$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7148D4BF4870749ECBB254193F947D17876EE3F5.cer File: 7148D4BF4870749ECBB254193F947D17876EE3F5.cer (raw, json) Hash identifier: HbstQZpG8HMcoBjOqUq4v1bLjJovU987XLSDafSHHxk= Subject key identifier: 71:48:D4:BF:48:70:74:9E:CB:B2:54:19:3F:94:7D:17:87:6E:E3:F5 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 649E3F7BF7178B423E3FBADEE5DE4FBCDB7D00EE Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/27003B37493BC6A562A106895391C5117091F0FAB545056C48E523FA057B6511/0/7148D4BF4870749ECBB254193F947D17876EE3F5.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/27003B37493BC6A562A106895391C5117091F0FAB545056C48E523FA057B6511/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Sat 01 Aug 2026 16:20:01 +0000 Certificate not after: Sat 31 Jul 2027 16:25:01 +0000 Subordinate resources: AS: 274997 IP: 2803:c330::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 13 Sep 2026 18:55:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:9e:3f:7b:f7:17:8b:42:3e:3f:ba:de:e5:de:4f:bc:db:7d:00:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Aug 1 16:20:01 2026 GMT Not After : Jul 31 16:25:01 2027 GMT Subject: CN=7148D4BF4870749ECBB254193F947D17876EE3F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:01:c9:f7:6c:83:ae:b2:d6:d6:28:ff:5f:9f: a8:27:d6:45:e9:71:ac:82:cc:cf:1a:5a:e1:19:78: bd:32:5a:b2:c6:48:3f:58:d7:3d:18:49:24:64:07: 97:a5:d4:64:c2:42:60:65:a7:23:89:1a:c0:b2:29: 10:4e:c6:20:20:a7:cd:18:d1:25:0c:0b:ac:d2:0c: 65:63:74:27:24:4d:ae:18:4f:94:82:6f:6e:05:9b: 85:e6:88:57:a7:9d:e9:3d:bd:65:43:17:ea:dd:ee: 0e:b4:af:f3:ea:fe:dc:45:cb:6a:06:a0:10:ea:f0: 5e:69:c7:66:41:d7:c7:df:1c:cd:9a:b3:75:7d:c4: 47:e5:9f:a4:00:d9:03:43:46:ed:9c:2b:13:da:b4: 1b:51:c8:57:d3:b9:55:4b:f4:c9:79:fa:f5:4d:c5: 5a:d9:8c:7e:36:4e:ca:3a:8a:13:aa:d5:1c:94:27: 7e:c8:03:55:e5:b4:a5:c7:71:61:f3:4b:17:d8:53: 38:d1:f3:eb:a7:f8:9d:c2:0a:3e:2e:27:b7:de:4d: a8:4f:10:01:fd:9c:f8:e6:22:83:3b:14:08:1c:30: 67:03:0f:bc:42:5e:e4:9a:2d:8c:82:eb:5f:28:ce: 49:f7:d8:c7:72:c7:d4:c0:77:a0:23:55:39:85:12: 16:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 71:48:D4:BF:48:70:74:9E:CB:B2:54:19:3F:94:7D:17:87:6E:E3:F5 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/27003B37493BC6A562A106895391C5117091F0FAB545056C48E523FA057B6511/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/27003B37493BC6A562A106895391C5117091F0FAB545056C48E523FA057B6511/0/7148D4BF4870749ECBB254193F947D17876EE3F5.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:c330::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 274997 Signature Algorithm: sha256WithRSAEncryption 46:1f:fe:61:b6:6f:bd:af:8a:1d:e4:b9:fd:ec:4a:1f:8c:8a: 83:d6:ea:4e:30:a2:76:cc:f3:43:a7:32:59:29:36:69:09:f8: 4c:15:4d:ac:45:74:f9:08:c7:c0:ef:23:0f:5a:2a:a1:6e:c3: ce:f1:a5:a8:0b:21:d5:52:ab:1e:95:f1:ea:04:a8:ee:45:3e: ce:6e:11:53:59:c0:63:63:4b:fc:56:0b:a9:37:e7:a0:2b:3b: ec:e1:d0:c8:24:d2:1b:c3:e0:87:20:07:20:51:f0:32:31:b1: da:49:e7:66:09:63:18:c0:1a:ef:22:83:de:2e:13:da:da:c2: a7:cc:b3:6e:8e:35:3e:56:9b:2f:bd:6f:8d:d7:f3:af:06:51: c6:de:5f:cf:70:7c:f4:23:0f:6c:b1:f2:62:37:20:28:3c:83: 27:16:14:94:d5:ce:e6:3a:1a:f1:c1:7a:31:3a:46:bf:2e:c8: 96:3e:07:5b:cb:8f:04:9d:d2:3b:c5:83:38:94:b6:13:79:22: be:92:c5:e4:6a:a7:f6:70:a8:42:21:80:93:ca:24:08:89:3b: d9:c6:8e:22:57:6e:ed:46:e5:8f:f7:2c:53:15:d8:e4:1d:2a: 08:c8:1d:88:d5:37:e1:c2:50:e1:82:16:14:9c:ab:b3:e8:4b: 1a:3f:03:57 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUZJ4/e/cXi0I+P7re5d5PvNt9AO4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjA4MDExNjIwMDFaFw0yNzA3MzExNjI1MDFaMDMxMTAvBgNV BAMTKDcxNDhENEJGNDg3MDc0OUVDQkIyNTQxOTNGOTQ3RDE3ODc2RUUzRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzAcn3bIOustbWKP9fn6gn1kXp cayCzM8aWuEZeL0yWrLGSD9Y1z0YSSRkB5el1GTCQmBlpyOJGsCyKRBOxiAgp80Y 0SUMC6zSDGVjdCckTa4YT5SCb24Fm4XmiFennek9vWVDF+rd7g60r/Pq/txFy2oG oBDq8F5px2ZB18ffHM2as3V9xEfln6QA2QNDRu2cKxPatBtRyFfTuVVL9Ml5+vVN xVrZjH42Tso6ihOq1RyUJ37IA1XltKXHcWHzSxfYUzjR8+un+J3CCj4uJ7feTahP EAH9nPjmIoM7FAgcMGcDD7xCXuSaLYyC618ozkn32Mdyx9TAd6AjVTmFEhYPAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRxSNS/SHB0nsuy VBk/lH0Xh27j9TAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMjcwMDNCMzc0OTNCQzZBNTYyQTEwNjg5 NTM5MUM1MTE3MDkxRjBGQUI1NDUwNTZDNDhFNTIzRkEwNTdCNjUxMS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8yNzAwM0IzNzQ5M0JDNkE1NjJBMTA2ODk1MzkxQzUxMTcwOTFGMEZBQjU0 NTA1NkM0OEU1MjNGQTA1N0I2NTExLzAvNzE0OEQ0QkY0ODcwNzQ5RUNCQjI1NDE5 M0Y5NDdEMTc4NzZFRTNGNS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAPDMDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEMjUwDQYJKoZIhvcNAQELBQADggEBAEYf/mG2 b72vih3kuf3sSh+MioPW6k4wonbM80OnMlkpNmkJ+EwVTaxFdPkIx8DvIw9aKqFu w87xpagLIdVSqx6V8eoEqO5FPs5uEVNZwGNjS/xWC6k356ArO+zh0Mgk0hvD4Icg ByBR8DIxsdpJ52YJYxjAGu8ig94uE9rawqfMs26ONT5Wmy+9b43X868GUcbeX89w fPQjD2yx8mI3ICg8gycWFJTVzuY6GvHBejE6Rr8uyJY+B1vLjwSd0jvFgziUthN5 Ir6SxeRqp/ZwqEIhgJPKJAiJO9nGjiJXbu1G5Y/3LFMV2OQdKgjIHYjVN+HCUOGC FhScq7PoSxo/A1c= -----END CERTIFICATE-----Generated at Wed Sep 9 16:31:55 2026 by rpki-client