN SGBD4xeqI20lamvghu0YefIX36xRMeDTl4JWkk6SvQwM1/duDtWldabyqABSzx0O WDKGDppox4tLfJFG3XQfmaTzQLFZX+nOoNTrUlVAKiv9+bM2/KAycd1ILigrDB6P JHHBBra+on4G+N4vJHkw5+2shYYzEH23w7UC24pL5EwD48Fng0YBxKDJSfwZ7XDw OXs4MR/5CrZdI7oUiJK7lzKbQaNafer1WA7cWFr+sM3a80Oa6l2LEB4k8wxhAcUJ 5nw0+NKtvmxSeSeIuSvODhjwMvcS0igOQ+I94qVOmt71gzIYfnBjpQ1EG5R4v2Wi iJ2xTm1LDrtgHIk= -----END CERTIFICATE-----Generated at Mon Apr 27 19:27:13 2026 by rpki-client