$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D1B4E2525D14E49BB412577A631F4880CFCC1B2E.cer File: D1B4E2525D14E49BB412577A631F4880CFCC1B2E.cer (raw, json) Hash identifier: RtPBexENzOjtSI86X6TssRp8NsDEqqeQvSce0RFqjU4= Subject key identifier: D1:B4:E2:52:5D:14:E4:9B:B4:12:57:7A:63:1F:48:80:CF:CC:1B:2E Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 36478E1A30AB035D7A5ACB48275B1204A20A63B6 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/210AF0299F7AEDAF8BFB467091F75C86BD9114FA7C8DB4B6273F78F2E6836C54/0/D1B4E2525D14E49BB412577A631F4880CFCC1B2E.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/210AF0299F7AEDAF8BFB467091F75C86BD9114FA7C8DB4B6273F78F2E6836C54/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Thu 17 Sep 2026 15:30:01 +0000 Certificate not after: Thu 16 Sep 2027 15:35:01 +0000 Subordinate resources: AS: 275022 IP: 2803:db30::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Sep 2026 08:52:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:47:8e:1a:30:ab:03:5d:7a:5a:cb:48:27:5b:12:04:a2:0a:63:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Sep 17 15:30:01 2026 GMT Not After : Sep 16 15:35:01 2027 GMT Subject: CN=D1B4E2525D14E49BB412577A631F4880CFCC1B2E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:da:ec:27:6c:2d:1e:71:af:4a:df:a2:6c:f7: 35:18:30:de:0e:22:7c:0d:e9:91:a1:25:9a:0e:df: 71:c7:f8:1f:bd:1d:29:bf:5f:fa:a5:77:c5:3d:10: 0c:fd:51:d9:99:35:32:e3:3a:c6:21:05:88:c2:25: c7:3f:83:c8:95:05:cd:c5:bc:ae:48:a7:0e:28:c9: 07:26:9a:30:99:df:40:8e:a1:b9:ab:6b:cc:9b:7e: 84:c8:6e:cc:a0:28:22:9d:bd:8b:8e:79:84:24:ea: cd:a0:da:8b:21:35:cf:55:85:a4:97:f6:09:66:40: 60:ea:17:e4:a6:75:75:80:47:4e:b5:61:9f:ef:d5: 1c:04:8a:de:52:9b:5b:d8:e0:7b:f8:01:6e:41:d9: ab:8d:52:c6:e9:95:8d:24:58:94:be:8d:80:56:cf: ea:27:66:ba:34:be:5e:eb:20:a2:ee:9a:27:48:14: f6:fe:f8:bf:9f:95:df:27:c5:40:fb:71:b3:b6:3d: 4e:99:3f:a9:0e:cf:90:c7:8e:da:f0:0e:ec:e3:73: e9:14:c5:06:69:f5:80:3a:f8:cf:db:ca:4e:d8:50: 60:64:37:9e:31:47:7b:c8:01:7a:de:c8:ca:03:ec: 9d:0a:b9:05:1e:5b:ab:15:e0:e5:9f:1e:3a:a0:d8: aa:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D1:B4:E2:52:5D:14:E4:9B:B4:12:57:7A:63:1F:48:80:CF:CC:1B:2E X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/210AF0299F7AEDAF8BFB467091F75C86BD9114FA7C8DB4B6273F78F2E6836C54/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/210AF0299F7AEDAF8BFB467091F75C86BD9114FA7C8DB4B6273F78F2E6836C54/0/D1B4E2525D14E49BB412577A631F4880CFCC1B2E.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:db30::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 275022 Signature Algorithm: sha256WithRSAEncryption 1f:ad:79:25:9d:04:17:16:a8:99:4f:41:8a:c0:b4:3b:02:65: aa:98:04:af:0f:2d:33:1d:d7:2a:05:94:43:86:79:e0:63:57: f0:70:cd:5c:f8:22:bd:d2:1a:53:fe:a4:ed:9f:d9:60:f6:0f: f2:4f:16:8f:34:8d:eb:77:f5:46:c3:1f:86:9d:4a:f3:2d:66: 06:ee:8b:68:a1:f5:a1:2c:24:29:a9:2c:45:2c:24:5c:39:f8: 09:17:4e:49:d5:49:5b:bf:5d:2f:df:26:fe:24:05:98:4b:9f: 0b:76:c4:84:8e:de:23:fc:2f:20:d7:1e:a8:0c:d5:56:1c:34: 00:a5:c6:5b:1c:1c:6d:52:f0:37:8a:96:72:48:ac:c9:a9:1b: c9:cd:e4:04:e6:9f:06:16:25:1d:c8:12:83:af:fb:46:e8:da: 1b:d8:ff:11:ab:72:cc:ee:ed:84:a4:da:52:61:4e:4a:ad:71: 69:2b:93:46:bf:99:83:17:13:24:67:36:28:87:8c:43:01:64: af:a7:29:a5:3e:68:a2:b1:08:36:3b:4a:10:d8:bc:6b:1e:54: 80:ad:08:d3:1e:cd:50:69:30:2d:43:b2:0f:26:97:4d:71:c8: 98:8e:dc:fe:7f:a5:09:ac:96:dc:7d:d8:c7:fc:e9:39:21:cf: d3:ad:b7:5c -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUNkeOGjCrA116WstIJ1sSBKIKY7YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjA5MTcxNTMwMDFaFw0yNzA5MTYxNTM1MDFaMDMxMTAvBgNV BAMTKEQxQjRFMjUyNUQxNEU0OUJCNDEyNTc3QTYzMUY0ODgwQ0ZDQzFCMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC52uwnbC0eca9K36Js9zUYMN4O InwN6ZGhJZoO33HH+B+9HSm/X/qld8U9EAz9UdmZNTLjOsYhBYjCJcc/g8iVBc3F vK5Ipw4oyQcmmjCZ30COobmra8ybfoTIbsygKCKdvYuOeYQk6s2g2oshNc9VhaSX 9glmQGDqF+SmdXWAR061YZ/v1RwEit5Sm1vY4Hv4AW5B2auNUsbplY0kWJS+jYBW z+onZro0vl7rIKLumidIFPb++L+fld8nxUD7cbO2PU6ZP6kOz5DHjtrwDuzjc+kU xQZp9YA6+M/byk7YUGBkN54xR3vIAXreyMoD7J0KuQUeW6sV4OWfHjqg2Kq/AgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTRtOJSXRTkm7QS V3pjH0iAz8wbLjAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMjEwQUYwMjk5RjdBRURBRjhCRkI0Njcw OTFGNzVDODZCRDkxMTRGQTdDOERCNEI2MjczRjc4RjJFNjgzNkM1NC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8yMTBBRjAyOTlGN0FFREFGOEJGQjQ2NzA5MUY3NUM4NkJEOTExNEZBN0M4 REI0QjYyNzNGNzhGMkU2ODM2QzU0LzAvRDFCNEUyNTI1RDE0RTQ5QkI0MTI1NzdB NjMxRjQ4ODBDRkNDMUIyRS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAPbMDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEMk4wDQYJKoZIhvcNAQELBQADggEBAB+teSWd BBcWqJlPQYrAtDsCZaqYBK8PLTMd1yoFlEOGeeBjV/BwzVz4Ir3SGlP+pO2f2WD2 D/JPFo80jet39UbDH4adSvMtZgbui2ih9aEsJCmpLEUsJFw5+AkXTknVSVu/XS/f Jv4kBZhLnwt2xISO3iP8LyDXHqgM1VYcNAClxlscHG1S8DeKlnJIrMmpG8nN5ATm nwYWJR3IEoOv+0bo2hvY/xGrcszu7YSk2lJhTkqtcWkrk0a/mYMXEyRnNiiHjEMB ZK+nKaU+aKKxCDY7ShDYvGseVICtCNMezVBpMC1Dsg8ml01xyJiO3P5/pQmsltx9 2Mf86Tkhz9Ott1w= -----END CERTIFICATE-----Generated at Fri Sep 18 18:54:33 2026 by rpki-client