$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5C107D095763F73D61E3E86D9CE983D032C5BC0C.cer File: 5C107D095763F73D61E3E86D9CE983D032C5BC0C.cer (raw, json) Hash identifier: 2NG/JomkQAlLqga4ywGbMmvBO0/c+VPspVeuAu/u+Gc= Subject key identifier: 5C:10:7D:09:57:63:F7:3D:61:E3:E8:6D:9C:E9:83:D0:32:C5:BC:0C Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 0D85C8C2D1DD007BA9904008412470172BD3E3C5 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/27A53C9DCE78E449AC9550D7E545173A75696CE792DED9214EC179559029E754/0/5C107D095763F73D61E3E86D9CE983D032C5BC0C.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/27A53C9DCE78E449AC9550D7E545173A75696CE792DED9214EC179559029E754/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Thu 06 Aug 2026 02:00:01 +0000 Certificate not after: Thu 05 Aug 2027 02:05:01 +0000 Subordinate resources: AS: 272971 IP: 2803:6590::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Sep 2026 08:52:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:85:c8:c2:d1:dd:00:7b:a9:90:40:08:41:24:70:17:2b:d3:e3:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Aug 6 02:00:01 2026 GMT Not After : Aug 5 02:05:01 2027 GMT Subject: CN=5C107D095763F73D61E3E86D9CE983D032C5BC0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:72:cc:d1:8e:9d:3b:b7:fe:07:8f:7f:72:d2: aa:54:6b:8b:54:72:5d:ab:f8:b4:b9:33:91:0a:9f: 68:b5:e3:e9:7e:07:fa:cd:ab:0a:c7:13:b5:9c:de: 26:0b:54:8c:84:e4:ff:bc:e5:42:3b:72:65:17:85: e1:46:d1:6e:02:f4:c8:bc:7f:7a:4c:9f:e8:da:a7: 57:d1:6c:a6:40:c2:18:5d:26:bf:04:b9:76:46:a7: a1:66:40:95:7a:23:8e:38:b6:5a:f5:47:44:41:87: 5e:58:a8:89:e0:1f:00:1a:27:99:5e:73:ba:95:81: c6:63:f5:0e:09:b3:9e:72:df:96:df:90:9e:24:dc: e6:af:55:93:7c:ae:2a:96:94:23:c3:cd:9f:72:ef: 28:5f:ac:64:b2:05:93:c4:5a:35:a1:42:0f:5d:a1: 36:6a:30:21:4a:d0:4b:e0:df:6f:cf:18:14:b8:94: 38:6f:7b:3d:fe:c5:ce:7e:d3:1d:ec:45:79:19:4a: 05:6d:02:a6:ae:10:a7:66:81:88:2a:92:66:1f:dc: 79:a8:42:b9:a8:93:f2:52:25:a9:e3:53:41:8e:9d: 1d:29:0c:57:1c:33:f8:f8:ea:a6:57:de:60:1a:57: 8e:c6:32:92:37:ff:29:04:ba:2a:2d:10:6a:2b:3c: c1:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5C:10:7D:09:57:63:F7:3D:61:E3:E8:6D:9C:E9:83:D0:32:C5:BC:0C X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/27A53C9DCE78E449AC9550D7E545173A75696CE792DED9214EC179559029E754/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/27A53C9DCE78E449AC9550D7E545173A75696CE792DED9214EC179559029E754/0/5C107D095763F73D61E3E86D9CE983D032C5BC0C.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:6590::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 272971 Signature Algorithm: sha256WithRSAEncryption 7b:49:bd:9b:98:af:51:08:03:bf:62:a8:b0:ba:54:04:ad:fe: d7:b3:4c:4b:ab:5e:31:56:54:26:29:50:cd:31:c0:31:0b:9a: 06:95:c0:4b:96:11:a0:0b:31:ec:68:eb:fe:5d:d8:0a:03:59: e1:5b:7b:8b:66:cc:07:37:38:c4:89:29:f4:09:bb:54:ba:72: 54:59:b1:7b:c5:32:51:89:66:97:f1:00:3f:93:fa:11:50:70: 17:cb:ca:d1:f2:6a:85:c0:b4:a0:7b:56:1c:a5:86:83:e6:32: e5:df:83:cf:35:ec:80:0d:1b:6e:2c:69:a1:10:10:0a:5a:63: b1:a6:2b:8d:0c:4e:20:5d:d7:bf:43:60:86:ea:e6:b4:bf:26: 11:4b:27:e2:aa:35:67:6c:a6:5a:32:24:7e:d3:b8:82:5e:63: 93:1d:78:68:7d:12:fe:74:03:a2:53:60:b0:d2:0c:25:f7:89: 59:32:0b:b0:2a:f7:ed:19:11:16:5d:02:77:1b:78:42:43:6d: 46:7b:f7:b5:d1:c7:99:c1:af:95:f6:56:0d:5b:c8:fa:a1:9d: 5c:44:a2:21:95:2b:15:4a:27:1a:32:e7:a8:e5:a5:be:fc:02: 5b:05:13:95:e6:56:cd:62:98:32:2f:a6:8d:11:42:5e:5b:ad: b6:c2:bf:4b -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUDYXIwtHdAHupkEAIQSRwFyvT48UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjA4MDYwMjAwMDFaFw0yNzA4MDUwMjA1MDFaMDMxMTAvBgNV BAMTKDVDMTA3RDA5NTc2M0Y3M0Q2MUUzRTg2RDlDRTk4M0QwMzJDNUJDMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7cszRjp07t/4Hj39y0qpUa4tU cl2r+LS5M5EKn2i14+l+B/rNqwrHE7Wc3iYLVIyE5P+85UI7cmUXheFG0W4C9Mi8 f3pMn+jap1fRbKZAwhhdJr8EuXZGp6FmQJV6I444tlr1R0RBh15YqIngHwAaJ5le c7qVgcZj9Q4Js55y35bfkJ4k3OavVZN8riqWlCPDzZ9y7yhfrGSyBZPEWjWhQg9d oTZqMCFK0Evg32/PGBS4lDhvez3+xc5+0x3sRXkZSgVtAqauEKdmgYgqkmYf3Hmo Qrmok/JSJanjU0GOnR0pDFccM/j46qZX3mAaV47GMpI3/ykEuiotEGorPME3AgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRcEH0JV2P3PWHj 6G2c6YPQMsW8DDAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMjdBNTNDOURDRTc4RTQ0OUFDOTU1MEQ3 RTU0NTE3M0E3NTY5NkNFNzkyREVEOTIxNEVDMTc5NTU5MDI5RTc1NC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8yN0E1M0M5RENFNzhFNDQ5QUM5NTUwRDdFNTQ1MTczQTc1Njk2Q0U3OTJE RUQ5MjE0RUMxNzk1NTkwMjlFNzU0LzAvNUMxMDdEMDk1NzYzRjczRDYxRTNFODZE OUNFOTgzRDAzMkM1QkMwQy5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKANlkDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEKkswDQYJKoZIhvcNAQELBQADggEBAHtJvZuY r1EIA79iqLC6VASt/tezTEurXjFWVCYpUM0xwDELmgaVwEuWEaALMexo6/5d2AoD WeFbe4tmzAc3OMSJKfQJu1S6clRZsXvFMlGJZpfxAD+T+hFQcBfLytHyaoXAtKB7 VhylhoPmMuXfg8817IANG24saaEQEApaY7GmK40MTiBd179DYIbq5rS/JhFLJ+Kq NWdsployJH7TuIJeY5MdeGh9Ev50A6JTYLDSDCX3iVkyC7Aq9+0ZERZdAncbeEJD bUZ797XRx5nBr5X2Vg1byPqhnVxEoiGVKxVKJxoy56jlpb78AlsFE5XmVs1imDIv po0RQl5brbbCv0s= -----END CERTIFICATE-----Generated at Fri Sep 18 18:04:35 2026 by rpki-client