$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D7C38D3A427BEB25E4910D4A7621A8A1412EBE1.cer File: 5D7C38D3A427BEB25E4910D4A7621A8A1412EBE1.cer (raw, json) Hash identifier: KXYHr/2f9q4AiQ9ygTV46120dT7ZbFC8RETc+Tsm0UY= Subject key identifier: 5D:7C:38:D3:A4:27:BE:B2:5E:49:10:D4:A7:62:1A:8A:14:12:EB:E1 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 383AF47AA7FFF65C0A098F83A39957E7DD7121D2 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/BF8C62EBC3071C938DCDE519EAF6E9CDC53815444043B2560BB1BB014C8803C8/0/5D7C38D3A427BEB25E4910D4A7621A8A1412EBE1.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/BF8C62EBC3071C938DCDE519EAF6E9CDC53815444043B2560BB1BB014C8803C8/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 16 Sep 2026 13:40:01 +0000 Certificate not after: Wed 15 Sep 2027 13:45:01 +0000 Subordinate resources: AS: 275039 IP: 2803:5730::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Sep 2026 08:52:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:3a:f4:7a:a7:ff:f6:5c:0a:09:8f:83:a3:99:57:e7:dd:71:21:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Sep 16 13:40:01 2026 GMT Not After : Sep 15 13:45:01 2027 GMT Subject: CN=5D7C38D3A427BEB25E4910D4A7621A8A1412EBE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:fb:23:95:4c:15:32:bb:29:9e:93:57:80:37: 35:dd:dd:96:ff:a3:21:77:c1:71:e4:14:69:ad:92: c6:4d:e7:34:d4:fa:2a:c4:61:aa:3e:cf:72:58:1b: f5:a0:62:49:4c:96:9c:5d:bb:fb:66:9d:2c:a8:cf: ea:c9:e4:89:90:66:69:f2:dd:03:f1:0f:9c:93:ee: d9:f9:86:84:26:c0:76:ff:d9:3c:42:e5:13:a5:59: 8d:56:33:5a:40:4a:d9:4a:b2:6a:02:ac:da:05:0e: 9a:8b:cf:e5:d2:83:e9:82:90:47:f3:98:64:33:95: df:77:5d:b4:5e:73:da:17:b1:3d:3f:76:ea:71:7e: ce:32:be:38:6b:92:4b:52:35:16:87:00:ce:26:72: 04:cb:74:96:8c:11:92:14:0f:3c:db:96:2f:ee:7a: e6:81:03:c1:ac:e1:ba:14:f0:e2:83:07:95:3f:56: 89:03:5b:9f:c8:4d:dd:a2:7e:07:1b:6c:18:bb:b9: e2:fd:4a:e7:c5:e0:02:06:11:0c:cc:c4:91:6c:c4: f5:bc:38:4b:c5:21:f5:d8:54:b4:5c:50:5a:b4:b8: 97:26:4f:5f:e5:16:fb:55:a5:d5:bd:a3:37:1f:92: 44:a7:0f:e1:49:8c:97:38:44:94:6a:06:c6:7d:77: f0:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5D:7C:38:D3:A4:27:BE:B2:5E:49:10:D4:A7:62:1A:8A:14:12:EB:E1 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/BF8C62EBC3071C938DCDE519EAF6E9CDC53815444043B2560BB1BB014C8803C8/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/BF8C62EBC3071C938DCDE519EAF6E9CDC53815444043B2560BB1BB014C8803C8/0/5D7C38D3A427BEB25E4910D4A7621A8A1412EBE1.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:5730::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 275039 Signature Algorithm: sha256WithRSAEncryption 04:47:9c:0a:b2:a2:35:e1:e1:40:b5:dc:28:52:f8:c8:74:16: 59:00:23:ee:e7:45:90:48:a8:c8:45:28:45:3f:50:46:92:95: 13:31:d0:4c:72:58:0a:62:98:18:76:65:6d:16:ed:9d:a5:b1: 6a:ef:b9:15:6c:95:80:d5:82:7c:88:3f:5c:bb:7b:99:a5:e8: 4a:a3:04:06:e1:1a:75:4f:82:d6:81:ea:84:5c:43:b2:85:8c: 11:b0:35:90:e4:c1:65:fc:e7:29:c9:46:25:4b:a0:69:62:4e: 3d:7f:62:01:b9:35:0c:86:5e:3d:5b:69:e2:41:53:3f:e9:da: 06:e7:bd:cb:44:4d:1a:61:fe:aa:30:ad:19:39:1e:cc:89:0e: 93:a4:f4:90:94:b5:79:44:33:da:8d:82:7a:c6:57:c1:28:67: 53:f8:06:42:d5:25:08:c4:13:d4:59:27:92:1b:f2:8b:cb:34: ce:f6:af:98:b0:05:28:09:20:0f:ab:e9:7e:99:d6:76:58:9b: fe:e8:8b:0b:2f:89:85:88:21:2b:6e:ab:0b:73:1e:37:b1:03: b6:06:72:1d:e4:df:d3:97:03:a8:53:57:89:87:fb:0e:c4:76: 64:ab:ad:b9:c0:a0:8e:14:fc:7b:1f:a4:7f:59:f2:27:b0:27: 26:dc:5e:0e -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUODr0eqf/9lwKCY+Do5lX591xIdIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjA5MTYxMzQwMDFaFw0yNzA5MTUxMzQ1MDFaMDMxMTAvBgNV BAMTKDVEN0MzOEQzQTQyN0JFQjI1RTQ5MTBENEE3NjIxQThBMTQxMkVCRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy+yOVTBUyuymek1eANzXd3Zb/ oyF3wXHkFGmtksZN5zTU+irEYao+z3JYG/WgYklMlpxdu/tmnSyoz+rJ5ImQZmny 3QPxD5yT7tn5hoQmwHb/2TxC5ROlWY1WM1pAStlKsmoCrNoFDpqLz+XSg+mCkEfz mGQzld93XbRec9oXsT0/dupxfs4yvjhrkktSNRaHAM4mcgTLdJaMEZIUDzzbli/u euaBA8Gs4boU8OKDB5U/VokDW5/ITd2ifgcbbBi7ueL9SufF4AIGEQzMxJFsxPW8 OEvFIfXYVLRcUFq0uJcmT1/lFvtVpdW9ozcfkkSnD+FJjJc4RJRqBsZ9d/CxAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRdfDjTpCe+sl5J ENSnYhqKFBLr4TAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQkY4QzYyRUJDMzA3MUM5MzhEQ0RFNTE5 RUFGNkU5Q0RDNTM4MTU0NDQwNDNCMjU2MEJCMUJCMDE0Qzg4MDNDOC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9CRjhDNjJFQkMzMDcxQzkzOERDREU1MTlFQUY2RTlDREM1MzgxNTQ0NDA0 M0IyNTYwQkIxQkIwMTRDODgwM0M4LzAvNUQ3QzM4RDNBNDI3QkVCMjVFNDkxMEQ0 QTc2MjFBOEExNDEyRUJFMS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKANXMDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEMl8wDQYJKoZIhvcNAQELBQADggEBAARHnAqy ojXh4UC13ChS+Mh0FlkAI+7nRZBIqMhFKEU/UEaSlRMx0ExyWApimBh2ZW0W7Z2l sWrvuRVslYDVgnyIP1y7e5ml6EqjBAbhGnVPgtaB6oRcQ7KFjBGwNZDkwWX85ynJ RiVLoGliTj1/YgG5NQyGXj1baeJBUz/p2gbnvctETRph/qowrRk5HsyJDpOk9JCU tXlEM9qNgnrGV8EoZ1P4BkLVJQjEE9RZJ5Ib8ovLNM72r5iwBSgJIA+r6X6Z1nZY m/7oiwsviYWIIStuqwtzHjexA7YGch3k39OXA6hTV4mH+w7EdmSrrbnAoI4U/Hsf pH9Z8iewJybcXg4= -----END CERTIFICATE-----Generated at Fri Sep 18 18:05:27 2026 by rpki-client