$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4819B45C4B0B57AB26DB91790DD32B7C84B8AA8C.cer File: 4819B45C4B0B57AB26DB91790DD32B7C84B8AA8C.cer (raw, json) Hash identifier: X8J+RIrRVHmOHZjq/d8zemGSbLDHDvflUe3DgKAAI8A= Subject key identifier: 48:19:B4:5C:4B:0B:57:AB:26:DB:91:79:0D:D3:2B:7C:84:B8:AA:8C Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 4FE2BE1BBD7DA450355DF023E979A8099487F827 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/2E7F6E2FF7E9867DADE26FA441C93B9C6E6EFE4CEE62628C3B8CE1CCCD77F6CF/0/4819B45C4B0B57AB26DB91790DD32B7C84B8AA8C.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/2E7F6E2FF7E9867DADE26FA441C93B9C6E6EFE4CEE62628C3B8CE1CCCD77F6CF/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Fri 15 May 2026 00:30:02 +0000 Certificate not after: Fri 14 May 2027 00:35:02 +0000 Subordinate resources: AS: 274897 IP: 2803:b630::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 15 Jun 2026 12:46:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:e2:be:1b:bd:7d:a4:50:35:5d:f0:23:e9:79:a8:09:94:87:f8:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: May 15 00:30:02 2026 GMT Not After : May 14 00:35:02 2027 GMT Subject: CN=4819B45C4B0B57AB26DB91790DD32B7C84B8AA8C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:5c:42:83:84:7a:41:94:d8:ca:a7:13:16:de: b8:4c:d7:27:20:40:39:ed:3c:0e:f8:5d:42:f1:ed: bb:3a:c6:33:d7:c9:05:71:f0:7b:75:be:8c:80:14: 3a:c0:c9:e2:f9:d0:7b:b3:c6:f3:1d:b4:44:06:9a: 74:13:e7:71:69:1e:31:37:75:76:37:33:aa:8a:0e: a4:30:11:47:3b:6c:b4:c6:42:3e:29:87:99:dc:a5: 29:c2:76:75:f4:a6:e9:b4:78:32:22:47:43:58:20: 47:97:0a:62:21:99:c3:b9:6a:f8:55:ec:83:24:38: 0c:3c:ef:08:17:e8:81:70:75:08:4c:f2:c0:17:af: 12:b1:08:d7:96:0a:27:89:a2:78:94:8c:b4:db:e3: 11:7c:8a:1f:6c:67:0b:a0:46:05:e0:12:15:d1:78: db:a7:61:bb:3b:33:38:0f:e4:ea:31:11:1d:03:6f: 21:c4:a9:29:b0:a1:da:d2:50:41:5c:54:c3:83:a6: c8:42:93:4a:cb:ce:f0:4b:fc:c5:81:c5:88:8a:e7: bb:db:a9:2b:27:cc:c9:a1:5f:59:e3:a5:e8:c5:08: 4c:ae:5e:ad:92:c1:91:11:e7:e3:cb:5b:b1:02:1a: c3:c6:3d:2d:59:9d:a7:7c:ec:06:e0:25:30:59:60: 2d:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 48:19:B4:5C:4B:0B:57:AB:26:DB:91:79:0D:D3:2B:7C:84:B8:AA:8C X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/2E7F6E2FF7E9867DADE26FA441C93B9C6E6EFE4CEE62628C3B8CE1CCCD77F6CF/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/2E7F6E2FF7E9867DADE26FA441C93B9C6E6EFE4CEE62628C3B8CE1CCCD77F6CF/0/4819B45C4B0B57AB26DB91790DD32B7C84B8AA8C.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:b630::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 274897 Signature Algorithm: sha256WithRSAEncryption 76:46:be:f7:cd:2e:39:2b:98:48:ae:f4:2a:c6:e8:8d:bc:9d: 99:c9:a1:9f:85:7b:f0:0e:0f:51:cd:74:34:66:c9:f8:ef:64: 18:9a:43:6b:2d:63:e7:bf:03:e5:fe:3e:7f:3e:be:39:ec:e3: 6c:4c:c0:b5:52:46:b6:95:b0:64:ad:c4:61:49:5c:30:00:06: 7e:55:4c:d2:ab:ad:1d:0a:ba:4c:80:be:e2:a5:52:e7:1a:35: b5:92:c8:98:31:6f:c0:8d:bb:22:6d:0c:76:ae:cc:25:4f:ed: 8f:dd:86:ec:93:df:7c:f0:7b:83:12:bf:40:08:fc:94:cf:79: c2:b0:e2:44:b4:53:30:a6:10:42:20:ad:59:91:8d:b1:1a:44: 4f:69:92:f1:28:2c:46:c5:a5:09:a8:c7:d6:18:54:39:50:b3: 3f:87:e8:33:0f:45:5d:a2:5a:cc:48:27:ab:17:31:ed:3d:82: be:74:3f:16:f0:85:88:47:6a:e2:67:4b:3f:83:8e:15:2d:60: b6:34:d8:6e:1e:75:60:37:09:05:1f:99:7f:59:66:60:bd:08: d4:49:12:d1:f7:c5:1c:12:75:79:b9:a5:71:70:10:5d:12:09: 60:bf:61:8c:76:52:c8:ce:ef:01:af:ab:6e:66:04:82:bb:c7: 6b:ff:cb:fe -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUT+K+G719pFA1XfAj6XmoCZSH+CcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjA1MTUwMDMwMDJaFw0yNzA1MTQwMDM1MDJaMDMxMTAvBgNV BAMTKDQ4MTlCNDVDNEIwQjU3QUIyNkRCOTE3OTBERDMyQjdDODRCOEFBOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyXEKDhHpBlNjKpxMW3rhM1ycg QDntPA74XULx7bs6xjPXyQVx8Ht1voyAFDrAyeL50HuzxvMdtEQGmnQT53FpHjE3 dXY3M6qKDqQwEUc7bLTGQj4ph5ncpSnCdnX0pum0eDIiR0NYIEeXCmIhmcO5avhV 7IMkOAw87wgX6IFwdQhM8sAXrxKxCNeWCieJoniUjLTb4xF8ih9sZwugRgXgEhXR eNunYbs7MzgP5OoxER0DbyHEqSmwodrSUEFcVMODpshCk0rLzvBL/MWBxYiK57vb qSsnzMmhX1njpejFCEyuXq2SwZER5+PLW7ECGsPGPS1Znad87AbgJTBZYC1lAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRIGbRcSwtXqybb kXkN0yt8hLiqjDAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMkU3RjZFMkZGN0U5ODY3REFERTI2RkE0 NDFDOTNCOUM2RTZFRkU0Q0VFNjI2MjhDM0I4Q0UxQ0NDRDc3RjZDRi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8yRTdGNkUyRkY3RTk4NjdEQURFMjZGQTQ0MUM5M0I5QzZFNkVGRTRDRUU2 MjYyOEMzQjhDRTFDQ0NENzdGNkNGLzAvNDgxOUI0NUM0QjBCNTdBQjI2REI5MTc5 MEREMzJCN0M4NEI4QUE4Qy5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAO2MDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEMdEwDQYJKoZIhvcNAQELBQADggEBAHZGvvfN LjkrmEiu9CrG6I28nZnJoZ+Fe/AOD1HNdDRmyfjvZBiaQ2stY+e/A+X+Pn8+vjns 42xMwLVSRraVsGStxGFJXDAABn5VTNKrrR0KukyAvuKlUucaNbWSyJgxb8CNuyJt DHauzCVP7Y/dhuyT33zwe4MSv0AI/JTPecKw4kS0UzCmEEIgrVmRjbEaRE9pkvEo LEbFpQmox9YYVDlQsz+H6DMPRV2iWsxIJ6sXMe09gr50PxbwhYhHauJnSz+DjhUt YLY02G4edWA3CQUfmX9ZZmC9CNRJEtH3xRwSdXm5pXFwEF0SCWC/YYx2UsjO7wGv q25mBIK7x2v/y/4= -----END CERTIFICATE-----Generated at Thu Jun 11 13:02:45 2026 by rpki-client