$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5FE29CC51BBB272DC62DDDE37BC696B10AE12970.cer File: 5FE29CC51BBB272DC62DDDE37BC696B10AE12970.cer (raw, json) Hash identifier: HW3W8XgiqfgXoyEc5jAjqLxvKGSYNB7yUG+QWI+T8zw= Subject key identifier: 5F:E2:9C:C5:1B:BB:27:2D:C6:2D:DD:E3:7B:C6:96:B1:0A:E1:29:70 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 14EF9086E5E65F0BDE9E395A6280B19BBD6D5DDC Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/0DEAB1F67E3DA91FDD4F9B6DDA7F897D9F8E4357611196051E8979B6AE2301B1/0/5FE29CC51BBB272DC62DDDE37BC696B10AE12970.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/0DEAB1F67E3DA91FDD4F9B6DDA7F897D9F8E4357611196051E8979B6AE2301B1/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Mon 14 Sep 2026 18:50:01 +0000 Certificate not after: Mon 13 Sep 2027 18:55:01 +0000 Subordinate resources: AS: 61448 IP: 179.0.193.0/24 IP: 2801:1d:c000::/48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Sep 2026 08:52:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:ef:90:86:e5:e6:5f:0b:de:9e:39:5a:62:80:b1:9b:bd:6d:5d:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Sep 14 18:50:01 2026 GMT Not After : Sep 13 18:55:01 2027 GMT Subject: CN=5FE29CC51BBB272DC62DDDE37BC696B10AE12970 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:da:2b:19:89:09:2c:f4:00:fa:e6:7a:e9:ea: 56:ca:94:e0:22:7f:16:20:36:56:c7:86:f1:37:aa: 14:c0:21:0c:fa:79:b9:a9:ce:02:74:d2:52:c1:39: 68:6e:82:42:00:4b:be:b8:8a:44:80:fa:cd:6b:7b: 04:e6:57:6b:b1:14:00:94:95:68:0d:21:03:d0:28: 11:17:6a:a1:dd:86:66:64:2d:77:66:f2:33:ec:67: d5:3d:48:fe:0e:b1:92:1b:1d:5c:b5:bf:4c:3c:27: b2:ac:83:0b:97:1e:1c:a0:9f:2c:bb:77:30:9d:c3: f0:5f:cf:e8:5c:bc:a2:e4:98:cf:a4:b0:2d:39:93: 27:d7:59:43:ae:33:48:08:f3:57:bc:4f:05:e9:e0: 5c:87:25:8a:85:f4:0a:29:07:9d:33:0b:8c:56:f0: 18:1c:6c:99:5c:66:fc:19:ea:25:de:17:82:1b:a5: c5:44:c5:90:22:0c:4a:c6:be:31:62:ca:d5:0d:e3: 20:0b:23:a8:2b:ab:c6:35:66:de:eb:9f:33:eb:86: d1:e8:f4:b6:0f:c6:98:e6:cf:4e:35:34:68:9e:15: 86:ca:6c:36:5e:a6:75:cb:0d:97:4c:e0:40:e6:7c: da:c9:a3:aa:2d:1f:12:42:d4:d0:7d:e8:84:31:f9: f9:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5F:E2:9C:C5:1B:BB:27:2D:C6:2D:DD:E3:7B:C6:96:B1:0A:E1:29:70 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0DEAB1F67E3DA91FDD4F9B6DDA7F897D9F8E4357611196051E8979B6AE2301B1/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0DEAB1F67E3DA91FDD4F9B6DDA7F897D9F8E4357611196051E8979B6AE2301B1/0/5FE29CC51BBB272DC62DDDE37BC696B10AE12970.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 179.0.193.0/24 IPv6: 2801:1d:c000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 61448 Signature Algorithm: sha256WithRSAEncryption 0c:9b:fe:e1:46:4e:94:e4:8a:fc:b3:5f:14:b2:8e:42:eb:4b: 8b:1c:e5:73:07:9f:af:18:24:fa:be:ff:f3:e8:1e:65:01:79: 1f:e8:99:fb:85:6d:3b:84:7e:fc:2a:35:2f:ce:5e:69:94:76: 3a:ec:49:be:6d:28:8c:4c:5b:57:cc:4b:88:16:44:ea:7b:0a: 14:35:1a:90:25:5b:e1:1b:e4:75:fd:20:24:7d:27:5d:60:e9: 8c:4b:26:e6:18:b7:83:cb:10:91:13:f5:d4:84:84:17:0a:19: 27:b1:ba:23:e6:bb:f3:98:b0:9d:14:9d:04:6c:d9:10:8a:e1: 6a:9c:87:bf:d4:f1:2a:23:95:7f:b8:94:e9:9b:4a:62:d9:73: 36:74:c7:2f:fa:ef:88:c5:81:7a:f0:c7:75:36:08:1f:57:5d: e1:96:d9:cf:54:ab:86:0a:d7:d2:be:66:19:2d:48:d1:d4:f2: 72:37:fb:64:e4:e0:86:4b:d3:9e:5e:ff:23:fe:22:d4:20:9a: 3b:29:61:01:78:f1:94:8a:99:2f:6e:8a:e5:76:9e:95:e0:63: 33:51:c5:d8:af:55:e4:81:4a:44:af:ec:11:02:6c:84:f0:c2: e8:fd:cf:99:39:59:76:37:f8:83:da:66:6f:d0:cd:57:2a:35: 35:9f:d7:f4 -----BEGIN CERTIFICATE----- MIIGpzCCBY+gAwIBAgIUFO+QhuXmXwvenjlaYoCxm71tXdwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjA5MTQxODUwMDFaFw0yNzA5MTMxODU1MDFaMDMxMTAvBgNV BAMTKDVGRTI5Q0M1MUJCQjI3MkRDNjJERERFMzdCQzY5NkIxMEFFMTI5NzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY2isZiQks9AD65nrp6lbKlOAi fxYgNlbHhvE3qhTAIQz6ebmpzgJ00lLBOWhugkIAS764ikSA+s1rewTmV2uxFACU lWgNIQPQKBEXaqHdhmZkLXdm8jPsZ9U9SP4OsZIbHVy1v0w8J7KsgwuXHhygnyy7 dzCdw/Bfz+hcvKLkmM+ksC05kyfXWUOuM0gI81e8TwXp4FyHJYqF9AopB50zC4xW 8BgcbJlcZvwZ6iXeF4IbpcVExZAiDErGvjFiytUN4yALI6grq8Y1Zt7rnzPrhtHo 9LYPxpjmz041NGieFYbKbDZepnXLDZdM4EDmfNrJo6otHxJC1NB96IQx+flJAgMB AAGjggOxMIIDrTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRf4pzFG7snLcYt 3eN7xpaxCuEpcDAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMERFQUIxRjY3RTNEQTkxRkRENEY5QjZE REE3Rjg5N0Q5RjhFNDM1NzYxMTE5NjA1MUU4OTc5QjZBRTIzMDFCMS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8wREVBQjFGNjdFM0RBOTFGREQ0RjlCNkREQTdGODk3RDlGOEU0MzU3NjEx MTk2MDUxRTg5NzlCNkFFMjMwMUIxLzAvNUZFMjlDQzUxQkJCMjcyREM2MkREREUz N0JDNjk2QjEwQUUxMjk3MC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAswDBMA8EAgAC MAkDBwAoAQAdwAAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAPAIMA0GCSqGSIb3 DQEBCwUAA4IBAQAMm/7hRk6U5Ir8s18Uso5C60uLHOVzB5+vGCT6vv/z6B5lAXkf 6Jn7hW07hH78KjUvzl5plHY67Em+bSiMTFtXzEuIFkTqewoUNRqQJVvhG+R1/SAk fSddYOmMSybmGLeDyxCRE/XUhIQXChknsboj5rvzmLCdFJ0EbNkQiuFqnIe/1PEq I5V/uJTpm0pi2XM2dMcv+u+IxYF68Md1NggfV13hltnPVKuGCtfSvmYZLUjR1PJy N/tk5OCGS9OeXv8j/iLUIJo7KWEBePGUipkvborldp6V4GMzUcXYr1XkgUpEr+wR AmyE8MLo/c+ZOVl2N/iD2mZv0M1XKjU1n9f0 -----END CERTIFICATE-----Generated at Fri Sep 18 18:05:20 2026 by rpki-client