$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30288E1EB509A341FE5763F4F787467E1502F370.cer File: 30288E1EB509A341FE5763F4F787467E1502F370.cer (raw, json) Hash identifier: 3Q6ONRmb1lrg8r/j1IsNgLLAw6FQER9ruw7e47xhmFo= Subject key identifier: 30:28:8E:1E:B5:09:A3:41:FE:57:63:F4:F7:87:46:7E:15:02:F3:70 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 159DDEB2A462FA38A0895CC485BBEDD1D3E21E7E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/48218BF40DE5398F3A4C7E7ACE51E87D05D3B2D74CBB370F0869D9FCFA09E5CD/0/30288E1EB509A341FE5763F4F787467E1502F370.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/48218BF40DE5398F3A4C7E7ACE51E87D05D3B2D74CBB370F0869D9FCFA09E5CD/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Mon 27 Apr 2026 18:15:01 +0000 Certificate not after: Mon 26 Apr 2027 18:20:01 +0000 Subordinate resources: AS: 274329 IP: 2803:2430::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 04 May 2026 10:13:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:9d:de:b2:a4:62:fa:38:a0:89:5c:c4:85:bb:ed:d1:d3:e2:1e:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Apr 27 18:15:01 2026 GMT Not After : Apr 26 18:20:01 2027 GMT Subject: CN=30288E1EB509A341FE5763F4F787467E1502F370 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:c6:31:2b:97:07:46:10:8b:86:53:35:5e:6a: 23:32:4b:f3:3d:e9:03:b8:28:bc:6d:07:ff:c1:0f: b9:34:a3:5a:2a:c8:83:cc:b4:92:c9:34:cb:a7:4e: b4:42:e6:89:d2:fb:f8:d1:41:95:c6:65:cd:a5:de: 10:19:9b:a0:00:27:68:eb:e7:0e:35:27:2c:99:46: 2f:49:f7:b9:a3:9e:f1:ef:25:d8:ba:81:1c:8a:e3: 61:76:20:d4:13:ba:4a:5b:ed:ed:c1:1c:c3:f8:d5: 7b:a6:d2:0c:76:9e:a3:98:c2:0c:7e:7d:01:be:85: 8a:dc:ff:58:63:a5:c7:6a:ff:7f:ae:44:74:9a:9d: 6e:35:42:35:a7:93:aa:3e:ea:b5:8f:26:50:55:6b: 54:59:a6:a6:bc:a8:d4:50:f1:0f:57:f0:fe:b9:9a: e5:d7:c8:67:5d:9c:1b:b1:9b:3f:7c:4e:df:46:ce: b1:8b:59:47:7d:81:61:09:e3:d0:b0:70:b9:9e:9d: 84:ef:6a:3d:ef:9e:97:6f:b4:e5:70:81:52:c2:93: a2:ec:a4:bb:0d:0b:2b:fc:70:2d:9e:33:09:15:8d: 57:0f:19:2a:44:04:63:be:83:f3:65:d6:47:29:69: a8:87:d7:52:77:60:7e:9e:5e:82:38:bf:b5:e0:ca: 62:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 30:28:8E:1E:B5:09:A3:41:FE:57:63:F4:F7:87:46:7E:15:02:F3:70 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/48218BF40DE5398F3A4C7E7ACE51E87D05D3B2D74CBB370F0869D9FCFA09E5CD/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/48218BF40DE5398F3A4C7E7ACE51E87D05D3B2D74CBB370F0869D9FCFA09E5CD/0/30288E1EB509A341FE5763F4F787467E1502F370.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:2430::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 274329 Signature Algorithm: sha256WithRSAEncryption 7f:03:9f:f1:61:d3:1c:ac:f9:9a:b9:dd:a3:f7:81:51:19:ef: c6:9f:3f:0d:7b:49:75:9f:5e:83:3b:33:f3:f3:fe:7d:de:e6: 41:2c:55:0c:17:c2:ab:a7:a4:ba:76:43:55:b8:55:3e:9e:36: 1e:75:04:61:2d:9c:a5:0b:d4:b7:8a:d9:c6:c4:46:4c:ee:33: 1e:37:5b:24:9a:db:46:38:80:ce:60:3a:6b:18:d5:cd:cf:c3: 89:23:20:34:9e:d0:ad:65:74:bb:b9:e9:15:31:a5:10:cf:aa: 5c:4f:fa:a1:88:c3:8d:5c:db:cf:ec:00:bb:bd:77:c6:18:ca: 29:c1:bc:7d:3e:df:83:c9:11:67:73:0c:2f:35:6b:bb:5b:b1: f7:46:6c:1f:cd:e0:68:65:37:be:6b:5f:d1:1d:37:cf:90:ca: c3:55:4d:4b:92:a1:15:ae:e3:13:5f:7c:42:d1:49:38:d6:50: 3f:37:7f:71:cd:13:b2:4b:85:2b:f6:6d:96:73:3a:cb:a9:79: 36:6c:9d:9e:14:b7:39:5d:77:76:c2:62:68:ac:70:d3:8f:7c: eb:29:e6:e0:45:6a:e1:41:b0:41:9d:d0:27:a5:b5:c7:2a:5c: 8d:e6:8c:3c:86:45:46:ec:c9:32:96:0e:d1:6c:11:b3:e8:7d: 43:af:2c:0c -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUFZ3esqRi+jigiVzEhbvt0dPiHn4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjA0MjcxODE1MDFaFw0yNzA0MjYxODIwMDFaMDMxMTAvBgNV BAMTKDMwMjg4RTFFQjUwOUEzNDFGRTU3NjNGNEY3ODc0NjdFMTUwMkYzNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0xjErlwdGEIuGUzVeaiMyS/M9 6QO4KLxtB//BD7k0o1oqyIPMtJLJNMunTrRC5onS+/jRQZXGZc2l3hAZm6AAJ2jr 5w41JyyZRi9J97mjnvHvJdi6gRyK42F2INQTukpb7e3BHMP41Xum0gx2nqOYwgx+ fQG+hYrc/1hjpcdq/3+uRHSanW41QjWnk6o+6rWPJlBVa1RZpqa8qNRQ8Q9X8P65 muXXyGddnBuxmz98Tt9GzrGLWUd9gWEJ49CwcLmenYTvaj3vnpdvtOVwgVLCk6Ls pLsNCyv8cC2eMwkVjVcPGSpEBGO+g/Nl1kcpaaiH11J3YH6eXoI4v7XgymINAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQwKI4etQmjQf5X Y/T3h0Z+FQLzcDAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNDgyMThCRjQwREU1Mzk4RjNBNEM3RTdB Q0U1MUU4N0QwNUQzQjJENzRDQkIzNzBGMDg2OUQ5RkNGQTA5RTVDRC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80ODIxOEJGNDBERTUzOThGM0E0QzdFN0FDRTUxRTg3RDA1RDNCMkQ3NENC QjM3MEYwODY5RDlGQ0ZBMDlFNUNELzAvMzAyODhFMUVCNTA5QTM0MUZFNTc2M0Y0 Rjc4NzQ2N0UxNTAyRjM3MC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAMkMDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEL5kwDQYJKoZIhvcNAQELBQADggEBAH8Dn/Fh 0xys+Zq53aP3gVEZ78afPw17SXWfXoM7M/Pz/n3e5kEsVQwXwqunpLp2Q1W4VT6e Nh51BGEtnKUL1LeK2cbERkzuMx43WySa20Y4gM5gOmsY1c3Pw4kjIDSe0K1ldLu5 6RUxpRDPqlxP+qGIw41c28/sALu9d8YYyinBvH0+34PJEWdzDC81a7tbsfdGbB/N 4GhlN75rX9EdN8+QysNVTUuSoRWu4xNffELRSTjWUD83f3HNE7JLhSv2bZZzOsup eTZsnZ4Utzldd3bCYmiscNOPfOsp5uBFauFBsEGd0CeltccqXI3mjDyGRUbsyTKW DtFsEbPofUOvLAw= -----END CERTIFICATE-----Generated at Thu Apr 30 04:54:30 2026 by rpki-client