$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D5CDD100D1AC8CA901ECCD34EBAF27704742F6DC.cer File: D5CDD100D1AC8CA901ECCD34EBAF27704742F6DC.cer (raw, json) Hash identifier: KlQKf4seKMDBMCJNZIb46s5pFoMLqUDNCvPinLf/hys= Subject key identifier: D5:CD:D1:00:D1:AC:8C:A9:01:EC:CD:34:EB:AF:27:70:47:42:F6:DC Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 5041C22352CCE029E798F99F9DFFC04BC6F74536 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/EC2A483B52B0D458EB30915BE3B7E09DA04509BF1CB7ABA1CA403F287B1D3C9A/0/D5CDD100D1AC8CA901ECCD34EBAF27704742F6DC.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/EC2A483B52B0D458EB30915BE3B7E09DA04509BF1CB7ABA1CA403F287B1D3C9A/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Thu 17 Sep 2026 13:45:01 +0000 Certificate not after: Thu 16 Sep 2027 13:50:01 +0000 Subordinate resources: AS: 263249 IP: 191.102.32.0/22 IP: 2803:ca80::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Sep 2026 08:52:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:41:c2:23:52:cc:e0:29:e7:98:f9:9f:9d:ff:c0:4b:c6:f7:45:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Sep 17 13:45:01 2026 GMT Not After : Sep 16 13:50:01 2027 GMT Subject: CN=D5CDD100D1AC8CA901ECCD34EBAF27704742F6DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:5c:df:eb:dd:c6:cc:ed:7b:30:08:5c:ab:e4: 56:61:69:4c:3e:c2:dd:5a:2e:04:4e:7b:25:02:ef: e9:d9:8d:5f:b3:53:95:15:4a:28:49:37:d1:27:4f: 72:85:ea:a0:b8:da:dd:25:33:5c:41:78:33:fa:3c: 81:a2:9d:b1:17:ed:6d:db:db:cb:e7:7d:42:d5:4c: ff:39:6d:a9:2a:8d:f1:a9:54:82:01:fe:e9:e4:d5: a7:f6:71:80:59:ce:c5:ef:e2:65:5e:48:67:78:09: ca:cb:da:3e:d4:f7:df:6a:67:8c:18:29:16:0e:01: 7f:51:41:ac:63:33:96:d6:20:a8:95:69:0b:41:fd: 99:4a:4a:90:ae:1a:f6:00:e6:e0:43:5c:9e:49:33: 6f:a9:9d:33:60:8f:96:ca:6f:98:98:92:32:82:0a: 08:cf:ec:01:7a:72:67:28:3d:8b:c1:2e:e5:4d:41: 50:f9:70:cf:85:43:ca:fb:60:a6:c7:1d:f4:af:e2: e0:d2:24:51:a0:65:ba:1a:5a:ef:75:31:24:73:aa: 5a:62:ba:fe:d6:02:d6:6b:0c:3d:e5:44:db:94:6f: 8e:df:aa:cd:25:e5:68:8e:cd:70:38:31:cd:43:e0: 53:c0:96:48:de:09:73:17:f7:fd:f0:83:c5:45:36: fd:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D5:CD:D1:00:D1:AC:8C:A9:01:EC:CD:34:EB:AF:27:70:47:42:F6:DC X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/EC2A483B52B0D458EB30915BE3B7E09DA04509BF1CB7ABA1CA403F287B1D3C9A/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/EC2A483B52B0D458EB30915BE3B7E09DA04509BF1CB7ABA1CA403F287B1D3C9A/0/D5CDD100D1AC8CA901ECCD34EBAF27704742F6DC.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 191.102.32.0/22 IPv6: 2803:ca80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263249 Signature Algorithm: sha256WithRSAEncryption 4c:c7:08:53:07:a0:25:17:3e:26:fa:ee:ae:9d:c2:3a:4f:4c: 88:0e:6d:a6:63:c1:5e:10:76:a2:64:bd:8f:b3:d9:57:40:50: e4:e9:b7:86:26:55:0c:8f:d2:fe:80:73:b0:97:5c:c9:05:5e: 68:3d:00:ad:ef:d0:cb:1a:1c:6a:21:c3:b4:08:4b:97:fa:fa: 47:5f:90:9b:2f:78:24:eb:bf:aa:aa:26:0b:00:b5:4b:dc:87: b8:ed:f1:d7:3a:5e:43:c6:db:53:45:7e:52:c2:0c:84:78:64: fb:33:c5:6f:e3:33:1d:3a:0f:38:43:21:90:bd:a2:d0:5b:dc: df:35:4f:2f:f3:a8:e1:4f:bc:24:8b:1d:db:b8:25:f7:4f:0d: 17:a8:67:7c:9b:56:3d:ce:e5:e6:a2:2b:2d:21:7b:9e:16:3b: 4d:c7:48:72:21:27:99:21:67:f0:17:c5:8b:c8:02:b3:11:b1: 7d:10:3b:23:6b:f8:dd:ed:25:9e:8c:e5:eb:17:be:ad:ff:62: 0e:f0:10:49:81:68:59:f9:5a:7a:84:ec:35:04:49:9b:92:40: 19:fc:89:07:b1:c0:07:13:43:f0:fa:02:9d:44:7f:03:05:bb: 41:43:33:33:26:92:c7:6f:8f:97:a0:e6:d7:02:1f:76:d8:5b: 94:ea:dc:6f -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUUEHCI1LM4CnnmPmfnf/AS8b3RTYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjA5MTcxMzQ1MDFaFw0yNzA5MTYxMzUwMDFaMDMxMTAvBgNV BAMTKEQ1Q0REMTAwRDFBQzhDQTkwMUVDQ0QzNEVCQUYyNzcwNDc0MkY2REMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpXN/r3cbM7XswCFyr5FZhaUw+ wt1aLgROeyUC7+nZjV+zU5UVSihJN9EnT3KF6qC42t0lM1xBeDP6PIGinbEX7W3b 28vnfULVTP85bakqjfGpVIIB/unk1af2cYBZzsXv4mVeSGd4CcrL2j7U999qZ4wY KRYOAX9RQaxjM5bWIKiVaQtB/ZlKSpCuGvYA5uBDXJ5JM2+pnTNgj5bKb5iYkjKC CgjP7AF6cmcoPYvBLuVNQVD5cM+FQ8r7YKbHHfSv4uDSJFGgZboaWu91MSRzqlpi uv7WAtZrDD3lRNuUb47fqs0l5WiOzXA4Mc1D4FPAlkjeCXMX9/3wg8VFNv05AgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTVzdEA0ayMqQHs zTTrrydwR0L23DAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRUMyQTQ4M0I1MkIwRDQ1OEVCMzA5MTVC RTNCN0UwOURBMDQ1MDlCRjFDQjdBQkExQ0E0MDNGMjg3QjFEM0M5QS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9FQzJBNDgzQjUyQjBENDU4RUIzMDkxNUJFM0I3RTA5REEwNDUwOUJGMUNC N0FCQTFDQTQwM0YyODdCMUQzQzlBLzAvRDVDREQxMDBEMUFDOENBOTAxRUNDRDM0 RUJBRjI3NzA0NzQyRjZEQy5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCv2YgMA0EAgAC MAcDBQAoA8qAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQEUTANBgkqhkiG9w0B AQsFAAOCAQEATMcIUwegJRc+Jvrurp3COk9MiA5tpmPBXhB2omS9j7PZV0BQ5Om3 hiZVDI/S/oBzsJdcyQVeaD0Are/QyxocaiHDtAhLl/r6R1+Qmy94JOu/qqomCwC1 S9yHuO3x1zpeQ8bbU0V+UsIMhHhk+zPFb+MzHToPOEMhkL2i0Fvc3zVPL/Oo4U+8 JIsd27gl908NF6hnfJtWPc7l5qIrLSF7nhY7TcdIciEnmSFn8BfFi8gCsxGxfRA7 I2v43e0lnozl6xe+rf9iDvAQSYFoWflaeoTsNQRJm5JAGfyJB7HABxND8PoCnUR/ AwW7QUMzMyaSx2+Pl6Dm1wIfdthblOrcbw== -----END CERTIFICATE-----Generated at Fri Sep 18 18:04:23 2026 by rpki-client