$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6D368E9496811D7AF0DA4F72F23F82F02294FF6.cer File: C6D368E9496811D7AF0DA4F72F23F82F02294FF6.cer (raw, json) Hash identifier: 9nCyWV7o7ZHhwvZy9Z4VnXSHIoPr2AOnjh9Ja46DbGA= Subject key identifier: C6:D3:68:E9:49:68:11:D7:AF:0D:A4:F7:2F:23:F8:2F:02:29:4F:F6 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 05D199266D19B5EAC5E2F93207A8E6667CF7B3B2 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/78852968CADF778760D993428A24D7B9F9B52729137A980FCF6BE4C6AA9058B0/0/C6D368E9496811D7AF0DA4F72F23F82F02294FF6.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/78852968CADF778760D993428A24D7B9F9B52729137A980FCF6BE4C6AA9058B0/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 02 Sep 2026 17:05:01 +0000 Certificate not after: Wed 01 Sep 2027 17:10:01 +0000 Subordinate resources: AS: 274434 IP: 2806:470::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 13 Sep 2026 18:55:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:d1:99:26:6d:19:b5:ea:c5:e2:f9:32:07:a8:e6:66:7c:f7:b3:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Sep 2 17:05:01 2026 GMT Not After : Sep 1 17:10:01 2027 GMT Subject: CN=C6D368E9496811D7AF0DA4F72F23F82F02294FF6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:9c:d7:9f:6e:04:b3:f4:94:9c:28:38:47:1f: 60:e5:4a:a4:94:53:d8:02:8f:24:0b:5f:c9:3b:f4: 09:42:7b:dc:44:35:ef:db:31:a2:88:9f:9e:3c:4a: ad:cf:8d:80:64:c4:56:a0:09:38:4f:e3:7c:dd:ca: 75:89:cc:ef:df:a4:60:e2:9e:0f:0e:2f:27:c8:04: 83:23:d1:b3:bf:5e:ea:fd:17:79:28:dd:86:2f:df: cf:62:ec:7d:99:6f:36:d3:55:93:a3:44:a6:3b:e2: af:6f:8f:e0:5a:aa:39:ca:1d:a5:b3:5f:cf:9b:64: 08:53:4f:6b:9e:79:c0:39:3c:6a:06:2c:a2:6d:8a: 62:e1:d9:40:12:7d:70:7e:55:45:02:b5:3b:8a:74: 27:44:13:66:06:04:f0:48:98:19:4b:de:4e:48:27: 1b:10:2d:f7:c5:59:83:55:6a:de:9d:7e:21:46:19: d5:d4:bc:12:61:f3:f4:e9:6e:b5:2f:46:3e:0b:01: b2:57:16:d9:99:28:e6:37:a8:0c:04:49:31:43:43: 67:79:40:02:c3:3d:ea:e1:35:a6:35:0c:98:0f:60: b5:dc:52:e6:b0:1d:45:3b:81:fd:17:af:20:47:7d: 49:0e:f5:a4:72:77:c5:ad:14:2c:ae:f2:d2:17:91: 13:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C6:D3:68:E9:49:68:11:D7:AF:0D:A4:F7:2F:23:F8:2F:02:29:4F:F6 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/78852968CADF778760D993428A24D7B9F9B52729137A980FCF6BE4C6AA9058B0/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/78852968CADF778760D993428A24D7B9F9B52729137A980FCF6BE4C6AA9058B0/0/C6D368E9496811D7AF0DA4F72F23F82F02294FF6.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2806:470::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 274434 Signature Algorithm: sha256WithRSAEncryption 64:0f:71:21:2e:4c:04:40:1f:16:4b:4c:44:cc:2d:48:55:31: ae:90:48:fd:77:04:9d:48:93:4c:80:c6:ed:6a:37:46:42:ab: 39:58:a1:5d:d0:e4:bf:4a:f6:bb:d5:55:f3:73:a3:fa:e7:41: e7:12:40:2c:73:01:ac:4d:c9:b4:f3:a9:6b:0d:ea:00:c9:c9: 72:7d:0e:6d:95:c5:f1:1c:cf:f7:1e:36:b7:b9:36:21:a1:53: 34:15:51:dc:64:0d:e5:26:98:5c:78:e3:22:18:21:51:4a:8e: f9:a4:74:7f:26:21:71:d5:78:a4:8b:9c:b0:54:0c:5f:b2:cc: 89:41:4a:b5:ce:3f:c4:8b:8a:1b:2f:45:d7:bd:dd:f5:b4:e6: e6:42:cf:c1:5e:57:ee:34:1c:b4:54:24:ee:1b:ef:c9:10:bc: a0:31:af:30:76:99:95:18:18:9a:73:b7:96:d2:d0:30:1b:82: 16:22:11:21:29:1f:bb:fb:60:23:5d:00:76:95:b4:7d:7a:5a: 1a:f8:53:fd:68:7a:01:ae:83:28:21:d3:ad:2e:69:2c:28:df: c1:83:aa:a5:01:be:07:f6:b3:bb:06:b5:7f:69:5e:7d:2f:fa: ef:9d:d6:3c:8a:59:f5:c4:d8:61:ca:ce:e0:03:e3:e6:a9:44: 7c:17:bb:93 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUBdGZJm0ZterF4vkyB6jmZnz3s7IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjA5MDIxNzA1MDFaFw0yNzA5MDExNzEwMDFaMDMxMTAvBgNV BAMTKEM2RDM2OEU5NDk2ODExRDdBRjBEQTRGNzJGMjNGODJGMDIyOTRGRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfnNefbgSz9JScKDhHH2DlSqSU U9gCjyQLX8k79AlCe9xENe/bMaKIn548Sq3PjYBkxFagCThP43zdynWJzO/fpGDi ng8OLyfIBIMj0bO/Xur9F3ko3YYv389i7H2ZbzbTVZOjRKY74q9vj+BaqjnKHaWz X8+bZAhTT2ueecA5PGoGLKJtimLh2UASfXB+VUUCtTuKdCdEE2YGBPBImBlL3k5I JxsQLffFWYNVat6dfiFGGdXUvBJh8/TpbrUvRj4LAbJXFtmZKOY3qAwESTFDQ2d5 QALDPerhNaY1DJgPYLXcUuawHUU7gf0XryBHfUkO9aRyd8WtFCyu8tIXkRPLAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTG02jpSWgR168N pPcvI/gvAilP9jAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNzg4NTI5NjhDQURGNzc4NzYwRDk5MzQy OEEyNEQ3QjlGOUI1MjcyOTEzN0E5ODBGQ0Y2QkU0QzZBQTkwNThCMC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy83ODg1Mjk2OENBREY3Nzg3NjBEOTkzNDI4QTI0RDdCOUY5QjUyNzI5MTM3 QTk4MEZDRjZCRTRDNkFBOTA1OEIwLzAvQzZEMzY4RTk0OTY4MTFEN0FGMERBNEY3 MkYyM0Y4MkYwMjI5NEZGNi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAYEcDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEMAIwDQYJKoZIhvcNAQELBQADggEBAGQPcSEu TARAHxZLTETMLUhVMa6QSP13BJ1Ik0yAxu1qN0ZCqzlYoV3Q5L9K9rvVVfNzo/rn QecSQCxzAaxNybTzqWsN6gDJyXJ9Dm2VxfEcz/ceNre5NiGhUzQVUdxkDeUmmFx4 4yIYIVFKjvmkdH8mIXHVeKSLnLBUDF+yzIlBSrXOP8SLihsvRde93fW05uZCz8Fe V+40HLRUJO4b78kQvKAxrzB2mZUYGJpzt5bS0DAbghYiESEpH7v7YCNdAHaVtH16 Whr4U/1oegGugygh060uaSwo38GDqqUBvgf2s7sGtX9pXn0v+u+d1jyKWfXE2GHK zuAD4+apRHwXu5M= -----END CERTIFICATE-----Generated at Wed Sep 9 19:47:52 2026 by rpki-client