$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5A09606CE079678AF0B33DE42BD2E4139FE15B98.cer File: 5A09606CE079678AF0B33DE42BD2E4139FE15B98.cer (raw, json) Hash identifier: xvtLZ7j/E2Fvn73xUdi/1VuBfh67h8x6aHAlhNLeYA4= Subject key identifier: 5A:09:60:6C:E0:79:67:8A:F0:B3:3D:E4:2B:D2:E4:13:9F:E1:5B:98 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 36C4A013519FAE9081BA6EFEF05992B9EA31A744 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/127BDC99A80E70F60816AAC9EA5F109FCE5C6EB7B2523EA697A0C059A1B18258/0/5A09606CE079678AF0B33DE42BD2E4139FE15B98.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/127BDC99A80E70F60816AAC9EA5F109FCE5C6EB7B2523EA697A0C059A1B18258/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 08 Sep 2026 17:40:01 +0000 Certificate not after: Tue 07 Sep 2027 17:45:01 +0000 Subordinate resources: AS: 274455 IP: 2806:480::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Sep 2026 08:52:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:c4:a0:13:51:9f:ae:90:81:ba:6e:fe:f0:59:92:b9:ea:31:a7:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Sep 8 17:40:01 2026 GMT Not After : Sep 7 17:45:01 2027 GMT Subject: CN=5A09606CE079678AF0B33DE42BD2E4139FE15B98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:88:55:a3:fc:cf:1f:1f:b7:29:a7:aa:a5:13: 78:8e:d7:ca:63:f0:df:53:86:17:30:77:0c:cc:96: 8b:db:09:1f:c2:10:9a:d7:c2:5e:51:9c:0b:f5:99: 89:ed:fd:24:50:a5:52:fe:12:39:75:2c:15:39:b5: 7f:8b:20:81:6e:c0:2f:da:6f:5c:9b:67:0d:11:14: d5:59:e4:db:07:ee:ba:d0:f8:a7:94:64:a5:29:bd: 7c:65:75:6b:71:3b:27:c5:d2:40:4e:5f:09:f6:a7: d6:9c:a6:2f:3c:c3:fc:24:ee:64:ec:bc:54:46:ad: 54:e7:d5:a7:82:2c:fb:45:78:a4:cd:a8:f8:7c:99: a3:14:1c:c6:87:2e:20:fa:a7:50:e9:71:47:c3:4c: 57:44:58:40:ff:8b:f2:f7:8b:15:ba:be:06:55:6e: 31:cf:33:ad:c3:a1:c4:2c:5a:f9:e3:ab:8c:af:11: 33:36:dc:c0:1f:ec:e8:02:52:ae:53:d8:ee:e9:bc: e0:1b:dc:50:94:e8:ca:30:10:13:5c:0e:80:d2:65: 42:af:2a:f4:34:d5:c3:79:a4:3a:fe:5a:c8:01:77: b6:23:12:4b:64:2b:0d:79:c0:9c:74:15:4d:b4:a8: 44:37:1e:8e:a6:4f:6b:8a:94:a6:22:6c:da:de:15: b4:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5A:09:60:6C:E0:79:67:8A:F0:B3:3D:E4:2B:D2:E4:13:9F:E1:5B:98 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/127BDC99A80E70F60816AAC9EA5F109FCE5C6EB7B2523EA697A0C059A1B18258/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/127BDC99A80E70F60816AAC9EA5F109FCE5C6EB7B2523EA697A0C059A1B18258/0/5A09606CE079678AF0B33DE42BD2E4139FE15B98.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2806:480::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 274455 Signature Algorithm: sha256WithRSAEncryption 23:46:2a:4d:81:57:86:4c:74:7b:78:55:c5:f4:3c:19:09:5b: 4c:d1:17:ed:79:ca:aa:c3:ba:cb:ac:18:97:c0:19:da:a6:7c: 70:63:6a:64:80:0a:d3:92:ce:bc:7f:9f:31:f3:55:91:f1:6f: 5a:99:81:e3:52:d3:8d:25:66:7b:9c:e7:a6:f6:11:13:a4:0f: ed:7f:e5:d3:ab:cc:6d:5e:2a:8f:1d:4e:b9:f2:50:71:10:be: 25:ff:05:e1:14:26:81:20:41:4a:8e:6c:2b:5e:b3:aa:08:55: 74:ad:a3:28:d3:c5:39:42:ba:1f:5d:16:94:64:f8:3f:30:54: 3b:44:f4:5d:ac:51:7a:ee:ab:f9:b4:88:dd:50:0d:a8:a1:00: f3:51:e4:b9:6e:16:fd:90:8b:ff:7a:16:c1:f1:4c:44:6b:ac: f6:e2:d9:20:55:33:d4:6c:62:4d:d0:95:69:0e:54:e4:ba:2e: 24:11:5a:41:00:ce:98:1e:ee:73:ba:33:ef:7d:0f:2f:b2:59: 5a:d8:6f:f1:56:48:54:e8:a4:c5:72:37:7b:48:e5:9d:58:8d: 58:44:ef:29:42:8d:1c:42:cc:63:72:4a:6c:29:0c:e5:06:36: c6:4a:71:c0:93:6a:1e:a9:4c:49:85:0f:a5:de:4e:b5:96:0b: ce:0f:9a:c7 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUNsSgE1GfrpCBum7+8FmSueoxp0QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjA5MDgxNzQwMDFaFw0yNzA5MDcxNzQ1MDFaMDMxMTAvBgNV BAMTKDVBMDk2MDZDRTA3OTY3OEFGMEIzM0RFNDJCRDJFNDEzOUZFMTVCOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYiFWj/M8fH7cpp6qlE3iO18pj 8N9ThhcwdwzMlovbCR/CEJrXwl5RnAv1mYnt/SRQpVL+Ejl1LBU5tX+LIIFuwC/a b1ybZw0RFNVZ5NsH7rrQ+KeUZKUpvXxldWtxOyfF0kBOXwn2p9acpi88w/wk7mTs vFRGrVTn1aeCLPtFeKTNqPh8maMUHMaHLiD6p1DpcUfDTFdEWED/i/L3ixW6vgZV bjHPM63DocQsWvnjq4yvETM23MAf7OgCUq5T2O7pvOAb3FCU6MowEBNcDoDSZUKv KvQ01cN5pDr+WsgBd7YjEktkKw15wJx0FU20qEQ3Ho6mT2uKlKYibNreFbQhAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRaCWBs4HlnivCz PeQr0uQTn+FbmDAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMTI3QkRDOTlBODBFNzBGNjA4MTZBQUM5 RUE1RjEwOUZDRTVDNkVCN0IyNTIzRUE2OTdBMEMwNTlBMUIxODI1OC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8xMjdCREM5OUE4MEU3MEY2MDgxNkFBQzlFQTVGMTA5RkNFNUM2RUI3QjI1 MjNFQTY5N0EwQzA1OUExQjE4MjU4LzAvNUEwOTYwNkNFMDc5Njc4QUYwQjMzREU0 MkJEMkU0MTM5RkUxNUI5OC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAYEgDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEMBcwDQYJKoZIhvcNAQELBQADggEBACNGKk2B V4ZMdHt4VcX0PBkJW0zRF+15yqrDususGJfAGdqmfHBjamSACtOSzrx/nzHzVZHx b1qZgeNS040lZnuc56b2EROkD+1/5dOrzG1eKo8dTrnyUHEQviX/BeEUJoEgQUqO bCtes6oIVXStoyjTxTlCuh9dFpRk+D8wVDtE9F2sUXruq/m0iN1QDaihAPNR5Llu Fv2Qi/96FsHxTERrrPbi2SBVM9RsYk3QlWkOVOS6LiQRWkEAzpge7nO6M+99Dy+y WVrYb/FWSFTopMVyN3tI5Z1YjVhE7ylCjRxCzGNySmwpDOUGNsZKccCTah6pTEmF D6XeTrWWC84Pmsc= -----END CERTIFICATE-----Generated at Fri Sep 18 18:05:25 2026 by rpki-client