$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3429E4D97CF8A5646696C14C976FF565A6A7576B.cer File: 3429E4D97CF8A5646696C14C976FF565A6A7576B.cer (raw, json) Hash identifier: OaMzaWcWAudmYuQo53JbytZuKEN5r2IYYquznSZUe/M= Subject key identifier: 34:29:E4:D9:7C:F8:A5:64:66:96:C1:4C:97:6F:F5:65:A6:A7:57:6B Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 66AE96C21295A91F22FC2129FED385E3629D9891 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/17C357AF4CCC61B43485F01AD731107A3D59CB9B9711DE45AD42EA3C1E202437/0/3429E4D97CF8A5646696C14C976FF565A6A7576B.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/17C357AF4CCC61B43485F01AD731107A3D59CB9B9711DE45AD42EA3C1E202437/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 21 Apr 2026 16:40:02 +0000 Certificate not after: Tue 20 Apr 2027 16:45:02 +0000 Subordinate resources: AS: 274898 IP: 2803:7630::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 04 May 2026 10:13:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:ae:96:c2:12:95:a9:1f:22:fc:21:29:fe:d3:85:e3:62:9d:98:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Apr 21 16:40:02 2026 GMT Not After : Apr 20 16:45:02 2027 GMT Subject: CN=3429E4D97CF8A5646696C14C976FF565A6A7576B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:d2:48:02:77:46:e7:5c:93:e7:62:c4:83:28: 01:aa:f3:56:2a:6c:b1:b2:c1:66:c7:cf:68:dc:76: ef:58:44:e1:8d:c7:e5:6f:81:c6:98:db:73:0f:02: 0f:19:a8:76:28:6b:dd:fc:fa:7c:e7:11:94:af:ed: 22:f0:46:0e:52:79:37:38:10:6b:93:68:e1:d5:e4: 1b:0b:75:9a:58:89:a2:12:99:67:4a:ce:99:0d:79: f4:0e:90:17:6c:53:e1:06:2a:be:42:7a:a0:b0:e6: 1f:eb:c5:da:d3:ca:1d:dd:3f:e6:0b:ff:0c:1f:45: 2f:68:20:da:d1:aa:0d:ae:29:f4:26:16:76:43:c4: 23:fd:03:97:4a:67:c2:2f:0c:d9:41:ad:9e:8d:59: de:ed:48:d1:57:cf:7d:bc:6f:a1:7d:1c:e7:bb:bf: 0f:27:e1:4e:e9:62:ef:8f:3b:e6:a7:1f:1b:9d:e6: 9d:96:7c:4c:62:df:64:e6:05:ad:39:b5:af:eb:d5: 67:fd:69:47:47:bf:05:79:14:f9:03:9b:14:5d:94: 7f:a1:6a:ab:b3:04:61:83:d7:cf:a0:c4:a4:47:00: d5:48:12:59:ff:14:ad:be:89:0b:4a:9c:c7:9c:eb: 9e:44:ff:44:2f:00:80:49:e3:d3:32:f7:89:40:8d: e6:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 34:29:E4:D9:7C:F8:A5:64:66:96:C1:4C:97:6F:F5:65:A6:A7:57:6B X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/17C357AF4CCC61B43485F01AD731107A3D59CB9B9711DE45AD42EA3C1E202437/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/17C357AF4CCC61B43485F01AD731107A3D59CB9B9711DE45AD42EA3C1E202437/0/3429E4D97CF8A5646696C14C976FF565A6A7576B.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:7630::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 274898 Signature Algorithm: sha256WithRSAEncryption 0d:40:b9:8d:3e:71:72:4e:40:58:24:43:10:05:6b:a7:26:72: 88:b5:e3:f1:70:39:0c:05:da:93:90:93:06:13:d8:7d:bb:7a: a3:56:71:94:88:c1:26:ac:7b:bd:b0:30:75:a2:5f:5c:85:5b: fc:9a:e0:b2:13:c3:6b:63:06:81:6e:7b:d1:64:37:21:24:05: a9:74:42:64:60:a7:90:63:84:e2:32:3f:fc:36:a7:83:c8:30: b3:37:22:18:84:9c:68:12:41:fc:fe:f6:fe:cf:52:0e:53:ef: 0b:2f:2f:ff:b0:83:88:3a:a8:d9:9f:5d:27:dc:3b:f1:36:b6: 7b:e1:b1:01:b8:f2:09:bc:52:1b:ee:b7:a1:3c:cb:10:d7:e0: 52:d0:dd:68:43:c0:a9:f4:ef:99:f8:24:13:70:9c:4a:20:49: 5d:76:40:c8:36:9b:e8:46:57:e2:ae:a6:ed:a1:93:8f:c5:51: a7:ff:2f:23:3e:f9:7d:76:23:de:ed:83:9a:73:e0:00:3d:cc: 0a:24:60:3e:ec:e0:0d:3b:95:e2:ef:2e:65:0d:79:d6:aa:58: cc:c8:22:69:ac:91:64:ef:54:1b:a6:df:9d:b8:63:20:6c:6e: af:6d:78:57:c4:06:a1:de:8b:d3:a1:aa:f4:d0:f3:00:5d:13: 52:dc:76:04 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUZq6WwhKVqR8i/CEp/tOF42KdmJEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjA0MjExNjQwMDJaFw0yNzA0MjAxNjQ1MDJaMDMxMTAvBgNV BAMTKDM0MjlFNEQ5N0NGOEE1NjQ2Njk2QzE0Qzk3NkZGNTY1QTZBNzU3NkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa0kgCd0bnXJPnYsSDKAGq81Yq bLGywWbHz2jcdu9YROGNx+VvgcaY23MPAg8ZqHYoa938+nznEZSv7SLwRg5SeTc4 EGuTaOHV5BsLdZpYiaISmWdKzpkNefQOkBdsU+EGKr5CeqCw5h/rxdrTyh3dP+YL /wwfRS9oINrRqg2uKfQmFnZDxCP9A5dKZ8IvDNlBrZ6NWd7tSNFXz328b6F9HOe7 vw8n4U7pYu+PO+anHxud5p2WfExi32TmBa05ta/r1Wf9aUdHvwV5FPkDmxRdlH+h aquzBGGD18+gxKRHANVIEln/FK2+iQtKnMec655E/0QvAIBJ49My94lAjeZpAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ0KeTZfPilZGaW wUyXb/VlpqdXazAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMTdDMzU3QUY0Q0NDNjFCNDM0ODVGMDFB RDczMTEwN0EzRDU5Q0I5Qjk3MTFERTQ1QUQ0MkVBM0MxRTIwMjQzNy8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8xN0MzNTdBRjRDQ0M2MUI0MzQ4NUYwMUFENzMxMTA3QTNENTlDQjlCOTcx MURFNDVBRDQyRUEzQzFFMjAyNDM3LzAvMzQyOUU0RDk3Q0Y4QTU2NDY2OTZDMTRD OTc2RkY1NjVBNkE3NTc2Qi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAN2MDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEMdIwDQYJKoZIhvcNAQELBQADggEBAA1AuY0+ cXJOQFgkQxAFa6cmcoi14/FwOQwF2pOQkwYT2H27eqNWcZSIwSase72wMHWiX1yF W/ya4LITw2tjBoFue9FkNyEkBal0QmRgp5BjhOIyP/w2p4PIMLM3IhiEnGgSQfz+ 9v7PUg5T7wsvL/+wg4g6qNmfXSfcO/E2tnvhsQG48gm8Uhvut6E8yxDX4FLQ3WhD wKn075n4JBNwnEogSV12QMg2m+hGV+Kupu2hk4/FUaf/LyM++X12I97tg5pz4AA9 zAokYD7s4A07leLvLmUNedaqWMzIImmskWTvVBum3524YyBsbq9teFfEBqHei9Oh qvTQ8wBdE1LcdgQ= -----END CERTIFICATE-----Generated at Thu Apr 30 04:54:29 2026 by rpki-client