$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/71997D86E7652650A15CAE14F52FD2DA06C127B2.cer File: 71997D86E7652650A15CAE14F52FD2DA06C127B2.cer (raw, json) Hash identifier: 9pNpFRxphGUsUzUNoMx4CtOtk595Yeyl0NKP6iIwmPk= Subject key identifier: 71:99:7D:86:E7:65:26:50:A1:5C:AE:14:F5:2F:D2:DA:06:C1:27:B2 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 25A634BC84A39403BBBC58BF9621B300D67D237E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/FD3486311539FF5F0409AD085BA1DEE7C10670E8372DD7B9C3CC4A4EF390279C/0/71997D86E7652650A15CAE14F52FD2DA06C127B2.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/FD3486311539FF5F0409AD085BA1DEE7C10670E8372DD7B9C3CC4A4EF390279C/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Thu 28 May 2026 14:00:01 +0000 Certificate not after: Thu 27 May 2027 14:05:01 +0000 Subordinate resources: AS: 274284 IP: 2803:830::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 02 Jun 2026 13:41:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:a6:34:bc:84:a3:94:03:bb:bc:58:bf:96:21:b3:00:d6:7d:23:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: May 28 14:00:01 2026 GMT Not After : May 27 14:05:01 2027 GMT Subject: CN=71997D86E7652650A15CAE14F52FD2DA06C127B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:1b:bc:18:98:58:63:d4:73:74:3b:13:17:23: 3c:85:e2:48:7f:eb:84:21:4a:c7:a8:49:9d:5f:a2: 6d:47:6e:eb:d1:f8:fc:86:bf:37:48:66:fb:19:ad: 02:d6:6f:89:60:1f:80:30:b8:60:be:1b:40:41:47: 30:55:1f:47:26:46:3e:21:69:21:3f:dc:91:c0:fd: 62:3f:84:2d:2f:1a:ea:3f:50:e8:ea:73:47:b0:ba: 65:52:78:41:2e:85:92:81:9b:7a:94:7b:93:bb:0c: c5:a7:5f:5b:1d:0b:f7:ad:b2:73:7b:7b:0a:fa:7d: 73:3d:94:46:e1:06:12:49:4d:a7:cf:6f:0c:1e:b3: 5e:fe:48:69:ba:f7:bf:79:61:e4:7a:b8:02:2b:2d: a3:02:ba:f4:d2:90:ff:f7:ab:c5:76:1d:ed:2b:57: cc:ed:5f:cf:39:9b:a1:0d:47:de:9f:75:3a:47:6a: 6e:9b:fd:6d:3d:e7:5c:83:c6:94:9f:84:a3:e5:5a: a2:a9:af:90:5d:e0:74:60:2c:4a:83:b8:d4:9f:eb: b9:0a:b4:4e:e8:3b:29:42:15:b6:75:37:3e:96:e0: e0:d7:53:3a:e3:44:e6:8b:b1:3b:a9:f9:90:ad:a0: 24:37:48:de:cb:81:66:b3:3d:67:6a:d7:c5:0b:d1: 34:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 71:99:7D:86:E7:65:26:50:A1:5C:AE:14:F5:2F:D2:DA:06:C1:27:B2 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/FD3486311539FF5F0409AD085BA1DEE7C10670E8372DD7B9C3CC4A4EF390279C/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/FD3486311539FF5F0409AD085BA1DEE7C10670E8372DD7B9C3CC4A4EF390279C/0/71997D86E7652650A15CAE14F52FD2DA06C127B2.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:830::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 274284 Signature Algorithm: sha256WithRSAEncryption 45:48:99:e7:4e:ee:13:23:75:7f:f6:08:aa:57:48:19:bb:9e: 51:83:19:49:f8:cd:7e:7c:f3:09:14:3d:2e:d1:3d:27:14:b7: e4:ea:f0:5b:75:37:7f:31:fa:55:6e:b1:76:a2:6a:16:da:2d: 29:a0:55:f2:93:1c:eb:90:41:a6:87:b2:b6:0e:bc:ff:37:28: d9:f5:0e:3c:2e:54:20:8e:15:24:7b:2e:91:c2:64:00:12:fc: 4f:cf:1d:8d:45:38:89:ad:99:ab:52:f2:9f:25:05:08:18:db: bc:ff:8e:0f:2a:03:44:15:8f:9f:c7:67:35:ea:10:1b:0b:3d: 77:39:e7:34:3d:4a:d5:08:3c:bb:02:16:eb:c4:34:c4:d2:77: ac:fb:1a:6b:1b:27:10:2e:ad:32:6d:ac:db:fb:73:c3:eb:0c: 24:b2:cc:6c:82:48:d7:f2:da:fe:09:37:73:81:52:ce:76:88: 88:cb:55:88:40:70:25:5e:08:82:6a:75:77:76:03:b4:1d:cd: a2:f4:7f:47:49:04:9a:bc:1c:4c:f5:a5:f1:fe:b9:45:af:7b: c6:23:b0:b1:cf:26:72:22:a9:55:f3:55:54:32:d1:8a:54:61: f1:dc:60:1c:5f:e5:4c:33:9a:16:9f:f9:7b:4b:e8:4b:59:7f: 5b:5a:e9:ef -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUJaY0vISjlAO7vFi/liGzANZ9I34wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjA1MjgxNDAwMDFaFw0yNzA1MjcxNDA1MDFaMDMxMTAvBgNV BAMTKDcxOTk3RDg2RTc2NTI2NTBBMTVDQUUxNEY1MkZEMkRBMDZDMTI3QjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNG7wYmFhj1HN0OxMXIzyF4kh/ 64QhSseoSZ1fom1HbuvR+PyGvzdIZvsZrQLWb4lgH4AwuGC+G0BBRzBVH0cmRj4h aSE/3JHA/WI/hC0vGuo/UOjqc0ewumVSeEEuhZKBm3qUe5O7DMWnX1sdC/etsnN7 ewr6fXM9lEbhBhJJTafPbwwes17+SGm69795YeR6uAIrLaMCuvTSkP/3q8V2He0r V8ztX885m6ENR96fdTpHam6b/W0951yDxpSfhKPlWqKpr5Bd4HRgLEqDuNSf67kK tE7oOylCFbZ1Nz6W4ODXUzrjROaLsTup+ZCtoCQ3SN7LgWazPWdq18UL0TSvAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRxmX2G52UmUKFc rhT1L9LaBsEnsjAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRkQzNDg2MzExNTM5RkY1RjA0MDlBRDA4 NUJBMURFRTdDMTA2NzBFODM3MkREN0I5QzNDQzRBNEVGMzkwMjc5Qy8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9GRDM0ODYzMTE1MzlGRjVGMDQwOUFEMDg1QkExREVFN0MxMDY3MEU4Mzcy REQ3QjlDM0NDNEE0RUYzOTAyNzlDLzAvNzE5OTdEODZFNzY1MjY1MEExNUNBRTE0 RjUyRkQyREEwNkMxMjdCMi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAMIMDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEL2wwDQYJKoZIhvcNAQELBQADggEBAEVImedO 7hMjdX/2CKpXSBm7nlGDGUn4zX588wkUPS7RPScUt+Tq8Ft1N38x+lVusXaiahba LSmgVfKTHOuQQaaHsrYOvP83KNn1DjwuVCCOFSR7LpHCZAAS/E/PHY1FOImtmatS 8p8lBQgY27z/jg8qA0QVj5/HZzXqEBsLPXc55zQ9StUIPLsCFuvENMTSd6z7Gmsb JxAurTJtrNv7c8PrDCSyzGyCSNfy2v4JN3OBUs52iIjLVYhAcCVeCIJqdXd2A7Qd zaL0f0dJBJq8HEz1pfH+uUWve8YjsLHPJnIiqVXzVVQy0YpUYfHcYBxf5Uwzmhaf +XtL6EtZf1ta6e8= -----END CERTIFICATE-----Generated at Thu May 28 19:18:34 2026 by rpki-client