$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CF795BA909FFAA5E80A49C739E4ABC40B9A6E99F.cer File: CF795BA909FFAA5E80A49C739E4ABC40B9A6E99F.cer (raw, json) Hash identifier: EREchq0S08qGOnzW28s0BGLpI1rdTOJN8kyt8G+pgwk= Subject key identifier: CF:79:5B:A9:09:FF:AA:5E:80:A4:9C:73:9E:4A:BC:40:B9:A6:E9:9F Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 4E5C9D40840B1528EB1534F6BCF8D5F1197E16CA Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/CE05C6A2D3BAFFBE85F9DED1C8E035D813A7FA3B7D8C81836A3B31432F82F4D7/0/CF795BA909FFAA5E80A49C739E4ABC40B9A6E99F.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/CE05C6A2D3BAFFBE85F9DED1C8E035D813A7FA3B7D8C81836A3B31432F82F4D7/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 22 Apr 2026 18:00:00 +0000 Certificate not after: Wed 21 Apr 2027 18:05:00 +0000 Subordinate resources: AS: 273296 IP: 2806:44f::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 04 May 2026 10:13:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:5c:9d:40:84:0b:15:28:eb:15:34:f6:bc:f8:d5:f1:19:7e:16:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Apr 22 18:00:00 2026 GMT Not After : Apr 21 18:05:00 2027 GMT Subject: CN=CF795BA909FFAA5E80A49C739E4ABC40B9A6E99F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:ab:1e:be:e6:10:46:8f:e1:ca:37:4b:8a:ea: 63:e0:d6:24:4a:d1:17:27:dc:2d:3c:24:a1:56:f6: ff:8c:21:95:89:3d:45:ad:8c:ad:48:f2:ca:c5:ef: ba:8e:24:30:d6:d9:60:c9:2b:a7:90:2c:b3:49:17: 6b:4e:70:d3:2a:f6:03:ef:eb:ef:38:3f:c2:02:ee: ab:75:41:7b:d0:d5:fc:75:70:f9:ed:8f:f6:18:d1: 21:68:ef:a5:f2:4b:04:f9:14:05:d6:b0:1f:68:4b: b8:db:c1:b3:d6:b8:e8:c7:1f:5c:c7:b4:49:09:b3: bc:9d:d0:bd:c2:92:02:25:9d:84:00:f2:8a:cd:ac: 52:dc:d3:c2:2e:28:58:3d:25:fc:32:0c:fb:c1:71: c7:f2:cc:7a:88:18:c3:03:fe:7a:42:75:4b:4e:59: c5:3b:5b:4a:30:b2:56:18:9c:30:34:f3:6d:58:df: 33:9f:c0:85:d4:46:78:93:a9:9e:88:1e:07:8c:5c: 71:f8:e7:af:f6:0f:45:03:65:46:04:a8:31:68:61: 83:30:a4:40:61:08:92:ef:a4:3f:a7:0f:d5:f4:68: cc:4f:3e:dc:9e:5a:11:da:61:db:e7:75:bf:69:de: cd:8d:a8:1f:5a:3d:a4:4f:ab:c2:0a:b4:e5:65:59: 64:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CF:79:5B:A9:09:FF:AA:5E:80:A4:9C:73:9E:4A:BC:40:B9:A6:E9:9F X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/CE05C6A2D3BAFFBE85F9DED1C8E035D813A7FA3B7D8C81836A3B31432F82F4D7/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/CE05C6A2D3BAFFBE85F9DED1C8E035D813A7FA3B7D8C81836A3B31432F82F4D7/0/CF795BA909FFAA5E80A49C739E4ABC40B9A6E99F.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2806:44f::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273296 Signature Algorithm: sha256WithRSAEncryption 2d:80:8c:45:af:7e:ea:8d:ff:b7:5f:39:35:9e:ea:bc:e1:55: e3:1f:a8:e9:11:44:de:e6:6e:94:73:f6:59:05:2e:a8:03:ff: 89:50:a0:a8:94:4f:75:c0:3d:27:a2:85:1c:0b:48:e5:e2:67: 28:50:9d:f5:6e:06:97:69:93:23:b5:b4:76:af:3c:f2:5c:46: 1c:ad:64:d5:f4:e1:01:c4:a0:85:d5:73:1f:c1:87:32:63:12: d3:a8:c5:c7:27:91:cd:ff:5d:51:3a:23:2f:ae:f8:e9:45:0a: b0:4f:65:a4:1b:a2:5c:46:87:7b:1a:f3:d9:83:4c:93:28:90: d5:28:81:1f:39:9b:cb:c1:53:59:98:5d:04:af:25:4b:68:67: a4:f5:1d:51:79:f7:f5:17:5a:87:bf:cd:4a:ea:3b:a5:45:a4: 7f:13:74:5a:47:d9:f6:d3:65:7c:b1:55:58:23:32:e5:ca:52: 51:10:12:1d:bb:f8:94:3d:b7:46:0f:5e:ad:30:e9:8f:ab:9d: 28:1c:d5:bb:01:e1:5b:8d:69:c2:84:9f:19:5c:9f:be:2d:86: 68:53:20:be:3c:21:93:2f:73:57:46:51:93:ec:f6:9a:9e:d9: d7:f5:66:e0:3e:63:21:1c:c7:42:1f:20:86:5d:4e:20:0e:03: b3:d5:c3:b3 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUTlydQIQLFSjrFTT2vPjV8Rl+FsowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjA0MjIxODAwMDBaFw0yNzA0MjExODA1MDBaMDMxMTAvBgNV BAMTKENGNzk1QkE5MDlGRkFBNUU4MEE0OUM3MzlFNEFCQzQwQjlBNkU5OUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCCqx6+5hBGj+HKN0uK6mPg1iRK 0Rcn3C08JKFW9v+MIZWJPUWtjK1I8srF77qOJDDW2WDJK6eQLLNJF2tOcNMq9gPv 6+84P8IC7qt1QXvQ1fx1cPntj/YY0SFo76XySwT5FAXWsB9oS7jbwbPWuOjHH1zH tEkJs7yd0L3CkgIlnYQA8orNrFLc08IuKFg9JfwyDPvBccfyzHqIGMMD/npCdUtO WcU7W0owslYYnDA0821Y3zOfwIXURniTqZ6IHgeMXHH456/2D0UDZUYEqDFoYYMw pEBhCJLvpD+nD9X0aMxPPtyeWhHaYdvndb9p3s2NqB9aPaRPq8IKtOVlWWQtAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTPeVupCf+qXoCk nHOeSrxAuabpnzAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQ0UwNUM2QTJEM0JBRkZCRTg1RjlERUQx QzhFMDM1RDgxM0E3RkEzQjdEOEM4MTgzNkEzQjMxNDMyRjgyRjRENy8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9DRTA1QzZBMkQzQkFGRkJFODVGOURFRDFDOEUwMzVEODEzQTdGQTNCN0Q4 QzgxODM2QTNCMzE0MzJGODJGNEQ3LzAvQ0Y3OTVCQTkwOUZGQUE1RTgwQTQ5Qzcz OUU0QUJDNDBCOUE2RTk5Ri5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAYETzAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEK5AwDQYJKoZIhvcNAQELBQADggEBAC2AjEWv fuqN/7dfOTWe6rzhVeMfqOkRRN7mbpRz9lkFLqgD/4lQoKiUT3XAPSeihRwLSOXi ZyhQnfVuBpdpkyO1tHavPPJcRhytZNX04QHEoIXVcx/BhzJjEtOoxccnkc3/XVE6 Iy+u+OlFCrBPZaQbolxGh3sa89mDTJMokNUogR85m8vBU1mYXQSvJUtoZ6T1HVF5 9/UXWoe/zUrqO6VFpH8TdFpH2fbTZXyxVVgjMuXKUlEQEh27+JQ9t0YPXq0w6Y+r nSgc1bsB4VuNacKEnxlcn74thmhTIL48IZMvc1dGUZPs9pqe2df1ZuA+YyEcx0If IIZdTiAOA7PVw7M= -----END CERTIFICATE-----Generated at Thu Apr 30 04:54:29 2026 by rpki-client