$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F6F899DA067FC03FDE230388E44F7A4A92EC00B.cer File: 9F6F899DA067FC03FDE230388E44F7A4A92EC00B.cer (raw, json) Hash identifier: gvjFGrTTvZEujV4kE6C+Boqju6Wv1nNGm+tSUxs3hw0= Subject key identifier: 9F:6F:89:9D:A0:67:FC:03:FD:E2:30:38:8E:44:F7:A4:A9:2E:C0:0B Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: EF64044AE3955504E1800F8415E83D11834BB0 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/07F7E70533B53DEB460E345785342E0ED22DD2C75131E2C43F4624E1A2435ADA/0/9F6F899DA067FC03FDE230388E44F7A4A92EC00B.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/07F7E70533B53DEB460E345785342E0ED22DD2C75131E2C43F4624E1A2435ADA/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 26 Aug 2026 00:45:00 +0000 Certificate not after: Wed 25 Aug 2027 00:50:00 +0000 Subordinate resources: AS: 272403 IP: 148.222.152.0/22 IP: 148.224.40.0/22 IP: 148.224.56.0/23 IP: 2001:1222::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 15 Sep 2026 10:15:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: ef:64:04:4a:e3:95:55:04:e1:80:0f:84:15:e8:3d:11:83:4b:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Aug 26 00:45:00 2026 GMT Not After : Aug 25 00:50:00 2027 GMT Subject: CN=9F6F899DA067FC03FDE230388E44F7A4A92EC00B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:42:95:b7:53:c5:56:d6:0d:d7:e6:ea:35:e5: 04:b4:69:1b:33:ae:90:5d:26:d8:8a:79:47:1a:fc: 42:9a:ce:a1:ed:5a:31:fb:87:2a:22:94:0a:86:2e: f0:54:f6:28:8a:ac:d7:ef:00:a3:e1:51:7f:b7:4a: 1c:1e:06:4c:9f:44:87:1f:a9:83:7e:4d:67:0a:72: fe:07:99:d5:8a:9d:72:08:ed:cd:5c:99:64:62:ef: 6c:42:c3:88:cc:28:d7:57:16:37:da:79:ff:a2:e3: 2b:75:eb:f3:d1:b3:5e:fb:d9:e9:47:81:84:90:11: d0:04:82:46:a7:02:64:58:11:c5:ac:73:9b:ed:b5: 35:5d:3c:f8:6e:30:7f:0e:7d:83:bf:51:cf:cf:84: b1:4a:9c:db:00:be:89:ec:84:cc:17:47:64:f2:66: 1d:9c:98:76:e7:1a:14:05:48:7b:52:b7:6e:48:25: 57:95:ea:87:2f:ac:76:6d:33:81:3b:01:73:13:89: 51:48:e3:3e:b3:de:92:53:82:10:4b:8d:f6:5f:d6: 0b:c6:56:fb:5d:94:f1:74:65:2a:a9:2a:51:10:7a: 92:a3:0a:2c:3a:49:21:0b:07:85:0f:2a:5f:f4:6e: 2c:2d:db:ab:24:08:2c:d9:be:38:7a:00:29:1b:04: 8a:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9F:6F:89:9D:A0:67:FC:03:FD:E2:30:38:8E:44:F7:A4:A9:2E:C0:0B X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/07F7E70533B53DEB460E345785342E0ED22DD2C75131E2C43F4624E1A2435ADA/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/07F7E70533B53DEB460E345785342E0ED22DD2C75131E2C43F4624E1A2435ADA/0/9F6F899DA067FC03FDE230388E44F7A4A92EC00B.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 148.222.152.0/22 148.224.40.0/22 148.224.56.0/23 IPv6: 2001:1222::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 272403 Signature Algorithm: sha256WithRSAEncryption 65:5d:22:b7:70:2d:a3:f2:ef:7d:1b:95:dd:ed:f8:83:2b:d4: fa:4c:d0:f2:dd:f1:96:3e:f2:b5:9f:92:8b:4c:1b:93:54:25: 14:c0:b0:13:7f:96:b9:f8:d6:3c:ff:21:78:8d:8a:98:14:74: 02:d6:96:08:1f:b3:12:4f:e5:6b:1b:68:10:07:89:b6:d3:2d: be:6d:01:17:a0:4c:4f:8f:6c:7b:ab:67:03:9c:51:d0:dc:23: 60:c0:82:15:1d:03:78:10:a4:dd:6d:65:12:cf:1a:0b:b5:21: 1f:ce:d2:ba:f9:5c:43:fe:d8:89:d7:47:83:64:d8:92:fa:cc: 08:24:31:9f:65:63:53:a2:05:c4:67:69:8b:b7:f9:7c:3f:07: 5c:38:ef:8c:49:1c:98:da:18:2d:63:06:13:73:a0:9c:58:5a: 36:e1:20:87:a1:8a:52:8a:84:2f:f9:01:84:69:99:a5:5a:f8: 31:6f:71:30:d9:54:2c:73:7c:31:e1:43:30:ea:ae:25:25:73: 21:cf:2d:c7:d7:6a:7a:a6:64:13:81:a5:4f:f5:72:c7:3e:aa: 3f:d8:e3:7c:01:73:8f:80:e4:c1:50:08:cf:8b:74:b7:ae:51: f1:20:ac:09:f1:b9:65:7e:ba:e8:fc:0a:99:f1:d1:8c:ec:f7: b8:97:5b:72 -----BEGIN CERTIFICATE----- MIIGsTCCBZmgAwIBAgIUAO9kBErjlVUE4YAPhBXoPRGDS7AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjA4MjYwMDQ1MDBaFw0yNzA4MjUwMDUwMDBaMDMxMTAvBgNV BAMTKDlGNkY4OTlEQTA2N0ZDMDNGREUyMzAzODhFNDRGN0E0QTkyRUMwMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIQpW3U8VW1g3X5uo15QS0aRsz rpBdJtiKeUca/EKazqHtWjH7hyoilAqGLvBU9iiKrNfvAKPhUX+3ShweBkyfRIcf qYN+TWcKcv4HmdWKnXII7c1cmWRi72xCw4jMKNdXFjfaef+i4yt16/PRs1772elH gYSQEdAEgkanAmRYEcWsc5vttTVdPPhuMH8OfYO/Uc/PhLFKnNsAvonshMwXR2Ty Zh2cmHbnGhQFSHtSt25IJVeV6ocvrHZtM4E7AXMTiVFI4z6z3pJTghBLjfZf1gvG VvtdlPF0ZSqpKlEQepKjCiw6SSELB4UPKl/0biwt26skCCzZvjh6ACkbBIrnAgMB AAGjggO7MIIDtzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSfb4mdoGf8A/3i MDiORPekqS7ACzAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMDdGN0U3MDUzM0I1M0RFQjQ2MEUzNDU3 ODUzNDJFMEVEMjJERDJDNzUxMzFFMkM0M0Y0NjI0RTFBMjQzNUFEQS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8wN0Y3RTcwNTMzQjUzREVCNDYwRTM0NTc4NTM0MkUwRUQyMkREMkM3NTEz MUUyQzQzRjQ2MjRFMUEyNDM1QURBLzAvOUY2Rjg5OURBMDY3RkMwM0ZERTIzMDM4 OEU0NEY3QTRBOTJFQzAwQi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQClN6YAwQClOAo AwQBlOA4MA0EAgACMAcDBQAgARIiMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQo EzANBgkqhkiG9w0BAQsFAAOCAQEAZV0it3Ato/LvfRuV3e34gyvU+kzQ8t3xlj7y tZ+Si0wbk1QlFMCwE3+WufjWPP8heI2KmBR0AtaWCB+zEk/laxtoEAeJttMtvm0B F6BMT49se6tnA5xR0NwjYMCCFR0DeBCk3W1lEs8aC7UhH87SuvlcQ/7YiddHg2TY kvrMCCQxn2VjU6IFxGdpi7f5fD8HXDjvjEkcmNoYLWMGE3OgnFhaNuEgh6GKUoqE L/kBhGmZpVr4MW9xMNlULHN8MeFDMOquJSVzIc8tx9dqeqZkE4GlT/Vyxz6qP9jj fAFzj4DkwVAIz4t0t65R8SCsCfG5ZX666PwKmfHRjOz3uJdbcg== -----END CERTIFICATE-----Generated at Fri Sep 11 14:50:21 2026 by rpki-client