$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E52B71FA71D263426D74ABA45BDB0F8FD370581.cer File: 1E52B71FA71D263426D74ABA45BDB0F8FD370581.cer (raw, json) Hash identifier: Pk3MA0Ku9va3W9tgrBwxpLRP0vB2y2ojalAW3hZH1uA= Subject key identifier: 1E:52:B7:1F:A7:1D:26:34:26:D7:4A:BA:45:BD:B0:F8:FD:37:05:81 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 033EA9363670883FF5FF6F94B85343AEBA09BAAE Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/05D8B1B628526895BCE0B6D83D96741F0C33F5CD38D5A3FD4820A518ACC9081B/0/1E52B71FA71D263426D74ABA45BDB0F8FD370581.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/05D8B1B628526895BCE0B6D83D96741F0C33F5CD38D5A3FD4820A518ACC9081B/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 11 Aug 2026 19:35:01 +0000 Certificate not after: Tue 10 Aug 2027 19:40:01 +0000 Subordinate resources: AS: 274968 IP: 2803:1530::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Sep 2026 08:52:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:3e:a9:36:36:70:88:3f:f5:ff:6f:94:b8:53:43:ae:ba:09:ba:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Aug 11 19:35:01 2026 GMT Not After : Aug 10 19:40:01 2027 GMT Subject: CN=1E52B71FA71D263426D74ABA45BDB0F8FD370581 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:da:7f:79:6c:77:af:5f:17:5d:45:64:07:be: 3e:f1:32:1d:32:69:eb:3d:2e:98:39:23:b0:e1:88: 42:6f:3f:03:2f:5f:79:c8:a0:cd:c5:0a:ba:c3:90: 56:84:f8:30:8c:d8:e8:00:35:6e:c7:ff:d4:ca:86: f5:38:37:6e:43:50:0c:a0:ca:83:94:07:27:a0:e5: 83:4d:f0:64:1a:18:8b:dc:11:d5:eb:6f:c5:a5:19: 3c:ad:62:51:14:65:d5:00:ad:72:73:d4:b5:97:91: 04:a9:7b:f3:b4:4b:f4:d8:88:61:5a:48:6f:76:92: 60:6d:8d:98:be:6a:a9:29:60:0b:98:d2:ed:d0:09: a6:a0:d4:49:67:bd:55:f5:e1:03:74:04:6c:8d:f0: 37:94:af:52:3e:16:d9:43:be:74:8b:7b:e4:56:77: 14:b6:b9:e5:98:b1:8e:aa:42:d3:01:cd:60:81:80: 8d:56:84:b1:74:47:5e:f1:4d:5b:77:38:e7:84:94: e9:83:83:5b:f6:d5:13:12:95:3e:6a:cf:90:ec:17: ff:84:42:93:51:f4:4a:04:bc:5e:9e:b6:22:40:48: 47:17:2c:5f:7b:50:9d:23:7b:19:1f:55:87:a5:b2: c1:bf:76:a3:38:2c:ba:ae:68:3e:32:81:c1:46:7c: 2f:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1E:52:B7:1F:A7:1D:26:34:26:D7:4A:BA:45:BD:B0:F8:FD:37:05:81 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/05D8B1B628526895BCE0B6D83D96741F0C33F5CD38D5A3FD4820A518ACC9081B/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/05D8B1B628526895BCE0B6D83D96741F0C33F5CD38D5A3FD4820A518ACC9081B/0/1E52B71FA71D263426D74ABA45BDB0F8FD370581.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:1530::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 274968 Signature Algorithm: sha256WithRSAEncryption 86:a6:03:cc:b4:79:9d:66:16:96:ff:4a:70:f0:b2:4e:63:50: 9c:d4:7e:5f:7e:6f:24:e2:a7:63:8e:17:63:77:4a:15:3d:08: 7b:b4:73:d8:3a:6b:d9:52:94:5f:f6:26:b1:f5:61:61:80:78: 8d:89:af:d8:5f:31:5e:4a:79:2c:6d:8f:21:f0:79:c9:fe:7d: b3:f4:2f:e1:6a:bc:c0:b6:5a:7c:6d:95:d0:59:b7:e8:c1:55: f4:fb:2b:4d:97:4b:5f:dc:8d:f5:6a:59:39:35:b1:5b:f1:89: e6:3b:db:91:14:66:dd:2d:75:fc:ca:5c:b9:77:b0:4f:f9:d2: 4b:7f:f5:d0:90:8d:97:14:1b:79:5a:ee:27:a0:cc:f4:de:01: 2a:01:28:b8:96:24:38:ed:fe:57:ea:c8:a6:4e:4c:13:63:23: d7:83:b2:e9:db:17:67:7e:11:3f:0a:d6:3f:09:70:a6:ea:6b: 47:2d:61:95:08:2b:9b:cb:15:e8:b2:c1:bb:c1:62:5e:3a:ca: 0f:fe:6a:4c:cf:b1:45:41:12:24:93:1f:bc:e1:63:b8:33:24: 5c:1c:f5:d4:c1:68:05:29:63:9a:7e:55:94:c9:05:af:53:9f: d8:39:f1:75:b1:2a:28:0e:0a:2b:ae:94:9f:49:60:d9:24:d9: 3a:72:fa:5c -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUAz6pNjZwiD/1/2+UuFNDrroJuq4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjA4MTExOTM1MDFaFw0yNzA4MTAxOTQwMDFaMDMxMTAvBgNV BAMTKDFFNTJCNzFGQTcxRDI2MzQyNkQ3NEFCQTQ1QkRCMEY4RkQzNzA1ODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt2n95bHevXxddRWQHvj7xMh0y aes9Lpg5I7DhiEJvPwMvX3nIoM3FCrrDkFaE+DCM2OgANW7H/9TKhvU4N25DUAyg yoOUByeg5YNN8GQaGIvcEdXrb8WlGTytYlEUZdUArXJz1LWXkQSpe/O0S/TYiGFa SG92kmBtjZi+aqkpYAuY0u3QCaag1ElnvVX14QN0BGyN8DeUr1I+FtlDvnSLe+RW dxS2ueWYsY6qQtMBzWCBgI1WhLF0R17xTVt3OOeElOmDg1v21RMSlT5qz5DsF/+E QpNR9EoEvF6etiJASEcXLF97UJ0jexkfVYelssG/dqM4LLquaD4ygcFGfC/jAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQeUrcfpx0mNCbX SrpFvbD4/TcFgTAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMDVEOEIxQjYyODUyNjg5NUJDRTBCNkQ4 M0Q5Njc0MUYwQzMzRjVDRDM4RDVBM0ZENDgyMEE1MThBQ0M5MDgxQi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8wNUQ4QjFCNjI4NTI2ODk1QkNFMEI2RDgzRDk2NzQxRjBDMzNGNUNEMzhE NUEzRkQ0ODIwQTUxOEFDQzkwODFCLzAvMUU1MkI3MUZBNzFEMjYzNDI2RDc0QUJB NDVCREIwRjhGRDM3MDU4MS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAMVMDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEMhgwDQYJKoZIhvcNAQELBQADggEBAIamA8y0 eZ1mFpb/SnDwsk5jUJzUfl9+byTip2OOF2N3ShU9CHu0c9g6a9lSlF/2JrH1YWGA eI2Jr9hfMV5KeSxtjyHwecn+fbP0L+FqvMC2WnxtldBZt+jBVfT7K02XS1/cjfVq WTk1sVvxieY725EUZt0tdfzKXLl3sE/50kt/9dCQjZcUG3la7iegzPTeASoBKLiW JDjt/lfqyKZOTBNjI9eDsunbF2d+ET8K1j8JcKbqa0ctYZUIK5vLFeiywbvBYl46 yg/+akzPsUVBEiSTH7zhY7gzJFwc9dTBaAUpY5p+VZTJBa9Tn9g58XWxKigOCiuu lJ9JYNkk2Tpy+lw= -----END CERTIFICATE-----Generated at Fri Sep 18 18:04:41 2026 by rpki-client