$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89976B433A37DA190882FA21516DFE276D7661D6.cer File: 89976B433A37DA190882FA21516DFE276D7661D6.cer (raw, json) Hash identifier: JkWKn3TLIgh5TIuAbgLB87MYuat4FuKxVImzQNTCpb8= Subject key identifier: 89:97:6B:43:3A:37:DA:19:08:82:FA:21:51:6D:FE:27:6D:76:61:D6 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 7EEFB06D51EC7CAC359A1CC2B48EB3D449E98025 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/68E9CE393D5D4504DBCE90529D3843925C9630EABFC43C37DAF06947681B1D6F/0/89976B433A37DA190882FA21516DFE276D7661D6.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/68E9CE393D5D4504DBCE90529D3843925C9630EABFC43C37DAF06947681B1D6F/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 02 Sep 2026 21:15:01 +0000 Certificate not after: Wed 01 Sep 2027 21:20:01 +0000 Subordinate resources: AS: 273924 IP: 2803:4750::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 15 Sep 2026 10:15:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:ef:b0:6d:51:ec:7c:ac:35:9a:1c:c2:b4:8e:b3:d4:49:e9:80:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Sep 2 21:15:01 2026 GMT Not After : Sep 1 21:20:01 2027 GMT Subject: CN=89976B433A37DA190882FA21516DFE276D7661D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:22:1c:eb:0f:75:1f:ee:5d:7c:59:d7:27:ee: 23:e5:6d:b5:95:3c:33:de:81:1c:ca:f9:ff:c2:3b: 17:dc:f6:03:b9:bd:14:6a:85:04:b7:65:55:cd:58: 32:ce:d3:9e:b6:f9:a6:44:f6:25:86:f5:f4:bb:cd: 0a:2e:d0:1d:2f:2b:3d:48:7d:71:25:b3:9f:93:b1: f9:23:5c:e5:6c:86:63:8b:9a:2c:2a:04:49:e5:dd: a9:e2:25:6e:cd:1f:6b:da:0a:fa:cb:c4:ee:52:ce: 71:b0:a4:6f:64:c7:eb:4f:f0:1a:fe:0a:10:34:8e: e7:1e:ac:94:1e:02:be:66:03:e1:ee:1d:76:9c:b6: d5:a8:20:91:4f:8d:01:ee:d3:89:9d:7a:7a:69:0a: c2:41:10:6e:23:b8:10:8c:85:ed:6e:d2:dd:da:4d: 49:a2:cb:72:97:ff:57:75:0e:05:27:35:a0:28:a3: 0d:41:22:ba:6d:fa:a4:86:06:4d:38:60:a6:2d:37: 63:18:c6:3e:93:2b:50:1b:61:f1:0c:99:ca:9d:15: 3f:b5:f9:65:dc:ae:5c:1b:45:8d:92:ab:4a:f6:49: 59:bc:27:23:07:33:09:59:0e:6d:a7:9d:c0:7b:c0: 7d:6c:75:e8:74:a2:7b:39:92:53:ff:91:43:bf:91: 3a:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 89:97:6B:43:3A:37:DA:19:08:82:FA:21:51:6D:FE:27:6D:76:61:D6 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/68E9CE393D5D4504DBCE90529D3843925C9630EABFC43C37DAF06947681B1D6F/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/68E9CE393D5D4504DBCE90529D3843925C9630EABFC43C37DAF06947681B1D6F/0/89976B433A37DA190882FA21516DFE276D7661D6.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:4750::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273924 Signature Algorithm: sha256WithRSAEncryption 30:89:28:2c:03:6f:b3:e4:d7:2a:79:42:23:61:78:a4:9e:64: ee:6b:05:67:fb:4e:9a:19:49:14:1e:77:a8:ee:c8:3c:84:bf: d0:86:69:6d:69:03:d1:76:c2:2c:d8:a5:5a:3f:01:71:df:e4: f1:5d:a6:47:89:76:6e:89:01:34:22:bc:d7:b8:24:c8:68:a2: c3:f0:e1:57:9a:66:82:02:d3:f5:29:71:b3:f4:fc:6c:8c:4a: 6a:10:e3:dc:a9:36:af:fa:94:94:a7:86:41:a0:cf:c1:c9:a9: 65:b7:a7:ea:80:4b:2f:5e:8f:28:5e:b8:60:3a:ee:b6:61:33: 5a:6c:72:1e:3f:e2:a6:44:e6:29:f8:57:46:ce:63:23:31:5b: 68:c8:16:03:62:88:3a:79:be:5f:b8:60:82:b1:36:9e:89:d2: b4:2a:af:88:59:5d:d9:98:17:38:24:43:ad:86:ca:63:15:c2: ff:37:fd:f9:af:a6:d2:92:b2:8c:b2:87:bc:fd:32:2b:03:e5: b8:ab:60:12:69:15:db:0d:38:02:f5:fd:32:f3:9f:a2:25:8b: f8:4a:4f:e6:75:ad:e9:c1:d3:6c:a6:a5:a7:5e:70:d2:dc:87: e5:75:6a:83:ad:ba:09:33:c8:2c:1a:7e:6c:c6:de:6c:6b:0c: 36:4b:aa:df -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUfu+wbVHsfKw1mhzCtI6z1EnpgCUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjA5MDIyMTE1MDFaFw0yNzA5MDEyMTIwMDFaMDMxMTAvBgNV BAMTKDg5OTc2QjQzM0EzN0RBMTkwODgyRkEyMTUxNkRGRTI3NkQ3NjYxRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7IhzrD3Uf7l18Wdcn7iPlbbWV PDPegRzK+f/COxfc9gO5vRRqhQS3ZVXNWDLO0562+aZE9iWG9fS7zQou0B0vKz1I fXEls5+TsfkjXOVshmOLmiwqBEnl3aniJW7NH2vaCvrLxO5SznGwpG9kx+tP8Br+ ChA0jucerJQeAr5mA+HuHXacttWoIJFPjQHu04mdenppCsJBEG4juBCMhe1u0t3a TUmiy3KX/1d1DgUnNaAoow1BIrpt+qSGBk04YKYtN2MYxj6TK1AbYfEMmcqdFT+1 +WXcrlwbRY2Sq0r2SVm8JyMHMwlZDm2nncB7wH1sdeh0ons5klP/kUO/kTqDAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSJl2tDOjfaGQiC +iFRbf4nbXZh1jAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNjhFOUNFMzkzRDVENDUwNERCQ0U5MDUy OUQzODQzOTI1Qzk2MzBFQUJGQzQzQzM3REFGMDY5NDc2ODFCMUQ2Ri8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy82OEU5Q0UzOTNENUQ0NTA0REJDRTkwNTI5RDM4NDM5MjVDOTYzMEVBQkZD NDNDMzdEQUYwNjk0NzY4MUIxRDZGLzAvODk5NzZCNDMzQTM3REExOTA4ODJGQTIx NTE2REZFMjc2RDc2NjFENi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKANHUDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMELgQwDQYJKoZIhvcNAQELBQADggEBADCJKCwD b7Pk1yp5QiNheKSeZO5rBWf7TpoZSRQed6juyDyEv9CGaW1pA9F2wizYpVo/AXHf 5PFdpkeJdm6JATQivNe4JMhoosPw4VeaZoIC0/UpcbP0/GyMSmoQ49ypNq/6lJSn hkGgz8HJqWW3p+qASy9ejyheuGA67rZhM1psch4/4qZE5in4V0bOYyMxW2jIFgNi iDp5vl+4YIKxNp6J0rQqr4hZXdmYFzgkQ62GymMVwv83/fmvptKSsoyyh7z9MisD 5birYBJpFdsNOAL1/TLzn6Ili/hKT+Z1renB02ympadecNLch+V1aoOtugkzyCwa fmzG3mxrDDZLqt8= -----END CERTIFICATE-----Generated at Fri Sep 11 15:18:46 2026 by rpki-client