$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/531C37C371A1AD06FE5F6C2D206BF3333E603FE8.cer File: 531C37C371A1AD06FE5F6C2D206BF3333E603FE8.cer (raw, json) Hash identifier: 89pSPBA4t9auQFZJMAIrZTL5VdHDOf7Ro3B71AG41mg= Subject key identifier: 53:1C:37:C3:71:A1:AD:06:FE:5F:6C:2D:20:6B:F3:33:3E:60:3F:E8 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 5D3A395083B7789C979BAC91F6A3319BE6EDDC68 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/B22574F851BCC698D92C5AB460174CDC5CCD87B7918A5E42DDADC0A02FE2B55A/0/531C37C371A1AD06FE5F6C2D206BF3333E603FE8.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/B22574F851BCC698D92C5AB460174CDC5CCD87B7918A5E42DDADC0A02FE2B55A/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Mon 27 Apr 2026 23:00:01 +0000 Certificate not after: Mon 26 Apr 2027 23:05:01 +0000 Subordinate resources: AS: 273302 IP: 2806:451::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 02 May 2026 11:42:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:3a:39:50:83:b7:78:9c:97:9b:ac:91:f6:a3:31:9b:e6:ed:dc:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Apr 27 23:00:01 2026 GMT Not After : Apr 26 23:05:01 2027 GMT Subject: CN=531C37C371A1AD06FE5F6C2D206BF3333E603FE8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:22:69:d6:77:10:9a:df:d0:18:31:6f:90:5b: 8e:e2:52:ad:c8:39:d1:6a:ff:f1:12:a5:87:ee:82: 38:cb:bb:36:51:7a:10:52:0c:c4:44:11:ee:55:6c: 49:ab:f4:4e:7a:35:08:1d:8a:59:6b:73:21:08:f9: 97:c7:28:fc:80:71:70:34:b4:ae:0d:48:6c:ce:2e: c7:83:9d:a8:c3:7d:94:ae:c6:4b:4c:72:90:fc:4e: 11:91:66:17:1d:6c:58:5e:6b:85:7e:44:f2:18:90: 66:cc:75:dc:d6:1b:ec:0a:f9:79:46:b7:ea:3d:8c: c6:22:5d:cb:ec:7a:bc:3c:cb:b1:f6:39:67:57:30: 05:88:63:b0:46:e4:7b:c3:3d:58:95:f2:65:11:5e: 59:f7:b0:15:87:1c:e6:64:c4:bc:da:9f:44:be:2e: d6:56:60:83:76:b6:14:6e:78:75:77:57:c5:bd:0f: ac:e6:75:13:fa:f4:09:e1:d6:94:95:68:e6:66:51: 0f:09:1e:4c:91:c4:6a:f7:77:a0:a2:07:36:9c:d5: ad:e1:31:72:42:06:26:e6:eb:86:bb:bd:b7:66:c5: 12:39:a1:13:f9:cc:90:19:cf:63:5b:7f:83:30:23: 0a:09:5a:2d:ad:41:ea:34:b1:67:08:77:f5:41:7a: 1b:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 53:1C:37:C3:71:A1:AD:06:FE:5F:6C:2D:20:6B:F3:33:3E:60:3F:E8 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/B22574F851BCC698D92C5AB460174CDC5CCD87B7918A5E42DDADC0A02FE2B55A/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/B22574F851BCC698D92C5AB460174CDC5CCD87B7918A5E42DDADC0A02FE2B55A/0/531C37C371A1AD06FE5F6C2D206BF3333E603FE8.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2806:451::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273302 Signature Algorithm: sha256WithRSAEncryption 78:1c:49:7e:50:68:d5:17:b3:52:14:38:22:ff:cc:1a:76:cd: 42:c1:c2:27:11:4d:2c:af:58:a1:80:11:d1:a5:85:6c:7a:fb: 14:4b:fd:61:dc:74:24:11:bb:44:2e:a0:e1:4c:a3:a2:59:e5: 75:fb:7d:d2:e2:56:d0:b3:14:e8:40:a7:b3:6a:68:ec:5c:17: 1f:64:45:97:6b:40:13:89:87:ef:19:38:dd:3f:73:2e:e3:1a: f6:20:a0:4c:17:01:0e:d7:d7:d9:20:63:63:5e:b4:f3:ce:a5: 63:29:3f:53:57:e3:8b:e6:be:fa:65:7b:15:c0:b7:b3:5f:f5: d1:d6:9b:15:41:95:51:1a:7b:cf:6a:c0:88:2b:d7:90:c9:14: 1e:61:18:d9:15:b4:50:a8:40:00:58:48:3b:e1:6a:0a:ef:ad: 48:9b:d4:c2:93:26:be:dd:76:1b:bd:ef:bc:c5:43:4c:56:05: b0:4e:69:77:0e:aa:c2:e3:03:36:83:a6:d0:ee:7b:a7:39:86: ef:da:e6:c3:80:96:21:85:18:25:7f:b6:b7:b2:1e:1c:6c:58: 93:72:7d:6e:70:da:47:57:ac:77:32:5d:ce:63:7a:b8:b2:59: 44:9b:2f:c5:a0:24:a3:2e:ed:64:02:15:fb:6f:07:e2:aa:04: 83:4e:b8:1b -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUXTo5UIO3eJyXm6yR9qMxm+bt3GgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjA0MjcyMzAwMDFaFw0yNzA0MjYyMzA1MDFaMDMxMTAvBgNV BAMTKDUzMUMzN0MzNzFBMUFEMDZGRTVGNkMyRDIwNkJGMzMzM0U2MDNGRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrImnWdxCa39AYMW+QW47iUq3I OdFq//ESpYfugjjLuzZRehBSDMREEe5VbEmr9E56NQgdillrcyEI+ZfHKPyAcXA0 tK4NSGzOLseDnajDfZSuxktMcpD8ThGRZhcdbFhea4V+RPIYkGbMddzWG+wK+XlG t+o9jMYiXcvserw8y7H2OWdXMAWIY7BG5HvDPViV8mURXln3sBWHHOZkxLzan0S+ LtZWYIN2thRueHV3V8W9D6zmdRP69Anh1pSVaOZmUQ8JHkyRxGr3d6CiBzac1a3h MXJCBibm64a7vbdmxRI5oRP5zJAZz2Nbf4MwIwoJWi2tQeo0sWcId/VBehs/AgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRTHDfDcaGtBv5f bC0ga/MzPmA/6DAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQjIyNTc0Rjg1MUJDQzY5OEQ5MkM1QUI0 NjAxNzRDREM1Q0NEODdCNzkxOEE1RTQyRERBREMwQTAyRkUyQjU1QS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9CMjI1NzRGODUxQkNDNjk4RDkyQzVBQjQ2MDE3NENEQzVDQ0Q4N0I3OTE4 QTVFNDJEREFEQzBBMDJGRTJCNTVBLzAvNTMxQzM3QzM3MUExQUQwNkZFNUY2QzJE MjA2QkYzMzMzRTYwM0ZFOC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAYEUTAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEK5YwDQYJKoZIhvcNAQELBQADggEBAHgcSX5Q aNUXs1IUOCL/zBp2zULBwicRTSyvWKGAEdGlhWx6+xRL/WHcdCQRu0QuoOFMo6JZ 5XX7fdLiVtCzFOhAp7NqaOxcFx9kRZdrQBOJh+8ZON0/cy7jGvYgoEwXAQ7X19kg Y2NetPPOpWMpP1NX44vmvvplexXAt7Nf9dHWmxVBlVEae89qwIgr15DJFB5hGNkV tFCoQABYSDvhagrvrUib1MKTJr7ddhu977zFQ0xWBbBOaXcOqsLjAzaDptDue6c5 hu/a5sOAliGFGCV/treyHhxsWJNyfW5w2kdXrHcyXc5jeriyWUSbL8WgJKMu7WQC FftvB+KqBINOuBs= -----END CERTIFICATE-----Generated at Tue Apr 28 23:57:43 2026 by rpki-client