$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF4A330F31F4671A195B43BD6815273C9CA5B60B.cer File: AF4A330F31F4671A195B43BD6815273C9CA5B60B.cer (raw, json) Hash identifier: 8D5PnrbLzr9zWWXNzIFaJ1oNgGlAXHX8SHi1bvMxqyg= Subject key identifier: AF:4A:33:0F:31:F4:67:1A:19:5B:43:BD:68:15:27:3C:9C:A5:B6:0B Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 523664537BF7559609F375969A93B7AC0E643E15 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/70BA28C378279A7823800E28D9010BD9451C7EE7112DE9FA851626D603D50469/0/AF4A330F31F4671A195B43BD6815273C9CA5B60B.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/70BA28C378279A7823800E28D9010BD9451C7EE7112DE9FA851626D603D50469/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Aug 2026 15:15:06 +0000 Certificate not after: Wed 04 Aug 2027 15:20:06 +0000 Subordinate resources: AS: 274204 IP: 2803:c3d0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 15 Sep 2026 10:15:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:36:64:53:7b:f7:55:96:09:f3:75:96:9a:93:b7:ac:0e:64:3e:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Aug 5 15:15:06 2026 GMT Not After : Aug 4 15:20:06 2027 GMT Subject: CN=AF4A330F31F4671A195B43BD6815273C9CA5B60B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:94:1b:ea:75:93:ea:d4:c3:61:56:77:2c:44: 1f:d3:fd:6f:c1:f7:3b:f8:b7:d6:37:ef:fc:df:8b: 18:d7:b9:cc:89:e3:2f:86:75:7e:49:42:23:26:5b: f5:0c:75:ae:e0:dd:14:09:2d:88:af:31:ad:bf:ce: f4:9f:31:7c:8c:e1:ee:a0:be:36:43:69:76:62:39: 11:00:46:f2:c2:fc:ad:ce:f2:49:e3:b9:46:51:70: 0f:52:10:fe:ca:e8:bb:1e:4d:b6:3c:b4:25:ec:22: 8c:9e:80:ce:eb:93:d5:7b:98:9c:e6:ea:51:05:fe: 8b:45:82:2c:46:58:5a:32:9b:98:eb:4a:fe:73:71: 78:29:16:c0:ca:88:4c:d5:a1:55:01:da:59:d1:4a: 75:95:fc:ab:d1:52:b8:a0:8c:36:02:e1:56:9b:e6: 8b:89:41:ad:74:0d:31:e1:70:eb:ad:01:4b:3d:74: 31:e2:92:52:28:1d:27:62:50:7b:88:b8:1d:51:5d: 75:38:f5:d7:0f:61:23:13:0f:de:ea:67:ef:3d:93: 49:91:ed:d2:3e:fb:f8:8c:15:62:bc:fd:98:69:d0: cf:ff:57:08:57:a0:75:77:dd:62:83:26:9c:e2:3a: da:1e:e6:55:42:1c:bc:f2:80:07:6d:4a:b5:7c:74: 8e:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AF:4A:33:0F:31:F4:67:1A:19:5B:43:BD:68:15:27:3C:9C:A5:B6:0B X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/70BA28C378279A7823800E28D9010BD9451C7EE7112DE9FA851626D603D50469/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/70BA28C378279A7823800E28D9010BD9451C7EE7112DE9FA851626D603D50469/0/AF4A330F31F4671A195B43BD6815273C9CA5B60B.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:c3d0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 274204 Signature Algorithm: sha256WithRSAEncryption 1b:b9:66:d4:1d:d4:93:5c:b1:95:a1:db:52:c1:64:c3:09:1c: 01:af:83:67:f6:ed:d2:61:f8:fc:f0:cb:76:16:16:9a:89:18: b3:19:c1:7b:d0:d0:e8:3f:29:85:0b:6b:ab:80:5e:c2:8d:6c: c7:5e:a1:66:30:51:71:08:92:6f:7a:9f:fb:3a:be:d5:6c:74: e9:f5:d1:43:af:07:85:e6:c2:93:c8:24:ab:3f:f2:b3:e2:04: b8:be:e9:58:f4:f1:cf:10:b6:4c:be:2c:b4:8a:da:7c:6f:33: 97:b5:52:0b:4c:ab:88:86:1d:4d:61:c9:50:32:0c:65:1c:a2: ce:dc:98:55:4d:09:d6:36:07:37:75:42:9f:5b:42:21:f8:25: 4f:b6:4c:a0:91:54:fe:f7:3f:15:dd:bb:c2:53:26:96:77:6d: bb:3b:90:fe:c4:39:4e:b5:40:6d:e8:07:3c:7b:66:3e:b3:99: 7f:16:fd:5e:a1:9e:c1:74:36:99:f6:02:1e:ef:0c:4f:94:72: d9:a5:e3:67:b8:16:0b:cf:a7:bf:3d:8f:67:d4:ce:31:f2:54: b9:12:1e:5a:90:35:b5:fb:83:8f:26:0c:a5:12:5d:c7:ed:5f: cd:d2:28:33:06:03:8a:85:67:1c:63:d3:7b:41:e3:f2:74:56: 9e:3b:e3:6e -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUUjZkU3v3VZYJ83WWmpO3rA5kPhUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjA4MDUxNTE1MDZaFw0yNzA4MDQxNTIwMDZaMDMxMTAvBgNV BAMTKEFGNEEzMzBGMzFGNDY3MUExOTVCNDNCRDY4MTUyNzNDOUNBNUI2MEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqlBvqdZPq1MNhVncsRB/T/W/B 9zv4t9Y37/zfixjXucyJ4y+GdX5JQiMmW/UMda7g3RQJLYivMa2/zvSfMXyM4e6g vjZDaXZiOREARvLC/K3O8knjuUZRcA9SEP7K6LseTbY8tCXsIoyegM7rk9V7mJzm 6lEF/otFgixGWFoym5jrSv5zcXgpFsDKiEzVoVUB2lnRSnWV/KvRUrigjDYC4Vab 5ouJQa10DTHhcOutAUs9dDHiklIoHSdiUHuIuB1RXXU49dcPYSMTD97qZ+89k0mR 7dI++/iMFWK8/Zhp0M//VwhXoHV33WKDJpziOtoe5lVCHLzygAdtSrV8dI6ZAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSvSjMPMfRnGhlb Q71oFSc8nKW2CzAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNzBCQTI4QzM3ODI3OUE3ODIzODAwRTI4 RDkwMTBCRDk0NTFDN0VFNzExMkRFOUZBODUxNjI2RDYwM0Q1MDQ2OS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy83MEJBMjhDMzc4Mjc5QTc4MjM4MDBFMjhEOTAxMEJEOTQ1MUM3RUU3MTEy REU5RkE4NTE2MjZENjAzRDUwNDY5LzAvQUY0QTMzMEYzMUY0NjcxQTE5NUI0M0JE NjgxNTI3M0M5Q0E1QjYwQi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAPD0DAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMELxwwDQYJKoZIhvcNAQELBQADggEBABu5ZtQd 1JNcsZWh21LBZMMJHAGvg2f27dJh+Pzwy3YWFpqJGLMZwXvQ0Og/KYULa6uAXsKN bMdeoWYwUXEIkm96n/s6vtVsdOn10UOvB4XmwpPIJKs/8rPiBLi+6Vj08c8Qtky+ LLSK2nxvM5e1UgtMq4iGHU1hyVAyDGUcos7cmFVNCdY2Bzd1Qp9bQiH4JU+2TKCR VP73PxXdu8JTJpZ3bbs7kP7EOU61QG3oBzx7Zj6zmX8W/V6hnsF0Npn2Ah7vDE+U ctml42e4FgvPp789j2fUzjHyVLkSHlqQNbX7g48mDKUSXcftX83SKDMGA4qFZxxj 03tB4/J0Vp47424= -----END CERTIFICATE-----Generated at Fri Sep 11 15:18:50 2026 by rpki-client