$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2ACEAB361D8AE24A7EE6C9257C98B965C2097942.cer File: 2ACEAB361D8AE24A7EE6C9257C98B965C2097942.cer (raw, json) Hash identifier: QhSrUgmITjAfQkHRUmXJ1/yPLmRznUFKEHoC7aubzdw= Subject key identifier: 2A:CE:AB:36:1D:8A:E2:4A:7E:E6:C9:25:7C:98:B9:65:C2:09:79:42 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 14CE647BFB5F0BDE1ADD3223296C0FB390E063F1 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/BFDFCE3DC119F64BD0DC0FCF7AE1CD3BD7330FD49BFF75F629B97F872C7F569C/0/2ACEAB361D8AE24A7EE6C9257C98B965C2097942.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/BFDFCE3DC119F64BD0DC0FCF7AE1CD3BD7330FD49BFF75F629B97F872C7F569C/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Thu 03 Sep 2026 03:35:01 +0000 Certificate not after: Thu 02 Sep 2027 03:40:01 +0000 Subordinate resources: AS: 275028 IP: 2803:730::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Sep 2026 08:52:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:ce:64:7b:fb:5f:0b:de:1a:dd:32:23:29:6c:0f:b3:90:e0:63:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Sep 3 03:35:01 2026 GMT Not After : Sep 2 03:40:01 2027 GMT Subject: CN=2ACEAB361D8AE24A7EE6C9257C98B965C2097942 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:44:f6:f0:74:3f:d1:55:3a:fc:dd:91:f9:b3: e5:7c:49:4f:b0:26:50:68:c0:3a:11:07:d6:15:82: 99:e1:1c:8f:d8:17:b3:6c:03:48:e4:7d:05:f6:fe: 18:39:a3:ae:1d:26:b0:3b:c7:c6:a4:fa:91:80:33: 3c:25:3d:0e:43:f5:43:b8:c7:2e:08:17:7d:32:f0: 3c:ba:c6:be:9e:35:8b:c4:47:4d:0d:76:1c:6d:68: a2:99:62:5b:55:ca:25:68:94:24:dc:34:62:6d:ad: 7a:6e:e3:48:65:08:57:ee:e5:4b:83:ad:ac:79:1e: 11:26:86:2f:84:c4:ee:dc:ca:57:23:fd:30:5f:70: 16:1e:bf:dd:3b:fc:e7:b2:c5:a7:99:17:10:1b:4c: 4f:08:9c:bd:0e:60:41:a6:82:dc:95:e1:0d:17:8d: 0f:7f:90:eb:3d:52:c4:46:4a:02:62:3c:a0:49:df: 3d:b2:48:aa:7d:f8:bb:21:08:af:09:27:7b:c0:20: c6:a8:0a:25:58:f7:76:aa:8c:ef:30:18:ce:ce:bb: 41:2e:11:cf:32:67:de:36:c5:0a:f1:58:78:22:81: 85:d5:81:2a:56:1c:90:0d:13:07:2e:6b:61:8f:c8: 2d:41:48:8a:47:a3:57:11:f0:26:68:d8:e6:80:b7: cd:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2A:CE:AB:36:1D:8A:E2:4A:7E:E6:C9:25:7C:98:B9:65:C2:09:79:42 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/BFDFCE3DC119F64BD0DC0FCF7AE1CD3BD7330FD49BFF75F629B97F872C7F569C/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/BFDFCE3DC119F64BD0DC0FCF7AE1CD3BD7330FD49BFF75F629B97F872C7F569C/0/2ACEAB361D8AE24A7EE6C9257C98B965C2097942.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:730::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 275028 Signature Algorithm: sha256WithRSAEncryption 30:7c:e9:c6:2a:01:ed:39:e3:89:a9:93:02:a6:77:09:3e:93: d0:1d:0a:74:dc:8e:3b:42:e6:a7:89:bf:5c:59:67:fb:ad:63: 7f:cc:89:0c:e4:07:57:54:06:4e:29:d5:00:1f:a1:bd:f7:df: 45:ee:81:cb:13:66:9f:ac:93:75:bf:10:31:18:0a:58:25:f6: a0:82:2f:1e:74:62:27:42:43:f3:81:6e:81:aa:cc:b0:a0:17: 69:be:08:a2:7c:e9:5e:e3:f2:2b:11:f7:d1:c3:59:28:12:ce: 88:10:ad:fd:7f:65:eb:32:6c:a3:05:2e:38:98:4a:b2:da:47: 7a:6c:9f:34:74:3d:7b:73:c6:b7:90:37:9c:ae:1a:6e:1e:7e: b9:d3:7d:be:fd:e2:de:66:ce:76:23:08:b5:4f:38:7c:56:ea: eb:2c:4e:77:c9:ce:03:aa:fa:2a:95:49:4b:82:c5:fd:65:f8: f3:26:e5:8b:77:e0:15:24:8c:bf:52:e1:36:b7:1d:b4:4a:58: c2:a3:2e:b4:29:6a:79:a9:45:12:46:6a:f0:86:7d:b3:7f:d2: 20:97:c4:02:bc:24:b8:eb:68:16:78:15:95:eb:88:f7:ea:64: 5a:05:2e:95:19:91:95:00:a7:e3:9c:d3:fd:e6:e4:3b:89:83: 61:51:a6:05 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUFM5ke/tfC94a3TIjKWwPs5DgY/EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjA5MDMwMzM1MDFaFw0yNzA5MDIwMzQwMDFaMDMxMTAvBgNV BAMTKDJBQ0VBQjM2MUQ4QUUyNEE3RUU2QzkyNTdDOThCOTY1QzIwOTc5NDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0RPbwdD/RVTr83ZH5s+V8SU+w JlBowDoRB9YVgpnhHI/YF7NsA0jkfQX2/hg5o64dJrA7x8ak+pGAMzwlPQ5D9UO4 xy4IF30y8Dy6xr6eNYvER00NdhxtaKKZYltVyiVolCTcNGJtrXpu40hlCFfu5UuD rax5HhEmhi+ExO7cylcj/TBfcBYev907/OeyxaeZFxAbTE8InL0OYEGmgtyV4Q0X jQ9/kOs9UsRGSgJiPKBJ3z2ySKp9+LshCK8JJ3vAIMaoCiVY93aqjO8wGM7Ou0Eu Ec8yZ942xQrxWHgigYXVgSpWHJANEwcua2GPyC1BSIpHo1cR8CZo2OaAt81fAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQqzqs2HYriSn7m ySV8mLllwgl5QjAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQkZERkNFM0RDMTE5RjY0QkQwREMwRkNG N0FFMUNEM0JENzMzMEZENDlCRkY3NUY2MjlCOTdGODcyQzdGNTY5Qy8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9CRkRGQ0UzREMxMTlGNjRCRDBEQzBGQ0Y3QUUxQ0QzQkQ3MzMwRkQ0OUJG Rjc1RjYyOUI5N0Y4NzJDN0Y1NjlDLzAvMkFDRUFCMzYxRDhBRTI0QTdFRTZDOTI1 N0M5OEI5NjVDMjA5Nzk0Mi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAMHMDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEMlQwDQYJKoZIhvcNAQELBQADggEBADB86cYq Ae0544mpkwKmdwk+k9AdCnTcjjtC5qeJv1xZZ/utY3/MiQzkB1dUBk4p1QAfob33 30XugcsTZp+sk3W/EDEYClgl9qCCLx50YidCQ/OBboGqzLCgF2m+CKJ86V7j8isR 99HDWSgSzogQrf1/ZesybKMFLjiYSrLaR3psnzR0PXtzxreQN5yuGm4efrnTfb79 4t5mznYjCLVPOHxW6ussTnfJzgOq+iqVSUuCxf1l+PMm5Yt34BUkjL9S4Ta3HbRK WMKjLrQpanmpRRJGavCGfbN/0iCXxAK8JLjraBZ4FZXriPfqZFoFLpUZkZUAp+Oc 0/3m5DuJg2FRpgU= -----END CERTIFICATE-----Generated at Fri Sep 18 18:04:40 2026 by rpki-client