$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DE3FD4EE1D382F5595A8D23DD009C7EA0BD2079D.cer File: DE3FD4EE1D382F5595A8D23DD009C7EA0BD2079D.cer (raw, json) Hash identifier: W2E4OJOGJlseLpP2LTEWH7k3FdeekfTYjP1jfWDOB3Q= Subject key identifier: DE:3F:D4:EE:1D:38:2F:55:95:A8:D2:3D:D0:09:C7:EA:0B:D2:07:9D Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 32C4C847D06AB19FE1A39835A59FF14E6D87262C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/D91B71709B17B6CBD527167F582F81E0B72E4FC233330A7EEEEAED4936E955F4/0/DE3FD4EE1D382F5595A8D23DD009C7EA0BD2079D.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/D91B71709B17B6CBD527167F582F81E0B72E4FC233330A7EEEEAED4936E955F4/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Thu 13 Aug 2026 19:45:01 +0000 Certificate not after: Thu 12 Aug 2027 19:50:01 +0000 Subordinate resources: AS: 274068 IP: 2803:cad0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 15 Sep 2026 10:15:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:c4:c8:47:d0:6a:b1:9f:e1:a3:98:35:a5:9f:f1:4e:6d:87:26:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Aug 13 19:45:01 2026 GMT Not After : Aug 12 19:50:01 2027 GMT Subject: CN=DE3FD4EE1D382F5595A8D23DD009C7EA0BD2079D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:df:25:e2:e7:b3:94:af:99:52:34:b8:87:88: 61:21:cd:2b:46:96:51:3b:1d:bf:6a:5f:e7:94:18: 65:e0:33:f6:c8:df:75:9f:f0:a6:77:17:55:71:34: d9:5c:e4:27:2c:7b:3b:48:89:2d:c4:56:bb:22:bd: 0e:d1:85:84:8a:1f:03:5d:a5:95:68:04:76:b8:71: 12:03:c9:ef:ef:94:7b:6b:f9:80:f8:3e:ef:fa:1e: 38:cb:59:5a:75:35:23:d2:e5:0c:bc:2f:b0:97:e4: c9:7c:ca:96:9b:5d:98:fb:2f:61:6c:1a:c7:29:9c: 7d:90:95:d2:e4:97:b8:5a:a0:32:3b:5a:69:c0:39: f7:be:3e:ea:6e:2e:26:0a:1e:27:63:5c:87:ed:67: 0d:6a:cc:70:08:eb:60:3e:d6:50:4b:37:62:73:44: 4a:22:83:7e:d5:6f:2b:60:da:2c:b9:2f:07:58:a7: 21:62:ed:e2:00:10:1f:83:29:5b:7a:86:12:a3:93: a5:4f:3f:41:63:3a:af:ae:60:7f:a4:7f:d2:12:80: 5c:2b:4c:53:d7:2a:7f:11:a9:0e:fe:ad:63:99:79: a4:45:55:30:57:29:b0:e7:3e:90:8e:bd:b5:ac:5c: e6:58:7a:5b:fb:f8:fe:7f:0c:b5:38:d8:37:1e:40: ab:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DE:3F:D4:EE:1D:38:2F:55:95:A8:D2:3D:D0:09:C7:EA:0B:D2:07:9D X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/D91B71709B17B6CBD527167F582F81E0B72E4FC233330A7EEEEAED4936E955F4/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/D91B71709B17B6CBD527167F582F81E0B72E4FC233330A7EEEEAED4936E955F4/0/DE3FD4EE1D382F5595A8D23DD009C7EA0BD2079D.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:cad0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 274068 Signature Algorithm: sha256WithRSAEncryption 85:c2:30:4d:54:db:5a:68:ca:09:5d:9f:58:cc:02:a5:c9:aa: a8:ba:e3:fa:af:0d:93:d5:00:d7:65:1d:24:cd:8a:c7:b5:52: 74:30:b5:3b:80:12:55:33:65:a1:8b:77:7a:65:e6:6d:e3:57: 2e:3f:dd:93:1d:1b:b7:5d:b6:cd:7c:15:63:bf:d2:17:36:27: 2b:0f:2b:fd:10:74:eb:7b:62:40:98:8b:1c:3b:7f:c9:40:98: 87:9d:1e:9c:7e:ae:84:d0:09:a5:4b:75:7d:d0:db:d4:1d:af: 38:1f:7e:af:0d:38:b6:31:22:93:dc:be:c2:38:4c:d2:19:82: 60:9f:88:ab:c0:92:2f:fb:9b:d7:86:17:e3:9f:ab:3d:80:f1: 5f:a3:02:46:0f:d5:fa:4e:d4:8e:67:45:e8:98:ee:15:13:a2: 6f:8a:ee:20:d5:f3:de:00:38:0f:f0:f5:59:a6:ed:ee:38:cf: e3:8d:87:9f:57:a9:ab:98:02:fe:48:31:1e:49:e5:3e:c2:35: 1a:2e:fc:d7:45:e9:bf:a6:2e:92:25:76:ca:d0:ad:9c:15:36: 6a:99:3a:e2:82:70:3e:10:d7:db:83:59:3c:da:7e:25:e1:b7: 09:d0:49:6e:ab:60:4d:33:09:41:9b:62:20:45:77:06:85:eb: 57:6a:7e:2d -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUMsTIR9BqsZ/ho5g1pZ/xTm2HJiwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjA4MTMxOTQ1MDFaFw0yNzA4MTIxOTUwMDFaMDMxMTAvBgNV BAMTKERFM0ZENEVFMUQzODJGNTU5NUE4RDIzREQwMDlDN0VBMEJEMjA3OUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDk3yXi57OUr5lSNLiHiGEhzStG llE7Hb9qX+eUGGXgM/bI33Wf8KZ3F1VxNNlc5CcseztIiS3EVrsivQ7RhYSKHwNd pZVoBHa4cRIDye/vlHtr+YD4Pu/6HjjLWVp1NSPS5Qy8L7CX5Ml8ypabXZj7L2Fs GscpnH2QldLkl7haoDI7WmnAOfe+PupuLiYKHidjXIftZw1qzHAI62A+1lBLN2Jz REoig37Vbytg2iy5LwdYpyFi7eIAEB+DKVt6hhKjk6VPP0FjOq+uYH+kf9ISgFwr TFPXKn8RqQ7+rWOZeaRFVTBXKbDnPpCOvbWsXOZYelv7+P5/DLU42DceQKufAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTeP9TuHTgvVZWo 0j3QCcfqC9IHnTAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRDkxQjcxNzA5QjE3QjZDQkQ1MjcxNjdG NTgyRjgxRTBCNzJFNEZDMjMzMzMwQTdFRUVFQUVENDkzNkU5NTVGNC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9EOTFCNzE3MDlCMTdCNkNCRDUyNzE2N0Y1ODJGODFFMEI3MkU0RkMyMzMz MzBBN0VFRUVBRUQ0OTM2RTk1NUY0LzAvREUzRkQ0RUUxRDM4MkY1NTk1QThEMjNE RDAwOUM3RUEwQkQyMDc5RC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAPK0DAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMELpQwDQYJKoZIhvcNAQELBQADggEBAIXCME1U 21poygldn1jMAqXJqqi64/qvDZPVANdlHSTNise1UnQwtTuAElUzZaGLd3pl5m3j Vy4/3ZMdG7ddts18FWO/0hc2JysPK/0QdOt7YkCYixw7f8lAmIedHpx+roTQCaVL dX3Q29Qdrzgffq8NOLYxIpPcvsI4TNIZgmCfiKvAki/7m9eGF+Ofqz2A8V+jAkYP 1fpO1I5nReiY7hUTom+K7iDV894AOA/w9Vmm7e44z+ONh59XqauYAv5IMR5J5T7C NRou/NdF6b+mLpIldsrQrZwVNmqZOuKCcD4Q19uDWTzafiXhtwnQSW6rYE0zCUGb YiBFdwaF61dqfi0= -----END CERTIFICATE-----Generated at Fri Sep 11 15:40:35 2026 by rpki-client