$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C90120384309CC6F9FAC1F040EBFBB7CC69663B1.cer File: C90120384309CC6F9FAC1F040EBFBB7CC69663B1.cer (raw, json) Hash identifier: 1tPsuCgEq7JlBGq9MWKUSe/NQzhDNGQcHpuj5tdCUrE= Subject key identifier: C9:01:20:38:43:09:CC:6F:9F:AC:1F:04:0E:BF:BB:7C:C6:96:63:B1 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 40FECA1A7487C1274D47D4AE84AD65F5A9389F80 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/54D1C88CDFAF42033C05328865F32C57A74054E8F6398423760A55F511D86F3F/0/C90120384309CC6F9FAC1F040EBFBB7CC69663B1.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/54D1C88CDFAF42033C05328865F32C57A74054E8F6398423760A55F511D86F3F/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Thu 11 Jun 2026 19:00:01 +0000 Certificate not after: Thu 10 Jun 2027 19:05:01 +0000 Subordinate resources: AS: 16874 AS: 52441 AS: 269967 IP: 198.41.32.0 -- 198.41.46.255 IP: 200.0.158.0/24 IP: 200.6.64.0 -- 200.6.78.255 IP: 2801:0:b0::/45 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 17 Jun 2026 16:50:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:fe:ca:1a:74:87:c1:27:4d:47:d4:ae:84:ad:65:f5:a9:38:9f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jun 11 19:00:01 2026 GMT Not After : Jun 10 19:05:01 2027 GMT Subject: CN=C90120384309CC6F9FAC1F040EBFBB7CC69663B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:24:47:31:77:72:e6:d0:85:bb:b7:bb:4e:3d: 8d:09:5d:f6:dd:01:50:cb:98:4a:7b:7a:b2:96:41: 67:9d:06:2f:47:38:ef:87:72:7b:c3:3d:42:61:d1: df:a2:bb:31:d9:22:1d:26:0e:71:cc:86:bb:bd:2b: d7:af:cf:3b:e5:21:1b:4f:1c:4d:1d:97:17:9e:6f: ef:68:bf:b4:fe:b1:17:50:80:5b:35:e0:3d:4b:1c: 25:3f:ce:d7:82:c8:36:f1:b6:3a:77:98:d4:15:70: c9:46:c3:07:4c:67:76:35:c0:a8:6c:47:49:fe:50: c6:d5:d7:97:23:a2:83:8e:33:e2:73:87:a7:39:ac: 61:63:3f:dc:5c:ea:f1:c2:77:88:94:63:6d:5b:11: ba:f8:7d:81:a0:76:fb:a5:d0:6d:70:90:8d:3e:ab: cb:bb:18:e1:e0:91:04:b3:21:14:b6:61:ee:29:0a: 72:ce:ff:c4:7b:52:57:b7:68:d1:a3:4b:a3:b8:da: fc:4b:57:8d:3c:00:98:a3:90:20:4a:06:0c:1d:fa: 14:27:21:a0:83:b9:48:83:ae:ec:5f:c6:33:41:19: 5e:2b:2b:63:09:2a:17:5d:05:11:ba:a4:fc:84:b3: 6c:90:dd:72:75:25:e8:f4:da:11:75:03:91:6f:d3: cf:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C9:01:20:38:43:09:CC:6F:9F:AC:1F:04:0E:BF:BB:7C:C6:96:63:B1 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/54D1C88CDFAF42033C05328865F32C57A74054E8F6398423760A55F511D86F3F/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/54D1C88CDFAF42033C05328865F32C57A74054E8F6398423760A55F511D86F3F/0/C90120384309CC6F9FAC1F040EBFBB7CC69663B1.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 198.41.32.0-198.41.46.255 200.0.158.0/24 200.6.64.0-200.6.78.255 IPv6: 2801:0:b0::/45 sbgp-autonomousSysNum: critical Autonomous System Numbers: 16874 52441 269967 Signature Algorithm: sha256WithRSAEncryption 8c:a6:1d:df:e4:6d:0d:81:65:3c:6e:87:e6:7f:1b:8c:58:7b: 2f:b2:2c:3f:c4:71:6b:71:2f:5e:fb:3c:c6:f7:c7:01:bf:32: 25:30:7d:cc:8f:b7:f2:5a:3e:bd:70:70:5d:a4:bb:9b:78:93: d6:c4:71:f8:43:b5:b9:12:31:2e:9d:14:a6:a5:a9:03:75:89: a9:6d:ff:01:e7:dd:11:57:70:01:fb:26:5d:28:0d:6e:28:f7: 7a:61:7b:2e:5c:6c:ab:49:2a:57:e0:ff:92:09:41:d7:11:80: 11:c5:a3:4d:12:8e:d6:c0:11:1c:cd:12:aa:4e:3b:fa:1d:42: ca:d4:c1:cc:44:00:fd:17:89:0b:b4:97:2c:70:4e:7f:fd:b6: 0f:a2:9c:c9:67:c7:b4:c1:d8:fe:8a:97:d2:a6:25:df:b2:c5: 6d:6b:69:ef:86:9b:5a:77:4a:7f:ef:e7:75:f5:31:a1:f4:6c: d6:e8:09:cc:27:c2:4b:88:95:51:42:b5:b5:5f:31:0e:29:a5: 24:07:11:c1:5c:22:ee:22:f5:ba:c6:0d:e4:9a:09:cf:c8:6e: 8c:f8:d7:f6:f6:69:5b:39:1b:70:20:c6:3e:e5:fa:22:f1:cc: 94:a2:d0:f4:48:bb:7e:72:7a:7f:f1:fb:2c:61:56:33:d7:04: cb:79:43:2d -----BEGIN CERTIFICATE----- MIIGzDCCBbSgAwIBAgIUQP7KGnSHwSdNR9SuhK1l9ak4n4AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjA2MTExOTAwMDFaFw0yNzA2MTAxOTA1MDFaMDMxMTAvBgNV BAMTKEM5MDEyMDM4NDMwOUNDNkY5RkFDMUYwNDBFQkZCQjdDQzY5NjYzQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+JEcxd3Lm0IW7t7tOPY0JXfbd AVDLmEp7erKWQWedBi9HOO+HcnvDPUJh0d+iuzHZIh0mDnHMhru9K9evzzvlIRtP HE0dlxeeb+9ov7T+sRdQgFs14D1LHCU/zteCyDbxtjp3mNQVcMlGwwdMZ3Y1wKhs R0n+UMbV15cjooOOM+Jzh6c5rGFjP9xc6vHCd4iUY21bEbr4fYGgdvul0G1wkI0+ q8u7GOHgkQSzIRS2Ye4pCnLO/8R7Ule3aNGjS6O42vxLV408AJijkCBKBgwd+hQn IaCDuUiDruxfxjNBGV4rK2MJKhddBRG6pPyEs2yQ3XJ1Jej02hF1A5Fv08+7AgMB AAGjggPWMIID0jAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTJASA4QwnMb5+s HwQOv7t8xpZjsTAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNTREMUM4OENERkFGNDIwMzNDMDUzMjg4 NjVGMzJDNTdBNzQwNTRFOEY2Mzk4NDIzNzYwQTU1RjUxMUQ4NkYzRi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy81NEQxQzg4Q0RGQUY0MjAzM0MwNTMyODg2NUYzMkM1N0E3NDA1NEU4RjYz OTg0MjM3NjBBNTVGNTExRDg2RjNGLzAvQzkwMTIwMzg0MzA5Q0M2RjlGQUMxRjA0 MEVCRkJCN0NDNjk2NjNCMS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzAoBAIAATAiMAwDBAXGKSADBADG KS4DBADIAJ4wDAMEBsgGQAMEAMgGTjAPBAIAAjAJAwcDKAEAAACwMCMGCCsGAQUF BwEIAQH/BBQwEqAQMA4CAkHqAgMAzNkCAwQejzANBgkqhkiG9w0BAQsFAAOCAQEA jKYd3+RtDYFlPG6H5n8bjFh7L7IsP8Rxa3EvXvs8xvfHAb8yJTB9zI+38lo+vXBw XaS7m3iT1sRx+EO1uRIxLp0UpqWpA3WJqW3/AefdEVdwAfsmXSgNbij3emF7Llxs q0kqV+D/kglB1xGAEcWjTRKO1sARHM0Sqk47+h1CytTBzEQA/ReJC7SXLHBOf/22 D6KcyWfHtMHY/oqX0qYl37LFbWtp74abWndKf+/ndfUxofRs1ugJzCfCS4iVUUK1 tV8xDimlJAcRwVwi7iL1usYN5JoJz8hujPjX9vZpWzkbcCDGPuX6IvHMlKLQ9Ei7 fnJ6f/H7LGFWM9cEy3lDLQ== -----END CERTIFICATE-----Generated at Sun Jun 14 06:43:28 2026 by rpki-client