$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD9914A01C436C1F37760C9C1E51EC8421822628.cer File: CD9914A01C436C1F37760C9C1E51EC8421822628.cer (raw, json) Hash identifier: i7JiD5VM117uobmp+Z5Y4wHLxfyk4gflBdWYCXG4bjk= Subject key identifier: CD:99:14:A0:1C:43:6C:1F:37:76:0C:9C:1E:51:EC:84:21:82:26:28 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 18504BC78ACFF32ABE8F8A0BC17B77762B11571D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/C05C783A0F5DC1BD01AC605C6A779D1E26FF63C5F6883B6D559AA5E7E2D98D84/0/CD9914A01C436C1F37760C9C1E51EC8421822628.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/C05C783A0F5DC1BD01AC605C6A779D1E26FF63C5F6883B6D559AA5E7E2D98D84/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Fri 11 Sep 2026 23:40:02 +0000 Certificate not after: Fri 10 Sep 2027 23:45:02 +0000 Subordinate resources: AS: 265571 IP: 45.171.76.0/23 IP: 2801:c4:23::/48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Sep 2026 08:52:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:50:4b:c7:8a:cf:f3:2a:be:8f:8a:0b:c1:7b:77:76:2b:11:57:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Sep 11 23:40:02 2026 GMT Not After : Sep 10 23:45:02 2027 GMT Subject: CN=CD9914A01C436C1F37760C9C1E51EC8421822628 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d5:7d:50:99:44:bd:24:80:a0:85:6b:e5:f3: e6:a1:80:00:4c:4b:8a:11:2c:a9:94:f4:ff:f5:f5: c2:fd:80:3d:86:64:ee:09:63:4b:af:61:4c:9f:3f: 05:4c:80:b7:15:77:47:d0:5f:1c:05:06:02:53:54: 40:00:e2:5c:9a:4c:3d:56:49:92:22:f0:ba:21:ae: 2a:ca:70:01:9e:5b:a1:30:6f:88:d7:26:57:0a:ff: 3a:cd:99:5f:06:d0:0c:4d:6b:06:4a:92:42:ef:09: 39:0e:5a:6f:47:f2:23:e0:8a:5e:13:5e:51:d1:e2: ed:00:6a:80:dc:d9:1f:85:c1:76:19:46:37:05:b2: e8:b7:18:90:74:41:b4:fb:e9:84:e8:15:a2:84:55: e3:54:e1:34:f7:49:1a:05:ec:1a:d9:e9:6e:e8:26: 70:cb:79:b3:e0:1a:94:b2:61:bd:34:e3:58:56:6a: 1d:6d:54:8c:dc:ca:70:e6:5f:55:19:40:67:26:a6: b2:56:ce:60:87:0f:68:d2:1f:71:77:0c:9d:e5:d9: 04:61:12:4e:2e:1b:f6:cf:e6:2b:9e:e0:bb:20:8b: 95:4a:c6:cf:08:8b:d6:b2:77:3c:3f:e8:d2:69:e9: b2:f2:10:7c:25:9a:f4:ba:f0:06:d9:ac:de:6a:d1: 6e:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CD:99:14:A0:1C:43:6C:1F:37:76:0C:9C:1E:51:EC:84:21:82:26:28 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/C05C783A0F5DC1BD01AC605C6A779D1E26FF63C5F6883B6D559AA5E7E2D98D84/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/C05C783A0F5DC1BD01AC605C6A779D1E26FF63C5F6883B6D559AA5E7E2D98D84/0/CD9914A01C436C1F37760C9C1E51EC8421822628.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.171.76.0/23 IPv6: 2801:c4:23::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265571 Signature Algorithm: sha256WithRSAEncryption 52:2b:31:18:e7:ae:33:c6:fd:68:18:4e:4c:13:d4:be:83:4d: ab:d8:32:41:9e:63:f9:3f:96:ee:fc:05:fe:82:1a:fe:c9:f6: 8f:11:24:0f:85:2a:cb:b9:ca:7e:d2:c6:a1:f6:03:ba:a9:c6: 4c:5a:8a:7f:a0:ed:95:3e:f3:57:e9:f1:82:2f:e6:08:41:5f: 0d:27:5d:ba:22:f6:fb:d4:e1:38:dc:26:58:4e:3f:23:91:5d: 5a:05:55:62:39:ad:ce:5f:b5:ff:31:93:c3:3b:48:4a:b2:ab: ff:f4:6a:6b:78:7c:8e:6a:5f:03:41:67:53:79:94:68:ae:c1: 9b:79:f0:b5:39:c0:c1:26:04:74:71:d0:65:df:bb:c3:b7:5b: a5:91:4c:8c:c1:3b:c4:47:94:2f:89:e9:93:fd:b6:1b:a2:7b: 89:70:46:fe:5b:87:04:07:21:a2:5f:ad:35:2f:8a:f8:59:b7: 16:de:03:26:4b:04:de:ea:99:dd:2e:c2:57:b1:b6:bd:54:0d: d0:ad:dd:69:31:9e:f8:63:91:ea:9a:99:a0:d0:3d:f3:b0:86: d1:68:df:15:0f:fd:51:de:bb:e1:b0:01:7d:eb:5f:c2:e3:06: d6:ae:fb:0c:52:09:a0:ea:bf:05:0e:7e:cc:f8:0d:e8:db:ee: 21:42:57:a2 -----BEGIN CERTIFICATE----- MIIGpzCCBY+gAwIBAgIUGFBLx4rP8yq+j4oLwXt3disRVx0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjA5MTEyMzQwMDJaFw0yNzA5MTAyMzQ1MDJaMDMxMTAvBgNV BAMTKENEOTkxNEEwMUM0MzZDMUYzNzc2MEM5QzFFNTFFQzg0MjE4MjI2MjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC31X1QmUS9JICghWvl8+ahgABM S4oRLKmU9P/19cL9gD2GZO4JY0uvYUyfPwVMgLcVd0fQXxwFBgJTVEAA4lyaTD1W SZIi8LohrirKcAGeW6Ewb4jXJlcK/zrNmV8G0AxNawZKkkLvCTkOWm9H8iPgil4T XlHR4u0AaoDc2R+FwXYZRjcFsui3GJB0QbT76YToFaKEVeNU4TT3SRoF7BrZ6W7o JnDLebPgGpSyYb0041hWah1tVIzcynDmX1UZQGcmprJWzmCHD2jSH3F3DJ3l2QRh Ek4uG/bP5iue4Lsgi5VKxs8Ii9aydzw/6NJp6bLyEHwlmvS68AbZrN5q0W7TAgMB AAGjggOxMIIDrTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTNmRSgHENsHzd2 DJweUeyEIYImKDAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQzA1Qzc4M0EwRjVEQzFCRDAxQUM2MDVD NkE3NzlEMUUyNkZGNjNDNUY2ODgzQjZENTU5QUE1RTdFMkQ5OEQ4NC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9DMDVDNzgzQTBGNURDMUJEMDFBQzYwNUM2QTc3OUQxRTI2RkY2M0M1RjY4 ODNCNkQ1NTlBQTVFN0UyRDk4RDg0LzAvQ0Q5OTE0QTAxQzQzNkMxRjM3NzYwQzlD MUU1MUVDODQyMTgyMjYyOC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBLatMMA8EAgAC MAkDBwAoAQDEACMwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBA1jMA0GCSqGSIb3 DQEBCwUAA4IBAQBSKzEY564zxv1oGE5ME9S+g02r2DJBnmP5P5bu/AX+ghr+yfaP ESQPhSrLucp+0sah9gO6qcZMWop/oO2VPvNX6fGCL+YIQV8NJ126Ivb71OE43CZY Tj8jkV1aBVViOa3OX7X/MZPDO0hKsqv/9GpreHyOal8DQWdTeZRorsGbefC1OcDB JgR0cdBl37vDt1ulkUyMwTvER5QviemT/bYbonuJcEb+W4cEByGiX601L4r4WbcW 3gMmSwTe6pndLsJXsba9VA3Qrd1pMZ74Y5Hqmpmg0D3zsIbRaN8VD/1R3rvhsAF9 61/C4wbWrvsMUgmg6r8FDn7M+A3o2+4hQlei -----END CERTIFICATE-----Generated at Fri Sep 18 18:05:07 2026 by rpki-client