$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E8FD47D3ACBE52FF27E33D06E7EED8600CDE0F6.cer File: 9E8FD47D3ACBE52FF27E33D06E7EED8600CDE0F6.cer (raw, json) Hash identifier: woTauIiiAdBl5CZO63iQ2bsF4egoTuAqMX/mgckUNfQ= Subject key identifier: 9E:8F:D4:7D:3A:CB:E5:2F:F2:7E:33:D0:6E:7E:ED:86:00:CD:E0:F6 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 3704BF7D341E538C4CC3433725765C861E99E5FF Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/E519CBCD548E1315E1C1C48A0B977F9BB175BD544CC72816B92A32C21149E96E/0/9E8FD47D3ACBE52FF27E33D06E7EED8600CDE0F6.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/E519CBCD548E1315E1C1C48A0B977F9BB175BD544CC72816B92A32C21149E96E/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Fri 31 Jul 2026 22:10:13 +0000 Certificate not after: Fri 30 Jul 2027 22:15:13 +0000 Subordinate resources: AS: 274960 IP: 2803:530::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 15 Sep 2026 10:15:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:04:bf:7d:34:1e:53:8c:4c:c3:43:37:25:76:5c:86:1e:99:e5:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jul 31 22:10:13 2026 GMT Not After : Jul 30 22:15:13 2027 GMT Subject: CN=9E8FD47D3ACBE52FF27E33D06E7EED8600CDE0F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:7d:22:17:94:d7:51:2b:34:3e:75:e7:51:c2: 4f:39:1b:43:63:11:fc:bf:f8:7b:d9:4a:2c:12:f8: 69:6f:e5:57:41:13:db:52:b3:6b:9e:37:15:8d:7f: 05:7e:c8:14:92:9a:e8:09:ae:8d:97:c3:7a:b0:59: 37:01:62:58:7c:1e:53:d3:da:22:98:06:02:72:fa: 1c:a9:be:0d:fc:85:86:4c:91:fb:c5:65:44:ec:79: b2:a7:93:a9:9d:2b:df:14:ec:3b:4a:67:73:09:22: c8:d7:b9:86:09:6c:50:9e:a7:a6:ed:d6:6a:3b:55: 82:29:b1:0e:11:bf:86:9e:a1:7f:a4:c6:2f:34:79: 43:f1:b1:be:37:d6:ac:9f:63:cc:0a:e7:ae:41:e0: cd:ec:37:1e:d2:d8:62:5b:43:71:7a:da:2c:1a:f5: 2b:2a:bb:ee:5d:aa:92:57:45:d4:84:ca:3b:f5:90: 7b:14:f8:46:5e:0d:ac:38:cc:82:29:3b:ae:66:bc: 75:45:fb:3d:1a:d5:d8:06:60:de:24:85:da:a6:dc: b9:04:d9:dc:e9:75:92:b7:73:29:b0:45:6e:a7:3f: 88:07:69:30:62:db:f3:b6:4f:f7:58:e8:7b:7b:26: 53:d8:08:d9:09:6c:d4:d1:20:af:89:b6:3f:1a:3a: f4:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9E:8F:D4:7D:3A:CB:E5:2F:F2:7E:33:D0:6E:7E:ED:86:00:CD:E0:F6 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/E519CBCD548E1315E1C1C48A0B977F9BB175BD544CC72816B92A32C21149E96E/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/E519CBCD548E1315E1C1C48A0B977F9BB175BD544CC72816B92A32C21149E96E/0/9E8FD47D3ACBE52FF27E33D06E7EED8600CDE0F6.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:530::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 274960 Signature Algorithm: sha256WithRSAEncryption 53:5e:b9:57:b3:8b:05:0c:b9:4a:6c:44:fe:bd:01:aa:4b:16: d5:13:9c:17:99:13:1d:26:df:a0:67:7c:34:4b:d0:bc:e2:9f: d5:b2:cc:8f:ab:cd:6a:c0:1e:0e:09:5f:94:3d:63:be:f7:c5: 57:47:1f:6d:6a:7f:2f:61:45:31:a5:ec:77:d0:63:c8:26:cd: 8f:b8:6f:d8:7b:f6:d4:22:b9:be:66:88:0c:d2:84:16:fe:59: 1b:17:60:3a:6a:d0:2f:66:38:10:a8:a5:32:bd:67:c5:41:69: 8b:04:a3:a2:2a:74:be:4c:3c:14:9d:08:db:7b:d3:ce:27:f5: 89:69:17:75:13:5c:6b:f7:b4:a7:f4:77:0f:08:d5:d9:26:22: 29:1e:3e:8d:fe:d3:da:0f:4a:63:f5:7d:75:23:3e:52:cb:b9: 6d:97:ad:61:ab:73:38:fc:3e:10:c1:a7:cf:24:eb:36:86:d4: e5:90:07:87:1a:47:e6:05:50:b7:46:a4:f4:a1:f2:44:a0:1f: 8c:ab:e7:4b:0d:42:35:18:e9:07:37:01:d5:d7:cf:c6:f6:b1: 8f:17:ff:d4:6c:73:c3:e5:d3:07:fc:34:35:40:4a:18:c2:4b: 6d:6c:d1:dc:a7:1b:78:34:4a:eb:be:2d:69:54:4d:4e:51:a4: 07:69:cc:8d -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUNwS/fTQeU4xMw0M3JXZchh6Z5f8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjA3MzEyMjEwMTNaFw0yNzA3MzAyMjE1MTNaMDMxMTAvBgNV BAMTKDlFOEZENDdEM0FDQkU1MkZGMjdFMzNEMDZFN0VFRDg2MDBDREUwRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJfSIXlNdRKzQ+dedRwk85G0Nj Efy/+HvZSiwS+Glv5VdBE9tSs2ueNxWNfwV+yBSSmugJro2Xw3qwWTcBYlh8HlPT 2iKYBgJy+hypvg38hYZMkfvFZUTsebKnk6mdK98U7DtKZ3MJIsjXuYYJbFCep6bt 1mo7VYIpsQ4Rv4aeoX+kxi80eUPxsb431qyfY8wK565B4M3sNx7S2GJbQ3F62iwa 9Ssqu+5dqpJXRdSEyjv1kHsU+EZeDaw4zIIpO65mvHVF+z0a1dgGYN4khdqm3LkE 2dzpdZK3cymwRW6nP4gHaTBi2/O2T/dY6Ht7JlPYCNkJbNTRIK+Jtj8aOvSHAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSej9R9OsvlL/J+ M9Bufu2GAM3g9jAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTUxOUNCQ0Q1NDhFMTMxNUUxQzFDNDhB MEI5NzdGOUJCMTc1QkQ1NDRDQzcyODE2QjkyQTMyQzIxMTQ5RTk2RS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9FNTE5Q0JDRDU0OEUxMzE1RTFDMUM0OEEwQjk3N0Y5QkIxNzVCRDU0NEND NzI4MTZCOTJBMzJDMjExNDlFOTZFLzAvOUU4RkQ0N0QzQUNCRTUyRkYyN0UzM0Qw NkU3RUVEODYwMENERTBGNi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAMFMDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEMhAwDQYJKoZIhvcNAQELBQADggEBAFNeuVez iwUMuUpsRP69AapLFtUTnBeZEx0m36BnfDRL0Lzin9WyzI+rzWrAHg4JX5Q9Y773 xVdHH21qfy9hRTGl7HfQY8gmzY+4b9h79tQiub5miAzShBb+WRsXYDpq0C9mOBCo pTK9Z8VBaYsEo6IqdL5MPBSdCNt7084n9YlpF3UTXGv3tKf0dw8I1dkmIikePo3+ 09oPSmP1fXUjPlLLuW2XrWGrczj8PhDBp88k6zaG1OWQB4caR+YFULdGpPSh8kSg H4yr50sNQjUY6Qc3AdXXz8b2sY8X/9Rsc8Pl0wf8NDVAShjCS21s0dynG3g0Suu+ LWlUTU5RpAdpzI0= -----END CERTIFICATE-----Generated at Fri Sep 11 16:23:19 2026 by rpki-client