$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B90F26958B2EF1E581F62DD2BA07004A71EA9AB.cer File: 1B90F26958B2EF1E581F62DD2BA07004A71EA9AB.cer (raw, json) Hash identifier: RHLtq3eg4qBdMaov3DBxHcCJPJYa006GOdWJszwnqLM= Subject key identifier: 1B:90:F2:69:58:B2:EF:1E:58:1F:62:DD:2B:A0:70:04:A7:1E:A9:AB Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 62FCCCBF025AE1B97A8C19EA1077DC43F182DEAE Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/6B2D03321257B15C0B8E3EBA3F2D10A23184DB2787D41EBA071BFDE464C92D24/0/1B90F26958B2EF1E581F62DD2BA07004A71EA9AB.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/6B2D03321257B15C0B8E3EBA3F2D10A23184DB2787D41EBA071BFDE464C92D24/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Mon 27 Apr 2026 17:20:00 +0000 Certificate not after: Mon 26 Apr 2027 17:25:00 +0000 Subordinate resources: AS: 274887 IP: 2803:6630::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 04 May 2026 10:13:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:fc:cc:bf:02:5a:e1:b9:7a:8c:19:ea:10:77:dc:43:f1:82:de:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Apr 27 17:20:00 2026 GMT Not After : Apr 26 17:25:00 2027 GMT Subject: CN=1B90F26958B2EF1E581F62DD2BA07004A71EA9AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:58:c2:8c:9b:e5:9e:0b:63:eb:2f:76:ae:ea: bb:f9:3e:3d:9f:d7:e4:e8:53:a5:ae:47:1e:c8:bd: dc:75:3c:ce:6e:57:91:5b:77:a6:f8:c8:8c:38:92: db:27:74:35:89:a4:4b:ab:66:fd:ed:02:fd:15:c5: 71:30:7c:62:cb:62:08:28:5c:f5:6c:3d:eb:e2:2c: 06:a7:7c:b1:b0:5c:0b:f5:d2:8a:20:4d:bc:08:f8: 4a:6b:df:db:2b:46:53:2a:3b:db:ab:18:58:1b:12: c0:9c:a8:92:c7:5c:96:73:76:9a:3d:60:de:97:59: a0:d8:1e:eb:10:f5:7f:c1:40:af:17:79:2f:cc:cd: fb:01:14:cc:18:d1:d5:dc:da:05:a5:75:b7:62:96: 91:96:e8:ad:c4:a1:4a:57:97:ad:90:e6:a3:74:bd: a4:92:ac:19:3d:40:ef:68:ed:34:d9:c8:44:47:93: e5:77:02:c0:76:a8:1b:2c:85:6f:4c:1f:75:d9:3f: aa:10:b4:81:ce:9b:13:e4:f0:b3:9c:14:d2:68:ec: 8f:9e:96:73:dd:b1:c3:70:07:44:52:68:41:8f:ce: f6:0c:69:2f:bc:0a:01:5f:84:16:cc:c0:cd:37:d8: f0:7a:69:27:fb:67:fb:5a:87:ee:47:f2:da:29:b7: 7f:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1B:90:F2:69:58:B2:EF:1E:58:1F:62:DD:2B:A0:70:04:A7:1E:A9:AB X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6B2D03321257B15C0B8E3EBA3F2D10A23184DB2787D41EBA071BFDE464C92D24/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6B2D03321257B15C0B8E3EBA3F2D10A23184DB2787D41EBA071BFDE464C92D24/0/1B90F26958B2EF1E581F62DD2BA07004A71EA9AB.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:6630::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 274887 Signature Algorithm: sha256WithRSAEncryption 1d:56:dd:91:aa:e9:8f:5d:d7:78:82:d2:eb:ca:17:ac:45:22: aa:64:0d:ea:c7:22:e8:9a:13:c2:f9:b3:d0:e9:e5:cd:fa:81: 75:d7:ee:84:aa:1f:d3:e5:d6:eb:29:f6:57:f2:41:0a:9a:a8: 72:07:73:89:bc:23:a9:63:75:89:85:b6:35:10:08:ba:a2:67: a0:3e:0e:d5:5f:e6:0e:f0:b9:b5:71:f2:0d:01:4c:81:e3:e6: ec:f6:50:3c:f9:3a:6b:cc:63:45:d9:d0:ac:d3:3c:ec:d3:28: 1c:1f:f0:67:fb:fb:67:56:77:26:ec:aa:ae:c2:8e:b2:30:2d: df:50:a8:e4:3b:9f:80:11:74:f1:0f:5a:b3:5f:e9:66:4c:e2: c2:87:b3:0a:f4:dc:0b:90:c6:91:09:58:7b:1e:32:fc:71:15: 66:79:81:f1:d3:99:ee:90:fe:0a:d6:7a:f0:e6:a9:84:f8:4d: 02:50:f2:7e:0d:30:2c:59:fc:a7:0a:bd:af:82:5b:e5:97:16: 62:aa:0f:31:b3:62:3b:c0:58:59:41:87:04:45:35:73:fe:1d: 72:53:c0:8c:0d:3e:d0:1e:5f:24:12:0b:3c:4f:f2:9e:96:04: c1:56:52:6a:00:fe:f1:62:56:c8:f6:74:96:58:ed:c2:f9:3a: aa:95:ba:51 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUYvzMvwJa4bl6jBnqEHfcQ/GC3q4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjA0MjcxNzIwMDBaFw0yNzA0MjYxNzI1MDBaMDMxMTAvBgNV BAMTKDFCOTBGMjY5NThCMkVGMUU1ODFGNjJERDJCQTA3MDA0QTcxRUE5QUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVWMKMm+WeC2PrL3au6rv5Pj2f 1+ToU6WuRx7Ivdx1PM5uV5Fbd6b4yIw4ktsndDWJpEurZv3tAv0VxXEwfGLLYggo XPVsPeviLAanfLGwXAv10oogTbwI+Epr39srRlMqO9urGFgbEsCcqJLHXJZzdpo9 YN6XWaDYHusQ9X/BQK8XeS/MzfsBFMwY0dXc2gWldbdilpGW6K3EoUpXl62Q5qN0 vaSSrBk9QO9o7TTZyERHk+V3AsB2qBsshW9MH3XZP6oQtIHOmxPk8LOcFNJo7I+e lnPdscNwB0RSaEGPzvYMaS+8CgFfhBbMwM032PB6aSf7Z/tah+5H8topt38vAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQbkPJpWLLvHlgf Yt0roHAEpx6pqzAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNkIyRDAzMzIxMjU3QjE1QzBCOEUzRUJB M0YyRDEwQTIzMTg0REIyNzg3RDQxRUJBMDcxQkZERTQ2NEM5MkQyNC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy82QjJEMDMzMjEyNTdCMTVDMEI4RTNFQkEzRjJEMTBBMjMxODREQjI3ODdE NDFFQkEwNzFCRkRFNDY0QzkyRDI0LzAvMUI5MEYyNjk1OEIyRUYxRTU4MUY2MkRE MkJBMDcwMDRBNzFFQTlBQi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKANmMDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEMccwDQYJKoZIhvcNAQELBQADggEBAB1W3ZGq 6Y9d13iC0uvKF6xFIqpkDerHIuiaE8L5s9Dp5c36gXXX7oSqH9Pl1usp9lfyQQqa qHIHc4m8I6ljdYmFtjUQCLqiZ6A+DtVf5g7wubVx8g0BTIHj5uz2UDz5OmvMY0XZ 0KzTPOzTKBwf8Gf7+2dWdybsqq7CjrIwLd9QqOQ7n4ARdPEPWrNf6WZM4sKHswr0 3AuQxpEJWHseMvxxFWZ5gfHTme6Q/grWevDmqYT4TQJQ8n4NMCxZ/KcKva+CW+WX FmKqDzGzYjvAWFlBhwRFNXP+HXJTwIwNPtAeXyQSCzxP8p6WBMFWUmoA/vFiVsj2 dJZY7cL5OqqVulE= -----END CERTIFICATE-----Generated at Thu Apr 30 04:54:30 2026 by rpki-client