$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/671B0B346C15C76F31C336CDF5159E93C72B2CF5.cer File: 671B0B346C15C76F31C336CDF5159E93C72B2CF5.cer (raw, json) Hash identifier: Rkvuzkacd7YCwDvWmiyC70f7YtTeWWNd+/YDHTtbKp4= Subject key identifier: 67:1B:0B:34:6C:15:C7:6F:31:C3:36:CD:F5:15:9E:93:C7:2B:2C:F5 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 2E4B8AF922A2810944F071E3ADD167561507E508 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/D8B3AA9B680EDFABB729563CA5E9D8B6B5EC03BB7351C26C17D7E8A5638B25F7/0/671B0B346C15C76F31C336CDF5159E93C72B2CF5.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/D8B3AA9B680EDFABB729563CA5E9D8B6B5EC03BB7351C26C17D7E8A5638B25F7/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Mon 01 Jun 2026 15:15:01 +0000 Certificate not after: Mon 31 May 2027 15:20:01 +0000 Subordinate resources: AS: 270175 IP: 2806:3ef::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 15 Jun 2026 12:46:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:4b:8a:f9:22:a2:81:09:44:f0:71:e3:ad:d1:67:56:15:07:e5:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jun 1 15:15:01 2026 GMT Not After : May 31 15:20:01 2027 GMT Subject: CN=671B0B346C15C76F31C336CDF5159E93C72B2CF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:bf:32:e6:ea:be:42:95:69:74:1e:55:a8:bd: 82:b7:d4:35:cb:70:cf:33:a5:e7:71:15:69:df:b0: c9:ca:08:71:93:da:c1:75:b0:73:c4:1d:6d:ac:40: 1f:66:7d:ce:f0:44:ca:4e:01:d4:63:8f:45:91:18: 4f:a5:dc:17:c4:14:c0:4e:3f:72:b1:4f:2f:23:09: 3f:95:9b:bd:e8:c7:c5:f0:37:89:54:ef:51:f7:b1: 56:8e:35:d2:72:d5:65:48:fb:2c:ee:8d:04:d8:50: 23:a2:6c:34:ad:0b:71:20:d9:a9:fd:d3:87:8b:0f: 52:53:c1:3f:7d:bc:dd:d4:c6:74:72:39:83:1c:3d: 3f:86:ac:e1:d0:ff:16:9b:05:11:7c:cd:13:59:07: 96:ba:99:ff:75:76:5d:fa:4c:4d:68:35:bd:ae:f3: de:af:65:69:f7:dc:2c:3f:9b:f1:45:2d:36:18:91: 38:86:b7:ef:a4:b4:78:e9:6f:80:56:ef:03:91:f1: 9d:0a:dd:4b:d7:ef:1e:3c:0a:3c:6d:ee:4d:d4:7a: 95:1f:a5:35:9a:a0:18:bd:33:7b:51:76:c0:17:96: f6:05:24:b9:b3:53:d9:f4:51:dd:25:16:04:22:d4: cf:f8:f6:94:2d:54:38:44:71:f4:59:e4:30:88:44: 45:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 67:1B:0B:34:6C:15:C7:6F:31:C3:36:CD:F5:15:9E:93:C7:2B:2C:F5 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/D8B3AA9B680EDFABB729563CA5E9D8B6B5EC03BB7351C26C17D7E8A5638B25F7/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/D8B3AA9B680EDFABB729563CA5E9D8B6B5EC03BB7351C26C17D7E8A5638B25F7/0/671B0B346C15C76F31C336CDF5159E93C72B2CF5.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2806:3ef::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 270175 Signature Algorithm: sha256WithRSAEncryption 81:b9:90:03:52:c5:eb:a6:88:46:42:61:a0:bd:4e:37:69:14: 6a:54:8a:d2:0c:de:47:66:08:a7:6a:ef:3e:91:6b:fc:4e:6a: c0:e0:59:87:0b:0e:e8:1a:5e:c8:0c:c1:5b:24:e7:6e:ed:6e: 5e:94:e2:c7:2f:2c:08:8c:a9:0f:3e:8d:b3:77:27:3c:1d:92: f8:71:94:c7:f7:d9:94:58:9d:cd:02:3f:8a:d4:82:2e:98:c9: 8a:fe:9f:41:00:2a:16:a8:33:41:a5:b8:1a:39:34:08:48:f7: 5b:a1:e3:e5:ed:26:24:6f:a3:1b:40:62:6f:e1:f8:bd:86:7c: 29:3f:06:28:fc:d6:ae:0c:d0:e7:36:81:89:fe:57:5f:7e:a9: 5e:9c:a7:6e:fb:a2:04:af:9a:ea:97:90:a4:43:66:aa:e7:e4: fd:91:fe:2e:97:18:44:21:4e:6a:e5:d0:e4:fe:9f:dc:cd:8c: f3:0c:9f:f7:35:bd:cc:eb:66:17:a9:70:df:c5:c7:0e:ea:ad: 3e:fb:46:d3:1c:e1:e9:06:77:b3:03:64:26:2f:a6:f6:14:43: 96:d6:1c:2a:b3:d0:74:db:46:07:71:77:5c:dc:40:37:7e:d1: fd:ab:a1:01:fa:be:1b:04:0e:c5:30:3e:9e:ee:d6:26:49:0e: 19:c3:f1:3a -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIULkuK+SKigQlE8HHjrdFnVhUH5QgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjA2MDExNTE1MDFaFw0yNzA1MzExNTIwMDFaMDMxMTAvBgNV BAMTKDY3MUIwQjM0NkMxNUM3NkYzMUMzMzZDREY1MTU5RTkzQzcyQjJDRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgvzLm6r5ClWl0HlWovYK31DXL cM8zpedxFWnfsMnKCHGT2sF1sHPEHW2sQB9mfc7wRMpOAdRjj0WRGE+l3BfEFMBO P3KxTy8jCT+Vm73ox8XwN4lU71H3sVaONdJy1WVI+yzujQTYUCOibDStC3Eg2an9 04eLD1JTwT99vN3UxnRyOYMcPT+GrOHQ/xabBRF8zRNZB5a6mf91dl36TE1oNb2u 896vZWn33Cw/m/FFLTYYkTiGt++ktHjpb4BW7wOR8Z0K3UvX7x48Cjxt7k3UepUf pTWaoBi9M3tRdsAXlvYFJLmzU9n0Ud0lFgQi1M/49pQtVDhEcfRZ5DCIREU5AgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRnGws0bBXHbzHD Ns31FZ6Txyss9TAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRDhCM0FBOUI2ODBFREZBQkI3Mjk1NjND QTVFOUQ4QjZCNUVDMDNCQjczNTFDMjZDMTdEN0U4QTU2MzhCMjVGNy8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9EOEIzQUE5QjY4MEVERkFCQjcyOTU2M0NBNUU5RDhCNkI1RUMwM0JCNzM1 MUMyNkMxN0Q3RThBNTYzOEIyNUY3LzAvNjcxQjBCMzQ2QzE1Qzc2RjMxQzMzNkNE RjUxNTlFOTNDNzJCMkNGNS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAYD7zAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEH18wDQYJKoZIhvcNAQELBQADggEBAIG5kANS xeumiEZCYaC9TjdpFGpUitIM3kdmCKdq7z6Ra/xOasDgWYcLDugaXsgMwVsk527t bl6U4scvLAiMqQ8+jbN3JzwdkvhxlMf32ZRYnc0CP4rUgi6YyYr+n0EAKhaoM0Gl uBo5NAhI91uh4+XtJiRvoxtAYm/h+L2GfCk/Bij81q4M0Oc2gYn+V19+qV6cp277 ogSvmuqXkKRDZqrn5P2R/i6XGEQhTmrl0OT+n9zNjPMMn/c1vczrZhepcN/Fxw7q rT77RtMc4ekGd7MDZCYvpvYUQ5bWHCqz0HTbRgdxd1zcQDd+0f2roQH6vhsEDsUw Pp7u1iZJDhnD8To= -----END CERTIFICATE-----Generated at Thu Jun 11 13:27:08 2026 by rpki-client