$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF9CF882C0725B96107DE33BC5ACCD99BE2DE1B0.cer File: AF9CF882C0725B96107DE33BC5ACCD99BE2DE1B0.cer (raw, json) Hash identifier: eLwGwQMwE9hUlvXwj36KRm/3Jf2E52KuSKuuepFlqDc= Subject key identifier: AF:9C:F8:82:C0:72:5B:96:10:7D:E3:3B:C5:AC:CD:99:BE:2D:E1:B0 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 34207363C937DDD81F8E54CD8F07CE01B7AA9339 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/A590779A191F1662723B375121732060257387F7A064C2E63CA188251BAC7ADA/0/AF9CF882C0725B96107DE33BC5ACCD99BE2DE1B0.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/A590779A191F1662723B375121732060257387F7A064C2E63CA188251BAC7ADA/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Fri 11 Sep 2026 14:20:01 +0000 Certificate not after: Fri 10 Sep 2027 14:25:01 +0000 Subordinate resources: AS: 270139 IP: 189.85.36.0/22 IP: 2806:3bb::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Sep 2026 08:52:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:20:73:63:c9:37:dd:d8:1f:8e:54:cd:8f:07:ce:01:b7:aa:93:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Sep 11 14:20:01 2026 GMT Not After : Sep 10 14:25:01 2027 GMT Subject: CN=AF9CF882C0725B96107DE33BC5ACCD99BE2DE1B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:10:24:5c:46:2f:f0:51:26:d0:15:ad:34:95: 58:ee:24:3a:34:bc:69:b4:bd:28:04:7d:38:fc:77: d8:92:dc:33:86:74:92:27:81:5e:3f:ce:d3:23:12: 1a:e6:d8:fd:dc:26:97:9e:86:ae:23:4b:1a:ff:48: c8:d3:06:40:f9:5e:3f:b0:11:32:28:21:a0:fd:52: 6e:1b:0d:18:c2:d0:de:4f:b6:fc:16:46:a2:45:56: 8f:7d:50:2a:6f:51:54:20:10:ab:5c:37:80:70:af: de:cf:b3:30:a1:31:ca:fa:d8:4b:d6:63:43:f0:3f: 60:c5:5f:93:1c:1f:6f:e0:06:87:ed:7c:72:fc:56: 9e:12:55:f4:58:e2:d4:84:bd:38:aa:2b:ef:fb:61: 48:f5:44:01:57:85:1f:42:a4:fe:b5:2c:81:14:63: d4:95:74:2f:18:aa:78:50:d3:4a:29:aa:db:f8:d2: bb:c8:d1:4f:30:c0:e7:0a:39:cf:a4:84:a5:6f:f2: 04:43:30:c3:a2:2a:0d:c1:e7:00:2b:92:14:c2:62: 0f:4c:32:fe:61:90:85:c2:10:cd:e5:fa:10:2a:91: 57:57:0e:bd:d3:f7:59:23:f4:e1:6d:e9:b1:df:aa: 89:0a:6c:f8:1d:74:0c:f2:c5:ac:87:4c:95:30:1d: b8:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AF:9C:F8:82:C0:72:5B:96:10:7D:E3:3B:C5:AC:CD:99:BE:2D:E1:B0 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/A590779A191F1662723B375121732060257387F7A064C2E63CA188251BAC7ADA/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/A590779A191F1662723B375121732060257387F7A064C2E63CA188251BAC7ADA/0/AF9CF882C0725B96107DE33BC5ACCD99BE2DE1B0.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 189.85.36.0/22 IPv6: 2806:3bb::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 270139 Signature Algorithm: sha256WithRSAEncryption 50:3b:de:e7:ff:42:48:de:9b:4b:24:19:9d:2f:a6:97:a1:c1: e3:c7:0f:3b:a8:19:c8:dc:df:f9:ee:21:72:30:a9:78:7e:a8: a1:78:66:76:e8:ee:10:1a:0d:c2:2a:a2:8c:39:b4:9c:c4:7a: 14:3d:9f:b4:e0:c9:1d:11:d7:29:44:88:e9:ea:79:3d:c2:99: 23:2b:49:ad:16:47:11:50:0a:7f:02:44:46:a1:c0:b9:b1:b6: 01:f2:d8:d4:6a:6f:71:8d:c3:91:2b:a9:e4:ec:2f:ee:e3:7b: 7f:40:73:ba:84:58:59:6e:fe:23:e3:fd:ca:99:13:9c:df:8c: 08:2a:f7:2a:5f:9d:93:9c:33:b1:fd:b4:dc:fa:e3:74:bc:9b: 88:a1:43:06:a7:f3:59:34:2f:de:3d:ad:8c:34:56:d1:24:61: 06:de:23:95:05:e2:95:4b:a0:d2:d2:89:8c:f0:a7:90:fd:16: 6f:6d:b0:26:9d:04:17:fe:7a:20:bc:d9:ad:65:2f:1d:23:9b: 6c:0e:ab:8d:89:80:46:4c:28:93:35:8f:68:58:3b:f1:42:68: 82:0f:4e:cb:7c:3e:a6:0b:14:82:98:5e:a1:9b:c7:fd:36:99: 90:8f:16:da:de:18:fe:cf:bb:1b:6c:91:ab:89:c9:1c:a9:f4: b2:e4:1a:d7 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUNCBzY8k33dgfjlTNjwfOAbeqkzkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjA5MTExNDIwMDFaFw0yNzA5MTAxNDI1MDFaMDMxMTAvBgNV BAMTKEFGOUNGODgyQzA3MjVCOTYxMDdERTMzQkM1QUNDRDk5QkUyREUxQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5ECRcRi/wUSbQFa00lVjuJDo0 vGm0vSgEfTj8d9iS3DOGdJIngV4/ztMjEhrm2P3cJpeehq4jSxr/SMjTBkD5Xj+w ETIoIaD9Um4bDRjC0N5PtvwWRqJFVo99UCpvUVQgEKtcN4Bwr97PszChMcr62EvW Y0PwP2DFX5McH2/gBoftfHL8Vp4SVfRY4tSEvTiqK+/7YUj1RAFXhR9CpP61LIEU Y9SVdC8YqnhQ00opqtv40rvI0U8wwOcKOc+khKVv8gRDMMOiKg3B5wArkhTCYg9M Mv5hkIXCEM3l+hAqkVdXDr3T91kj9OFt6bHfqokKbPgddAzyxayHTJUwHbgvAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSvnPiCwHJblhB9 4zvFrM2Zvi3hsDAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQTU5MDc3OUExOTFGMTY2MjcyM0IzNzUx MjE3MzIwNjAyNTczODdGN0EwNjRDMkU2M0NBMTg4MjUxQkFDN0FEQS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9BNTkwNzc5QTE5MUYxNjYyNzIzQjM3NTEyMTczMjA2MDI1NzM4N0Y3QTA2 NEMyRTYzQ0ExODgyNTFCQUM3QURBLzAvQUY5Q0Y4ODJDMDcyNUI5NjEwN0RFMzNC QzVBQ0NEOTlCRTJERTFCMC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCvVUkMA0EAgAC MAcDBQAoBgO7MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQfOzANBgkqhkiG9w0B AQsFAAOCAQEAUDve5/9CSN6bSyQZnS+ml6HB48cPO6gZyNzf+e4hcjCpeH6ooXhm dujuEBoNwiqijDm0nMR6FD2ftODJHRHXKUSI6ep5PcKZIytJrRZHEVAKfwJERqHA ubG2AfLY1GpvcY3DkSup5Owv7uN7f0BzuoRYWW7+I+P9ypkTnN+MCCr3Kl+dk5wz sf203PrjdLybiKFDBqfzWTQv3j2tjDRW0SRhBt4jlQXilUug0tKJjPCnkP0Wb22w Jp0EF/56ILzZrWUvHSObbA6rjYmARkwokzWPaFg78UJogg9Oy3w+pgsUgpheoZvH /TaZkI8W2t4Y/s+7G2yRq4nJHKn0suQa1w== -----END CERTIFICATE-----Generated at Fri Sep 18 18:04:39 2026 by rpki-client