$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.cer File: 28BD72CC626D434E15A590C0356FDB1E6564DCF6.cer (raw, json) Hash identifier: YNJNyUgnCljt0As0QD0aLNiXUVzDAQH+udg4rbUc+Ys= Subject key identifier: 28:BD:72:CC:62:6D:43:4E:15:A5:90:C0:35:6F:DB:1E:65:64:DC:F6 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 4018DB3D8545B6BDA2711872C78762F460C4A6BF Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 15 Sep 2026 13:20:02 +0000 Certificate not after: Tue 14 Sep 2027 13:25:02 +0000 Subordinate resources: AS: 52266 IP: 201.219.252.0/22 IP: 2800:700::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Sep 2026 08:52:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:18:db:3d:85:45:b6:bd:a2:71:18:72:c7:87:62:f4:60:c4:a6:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Sep 15 13:20:02 2026 GMT Not After : Sep 14 13:25:02 2027 GMT Subject: CN=28BD72CC626D434E15A590C0356FDB1E6564DCF6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:2e:cb:55:27:57:93:22:e3:26:fe:09:db:7f: c9:28:d5:70:7e:e6:64:57:a3:5f:5d:f3:b1:81:9b: 49:7e:14:52:fa:0a:5b:42:b7:72:3a:38:04:25:b9: 40:01:dc:45:7c:b1:8f:2f:be:10:fe:ae:b3:47:34: cb:a2:41:01:9b:f9:41:ca:e8:a8:a3:df:ff:07:3b: 74:66:86:1b:b0:83:7c:7f:bf:b1:17:01:ba:d8:b1: ef:94:3d:c0:af:a4:4e:80:4d:54:a5:dc:60:ec:fd: d9:9f:93:90:c6:a6:1c:35:4b:9e:f1:85:c5:da:67: e0:20:58:49:84:6d:60:11:7d:9f:17:1e:85:e4:63: ad:53:e2:67:8d:a0:b7:1c:5e:57:80:21:94:2b:60: 45:10:98:48:dd:29:28:1f:67:95:ab:a2:8f:7d:5b: 43:bc:81:4c:de:39:71:b2:1c:d5:45:f9:60:f1:2c: d9:23:29:56:0a:98:3f:e3:37:4d:63:be:e2:b5:e4: 11:f8:6b:1f:f4:cb:97:6c:18:a7:d0:d8:e3:ec:c0: 60:ca:01:ea:29:b6:20:a5:9a:0b:7e:5c:41:a9:5c: 42:e3:99:1a:32:42:d5:15:f2:5d:19:d7:d0:21:dc: 33:8e:86:1a:6c:10:f4:d4:7f:38:f1:b6:31:a9:0c: f9:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 28:BD:72:CC:62:6D:43:4E:15:A5:90:C0:35:6F:DB:1E:65:64:DC:F6 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/28BD72CC626D434E15A590C0356FDB1E6564DCF6.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 201.219.252.0/22 IPv6: 2800:700::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52266 Signature Algorithm: sha256WithRSAEncryption 23:e4:c0:83:ff:e7:11:71:57:1f:53:aa:92:4a:ec:30:d0:bf: c5:11:9e:a1:6e:72:cf:76:be:e8:c1:4b:2e:36:61:98:ae:e0: 48:b9:e9:5b:8b:95:35:e7:4d:61:f7:6d:28:cf:55:fa:6e:79: 8d:4d:5e:06:b4:dd:2e:1a:e0:64:c4:a1:49:c8:b7:a0:78:63: 4a:b8:09:32:81:71:f6:f3:51:5f:d3:51:73:84:64:4c:46:de: 1c:20:cb:0c:0a:23:e5:9a:98:96:e2:20:66:26:5c:26:5b:e6: 6f:b8:89:7c:4a:13:7f:8e:62:1d:d1:ac:fa:a5:37:98:2c:06: 19:29:6e:ac:89:f1:99:7c:97:25:0f:da:c7:a1:17:96:bb:f2: bb:04:f4:15:2e:1e:d8:a4:f6:28:c9:c9:fd:29:d2:84:93:13: 2f:f4:86:e2:dc:fb:04:49:81:3c:e4:8d:c4:52:4e:58:e3:68: 4d:dc:80:2c:78:9f:1e:1b:0c:fc:fe:a2:2f:bd:44:b8:45:88: c3:75:d0:3e:7c:ce:2b:80:eb:99:db:98:c4:80:a6:ef:78:e6: 19:8a:c3:73:7d:aa:40:77:ee:c2:82:59:d9:2c:f9:b5:11:11: 33:ac:80:f9:d7:9c:85:24:6c:ea:2f:a7:85:ad:24:9a:9d:ef: 6e:16:1d:7a -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUQBjbPYVFtr2icRhyx4di9GDEpr8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjA5MTUxMzIwMDJaFw0yNzA5MTQxMzI1MDJaMDMxMTAvBgNV BAMTKDI4QkQ3MkNDNjI2RDQzNEUxNUE1OTBDMDM1NkZEQjFFNjU2NERDRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeLstVJ1eTIuMm/gnbf8ko1XB+ 5mRXo19d87GBm0l+FFL6CltCt3I6OAQluUAB3EV8sY8vvhD+rrNHNMuiQQGb+UHK 6Kij3/8HO3Rmhhuwg3x/v7EXAbrYse+UPcCvpE6ATVSl3GDs/dmfk5DGphw1S57x hcXaZ+AgWEmEbWARfZ8XHoXkY61T4meNoLccXleAIZQrYEUQmEjdKSgfZ5Wroo99 W0O8gUzeOXGyHNVF+WDxLNkjKVYKmD/jN01jvuK15BH4ax/0y5dsGKfQ2OPswGDK AeoptiClmgt+XEGpXELjmRoyQtUV8l0Z19Ah3DOOhhpsEPTUfzjxtjGpDPlzAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQovXLMYm1DThWl kMA1b9seZWTc9jAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvOTQ3Q0YyRjBFRDMzODY0RjA5MTUzRDYy MjRFMUZDRjcwODAzNDAyNkQ0QTFGRjBFMDBCNDFFMjc3NUVEMDI5RS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy85NDdDRjJGMEVEMzM4NjRGMDkxNTNENjIyNEUxRkNGNzA4MDM0MDI2RDRB MUZGMEUwMEI0MUUyNzc1RUQwMjlFLzAvMjhCRDcyQ0M2MjZENDM0RTE1QTU5MEMw MzU2RkRCMUU2NTY0RENGNi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCydv8MA0EAgAC MAcDBQAoAAcAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDMKjANBgkqhkiG9w0B AQsFAAOCAQEAI+TAg//nEXFXH1OqkkrsMNC/xRGeoW5yz3a+6MFLLjZhmK7gSLnp W4uVNedNYfdtKM9V+m55jU1eBrTdLhrgZMShSci3oHhjSrgJMoFx9vNRX9NRc4Rk TEbeHCDLDAoj5ZqYluIgZiZcJlvmb7iJfEoTf45iHdGs+qU3mCwGGSlurInxmXyX JQ/ax6EXlrvyuwT0FS4e2KT2KMnJ/SnShJMTL/SG4tz7BEmBPOSNxFJOWONoTdyA LHifHhsM/P6iL71EuEWIw3XQPnzOK4DrmduYxICm73jmGYrDc32qQHfuwoJZ2Sz5 tRERM6yA+dechSRs6i+nha0kmp3vbhYdeg== -----END CERTIFICATE-----Generated at Fri Sep 18 18:05:22 2026 by rpki-client