$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1EDF07918A1D03A6D19CDE9FA0DD7E1DCF4FC3A9.cer File: 1EDF07918A1D03A6D19CDE9FA0DD7E1DCF4FC3A9.cer (raw, json) Hash identifier: xf22X/Do01amZNa6/SiZvq5rKzfr4fXSlwONDUEccqs= Subject key identifier: 1E:DF:07:91:8A:1D:03:A6:D1:9C:DE:9F:A0:DD:7E:1D:CF:4F:C3:A9 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 74C1CD9144A94E959DD8795ACEA389D6F0D00F0D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/E206F4CF9E0902E0840E871FE1B8F231850560DC7D05D8D53DAC91DB99E95FB1/0/1EDF07918A1D03A6D19CDE9FA0DD7E1DCF4FC3A9.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/E206F4CF9E0902E0840E871FE1B8F231850560DC7D05D8D53DAC91DB99E95FB1/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Mon 28 Sep 2026 21:55:03 +0000 Certificate not after: Mon 27 Sep 2027 22:00:03 +0000 Subordinate resources: AS: 270147 IP: 2806:3c5::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 19 Oct 2026 18:47:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:c1:cd:91:44:a9:4e:95:9d:d8:79:5a:ce:a3:89:d6:f0:d0:0f:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Sep 28 21:55:03 2026 GMT Not After : Sep 27 22:00:03 2027 GMT Subject: CN=1EDF07918A1D03A6D19CDE9FA0DD7E1DCF4FC3A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:35:d1:9a:79:35:1b:70:b9:68:fd:ec:1b:fa: 81:c7:92:db:87:7b:ce:76:e6:30:36:12:29:f0:15: 5d:21:b1:fb:52:66:e4:d8:5d:a1:38:fc:4e:12:da: 81:3c:44:4e:b7:90:f9:a4:e7:89:94:b9:a2:dc:1a: 3b:6a:45:86:30:a7:38:06:57:f3:dc:5f:6b:f3:7b: 82:83:f8:6c:8a:5d:93:c1:a4:48:3c:25:dc:44:0c: 23:f3:a9:44:0d:67:12:0a:d0:05:11:1e:e2:8d:ad: f1:7d:ca:5b:14:74:1b:55:8e:2d:33:4c:3b:bd:85: a8:03:8d:f1:f0:06:e9:ef:43:2c:41:5e:27:16:0c: c8:84:9c:98:35:a7:88:10:5d:96:e7:d0:8b:85:06: b4:e1:4d:b3:23:ef:68:f0:4b:48:27:fc:99:b3:b0: 57:0e:d0:4d:3c:f3:93:91:e0:d2:10:d3:a7:95:93: 1e:1c:9f:ca:69:a9:f1:ff:54:65:c2:cf:13:e1:e6: e6:51:5a:a6:e4:d4:2a:72:2c:e1:e2:a2:28:43:c4: 97:5a:be:ce:24:af:e1:13:dc:0b:ab:d7:84:b1:c4: 66:65:63:9e:3f:f1:90:0e:f7:94:b9:19:07:94:15: 78:6b:38:73:51:c6:02:88:00:ec:30:ff:16:6d:ae: 02:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1E:DF:07:91:8A:1D:03:A6:D1:9C:DE:9F:A0:DD:7E:1D:CF:4F:C3:A9 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/E206F4CF9E0902E0840E871FE1B8F231850560DC7D05D8D53DAC91DB99E95FB1/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/E206F4CF9E0902E0840E871FE1B8F231850560DC7D05D8D53DAC91DB99E95FB1/0/1EDF07918A1D03A6D19CDE9FA0DD7E1DCF4FC3A9.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2806:3c5::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 270147 Signature Algorithm: sha256WithRSAEncryption 09:b4:df:fa:6f:b0:2a:c8:e0:6a:78:ac:a0:bd:21:2f:9d:18: 08:93:64:29:be:f5:ef:e4:04:5f:b6:37:6b:0e:d7:67:92:a7: f8:1d:e2:78:fc:ac:d9:28:e4:4b:3e:aa:22:57:e0:05:17:e0: 08:ad:9e:d5:33:86:b9:d2:84:1e:4f:f6:c1:ec:df:bd:5d:3f: 8b:48:f4:b0:10:0b:ed:7e:89:f3:5e:b8:23:03:a3:cf:40:32: 32:b7:26:a0:9d:b6:7b:1e:7b:83:04:bf:a2:ca:28:aa:44:9e: 57:2a:7b:00:56:43:0e:76:18:1f:88:e2:93:41:d2:e4:e9:92: 03:df:b7:a9:47:91:62:dd:15:85:8c:61:2f:16:af:a3:dc:99: 93:e8:92:12:56:35:c0:81:b6:b5:c1:6f:b4:cb:cb:16:d9:c9: 05:d7:ae:21:16:8b:aa:2c:b9:86:4c:93:d2:08:28:df:c4:6e: bf:0e:90:7f:37:fb:ee:ac:02:33:60:c3:1d:40:08:b5:9b:c2: d3:0c:ff:13:77:f7:0f:c4:66:5e:3a:cc:6b:73:3a:e8:9c:fe: cb:e4:5d:c9:ba:ac:d4:74:e4:57:6a:a4:f1:dc:e1:58:18:6d: f4:17:d5:97:a4:df:12:99:b9:ad:78:73:c9:fb:ab:66:2c:83: 69:42:35:88 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUdMHNkUSpTpWd2HlazqOJ1vDQDw0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjA5MjgyMTU1MDNaFw0yNzA5MjcyMjAwMDNaMDMxMTAvBgNV BAMTKDFFREYwNzkxOEExRDAzQTZEMTlDREU5RkEwREQ3RTFEQ0Y0RkMzQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDNdGaeTUbcLlo/ewb+oHHktuH e8525jA2EinwFV0hsftSZuTYXaE4/E4S2oE8RE63kPmk54mUuaLcGjtqRYYwpzgG V/PcX2vze4KD+GyKXZPBpEg8JdxEDCPzqUQNZxIK0AURHuKNrfF9ylsUdBtVji0z TDu9hagDjfHwBunvQyxBXicWDMiEnJg1p4gQXZbn0IuFBrThTbMj72jwS0gn/Jmz sFcO0E0885OR4NIQ06eVkx4cn8ppqfH/VGXCzxPh5uZRWqbk1CpyLOHioihDxJda vs4kr+ET3Aur14SxxGZlY54/8ZAO95S5GQeUFXhrOHNRxgKIAOww/xZtrgLNAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQe3weRih0DptGc 3p+g3X4dz0/DqTAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTIwNkY0Q0Y5RTA5MDJFMDg0MEU4NzFG RTFCOEYyMzE4NTA1NjBEQzdEMDVEOEQ1M0RBQzkxREI5OUU5NUZCMS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9FMjA2RjRDRjlFMDkwMkUwODQwRTg3MUZFMUI4RjIzMTg1MDU2MERDN0Qw NUQ4RDUzREFDOTFEQjk5RTk1RkIxLzAvMUVERjA3OTE4QTFEMDNBNkQxOUNERTlG QTBERDdFMURDRjRGQzNBOS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAYDxTAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEH0MwDQYJKoZIhvcNAQELBQADggEBAAm03/pv sCrI4Gp4rKC9IS+dGAiTZCm+9e/kBF+2N2sO12eSp/gd4nj8rNko5Es+qiJX4AUX 4AitntUzhrnShB5P9sHs371dP4tI9LAQC+1+ifNeuCMDo89AMjK3JqCdtnsee4ME v6LKKKpEnlcqewBWQw52GB+I4pNB0uTpkgPft6lHkWLdFYWMYS8Wr6PcmZPokhJW NcCBtrXBb7TLyxbZyQXXriEWi6osuYZMk9IIKN/Ebr8OkH83++6sAjNgwx1ACLWb wtMM/xN39w/EZl46zGtzOuic/svkXcm6rNR05FdqpPHc4VgYbfQX1Zek3xKZua14 c8n7q2Ysg2lCNYg= -----END CERTIFICATE-----Generated at Fri Oct 16 04:09:19 2026 by rpki-client