$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AAD9C134CE8C2C21E9EEB560CA5CEE8B27C40300.cer File: AAD9C134CE8C2C21E9EEB560CA5CEE8B27C40300.cer (raw, json) Hash identifier: DlOTBTl3GGSHc4+xffMtJSUYcvihOuvaB7iv+NI7Hl4= Subject key identifier: AA:D9:C1:34:CE:8C:2C:21:E9:EE:B5:60:CA:5C:EE:8B:27:C4:03:00 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 49B16005AB85385BC0F278BE5FFBE7C3CA4A8533 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/AF5652067A336B1D1A31FCC86DF57C53FDE1F54DBB3C0EE8A838BEF67D959F69/0/AAD9C134CE8C2C21E9EEB560CA5CEE8B27C40300.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/AF5652067A336B1D1A31FCC86DF57C53FDE1F54DBB3C0EE8A838BEF67D959F69/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Mon 26 Oct 2026 12:05:01 +0000 Certificate not after: Mon 25 Oct 2027 12:10:01 +0000 Subordinate resources: AS: 274175 IP: 2803:e5d0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 03 Nov 2026 01:06:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:b1:60:05:ab:85:38:5b:c0:f2:78:be:5f:fb:e7:c3:ca:4a:85:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Oct 26 12:05:01 2026 GMT Not After : Oct 25 12:10:01 2027 GMT Subject: CN=AAD9C134CE8C2C21E9EEB560CA5CEE8B27C40300 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:bd:0a:e2:46:7b:d6:f1:40:6a:2c:27:92:9f: 1a:86:f6:3b:8c:37:d4:cc:d7:4f:da:9b:45:c1:9b: 1e:c3:2d:3f:69:b4:2e:d6:dd:f3:29:be:bd:85:f5: 66:ac:33:3a:14:54:c1:08:c6:72:62:bd:b5:b0:16: 59:cb:73:3c:fe:d3:27:23:7c:0c:d2:6f:7a:ff:ea: 97:b0:ba:79:a0:e7:8d:ed:67:48:e6:65:ba:ae:43: ac:c2:c5:5e:48:e4:4e:84:70:b9:09:b4:94:95:4c: 93:87:34:c8:c0:d1:e8:af:6a:ce:c1:f4:26:d7:02: 1f:cc:55:fb:1e:94:ff:ed:6e:bb:30:8f:2e:cd:bf: f2:b0:88:5a:27:c3:84:e8:21:b4:d0:65:02:65:25: 08:77:e1:59:c6:d6:71:f5:94:46:74:02:56:82:2d: 25:3f:2d:55:96:83:9d:8b:82:ac:06:43:7a:af:e4: d1:c0:08:3f:58:7c:b7:ad:5d:de:17:a4:10:fd:81: ce:75:9e:a3:63:f1:e1:b2:ea:fa:81:12:e9:d7:56: 64:f6:70:36:e8:bb:7d:8e:aa:60:e3:dd:8d:59:64: 24:1b:c5:de:df:74:c6:ff:1d:2e:25:f9:ed:5b:a5: 65:8f:6d:14:a9:d5:b9:3f:0d:72:5f:79:57:82:e3: 72:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AA:D9:C1:34:CE:8C:2C:21:E9:EE:B5:60:CA:5C:EE:8B:27:C4:03:00 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/AF5652067A336B1D1A31FCC86DF57C53FDE1F54DBB3C0EE8A838BEF67D959F69/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/AF5652067A336B1D1A31FCC86DF57C53FDE1F54DBB3C0EE8A838BEF67D959F69/0/AAD9C134CE8C2C21E9EEB560CA5CEE8B27C40300.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:e5d0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 274175 Signature Algorithm: sha256WithRSAEncryption 28:e6:a6:ed:cd:8f:ad:6a:a2:a2:cc:90:da:9f:74:11:89:0b: 11:dd:2c:23:3c:53:c9:da:55:85:22:8f:5b:e2:6b:94:ad:ea: 2d:2d:6b:f6:f2:ed:20:f9:88:ec:51:16:a9:79:32:dd:48:dd: 0e:8b:b9:a8:5d:be:60:e4:d2:41:9f:30:47:60:1b:26:24:55: 11:ef:f3:2c:7d:62:c0:b6:69:31:87:27:ad:73:f0:e4:aa:c4: 87:06:9c:80:c2:c0:08:97:03:33:91:ce:18:5a:05:ed:a3:b8: 3e:21:8b:dc:41:dd:17:19:71:bf:ec:3b:fc:96:00:a5:82:e1: 89:49:1e:10:42:11:32:d0:fb:e7:ce:5d:cc:ae:6c:4d:77:60: 0e:23:0a:d2:82:37:7e:76:fb:57:c4:53:43:d9:bb:b5:41:d3: c2:02:63:41:1f:c7:c9:81:25:59:82:14:a0:d1:62:03:7b:66: e0:21:55:e8:eb:8d:f8:bc:39:bb:d2:05:b3:92:ef:47:44:71: 14:bf:9b:98:47:82:d3:15:6b:92:90:63:c7:f8:f0:12:cb:40: 20:53:1b:11:1b:14:e5:0d:5b:9d:a6:99:77:fc:ee:6c:e2:4a: a2:f9:7a:5a:d2:19:73:cd:8e:3d:06:27:b9:bf:5a:26:1e:fc: c0:6b:c5:01 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUSbFgBauFOFvA8ni+X/vnw8pKhTMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjEwMjYxMjA1MDFaFw0yNzEwMjUxMjEwMDFaMDMxMTAvBgNV BAMTKEFBRDlDMTM0Q0U4QzJDMjFFOUVFQjU2MENBNUNFRThCMjdDNDAzMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSvQriRnvW8UBqLCeSnxqG9juM N9TM10/am0XBmx7DLT9ptC7W3fMpvr2F9WasMzoUVMEIxnJivbWwFlnLczz+0ycj fAzSb3r/6pewunmg543tZ0jmZbquQ6zCxV5I5E6EcLkJtJSVTJOHNMjA0eivas7B 9CbXAh/MVfselP/tbrswjy7Nv/KwiFonw4ToIbTQZQJlJQh34VnG1nH1lEZ0AlaC LSU/LVWWg52LgqwGQ3qv5NHACD9YfLetXd4XpBD9gc51nqNj8eGy6vqBEunXVmT2 cDbou32OqmDj3Y1ZZCQbxd7fdMb/HS4l+e1bpWWPbRSp1bk/DXJfeVeC43LrAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSq2cE0zowsIenu tWDKXO6LJ8QDADAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQUY1NjUyMDY3QTMzNkIxRDFBMzFGQ0M4 NkRGNTdDNTNGREUxRjU0REJCM0MwRUU4QTgzOEJFRjY3RDk1OUY2OS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9BRjU2NTIwNjdBMzM2QjFEMUEzMUZDQzg2REY1N0M1M0ZERTFGNTREQkIz QzBFRThBODM4QkVGNjdEOTU5RjY5LzAvQUFEOUMxMzRDRThDMkMyMUU5RUVCNTYw Q0E1Q0VFOEIyN0M0MDMwMC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAPl0DAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMELv8wDQYJKoZIhvcNAQELBQADggEBACjmpu3N j61qoqLMkNqfdBGJCxHdLCM8U8naVYUij1via5St6i0ta/by7SD5iOxRFql5Mt1I 3Q6LuahdvmDk0kGfMEdgGyYkVRHv8yx9YsC2aTGHJ61z8OSqxIcGnIDCwAiXAzOR zhhaBe2juD4hi9xB3RcZcb/sO/yWAKWC4YlJHhBCETLQ++fOXcyubE13YA4jCtKC N352+1fEU0PZu7VB08ICY0Efx8mBJVmCFKDRYgN7ZuAhVejrjfi8ObvSBbOS70dE cRS/m5hHgtMVa5KQY8f48BLLQCBTGxEbFOUNW52mmXf87mziSqL5elrSGXPNjj0G J7m/WiYe/MBrxQE= -----END CERTIFICATE-----Generated at Thu Oct 29 18:19:59 2026 by rpki-client