$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BA5158A079A177A86325E617363B60A072F1D0D1.cer File: BA5158A079A177A86325E617363B60A072F1D0D1.cer (raw, json) Hash identifier: xFa/wBw8KtRa2QCohC8GSdzBxfgF0tD/Ok6wsgsaqGw= Subject key identifier: BA:51:58:A0:79:A1:77:A8:63:25:E6:17:36:3B:60:A0:72:F1:D0:D1 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 3981689F6DB5212EC6D91D9103BBCA37CFAC5DED Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/AAE832C6BC2F5660B194A6C8170D2DDA20A5DD18BBF86C8B023B6B956C510A75/0/BA5158A079A177A86325E617363B60A072F1D0D1.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/AAE832C6BC2F5660B194A6C8170D2DDA20A5DD18BBF86C8B023B6B956C510A75/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Fri 28 Aug 2026 04:40:01 +0000 Certificate not after: Fri 27 Aug 2027 04:45:01 +0000 Subordinate resources: AS: 275026 IP: 2803:7b30::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Sep 2026 08:52:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:81:68:9f:6d:b5:21:2e:c6:d9:1d:91:03:bb:ca:37:cf:ac:5d:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Aug 28 04:40:01 2026 GMT Not After : Aug 27 04:45:01 2027 GMT Subject: CN=BA5158A079A177A86325E617363B60A072F1D0D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:b8:85:d6:d7:68:92:21:ea:43:88:40:30:4a: 69:2e:bd:20:42:57:5f:ff:22:6d:ad:c6:7a:9a:a0: 7c:a7:0f:85:4b:38:3e:fd:a8:cd:49:01:6b:85:4f: 12:20:60:73:b7:9b:9b:a6:4c:a6:31:8a:80:47:c1: d8:28:ef:70:ae:33:b4:1a:03:35:f2:0e:88:9a:82: e1:60:1a:99:c2:b1:f7:62:67:ad:d4:92:b6:2c:a5: b4:73:47:1c:e2:cc:8c:da:7e:43:eb:bc:1c:b8:ef: ff:ca:d8:e1:f5:c1:d8:d7:04:a1:d8:3c:91:ab:5b: 4d:61:af:51:8a:2c:00:29:95:81:e3:6d:94:ea:34: 78:49:bb:ff:c1:d9:05:71:e2:6c:93:61:e9:4b:6c: 3d:ca:ce:55:d4:71:f7:6e:c6:4d:0f:bb:a7:18:dc: 82:3b:65:94:ea:6a:1c:87:c6:e9:5d:4d:07:5d:ab: 0f:83:9f:a9:36:2d:ba:04:f2:d3:b0:c1:3c:d6:1e: 56:41:56:8a:60:c8:88:d9:51:ea:bd:5a:6f:9e:34: 2b:01:fa:aa:e1:9b:b4:a9:d6:19:91:59:08:24:b9: 2d:95:ba:13:10:7a:34:e0:4f:bf:20:41:8f:ac:1b: 92:02:78:a8:76:e1:89:c5:13:97:a2:28:ce:43:b2: 1f:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BA:51:58:A0:79:A1:77:A8:63:25:E6:17:36:3B:60:A0:72:F1:D0:D1 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/AAE832C6BC2F5660B194A6C8170D2DDA20A5DD18BBF86C8B023B6B956C510A75/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/AAE832C6BC2F5660B194A6C8170D2DDA20A5DD18BBF86C8B023B6B956C510A75/0/BA5158A079A177A86325E617363B60A072F1D0D1.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:7b30::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 275026 Signature Algorithm: sha256WithRSAEncryption 58:a0:77:21:26:f8:ca:19:c5:f5:ac:ac:03:c7:7f:8e:50:8a: 92:da:07:51:b7:63:f2:b6:ac:5b:39:2a:f2:8e:38:33:5e:97: 3d:f8:3e:89:2c:db:24:aa:fc:71:75:20:dd:89:87:2a:bd:d8: 47:82:ec:94:18:c3:df:3d:04:5e:9e:69:03:5a:21:a2:97:91: be:1e:80:e2:d8:c4:ea:4e:a0:0b:8b:d8:28:b6:d6:78:da:f9: 85:3d:a2:0a:01:5b:b0:17:3b:55:eb:d7:16:97:a0:6d:4c:10: f9:6d:39:6f:b4:8f:63:ff:a5:38:fd:49:0e:57:16:1e:08:5b: 73:7d:f2:b8:06:9b:ce:fe:70:64:f0:05:82:ea:2c:de:bf:dc: 0b:cf:56:f6:b9:cf:05:c9:b1:7d:c8:1f:2d:f3:63:f4:87:51: 52:95:16:a1:4d:20:1f:08:0b:21:97:3a:bf:78:c9:a4:6a:5b: 84:c1:a0:87:ec:e3:9b:dd:86:97:03:0a:37:d7:c0:be:49:76: 51:f0:f6:b7:c1:3a:73:73:58:d4:78:a9:59:ce:af:18:9f:10: 4e:9f:bd:87:5d:fd:f3:ec:f7:17:3b:15:5e:3f:e8:f2:e7:36: b7:d5:bb:61:c4:fb:77:02:93:8e:74:c5:52:98:61:fb:34:ce: 32:9b:e4:e3 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUOYFon221IS7G2R2RA7vKN8+sXe0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjA4MjgwNDQwMDFaFw0yNzA4MjcwNDQ1MDFaMDMxMTAvBgNV BAMTKEJBNTE1OEEwNzlBMTc3QTg2MzI1RTYxNzM2M0I2MEEwNzJGMUQwRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXuIXW12iSIepDiEAwSmkuvSBC V1//Im2txnqaoHynD4VLOD79qM1JAWuFTxIgYHO3m5umTKYxioBHwdgo73CuM7Qa AzXyDoiaguFgGpnCsfdiZ63UkrYspbRzRxzizIzafkPrvBy47//K2OH1wdjXBKHY PJGrW01hr1GKLAAplYHjbZTqNHhJu//B2QVx4myTYelLbD3KzlXUcfduxk0Pu6cY 3II7ZZTqahyHxuldTQddqw+Dn6k2LboE8tOwwTzWHlZBVopgyIjZUeq9Wm+eNCsB +qrhm7Sp1hmRWQgkuS2VuhMQejTgT78gQY+sG5ICeKh24YnFE5eiKM5Dsh/DAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS6UVigeaF3qGMl 5hc2O2CgcvHQ0TAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQUFFODMyQzZCQzJGNTY2MEIxOTRBNkM4 MTcwRDJEREEyMEE1REQxOEJCRjg2QzhCMDIzQjZCOTU2QzUxMEE3NS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9BQUU4MzJDNkJDMkY1NjYwQjE5NEE2QzgxNzBEMkREQTIwQTVERDE4QkJG ODZDOEIwMjNCNkI5NTZDNTEwQTc1LzAvQkE1MTU4QTA3OUExNzdBODYzMjVFNjE3 MzYzQjYwQTA3MkYxRDBEMS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAN7MDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEMlIwDQYJKoZIhvcNAQELBQADggEBAFigdyEm +MoZxfWsrAPHf45QipLaB1G3Y/K2rFs5KvKOODNelz34Poks2ySq/HF1IN2Jhyq9 2EeC7JQYw989BF6eaQNaIaKXkb4egOLYxOpOoAuL2Ci21nja+YU9ogoBW7AXO1Xr 1xaXoG1MEPltOW+0j2P/pTj9SQ5XFh4IW3N98rgGm87+cGTwBYLqLN6/3AvPVva5 zwXJsX3IHy3zY/SHUVKVFqFNIB8ICyGXOr94yaRqW4TBoIfs45vdhpcDCjfXwL5J dlHw9rfBOnNzWNR4qVnOrxifEE6fvYdd/fPs9xc7FV4/6PLnNrfVu2HE+3cCk450 xVKYYfs0zjKb5OM= -----END CERTIFICATE-----Generated at Fri Sep 18 18:55:09 2026 by rpki-client