$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFA2FDBF95BF4FA6963247029EE0F0D750CA7FDF.cer File: BFA2FDBF95BF4FA6963247029EE0F0D750CA7FDF.cer (raw, json) Hash identifier: ATtrcTlqWUwyGaA6GhPYYkqfFixlX4J5iG/l1Brlcys= Subject key identifier: BF:A2:FD:BF:95:BF:4F:A6:96:32:47:02:9E:E0:F0:D7:50:CA:7F:DF Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 3F71E3D3625E4314989C94CE840F372EB1E4FC1C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/C37940C9826D0075B1D9A1CF654BD6D585A42F5865D98FAD2314919F934E732E/0/BFA2FDBF95BF4FA6963247029EE0F0D750CA7FDF.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/C37940C9826D0075B1D9A1CF654BD6D585A42F5865D98FAD2314919F934E732E/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 30 Jun 2026 16:55:01 +0000 Certificate not after: Tue 29 Jun 2027 17:00:01 +0000 Subordinate resources: AS: 273174 IP: 2803:a50::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 12 Jul 2026 02:33:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:71:e3:d3:62:5e:43:14:98:9c:94:ce:84:0f:37:2e:b1:e4:fc:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jun 30 16:55:01 2026 GMT Not After : Jun 29 17:00:01 2027 GMT Subject: CN=BFA2FDBF95BF4FA6963247029EE0F0D750CA7FDF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a4:18:89:91:25:ad:81:3b:1c:da:35:f8:b4: 0d:1b:14:8e:34:8f:08:2a:8d:af:73:f9:e9:86:da: 89:57:f7:37:0a:1f:3e:71:4c:5e:4f:aa:8d:72:e2: 8a:9f:a5:1e:31:23:73:c7:83:64:49:03:07:1a:5c: e6:3c:b9:51:a6:e1:2c:0c:54:df:80:6e:0d:fa:4e: 7f:4d:21:c5:e6:9c:45:42:4a:d3:89:93:b5:22:b3: 15:f2:80:ba:9a:05:ff:fc:ea:3a:f3:98:8d:13:ee: c2:8d:fc:ce:af:e8:a7:16:d4:b9:69:19:08:f3:7a: 2e:6c:5a:25:42:74:0f:e4:0e:f3:dc:33:b5:ef:c2: 7b:83:f3:e0:f5:41:e8:90:2d:4a:82:cf:4b:55:4e: da:85:f3:64:77:7a:a5:50:9e:93:e2:20:a3:9e:1b: 46:05:35:a4:70:fb:8d:49:dc:0e:65:3f:bb:b8:63: d0:2b:5d:19:d5:86:0a:fe:a4:45:44:41:d4:2a:40: 3c:55:2f:47:73:37:62:91:25:c6:3f:a8:25:f1:a0: 3b:f0:01:91:5f:54:0a:0f:3e:c1:b9:71:75:4a:3e: 43:ec:d5:21:e8:96:32:f2:b5:74:fd:3c:79:bb:a0: dd:82:40:e2:8a:43:99:f2:2e:1f:a2:36:4e:4d:b6: 3c:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BF:A2:FD:BF:95:BF:4F:A6:96:32:47:02:9E:E0:F0:D7:50:CA:7F:DF X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/C37940C9826D0075B1D9A1CF654BD6D585A42F5865D98FAD2314919F934E732E/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/C37940C9826D0075B1D9A1CF654BD6D585A42F5865D98FAD2314919F934E732E/0/BFA2FDBF95BF4FA6963247029EE0F0D750CA7FDF.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:a50::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273174 Signature Algorithm: sha256WithRSAEncryption 43:9b:39:5f:a2:3f:80:1c:80:6c:04:fe:fe:7b:18:15:8b:b1: 09:7a:73:9b:12:44:6a:ab:ff:49:00:46:74:9d:67:cb:5d:72: 90:25:41:b3:1e:ef:1d:b9:f2:88:a7:eb:b9:49:7f:35:ff:82: bb:27:8a:a4:57:f7:b7:a9:21:fa:4e:19:8f:0a:78:9a:fd:d3: b0:1c:36:09:4b:89:ae:db:8a:26:4a:85:67:66:e0:f8:ae:0b: cb:bb:53:f9:36:6a:2e:ac:57:aa:56:7d:d2:40:7c:2c:42:9f: b5:8c:5a:40:38:07:cd:a8:f9:9c:1d:3a:8e:f7:69:9d:6e:fe: c9:de:b7:8c:cd:ea:a0:93:2e:23:4b:13:95:0e:47:07:e7:33: ef:b0:b5:f7:62:67:42:17:ca:0f:a4:ab:a3:da:22:f2:f1:23: 19:2c:2b:0e:52:07:84:ec:47:58:85:fc:00:94:88:d0:47:8d: 61:3d:92:bd:7e:22:99:1d:fe:c8:07:19:32:28:99:79:fe:df: 71:60:6b:86:ce:b4:27:ea:6d:cf:b4:fb:12:18:eb:b4:ae:c3: e2:81:48:95:01:6d:ce:a5:71:99:99:db:c1:50:b6:74:5b:a8: 31:f5:df:90:d4:35:13:5a:53:d8:95:f1:6c:a5:90:7c:70:33: dd:71:b1:b7 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUP3Hj02JeQxSYnJTOhA83LrHk/BwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjA2MzAxNjU1MDFaFw0yNzA2MjkxNzAwMDFaMDMxMTAvBgNV BAMTKEJGQTJGREJGOTVCRjRGQTY5NjMyNDcwMjlFRTBGMEQ3NTBDQTdGREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIpBiJkSWtgTsc2jX4tA0bFI40 jwgqja9z+emG2olX9zcKHz5xTF5Pqo1y4oqfpR4xI3PHg2RJAwcaXOY8uVGm4SwM VN+Abg36Tn9NIcXmnEVCStOJk7UisxXygLqaBf/86jrzmI0T7sKN/M6v6KcW1Llp GQjzei5sWiVCdA/kDvPcM7XvwnuD8+D1QeiQLUqCz0tVTtqF82R3eqVQnpPiIKOe G0YFNaRw+41J3A5lP7u4Y9ArXRnVhgr+pEVEQdQqQDxVL0dzN2KRJcY/qCXxoDvw AZFfVAoPPsG5cXVKPkPs1SHoljLytXT9PHm7oN2CQOKKQ5nyLh+iNk5NtjwxAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS/ov2/lb9PppYy RwKe4PDXUMp/3zAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQzM3OTQwQzk4MjZEMDA3NUIxRDlBMUNG NjU0QkQ2RDU4NUE0MkY1ODY1RDk4RkFEMjMxNDkxOUY5MzRFNzMyRS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9DMzc5NDBDOTgyNkQwMDc1QjFEOUExQ0Y2NTRCRDZENTg1QTQyRjU4NjVE OThGQUQyMzE0OTE5RjkzNEU3MzJFLzAvQkZBMkZEQkY5NUJGNEZBNjk2MzI0NzAy OUVFMEYwRDc1MENBN0ZERi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAMKUDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEKxYwDQYJKoZIhvcNAQELBQADggEBAEObOV+i P4AcgGwE/v57GBWLsQl6c5sSRGqr/0kARnSdZ8tdcpAlQbMe7x258oin67lJfzX/ grsniqRX97epIfpOGY8KeJr907AcNglLia7biiZKhWdm4PiuC8u7U/k2ai6sV6pW fdJAfCxCn7WMWkA4B82o+ZwdOo73aZ1u/snet4zN6qCTLiNLE5UORwfnM++wtfdi Z0IXyg+kq6PaIvLxIxksKw5SB4TsR1iF/ACUiNBHjWE9kr1+Ipkd/sgHGTIomXn+ 33Fga4bOtCfqbc+0+xIY67Suw+KBSJUBbc6lcZmZ28FQtnRbqDH135DUNRNaU9iV 8WylkHxwM91xsbc= -----END CERTIFICATE-----Generated at Wed Jul 8 13:43:02 2026 by rpki-client