$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8240614AB3A858CB9FF1EFE6E451A4E573057276.cer File: 8240614AB3A858CB9FF1EFE6E451A4E573057276.cer (raw, json) Hash identifier: YlxcuwsX/D8Ix+bPyh48UQ8A3oEkHK11CgwEUWFufDw= Subject key identifier: 82:40:61:4A:B3:A8:58:CB:9F:F1:EF:E6:E4:51:A4:E5:73:05:72:76 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 0D85BD6E469D44435FF6860D9B72F931879A17B9 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/5F163EB6BB6C89451583CA100CC303446453CF8564FC2A67786EA0ADC0A4E8D9/0/8240614AB3A858CB9FF1EFE6E451A4E573057276.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/5F163EB6BB6C89451583CA100CC303446453CF8564FC2A67786EA0ADC0A4E8D9/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Sat 24 Oct 2026 01:45:00 +0000 Certificate not after: Sat 23 Oct 2027 01:50:00 +0000 Subordinate resources: AS: 274027 IP: 2803:6cd0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 30 Oct 2026 16:47:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:85:bd:6e:46:9d:44:43:5f:f6:86:0d:9b:72:f9:31:87:9a:17:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Oct 24 01:45:00 2026 GMT Not After : Oct 23 01:50:00 2027 GMT Subject: CN=8240614AB3A858CB9FF1EFE6E451A4E573057276 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:05:b5:dd:12:62:2a:2d:e1:7d:1f:5c:6f:20: 94:b2:51:93:27:ef:c1:92:5c:b5:f4:06:46:18:76: df:f3:72:8e:66:34:e8:69:3c:9f:e4:b2:7a:6f:94: 14:1b:6e:51:af:74:81:b8:ed:d9:a9:7b:e9:13:e7: 7a:cc:28:a2:83:a0:31:52:66:f5:94:cc:d4:6b:7e: 01:e4:8f:62:4b:9e:5a:b6:21:39:b5:5f:b9:9f:49: 02:1d:7a:ef:64:b8:cf:95:4b:ff:e1:a4:46:76:42: a5:d4:a6:2c:44:01:df:4d:29:b1:97:1b:5b:54:b3: 42:a1:68:71:44:f0:a4:bb:fc:99:d3:c4:25:cc:c3: 82:46:6d:f9:1a:b0:e5:ab:a1:7d:6e:e2:da:5f:ea: bd:71:91:d0:67:24:06:fd:20:26:69:c4:a6:a7:aa: 84:0c:9b:43:5d:a4:ae:b0:af:7c:61:cf:eb:0f:83: 5a:06:e6:36:b6:e7:30:7c:42:28:b5:32:61:42:2f: ce:68:cc:2e:e8:07:3f:39:b8:56:ef:f4:79:a5:64: bc:43:25:96:1c:a8:9a:67:ff:c4:f5:0e:62:b4:90: 38:85:f3:7d:65:fc:eb:cc:cb:e7:bf:da:4f:ba:4c: 7a:c2:a0:89:cb:c5:00:2f:0d:a6:c3:2b:ea:96:46: e0:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 82:40:61:4A:B3:A8:58:CB:9F:F1:EF:E6:E4:51:A4:E5:73:05:72:76 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/5F163EB6BB6C89451583CA100CC303446453CF8564FC2A67786EA0ADC0A4E8D9/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/5F163EB6BB6C89451583CA100CC303446453CF8564FC2A67786EA0ADC0A4E8D9/0/8240614AB3A858CB9FF1EFE6E451A4E573057276.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:6cd0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 274027 Signature Algorithm: sha256WithRSAEncryption 0a:c7:e8:db:b3:df:7d:42:8c:33:da:48:40:52:e2:0d:d2:2f: 1c:ef:7a:17:c4:90:16:78:a3:9b:c4:27:11:9c:e9:b3:22:eb: de:e6:a9:59:d5:84:c1:ab:12:97:94:8a:1c:90:7a:09:e7:83: a5:7e:f6:f8:06:2c:d6:51:98:c5:3b:0e:7e:7e:99:a8:f7:42: e3:2b:3f:c9:5f:a7:6e:1a:27:28:31:1f:70:41:a8:75:d9:d6: 40:a2:69:14:7b:b1:4b:78:ea:17:87:d6:d5:47:f2:84:28:15: dc:ed:01:7b:08:2a:2f:9a:74:20:4f:14:a2:f6:a3:fc:c3:ce: ba:bd:8f:54:8b:65:85:c9:23:d8:f6:de:9f:4f:6c:23:fe:88: 32:da:ab:56:53:a9:59:df:1f:eb:da:e0:c6:13:b5:9a:1f:15: 83:49:a9:50:d8:51:bc:a9:22:67:59:5c:f2:f4:63:00:cf:24: c9:f8:e1:ee:8e:f9:56:6f:0c:32:ce:47:6e:13:42:9f:ac:c1: 3a:4e:17:e9:83:0e:ee:dc:d4:38:3b:07:6e:2a:1c:bb:2e:44: ed:16:ef:4b:31:8c:43:31:bf:47:72:fc:2c:e6:66:de:d1:58: e9:04:73:ba:4d:3b:ac:62:36:c1:47:8e:69:81:07:97:7b:ba: a2:fb:46:f9 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUDYW9bkadRENf9oYNm3L5MYeaF7kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjEwMjQwMTQ1MDBaFw0yNzEwMjMwMTUwMDBaMDMxMTAvBgNV BAMTKDgyNDA2MTRBQjNBODU4Q0I5RkYxRUZFNkU0NTFBNEU1NzMwNTcyNzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqBbXdEmIqLeF9H1xvIJSyUZMn 78GSXLX0BkYYdt/zco5mNOhpPJ/ksnpvlBQbblGvdIG47dmpe+kT53rMKKKDoDFS ZvWUzNRrfgHkj2JLnlq2ITm1X7mfSQIdeu9kuM+VS//hpEZ2QqXUpixEAd9NKbGX G1tUs0KhaHFE8KS7/JnTxCXMw4JGbfkasOWroX1u4tpf6r1xkdBnJAb9ICZpxKan qoQMm0NdpK6wr3xhz+sPg1oG5ja25zB8Qii1MmFCL85ozC7oBz85uFbv9HmlZLxD JZYcqJpn/8T1DmK0kDiF831l/OvMy+e/2k+6THrCoInLxQAvDabDK+qWRuC9AgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSCQGFKs6hYy5/x 7+bkUaTlcwVydjAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNUYxNjNFQjZCQjZDODk0NTE1ODNDQTEw MENDMzAzNDQ2NDUzQ0Y4NTY0RkMyQTY3Nzg2RUEwQURDMEE0RThEOS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy81RjE2M0VCNkJCNkM4OTQ1MTU4M0NBMTAwQ0MzMDM0NDY0NTNDRjg1NjRG QzJBNjc3ODZFQTBBREMwQTRFOEQ5LzAvODI0MDYxNEFCM0E4NThDQjlGRjFFRkU2 RTQ1MUE0RTU3MzA1NzI3Ni5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKANs0DAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMELmswDQYJKoZIhvcNAQELBQADggEBAArH6Nuz 331CjDPaSEBS4g3SLxzvehfEkBZ4o5vEJxGc6bMi697mqVnVhMGrEpeUihyQegnn g6V+9vgGLNZRmMU7Dn5+maj3QuMrP8lfp24aJygxH3BBqHXZ1kCiaRR7sUt46heH 1tVH8oQoFdztAXsIKi+adCBPFKL2o/zDzrq9j1SLZYXJI9j23p9PbCP+iDLaq1ZT qVnfH+va4MYTtZofFYNJqVDYUbypImdZXPL0YwDPJMn44e6O+VZvDDLOR24TQp+s wTpOF+mDDu7c1Dg7B24qHLsuRO0W70sxjEMxv0dy/CzmZt7RWOkEc7pNO6xiNsFH jmmBB5d7uqL7Rvk= -----END CERTIFICATE-----Generated at Mon Oct 26 17:55:13 2026 by rpki-client