$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/795B9A9A078937864D9116132A81F55AF7A4D72A.cer File: 795B9A9A078937864D9116132A81F55AF7A4D72A.cer (raw, json) Hash identifier: T/5yte8QYGTGT1bHjTO+TJTEmKWaDg2XJHvSAZHqImk= Subject key identifier: 79:5B:9A:9A:07:89:37:86:4D:91:16:13:2A:81:F5:5A:F7:A4:D7:2A Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 040FD2616226C5DDE962BDA482CE937BF9913FA3 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/991C723F3A8383AA8BCC0DAD8F508E5E0153EFECAF4F4EAB4024DDF5A130025D/0/795B9A9A078937864D9116132A81F55AF7A4D72A.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/991C723F3A8383AA8BCC0DAD8F508E5E0153EFECAF4F4EAB4024DDF5A130025D/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 27 May 2026 13:05:01 +0000 Certificate not after: Wed 26 May 2027 13:10:01 +0000 Subordinate resources: AS: 270010 IP: 200.39.152.0/22 IP: 2803:49e0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 17 Jun 2026 16:50:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:0f:d2:61:62:26:c5:dd:e9:62:bd:a4:82:ce:93:7b:f9:91:3f:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: May 27 13:05:01 2026 GMT Not After : May 26 13:10:01 2027 GMT Subject: CN=795B9A9A078937864D9116132A81F55AF7A4D72A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:19:d2:c8:dd:7d:7a:4e:9e:46:fe:5a:d6:99: cf:3a:55:26:88:ab:ed:8b:d9:91:01:92:10:f8:cd: 63:46:fc:00:72:02:3e:00:c1:f1:7f:78:7c:ca:e5: 07:73:7a:22:03:36:d8:39:29:37:ac:46:43:a3:f3: 2a:a0:35:dd:66:fe:9b:c3:da:96:20:d6:52:7f:0f: aa:12:0c:db:a2:bc:07:01:a8:84:01:f7:5f:84:4f: 60:fb:d1:f2:e0:f0:8b:34:35:ba:2d:be:04:56:ca: c3:71:73:e1:3f:e9:7f:3f:22:8e:a1:df:83:11:c5: 7a:14:cc:1a:8b:1c:e5:a8:bf:96:b1:a8:d3:d7:33: 7f:9e:90:5c:f9:ff:0c:5f:f1:58:bd:1c:e1:7b:b8: 8a:9f:ae:f8:37:23:95:5f:e8:ca:7f:1c:47:e8:d5: 08:e0:c2:00:87:6e:62:bd:a1:43:1f:ef:49:45:09: 02:df:61:86:2c:67:17:e0:11:da:7d:0a:4b:80:aa: 23:ba:b6:84:10:f7:fb:87:d4:ce:1c:8a:ee:03:d5: 7f:e0:fb:34:96:55:54:f9:2f:a2:b8:a8:c3:6a:2b: c8:aa:23:02:72:db:3e:bb:77:ba:f3:c9:2f:27:16: 88:c9:6b:a3:10:86:ca:25:7d:98:87:f6:14:52:4a: de:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 79:5B:9A:9A:07:89:37:86:4D:91:16:13:2A:81:F5:5A:F7:A4:D7:2A X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/991C723F3A8383AA8BCC0DAD8F508E5E0153EFECAF4F4EAB4024DDF5A130025D/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/991C723F3A8383AA8BCC0DAD8F508E5E0153EFECAF4F4EAB4024DDF5A130025D/0/795B9A9A078937864D9116132A81F55AF7A4D72A.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.39.152.0/22 IPv6: 2803:49e0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 270010 Signature Algorithm: sha256WithRSAEncryption 14:f5:84:4c:8c:08:d1:be:04:08:15:f4:53:18:e1:30:ee:ec: 6a:23:02:37:1e:c5:5d:3b:b4:05:43:e9:39:80:f7:45:1b:8a: 56:1d:58:a8:95:2d:5b:5f:e7:7a:22:e3:d9:30:d3:58:81:bf: f9:76:b0:65:0a:9b:f0:1e:f7:5c:f1:fe:9f:47:f0:df:89:bc: 25:4a:45:33:fb:5e:b4:37:61:17:fc:27:92:16:2c:c1:a2:04: 19:7d:d5:ed:39:56:90:9b:3b:a9:56:27:55:de:28:8a:f0:a4: 56:42:ae:d1:a5:cd:13:47:18:96:ed:1d:60:d6:78:09:bb:a5: 81:fd:48:a4:93:15:37:7e:fe:91:ae:cd:b7:50:3d:ad:31:01: b4:49:53:ec:5e:19:b0:74:82:88:78:a0:7f:03:8d:99:29:56: 14:44:38:74:32:a5:2c:fd:44:c7:e2:6a:af:c2:cd:45:3d:4c: 7a:45:ee:4c:6d:18:74:cb:ac:1c:1d:a3:fd:77:29:51:24:f4: e1:5e:aa:49:d6:66:a7:f4:e7:99:5c:8c:ef:e1:b3:c0:c7:99: 32:2f:c7:85:8f:7a:30:a0:5b:5a:c8:84:4a:d1:63:2a:43:e1: cd:90:e9:65:26:74:e4:75:7f:1a:b6:8d:8c:93:ea:fe:83:95: 4f:2a:85:76 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUBA/SYWImxd3pYr2kgs6Te/mRP6MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjA1MjcxMzA1MDFaFw0yNzA1MjYxMzEwMDFaMDMxMTAvBgNV BAMTKDc5NUI5QTlBMDc4OTM3ODY0RDkxMTYxMzJBODFGNTVBRjdBNEQ3MkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbGdLI3X16Tp5G/lrWmc86VSaI q+2L2ZEBkhD4zWNG/AByAj4AwfF/eHzK5QdzeiIDNtg5KTesRkOj8yqgNd1m/pvD 2pYg1lJ/D6oSDNuivAcBqIQB91+ET2D70fLg8Is0NbotvgRWysNxc+E/6X8/Io6h 34MRxXoUzBqLHOWov5axqNPXM3+ekFz5/wxf8Vi9HOF7uIqfrvg3I5Vf6Mp/HEfo 1QjgwgCHbmK9oUMf70lFCQLfYYYsZxfgEdp9CkuAqiO6toQQ9/uH1M4ciu4D1X/g +zSWVVT5L6K4qMNqK8iqIwJy2z67d7rzyS8nFojJa6MQhsolfZiH9hRSSt5DAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR5W5qaB4k3hk2R FhMqgfVa96TXKjAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvOTkxQzcyM0YzQTgzODNBQThCQ0MwREFE OEY1MDhFNUUwMTUzRUZFQ0FGNEY0RUFCNDAyNERERjVBMTMwMDI1RC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy85OTFDNzIzRjNBODM4M0FBOEJDQzBEQUQ4RjUwOEU1RTAxNTNFRkVDQUY0 RjRFQUI0MDI0RERGNUExMzAwMjVELzAvNzk1QjlBOUEwNzg5Mzc4NjREOTExNjEz MkE4MUY1NUFGN0E0RDcyQS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCyCeYMA0EAgAC MAcDBQAoA0ngMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQeujANBgkqhkiG9w0B AQsFAAOCAQEAFPWETIwI0b4ECBX0UxjhMO7saiMCNx7FXTu0BUPpOYD3RRuKVh1Y qJUtW1/neiLj2TDTWIG/+XawZQqb8B73XPH+n0fw34m8JUpFM/tetDdhF/wnkhYs waIEGX3V7TlWkJs7qVYnVd4oivCkVkKu0aXNE0cYlu0dYNZ4Cbulgf1IpJMVN37+ ka7Nt1A9rTEBtElT7F4ZsHSCiHigfwONmSlWFEQ4dDKlLP1Ex+Jqr8LNRT1MekXu TG0YdMusHB2j/XcpUST04V6qSdZmp/TnmVyM7+GzwMeZMi/HhY96MKBbWsiEStFj KkPhzZDpZSZ05HV/GraNjJPq/oOVTyqFdg== -----END CERTIFICATE-----Generated at Sun Jun 14 06:43:26 2026 by rpki-client