$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28F4CD1BA027DEA3F4E3C7BFA084132782DB2EFE.cer File: 28F4CD1BA027DEA3F4E3C7BFA084132782DB2EFE.cer (raw, json) Hash identifier: MWqbJAc8XxpWNe2nnMAsUN/lYastR3GtYU70rivW9pY= Subject key identifier: 28:F4:CD:1B:A0:27:DE:A3:F4:E3:C7:BF:A0:84:13:27:82:DB:2E:FE Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 71761F71E46A7864D2FFDD3FA7E894A45D8C12E5 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/33600C675659EE0E52D3800AA74321BE6A2E01BAA6C860678AD14C153770C6B0/0/28F4CD1BA027DEA3F4E3C7BFA084132782DB2EFE.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/33600C675659EE0E52D3800AA74321BE6A2E01BAA6C860678AD14C153770C6B0/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Sat 15 Aug 2026 03:00:01 +0000 Certificate not after: Sat 14 Aug 2027 03:05:01 +0000 Subordinate resources: AS: 274949 IP: 2803:e930::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Sep 2026 08:52:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:76:1f:71:e4:6a:78:64:d2:ff:dd:3f:a7:e8:94:a4:5d:8c:12:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Aug 15 03:00:01 2026 GMT Not After : Aug 14 03:05:01 2027 GMT Subject: CN=28F4CD1BA027DEA3F4E3C7BFA084132782DB2EFE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:a0:f5:45:59:3f:94:76:f8:b7:b4:44:5f:56: bc:9e:d9:5a:d5:a5:b2:fd:80:38:85:e5:2a:1d:b9: 1c:dc:90:ed:6c:95:76:e4:ef:80:41:90:c3:ff:46: c8:c4:3d:fc:db:49:67:61:0d:93:f8:f5:cf:e8:9a: 7e:6b:5a:ac:c5:95:f2:6e:55:69:fa:bd:7f:a4:0f: d6:98:25:05:02:2b:f3:8d:af:6c:39:83:3e:2b:4e: cc:88:d2:5a:27:d5:c6:5d:86:22:e7:64:a4:21:53: ee:d0:44:42:b6:51:b1:d8:7a:cd:42:fc:b4:0c:14: e8:3b:60:e3:79:52:b1:72:02:7c:f7:d8:37:d3:76: 2e:45:a0:ae:5a:40:31:d4:d3:aa:e1:d6:0a:45:5c: 35:7f:9c:98:7c:9d:7a:4c:3f:a1:10:31:8e:8a:94: 82:c3:76:c8:ba:00:54:3c:75:ba:ff:92:3b:9e:86: 74:d9:0c:70:ae:0f:aa:1b:c3:56:b1:ff:95:49:3d: b4:92:9d:18:c1:aa:6a:15:29:3a:14:18:48:a0:7a: c7:63:85:9b:de:e1:d7:54:24:e1:aa:5c:4d:9d:8a: 73:85:02:a5:8a:e4:6b:5c:b8:f5:36:85:3f:5a:aa: 6c:20:e5:90:f5:95:06:0e:a5:b5:2f:54:71:53:3f: f5:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 28:F4:CD:1B:A0:27:DE:A3:F4:E3:C7:BF:A0:84:13:27:82:DB:2E:FE X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/33600C675659EE0E52D3800AA74321BE6A2E01BAA6C860678AD14C153770C6B0/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/33600C675659EE0E52D3800AA74321BE6A2E01BAA6C860678AD14C153770C6B0/0/28F4CD1BA027DEA3F4E3C7BFA084132782DB2EFE.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:e930::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 274949 Signature Algorithm: sha256WithRSAEncryption 0b:02:7e:35:b9:1a:67:ad:e6:29:64:ab:89:8d:72:04:e6:1b: 30:a2:dc:9e:5a:9b:68:1d:9d:21:40:ed:93:9b:77:b5:7d:58: 51:5a:89:9f:ac:3f:3e:9b:41:7e:5e:e0:6e:01:b0:41:b6:0b: 01:2a:c9:b4:8f:a5:10:b5:94:e6:a3:22:1a:7d:a3:3d:47:64: b5:c7:6d:6c:ed:72:c4:af:21:da:f6:57:d9:cb:6d:b2:91:7a: 8c:ef:80:26:08:8d:c3:8b:2f:1b:4a:9b:1b:39:5d:34:72:58: ff:40:8d:b4:09:12:17:6e:bc:b0:c3:89:5f:d5:32:5c:33:64: 75:73:59:3d:bf:9b:07:28:f3:3e:0f:bd:af:b0:13:b5:ef:5e: 71:7e:fe:b3:37:80:f5:6a:07:12:33:74:20:22:68:f4:87:0c: ee:7b:82:d9:2b:6d:b5:7e:61:d8:b3:30:11:ed:0c:bf:26:04: 62:a4:91:1f:14:df:79:53:ee:75:c9:d2:af:71:cd:31:41:d1: e9:94:8c:86:c7:86:b9:d8:3e:04:d4:dc:e2:ed:3d:38:e8:6f: d1:67:10:c1:2d:f9:ef:fe:75:d6:75:38:ab:04:42:fe:f5:5a: fc:5e:65:f7:f5:07:1e:c8:4e:0b:98:0e:90:ca:e3:b4:06:0e: df:57:ec:5c -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUcXYfceRqeGTS/90/p+iUpF2MEuUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjA4MTUwMzAwMDFaFw0yNzA4MTQwMzA1MDFaMDMxMTAvBgNV BAMTKDI4RjRDRDFCQTAyN0RFQTNGNEUzQzdCRkEwODQxMzI3ODJEQjJFRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCboPVFWT+Udvi3tERfVrye2VrV pbL9gDiF5SoduRzckO1slXbk74BBkMP/RsjEPfzbSWdhDZP49c/omn5rWqzFlfJu VWn6vX+kD9aYJQUCK/ONr2w5gz4rTsyI0lon1cZdhiLnZKQhU+7QREK2UbHYes1C /LQMFOg7YON5UrFyAnz32DfTdi5FoK5aQDHU06rh1gpFXDV/nJh8nXpMP6EQMY6K lILDdsi6AFQ8dbr/kjuehnTZDHCuD6obw1ax/5VJPbSSnRjBqmoVKToUGEigesdj hZve4ddUJOGqXE2dinOFAqWK5GtcuPU2hT9aqmwg5ZD1lQYOpbUvVHFTP/UbAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQo9M0boCfeo/Tj x7+ghBMngtsu/jAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMzM2MDBDNjc1NjU5RUUwRTUyRDM4MDBB QTc0MzIxQkU2QTJFMDFCQUE2Qzg2MDY3OEFEMTRDMTUzNzcwQzZCMC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8zMzYwMEM2NzU2NTlFRTBFNTJEMzgwMEFBNzQzMjFCRTZBMkUwMUJBQTZD ODYwNjc4QUQxNEMxNTM3NzBDNkIwLzAvMjhGNENEMUJBMDI3REVBM0Y0RTNDN0JG QTA4NDEzMjc4MkRCMkVGRS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAPpMDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEMgUwDQYJKoZIhvcNAQELBQADggEBAAsCfjW5 Gmet5ilkq4mNcgTmGzCi3J5am2gdnSFA7ZObd7V9WFFaiZ+sPz6bQX5e4G4BsEG2 CwEqybSPpRC1lOajIhp9oz1HZLXHbWztcsSvIdr2V9nLbbKReozvgCYIjcOLLxtK mxs5XTRyWP9AjbQJEhduvLDDiV/VMlwzZHVzWT2/mwco8z4Pva+wE7XvXnF+/rM3 gPVqBxIzdCAiaPSHDO57gtkrbbV+YdizMBHtDL8mBGKkkR8U33lT7nXJ0q9xzTFB 0emUjIbHhrnYPgTU3OLtPTjob9FnEMEt+e/+ddZ1OKsEQv71WvxeZff1Bx7ITguY DpDK47QGDt9X7Fw= -----END CERTIFICATE-----Generated at Fri Sep 18 18:04:35 2026 by rpki-client