$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/97A677D0EAB5A1652ADDB37B11F09E71E6BDE91F.cer File: 97A677D0EAB5A1652ADDB37B11F09E71E6BDE91F.cer (raw, json) Hash identifier: rf0kOBlUQ7NrNLPrjfMk0ZWI9DaGUAwQ2cNr9jqFpwk= Subject key identifier: 97:A6:77:D0:EA:B5:A1:65:2A:DD:B3:7B:11:F0:9E:71:E6:BD:E9:1F Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 1EC797A9FEE7C32015F7DFC3BB82730F20D36CDF Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/CB8E6048BFB3002CB477FA75E7A60C21F5388B036BD8A5EDAA09F9AC40956A9E/0/97A677D0EAB5A1652ADDB37B11F09E71E6BDE91F.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/CB8E6048BFB3002CB477FA75E7A60C21F5388B036BD8A5EDAA09F9AC40956A9E/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 27 May 2026 03:30:01 +0000 Certificate not after: Wed 26 May 2027 03:35:01 +0000 Subordinate resources: AS: 270214 IP: 2806:3fc::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 17 Jun 2026 16:50:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:c7:97:a9:fe:e7:c3:20:15:f7:df:c3:bb:82:73:0f:20:d3:6c:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: May 27 03:30:01 2026 GMT Not After : May 26 03:35:01 2027 GMT Subject: CN=97A677D0EAB5A1652ADDB37B11F09E71E6BDE91F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:f7:b9:01:a6:85:25:57:c5:28:00:7d:fc:9e: 40:41:5e:ee:0b:d2:08:9f:b6:36:a9:c2:89:94:47: c1:1b:13:dd:07:d2:5e:d1:00:09:1b:ed:77:0d:c3: 24:14:0a:97:2a:e4:ec:2d:50:9d:70:20:d2:8a:21: 00:61:f4:b4:c1:85:ae:bc:c8:04:fd:8b:29:a0:a3: f2:31:56:d3:3c:05:85:bd:1c:8c:21:e9:11:55:62: 3e:cf:9f:45:23:83:9e:87:cc:f5:65:3e:e1:13:96: aa:43:22:eb:f0:cc:a1:76:d6:b1:8e:2d:ac:0c:2e: ea:c1:1a:da:e7:36:b0:ce:cd:67:33:74:81:65:cb: fa:4f:6e:01:55:69:f7:90:fa:ca:a9:42:77:fa:ce: 5d:67:45:46:16:2e:9b:df:29:4f:db:47:36:76:2b: a7:55:23:a0:e4:e3:84:7f:53:6a:3a:49:58:ca:88: ba:67:ea:ab:8b:71:9b:d7:ce:60:40:af:9d:a5:d0: 17:72:7e:bd:d0:d8:04:6e:1e:80:9f:6c:48:01:bf: 2b:18:32:43:d6:e3:e7:30:a5:d8:64:ee:87:ab:2c: 6b:09:c2:bd:5a:f6:a1:8b:a2:bc:ba:3d:1f:2c:9a: ac:eb:3b:b4:f1:cc:fd:74:c9:a2:2e:44:45:2d:68: 77:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 97:A6:77:D0:EA:B5:A1:65:2A:DD:B3:7B:11:F0:9E:71:E6:BD:E9:1F X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/CB8E6048BFB3002CB477FA75E7A60C21F5388B036BD8A5EDAA09F9AC40956A9E/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/CB8E6048BFB3002CB477FA75E7A60C21F5388B036BD8A5EDAA09F9AC40956A9E/0/97A677D0EAB5A1652ADDB37B11F09E71E6BDE91F.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2806:3fc::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 270214 Signature Algorithm: sha256WithRSAEncryption 11:64:33:2c:9b:33:35:d7:50:68:0f:10:59:fc:a8:1d:fc:1c: c1:6e:c9:b7:0c:44:35:4a:a0:c3:76:e5:73:a7:98:b5:7b:4c: 2c:45:22:fe:9f:4f:a7:36:f8:ef:11:c5:ef:3d:9e:74:57:c8: 58:36:17:42:83:89:67:83:95:f7:d8:a1:ee:30:ba:28:68:d3: f3:9a:26:bd:d1:7a:a6:10:c8:ce:63:bb:5e:ff:7d:7b:32:cb: 94:f5:29:13:72:d2:a0:dc:65:27:5b:a3:de:9e:fd:fc:60:d3: af:94:a2:0e:1f:c1:d6:1b:8a:86:06:5c:f3:83:2e:c0:cc:e3: 0e:5f:79:98:cc:23:04:df:52:75:87:be:90:48:6a:cc:b6:cf: 43:b4:62:47:de:6f:fa:66:a8:9b:f1:3d:bc:1a:22:cd:62:5e: 8f:7d:be:57:a1:0a:f2:22:23:92:57:f4:2e:d2:ce:68:ce:e3: f6:ed:59:6d:c7:e6:b3:fb:98:b6:4c:d2:bd:3c:3d:dc:23:45: 23:d8:96:29:29:f4:9d:5d:5f:51:cd:83:be:81:d5:b7:2a:ff: 47:d5:c2:df:f0:78:88:89:23:b8:9f:ef:fc:af:d2:95:cc:8c: 2a:1c:1d:05:95:b5:02:88:e4:f8:c5:8d:ee:f4:7b:8d:1d:7d: 23:40:bc:83 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUHseXqf7nwyAV99/Du4JzDyDTbN8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjA1MjcwMzMwMDFaFw0yNzA1MjYwMzM1MDFaMDMxMTAvBgNV BAMTKDk3QTY3N0QwRUFCNUExNjUyQUREQjM3QjExRjA5RTcxRTZCREU5MUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY97kBpoUlV8UoAH38nkBBXu4L 0giftjapwomUR8EbE90H0l7RAAkb7XcNwyQUCpcq5OwtUJ1wINKKIQBh9LTBha68 yAT9iymgo/IxVtM8BYW9HIwh6RFVYj7Pn0Ujg56HzPVlPuETlqpDIuvwzKF21rGO LawMLurBGtrnNrDOzWczdIFly/pPbgFVafeQ+sqpQnf6zl1nRUYWLpvfKU/bRzZ2 K6dVI6Dk44R/U2o6SVjKiLpn6quLcZvXzmBAr52l0Bdyfr3Q2ARuHoCfbEgBvysY MkPW4+cwpdhk7oerLGsJwr1a9qGLory6PR8smqzrO7TxzP10yaIuREUtaHdrAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSXpnfQ6rWhZSrd s3sR8J5x5r3pHzAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQ0I4RTYwNDhCRkIzMDAyQ0I0NzdGQTc1 RTdBNjBDMjFGNTM4OEIwMzZCRDhBNUVEQUEwOUY5QUM0MDk1NkE5RS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9DQjhFNjA0OEJGQjMwMDJDQjQ3N0ZBNzVFN0E2MEMyMUY1Mzg4QjAzNkJE OEE1RURBQTA5RjlBQzQwOTU2QTlFLzAvOTdBNjc3RDBFQUI1QTE2NTJBRERCMzdC MTFGMDlFNzFFNkJERTkxRi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAYD/DAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEH4YwDQYJKoZIhvcNAQELBQADggEBABFkMyyb MzXXUGgPEFn8qB38HMFuybcMRDVKoMN25XOnmLV7TCxFIv6fT6c2+O8Rxe89nnRX yFg2F0KDiWeDlffYoe4wuiho0/OaJr3ReqYQyM5ju17/fXsyy5T1KRNy0qDcZSdb o96e/fxg06+Uog4fwdYbioYGXPODLsDM4w5feZjMIwTfUnWHvpBIasy2z0O0Ykfe b/pmqJvxPbwaIs1iXo99vlehCvIiI5JX9C7SzmjO4/btWW3H5rP7mLZM0r08Pdwj RSPYlikp9J1dX1HNg76B1bcq/0fVwt/weIiJI7if7/yv0pXMjCocHQWVtQKI5PjF je70e40dfSNAvIM= -----END CERTIFICATE-----Generated at Sat Jun 13 02:11:02 2026 by rpki-client