$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BA37BA6B417CEF8AD4663D8734D77A748FE64112.cer File: BA37BA6B417CEF8AD4663D8734D77A748FE64112.cer (raw, json) Hash identifier: BAO+tA1//qgpHqZ1lOrf8EZJleQExxUBPxJ1DQ0LO78= Subject key identifier: BA:37:BA:6B:41:7C:EF:8A:D4:66:3D:87:34:D7:7A:74:8F:E6:41:12 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 694698BAE9E99AEAF2151FE77E98532E50E50217 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/C0938E504A2DBB19893DA48A3CD5A4798ECF807FEC9B301745D720CBA2B8A7D6/0/BA37BA6B417CEF8AD4663D8734D77A748FE64112.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/C0938E504A2DBB19893DA48A3CD5A4798ECF807FEC9B301745D720CBA2B8A7D6/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Thu 03 Sep 2026 22:20:00 +0000 Certificate not after: Thu 02 Sep 2027 22:25:00 +0000 Subordinate resources: AS: 28519 IP: 148.239.0.0/18 IP: 148.239.128.0/17 IP: 2801:c4:50::/48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Sep 2026 08:52:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:46:98:ba:e9:e9:9a:ea:f2:15:1f:e7:7e:98:53:2e:50:e5:02:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Sep 3 22:20:00 2026 GMT Not After : Sep 2 22:25:00 2027 GMT Subject: CN=BA37BA6B417CEF8AD4663D8734D77A748FE64112 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:8a:80:72:ed:fa:bc:1a:e9:aa:49:7a:1c:32: 2f:55:b5:27:f2:c7:42:9a:cf:4d:72:1a:1e:a2:93: 75:02:26:67:e3:c6:07:cb:c3:15:50:41:dc:26:78: 13:07:e3:26:65:02:67:da:69:bd:0e:4a:ac:ab:aa: 7f:77:82:9c:88:46:5f:74:8c:20:3d:7a:6b:90:7b: 92:46:bb:49:db:23:70:56:04:6a:32:76:34:91:3f: 9e:d2:30:52:13:53:4e:4a:25:1e:e7:e9:e9:8d:03: 1b:4f:b4:b5:e4:74:ec:6d:55:9e:d5:9a:fc:f1:f9: ff:4f:2a:1f:48:80:45:64:19:db:b9:29:36:df:b0: 2f:46:7c:9f:e0:41:4d:64:9b:81:df:f0:3b:f0:cf: 78:0c:1e:fb:9d:9f:81:d1:a6:17:2d:3c:bd:2d:e8: f1:b2:58:56:c3:ae:62:2f:d5:1a:6f:ad:2a:59:1f: ca:ef:1e:e4:dd:7c:d3:0c:df:0a:a0:96:fd:98:92: b9:18:f3:b2:e5:55:aa:ea:1f:5f:72:6f:51:ea:28: c0:c7:0b:b3:f5:dc:ab:dd:75:9d:68:da:ad:35:b4: 24:30:7b:5e:5c:bb:e8:c3:86:01:b9:42:9a:9b:62: ac:bd:ee:da:7b:ff:f7:14:17:d9:3d:16:22:84:70: a7:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BA:37:BA:6B:41:7C:EF:8A:D4:66:3D:87:34:D7:7A:74:8F:E6:41:12 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/C0938E504A2DBB19893DA48A3CD5A4798ECF807FEC9B301745D720CBA2B8A7D6/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/C0938E504A2DBB19893DA48A3CD5A4798ECF807FEC9B301745D720CBA2B8A7D6/0/BA37BA6B417CEF8AD4663D8734D77A748FE64112.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 148.239.0.0/18 148.239.128.0/17 IPv6: 2801:c4:50::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28519 Signature Algorithm: sha256WithRSAEncryption 04:aa:c1:22:f9:72:2b:09:2e:30:f9:0f:a8:ca:98:2a:97:f3: 58:d2:2e:dc:41:7c:14:c5:0a:9b:f3:fa:f8:63:57:36:5d:1d: 06:9b:09:6c:91:e0:c7:b4:da:98:5e:de:56:28:99:14:36:8f: 13:82:07:43:15:99:1e:13:00:48:99:56:5e:8d:69:63:96:fc: 5e:5e:73:24:80:34:d9:9b:fc:e8:2a:9d:cb:a0:cd:d8:35:b1: 02:d8:56:c6:87:06:ac:46:2a:03:1c:85:c2:ee:45:23:47:c1: a6:a9:17:93:b1:5f:c3:5e:e5:1d:c9:d1:cf:22:2b:74:6e:b7: 3a:c6:c8:40:6c:64:7a:47:d6:fb:c1:5d:cd:f0:4d:d7:fe:52: 59:4b:08:50:08:f1:3c:0f:80:10:c0:0e:2b:85:d6:46:35:60: 2c:db:52:f2:77:1a:b1:05:91:f0:4a:06:06:57:e5:6c:53:0d: 2a:4b:d9:df:6c:f3:b3:ca:00:c3:33:38:bc:2d:4a:62:ae:2c: 15:44:f8:b0:04:bd:63:d5:22:47:2e:e8:6b:72:a6:38:38:26: e7:1b:56:1d:46:63:39:4a:08:ea:7b:07:f5:11:4d:7a:8f:1a: 51:ce:d4:fa:bc:7e:19:cb:4c:51:e4:46:6f:fe:d2:fd:ca:10: 77:80:ef:5a -----BEGIN CERTIFICATE----- MIIGrDCCBZSgAwIBAgIUaUaYuunpmuryFR/nfphTLlDlAhcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjA5MDMyMjIwMDBaFw0yNzA5MDIyMjI1MDBaMDMxMTAvBgNV BAMTKEJBMzdCQTZCNDE3Q0VGOEFENDY2M0Q4NzM0RDc3QTc0OEZFNjQxMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRioBy7fq8GumqSXocMi9VtSfy x0Kaz01yGh6ik3UCJmfjxgfLwxVQQdwmeBMH4yZlAmfaab0OSqyrqn93gpyIRl90 jCA9emuQe5JGu0nbI3BWBGoydjSRP57SMFITU05KJR7n6emNAxtPtLXkdOxtVZ7V mvzx+f9PKh9IgEVkGdu5KTbfsC9GfJ/gQU1km4Hf8Dvwz3gMHvudn4HRphctPL0t 6PGyWFbDrmIv1RpvrSpZH8rvHuTdfNMM3wqglv2YkrkY87LlVarqH19yb1HqKMDH C7P13KvddZ1o2q01tCQwe15cu+jDhgG5QpqbYqy97tp7//cUF9k9FiKEcKcnAgMB AAGjggO2MIIDsjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS6N7prQXzvitRm PYc013p0j+ZBEjAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQzA5MzhFNTA0QTJEQkIxOTg5M0RBNDhB M0NENUE0Nzk4RUNGODA3RkVDOUIzMDE3NDVENzIwQ0JBMkI4QTdENi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9DMDkzOEU1MDRBMkRCQjE5ODkzREE0OEEzQ0Q1QTQ3OThFQ0Y4MDdGRUM5 QjMwMTc0NUQ3MjBDQkEyQjhBN0Q2LzAvQkEzN0JBNkI0MTdDRUY4QUQ0NjYzRDg3 MzRENzdBNzQ4RkU2NDExMi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQGlO8AAwQHlO+A MA8EAgACMAkDBwAoAQDEAFAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICb2cwDQYJ KoZIhvcNAQELBQADggEBAASqwSL5cisJLjD5D6jKmCqX81jSLtxBfBTFCpvz+vhj VzZdHQabCWyR4Me02phe3lYomRQ2jxOCB0MVmR4TAEiZVl6NaWOW/F5ecySANNmb /Ogqncugzdg1sQLYVsaHBqxGKgMchcLuRSNHwaapF5OxX8Ne5R3J0c8iK3RutzrG yEBsZHpH1vvBXc3wTdf+UllLCFAI8TwPgBDADiuF1kY1YCzbUvJ3GrEFkfBKBgZX 5WxTDSpL2d9s87PKAMMzOLwtSmKuLBVE+LAEvWPVIkcu6Gtypjg4JucbVh1GYzlK COp7B/URTXqPGlHO1Pq8fhnLTFHkRm/+0v3KEHeA71o= -----END CERTIFICATE-----Generated at Fri Sep 18 18:04:34 2026 by rpki-client