$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B58A91D7FD2F1B52629EB7C1361419BF83601DB1.cer File: B58A91D7FD2F1B52629EB7C1361419BF83601DB1.cer (raw, json) Hash identifier: Ruv+mzVLsDAUk8sChGG1GHaY2hhZtXJrJVaprtX8TgE= Subject key identifier: B5:8A:91:D7:FD:2F:1B:52:62:9E:B7:C1:36:14:19:BF:83:60:1D:B1 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 0A77CD31520FA363DF57D1C95B65AB09C83C0B94 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/512E07F7BC38AB3B278930700F88230AFFDEB4909C55D2E026ADC460D47720FC/0/B58A91D7FD2F1B52629EB7C1361419BF83601DB1.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/512E07F7BC38AB3B278930700F88230AFFDEB4909C55D2E026ADC460D47720FC/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Sat 12 Sep 2026 04:25:00 +0000 Certificate not after: Sat 11 Sep 2027 04:30:00 +0000 Subordinate resources: IP: 45.65.152.0/22 IP: 2806:2e5::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Sep 2026 04:36:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:77:cd:31:52:0f:a3:63:df:57:d1:c9:5b:65:ab:09:c8:3c:0b:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Sep 12 04:25:00 2026 GMT Not After : Sep 11 04:30:00 2027 GMT Subject: CN=B58A91D7FD2F1B52629EB7C1361419BF83601DB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:67:90:d7:b4:81:c2:2f:38:f1:06:b0:ad:f5: 00:04:ea:66:53:9b:23:dd:ac:80:dc:44:78:e1:53: 86:e7:ba:e8:84:77:1b:53:49:ae:e9:5f:60:ca:bd: c3:00:ba:82:30:88:a4:62:e4:bf:a5:26:2f:ec:a3: 3c:25:ff:a4:13:8e:27:39:c3:9d:4f:2f:1b:27:35: 9b:cf:e7:9c:f8:35:8c:c1:82:c9:51:e9:c9:42:4c: 68:bc:8d:a2:f2:79:a5:76:e2:38:02:e8:54:47:89: 4e:bc:a7:b0:a2:4a:d9:52:89:95:3e:cc:89:78:0e: 9f:1c:fa:9a:91:07:6c:07:7f:5f:97:23:0d:16:46: f1:6e:2d:99:bc:9e:94:f5:a7:56:b9:10:88:c6:61: a7:1a:e3:90:6b:20:c5:e0:11:7d:18:b0:e3:9f:f0: 51:66:79:6a:93:de:4c:9d:ee:da:ea:13:24:2d:8a: 11:23:84:56:d2:ec:ca:70:8a:a9:5b:07:34:ac:15: e5:bf:a7:67:97:94:f0:e5:e6:7c:46:66:38:3e:a1: f4:83:71:8d:36:2e:af:39:67:62:8e:e5:ec:ad:ee: dc:56:ab:ee:0d:6d:f3:72:f8:49:18:b4:0b:98:0d: 0e:57:be:b5:62:c0:e9:0f:63:6d:57:22:56:6d:7d: 72:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B5:8A:91:D7:FD:2F:1B:52:62:9E:B7:C1:36:14:19:BF:83:60:1D:B1 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/512E07F7BC38AB3B278930700F88230AFFDEB4909C55D2E026ADC460D47720FC/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/512E07F7BC38AB3B278930700F88230AFFDEB4909C55D2E026ADC460D47720FC/0/B58A91D7FD2F1B52629EB7C1361419BF83601DB1.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.65.152.0/22 IPv6: 2806:2e5::/32 Signature Algorithm: sha256WithRSAEncryption 39:fe:e2:a7:b1:f7:42:d3:03:98:c4:4b:68:f3:d7:13:32:22: 81:3f:89:e5:a7:32:bb:c8:a8:9b:21:27:87:f7:e3:cc:d0:16: 8f:b9:2d:f2:b6:f4:63:e7:2f:aa:04:29:ba:65:35:e6:b4:c2: d8:25:ac:6f:24:ad:e6:34:98:db:2c:44:68:b4:08:30:ea:f1: 0c:8a:bd:e4:19:2b:ca:f6:28:05:59:eb:c4:17:47:48:09:75: 89:75:2c:82:ca:14:a6:a8:14:ec:98:c5:26:a2:f4:13:31:5f: 45:46:7d:ea:98:f0:1c:f7:df:d7:9e:98:b6:29:01:8a:1c:ea: d2:23:42:bc:b0:ae:cf:0e:17:72:1e:f2:d2:b6:c3:54:9b:da: 36:55:c1:4e:ec:ec:3f:a3:59:0b:83:55:44:9e:16:fe:a7:f2: e4:55:98:18:58:8d:a9:b8:fc:a6:af:b4:b6:d3:ef:9c:d8:fc: b2:59:c2:56:fa:6d:a9:24:af:cc:65:d9:65:30:63:14:81:05: d3:2b:dd:37:76:98:f4:70:67:97:0c:37:ef:a3:88:5d:5c:12: 2d:27:0c:6b:a5:35:19:08:cf:55:ee:12:59:c8:9a:29:c7:8a: b0:04:ea:83:13:c5:cc:18:5f:56:d5:86:00:1d:1f:6f:b7:03: 19:9b:43:6e -----BEGIN CERTIFICATE----- MIIGiTCCBXGgAwIBAgIUCnfNMVIPo2PfV9HJW2WrCcg8C5QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjA5MTIwNDI1MDBaFw0yNzA5MTEwNDMwMDBaMDMxMTAvBgNV BAMTKEI1OEE5MUQ3RkQyRjFCNTI2MjlFQjdDMTM2MTQxOUJGODM2MDFEQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxZ5DXtIHCLzjxBrCt9QAE6mZT myPdrIDcRHjhU4bnuuiEdxtTSa7pX2DKvcMAuoIwiKRi5L+lJi/sozwl/6QTjic5 w51PLxsnNZvP55z4NYzBgslR6clCTGi8jaLyeaV24jgC6FRHiU68p7CiStlSiZU+ zIl4Dp8c+pqRB2wHf1+XIw0WRvFuLZm8npT1p1a5EIjGYaca45BrIMXgEX0YsOOf 8FFmeWqT3kyd7trqEyQtihEjhFbS7MpwiqlbBzSsFeW/p2eXlPDl5nxGZjg+ofSD cY02Lq85Z2KO5eyt7txWq+4NbfNy+EkYtAuYDQ5XvrViwOkPY21XIlZtfXK/AgMB AAGjggOTMIIDjzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS1ipHX/S8bUmKe t8E2FBm/g2AdsTAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNTEyRTA3RjdCQzM4QUIzQjI3ODkzMDcw MEY4ODIzMEFGRkRFQjQ5MDlDNTVEMkUwMjZBREM0NjBENDc3MjBGQy8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy81MTJFMDdGN0JDMzhBQjNCMjc4OTMwNzAwRjg4MjMwQUZGREVCNDkwOUM1 NUQyRTAyNkFEQzQ2MEQ0NzcyMEZDLzAvQjU4QTkxRDdGRDJGMUI1MjYyOUVCN0Mx MzYxNDE5QkY4MzYwMURCMS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLUGYMA0EAgAC MAcDBQAoBgLlMA0GCSqGSIb3DQEBCwUAA4IBAQA5/uKnsfdC0wOYxEto89cTMiKB P4nlpzK7yKibISeH9+PM0BaPuS3ytvRj5y+qBCm6ZTXmtMLYJaxvJK3mNJjbLERo tAgw6vEMir3kGSvK9igFWevEF0dICXWJdSyCyhSmqBTsmMUmovQTMV9FRn3qmPAc 99/Xnpi2KQGKHOrSI0K8sK7PDhdyHvLStsNUm9o2VcFO7Ow/o1kLg1VEnhb+p/Lk VZgYWI2puPymr7S20++c2PyyWcJW+m2pJK/MZdllMGMUgQXTK903dpj0cGeXDDfv o4hdXBItJwxrpTUZCM9V7hJZyJopx4qwBOqDE8XMGF9W1YYAHR9vtwMZm0Nu -----END CERTIFICATE-----Generated at Fri Sep 18 14:10:56 2026 by rpki-client