$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/601B2F772CAC42A8C327EBBE4F629054B007F98A.cer File: 601B2F772CAC42A8C327EBBE4F629054B007F98A.cer (raw, json) Hash identifier: WG3BDcJI4rVA6YOvL1KFFf2/oiTHFFlNgpTp8Num8zs= Subject key identifier: 60:1B:2F:77:2C:AC:42:A8:C3:27:EB:BE:4F:62:90:54:B0:07:F9:8A Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 4331F57E69D7255A6EAF1F3C99C0ED9957BE9AE9 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/DA7260F97C1254931E3391B95C470294FC1CE6B8E2053989578D8AD14C5E9EA3/0/601B2F772CAC42A8C327EBBE4F629054B007F98A.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/DA7260F97C1254931E3391B95C470294FC1CE6B8E2053989578D8AD14C5E9EA3/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Mon 07 Sep 2026 22:35:01 +0000 Certificate not after: Mon 06 Sep 2027 22:40:01 +0000 Subordinate resources: AS: 27737 IP: 190.0.192.0/19 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Sep 2026 08:52:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:31:f5:7e:69:d7:25:5a:6e:af:1f:3c:99:c0:ed:99:57:be:9a:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Sep 7 22:35:01 2026 GMT Not After : Sep 6 22:40:01 2027 GMT Subject: CN=601B2F772CAC42A8C327EBBE4F629054B007F98A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:51:18:c1:a6:60:99:79:af:40:a7:77:13:c7: c9:20:9f:92:c1:e4:4d:cc:22:e9:e5:e9:7c:dd:d8: 95:d6:c7:02:82:df:bb:d1:54:0f:76:a0:7a:1e:93: 9b:c2:7a:51:dc:fe:4d:f9:5d:5d:1c:0e:99:2d:e9: 79:78:1f:fc:21:25:7a:ce:29:40:53:04:91:7d:8c: e1:28:78:ef:4b:3c:13:3d:d2:a0:24:67:97:22:3e: c0:2d:6b:be:57:0f:e7:c7:a3:19:c9:c5:eb:58:b4: f3:80:d3:14:2a:a8:56:49:4c:2f:91:ac:fe:69:e8: 01:e3:37:85:b5:a3:0f:2b:48:f3:ff:cd:5d:52:e8: ef:84:b0:b0:80:e9:6e:cf:5a:78:3d:83:28:3b:96: 5d:2c:29:40:4b:51:31:a3:e9:67:59:77:58:a5:91: 85:ef:d5:5b:da:31:4c:17:b0:77:d4:16:f3:08:e1: 93:cd:b5:67:52:a0:3b:0f:84:10:08:d3:d8:36:4a: d3:90:85:44:01:f1:1f:73:35:b2:72:32:6a:b6:e4: 63:82:10:09:65:7c:29:31:12:6b:7c:df:22:f9:ef: dd:6a:be:b7:67:90:2e:1b:d0:fb:9f:c4:dc:23:d3: 42:87:4f:a7:d5:17:85:d5:92:4c:23:db:8e:5b:89: f3:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 60:1B:2F:77:2C:AC:42:A8:C3:27:EB:BE:4F:62:90:54:B0:07:F9:8A X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/DA7260F97C1254931E3391B95C470294FC1CE6B8E2053989578D8AD14C5E9EA3/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/DA7260F97C1254931E3391B95C470294FC1CE6B8E2053989578D8AD14C5E9EA3/0/601B2F772CAC42A8C327EBBE4F629054B007F98A.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 190.0.192.0/19 sbgp-autonomousSysNum: critical Autonomous System Numbers: 27737 Signature Algorithm: sha256WithRSAEncryption 43:37:6c:95:83:11:ea:4d:65:40:bc:a7:a7:bb:8c:6f:54:1e: 0f:13:59:ec:ec:c7:ec:64:8d:cb:29:4c:aa:44:c3:64:8f:c9: c8:e5:8f:06:bc:44:24:7d:bf:bf:9f:ff:42:d6:fd:2e:db:81: 4b:f5:04:2c:9a:3c:7d:af:5d:a6:12:24:47:f6:11:ec:95:bf: c1:44:73:78:ff:ae:06:61:22:aa:b1:b1:21:22:75:ca:bb:7c: 08:87:b7:a1:21:0c:fc:9a:36:49:b7:d6:f0:cf:c5:a2:d2:45: 91:cc:7a:6e:24:54:91:d9:ca:21:08:a5:64:18:3f:41:16:a4: 35:77:35:9e:1f:0d:00:c0:e1:aa:20:b9:c9:8b:72:52:a6:ff: 9b:9b:0b:9e:b6:4d:92:fd:ac:5a:2d:75:b3:91:45:b7:86:27: 9e:59:05:a1:bb:e4:aa:7e:4f:9b:e7:cd:9e:75:08:44:17:97: e7:e9:9b:08:8f:d7:b2:9e:ff:03:a5:1e:e7:21:24:80:ee:46: 6a:5b:1c:b1:85:9b:17:fd:0d:75:4d:be:82:91:99:96:07:ef: e4:e2:78:95:58:0a:b7:57:30:cc:e2:fa:1a:c9:96:b8:7d:b2: 13:96:bf:c1:e0:d9:c6:7a:d4:e4:5c:ca:6a:2e:1c:95:2f:bd: 83:48:89:f5 -----BEGIN CERTIFICATE----- MIIGlTCCBX2gAwIBAgIUQzH1fmnXJVpurx88mcDtmVe+mukwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjA5MDcyMjM1MDFaFw0yNzA5MDYyMjQwMDFaMDMxMTAvBgNV BAMTKDYwMUIyRjc3MkNBQzQyQThDMzI3RUJCRTRGNjI5MDU0QjAwN0Y5OEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZURjBpmCZea9Ap3cTx8kgn5LB 5E3MIunl6Xzd2JXWxwKC37vRVA92oHoek5vCelHc/k35XV0cDpkt6Xl4H/whJXrO KUBTBJF9jOEoeO9LPBM90qAkZ5ciPsAta75XD+fHoxnJxetYtPOA0xQqqFZJTC+R rP5p6AHjN4W1ow8rSPP/zV1S6O+EsLCA6W7PWng9gyg7ll0sKUBLUTGj6WdZd1il kYXv1VvaMUwXsHfUFvMI4ZPNtWdSoDsPhBAI09g2StOQhUQB8R9zNbJyMmq25GOC EAllfCkxEmt83yL5791qvrdnkC4b0PufxNwj00KHT6fVF4XVkkwj245bifPfAgMB AAGjggOfMIIDmzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRgGy93LKxCqMMn 675PYpBUsAf5ijAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvREE3MjYwRjk3QzEyNTQ5MzFFMzM5MUI5 NUM0NzAyOTRGQzFDRTZCOEUyMDUzOTg5NTc4RDhBRDE0QzVFOUVBMy8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9EQTcyNjBGOTdDMTI1NDkzMUUzMzkxQjk1QzQ3MDI5NEZDMUNFNkI4RTIw NTM5ODk1NzhEOEFEMTRDNUU5RUEzLzAvNjAxQjJGNzcyQ0FDNDJBOEMzMjdFQkJF NEY2MjkwNTRCMDA3Rjk4QS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFvgDAMBkGCCsG AQUFBwEIAQH/BAowCKAGMAQCAmxZMA0GCSqGSIb3DQEBCwUAA4IBAQBDN2yVgxHq TWVAvKenu4xvVB4PE1ns7MfsZI3LKUyqRMNkj8nI5Y8GvEQkfb+/n/9C1v0u24FL 9QQsmjx9r12mEiRH9hHslb/BRHN4/64GYSKqsbEhInXKu3wIh7ehIQz8mjZJt9bw z8Wi0kWRzHpuJFSR2cohCKVkGD9BFqQ1dzWeHw0AwOGqILnJi3JSpv+bmwuetk2S /axaLXWzkUW3hieeWQWhu+Sqfk+b582edQhEF5fn6ZsIj9eynv8DpR7nISSA7kZq WxyxhZsX/Q11Tb6CkZmWB+/k4niVWAq3VzDM4voayZa4fbITlr/B4NnGetTkXMpq LhyVL72DSIn1 -----END CERTIFICATE-----Generated at Fri Sep 18 18:04:41 2026 by rpki-client