$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B29D5B2C25DF8F22714E3D506B85DA5AC30EB6E.cer File: 4B29D5B2C25DF8F22714E3D506B85DA5AC30EB6E.cer (raw, json) Hash identifier: RVVWnUEqZbQIRm23pu7DySxb1tb84/E8innZSG4E9co= Subject key identifier: 4B:29:D5:B2:C2:5D:F8:F2:27:14:E3:D5:06:B8:5D:A5:AC:30:EB:6E Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 110C4DE4693AB70ECF9BB36F220E3EB988471EB2 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/8E0D28C0B22854F0210033DF7B0C636159312C11D1C742AFB3FD1FC378A8E760/0/4B29D5B2C25DF8F22714E3D506B85DA5AC30EB6E.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/8E0D28C0B22854F0210033DF7B0C636159312C11D1C742AFB3FD1FC378A8E760/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 09 Sep 2026 16:50:01 +0000 Certificate not after: Wed 08 Sep 2027 16:55:01 +0000 Subordinate resources: AS: 273047 IP: 2801:165::/44 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 17 Sep 2026 03:36:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:0c:4d:e4:69:3a:b7:0e:cf:9b:b3:6f:22:0e:3e:b9:88:47:1e:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Sep 9 16:50:01 2026 GMT Not After : Sep 8 16:55:01 2027 GMT Subject: CN=4B29D5B2C25DF8F22714E3D506B85DA5AC30EB6E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d7:5c:ea:8a:c1:4c:b9:75:f7:ee:22:49:33: 9b:75:50:b4:93:4b:c7:08:5c:3b:de:cb:34:b6:65: 22:f4:0f:2f:83:5d:b7:eb:8c:8d:52:f9:78:25:3b: ee:31:16:4d:0d:94:fb:fc:e8:73:df:3d:c2:23:55: 13:f8:22:0e:e8:2b:3d:ff:4c:d0:b6:e4:20:f6:90: 36:5a:39:1b:29:87:7a:c5:c5:6f:1c:73:cf:34:57: 7b:74:ee:6a:50:04:e1:7d:53:f0:72:45:b2:55:59: fb:61:2f:d1:c3:e8:dd:67:12:61:7b:de:b1:cf:84: e2:7d:82:0a:6b:89:22:f0:fb:19:3d:5a:30:73:54: 83:0f:21:6d:bd:cd:b2:bd:6b:42:77:5f:28:7d:a1: 73:c2:7c:0b:5c:ac:c3:db:8e:b5:ca:e7:b4:d5:11: de:85:87:52:93:d1:46:5b:a1:a8:49:9a:ba:9a:39: 9f:25:64:5f:80:c4:83:63:3c:7d:2a:f7:eb:43:09: 02:65:5d:e6:d8:6b:1e:78:38:fb:a8:95:13:f6:51: 05:51:78:4e:5c:ea:52:cf:f8:0b:a5:e0:ad:0b:2d: 39:c5:2e:e7:db:4c:62:13:17:33:45:16:ec:4b:35: a1:6e:46:37:15:f3:03:4a:be:1b:cd:43:5b:b1:2f: c5:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4B:29:D5:B2:C2:5D:F8:F2:27:14:E3:D5:06:B8:5D:A5:AC:30:EB:6E X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/8E0D28C0B22854F0210033DF7B0C636159312C11D1C742AFB3FD1FC378A8E760/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/8E0D28C0B22854F0210033DF7B0C636159312C11D1C742AFB3FD1FC378A8E760/0/4B29D5B2C25DF8F22714E3D506B85DA5AC30EB6E.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2801:165::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273047 Signature Algorithm: sha256WithRSAEncryption 57:64:dc:c8:89:1b:41:9f:db:b8:1b:0a:db:81:20:b6:78:81: 93:20:7c:53:d7:d9:9b:fa:22:f1:9a:b0:08:3d:9a:a6:e9:7d: b0:af:89:1e:de:b2:0c:fa:24:59:e1:8e:74:19:b4:75:78:61: ea:48:98:b7:8c:86:79:c0:b4:5a:b5:57:f8:27:60:70:5c:7b: 9c:54:db:ff:11:4c:9b:8d:39:ea:7e:1e:54:26:74:7c:bb:23: 80:5a:8e:df:4c:93:bf:5c:6c:e4:df:a0:0c:2b:94:77:48:4a: d0:85:44:70:ac:42:e6:e8:f2:8e:fc:2a:a8:33:71:d9:2f:00: e3:cd:b3:60:9a:d1:24:0f:74:ae:f6:df:60:76:c0:ce:44:15: f0:86:d6:0d:d6:e8:0f:61:43:6a:e0:39:bc:c7:c9:7e:52:ad: 96:30:c0:b7:37:27:72:93:dc:46:36:f9:cd:7b:d2:a5:62:c3: 7d:aa:44:b7:e9:99:87:f3:55:4e:4b:c3:98:87:a0:a3:15:12: 5b:ca:d2:03:9f:52:9b:0e:76:eb:96:44:35:d0:be:7c:39:f5: 3a:1a:96:98:17:a3:b4:a8:9b:52:88:4e:85:5f:b1:68:f7:b5: d1:91:70:0b:62:b6:01:88:42:7a:82:48:c7:41:3f:c2:a4:82: b7:13:85:56 -----BEGIN CERTIFICATE----- MIIGmTCCBYGgAwIBAgIUEQxN5Gk6tw7Pm7NvIg4+uYhHHrIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjA5MDkxNjUwMDFaFw0yNzA5MDgxNjU1MDFaMDMxMTAvBgNV BAMTKDRCMjlENUIyQzI1REY4RjIyNzE0RTNENTA2Qjg1REE1QUMzMEVCNkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu11zqisFMuXX37iJJM5t1ULST S8cIXDveyzS2ZSL0Dy+DXbfrjI1S+XglO+4xFk0NlPv86HPfPcIjVRP4Ig7oKz3/ TNC25CD2kDZaORsph3rFxW8cc880V3t07mpQBOF9U/ByRbJVWfthL9HD6N1nEmF7 3rHPhOJ9ggpriSLw+xk9WjBzVIMPIW29zbK9a0J3Xyh9oXPCfAtcrMPbjrXK57TV Ed6Fh1KT0UZboahJmrqaOZ8lZF+AxINjPH0q9+tDCQJlXebYax54OPuolRP2UQVR eE5c6lLP+Aul4K0LLTnFLufbTGITFzNFFuxLNaFuRjcV8wNKvhvNQ1uxL8W1AgMB AAGjggOjMIIDnzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRLKdWywl348icU 49UGuF2lrDDrbjAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvOEUwRDI4QzBCMjI4NTRGMDIxMDAzM0RG N0IwQzYzNjE1OTMxMkMxMUQxQzc0MkFGQjNGRDFGQzM3OEE4RTc2MC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy84RTBEMjhDMEIyMjg1NEYwMjEwMDMzREY3QjBDNjM2MTU5MzEyQzExRDFD NzQyQUZCM0ZEMUZDMzc4QThFNzYwLzAvNEIyOUQ1QjJDMjVERjhGMjI3MTRFM0Q1 MDZCODVEQTVBQzMwRUI2RS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKAEBZQAAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwQqlzANBgkqhkiG9w0BAQsFAAOCAQEAV2Tc yIkbQZ/buBsK24EgtniBkyB8U9fZm/oi8ZqwCD2apul9sK+JHt6yDPokWeGOdBm0 dXhh6kiYt4yGecC0WrVX+CdgcFx7nFTb/xFMm4056n4eVCZ0fLsjgFqO30yTv1xs 5N+gDCuUd0hK0IVEcKxC5ujyjvwqqDNx2S8A482zYJrRJA90rvbfYHbAzkQV8IbW DdboD2FDauA5vMfJflKtljDAtzcncpPcRjb5zXvSpWLDfapEt+mZh/NVTkvDmIeg oxUSW8rSA59Smw5265ZENdC+fDn1OhqWmBejtKibUohOhV+xaPe10ZFwC2K2AYhC eoJIx0E/wqSCtxOFVg== -----END CERTIFICATE-----Generated at Sun Sep 13 15:26:19 2026 by rpki-client