$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E64A847F14F2062EFFE646F0620A3C39EAC5FD6A.cer File: E64A847F14F2062EFFE646F0620A3C39EAC5FD6A.cer (raw, json) Hash identifier: YfC+eaVuoBLGiDaVn64d6VWe0dXi8us5oOb1IkgGTso= Subject key identifier: E6:4A:84:7F:14:F2:06:2E:FF:E6:46:F0:62:0A:3C:39:EA:C5:FD:6A Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 209F2D0BCB1F5CF4D65131F4D0539660F5CF7F27 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/6C36CA4C2EE199F92BB067D7A7CAC2F918C2A594367D65F7D0FE3969099E77F2/0/E64A847F14F2062EFFE646F0620A3C39EAC5FD6A.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/6C36CA4C2EE199F92BB067D7A7CAC2F918C2A594367D65F7D0FE3969099E77F2/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Thu 13 Aug 2026 22:20:01 +0000 Certificate not after: Thu 12 Aug 2027 22:25:01 +0000 Subordinate resources: AS: 26595 IP: 200.34.48.0/21 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Sep 2026 08:52:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:9f:2d:0b:cb:1f:5c:f4:d6:51:31:f4:d0:53:96:60:f5:cf:7f:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Aug 13 22:20:01 2026 GMT Not After : Aug 12 22:25:01 2027 GMT Subject: CN=E64A847F14F2062EFFE646F0620A3C39EAC5FD6A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:e9:7e:60:9a:62:b0:24:5a:4a:92:67:df:e5: 55:af:94:ab:c7:b3:24:40:89:e7:ea:99:1b:78:69: 7c:36:89:88:bb:9a:52:78:7c:42:cd:ae:19:32:ab: 3d:b9:7b:c7:e1:1c:fe:f5:67:83:b9:9b:bf:9e:6b: 0f:fd:50:0b:31:28:31:c6:5a:e3:ec:05:17:5a:6d: 07:a3:bb:f4:84:d3:03:95:ac:e7:8b:ae:ac:bd:0b: 36:02:53:fc:02:b9:51:7c:49:e9:52:23:2e:bf:92: a5:36:c8:04:e4:fb:df:59:e8:1e:5d:2e:d3:d3:83: 77:f5:7b:5a:97:f8:2e:0f:98:67:30:70:50:8b:d4: 3a:61:12:18:3b:a3:76:f5:a1:db:1e:7b:f4:ff:98: f2:bb:0d:e7:96:2f:f5:55:3c:35:54:40:a9:9f:6a: ef:66:97:a3:5f:8e:13:0a:ca:b5:b0:12:54:0c:4f: f8:7b:51:09:7b:da:66:29:0d:dc:09:63:93:d3:5d: f0:4a:8c:55:60:6f:ea:6a:f2:65:58:ea:9c:5f:d8: 15:29:be:75:d1:d9:4b:70:70:ac:5c:d5:f4:23:64: 95:7e:fd:c0:84:aa:3b:36:14:f9:de:e1:94:e6:00: ff:00:8e:29:29:fa:d3:7e:00:30:65:da:48:4b:dd: 6e:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E6:4A:84:7F:14:F2:06:2E:FF:E6:46:F0:62:0A:3C:39:EA:C5:FD:6A X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6C36CA4C2EE199F92BB067D7A7CAC2F918C2A594367D65F7D0FE3969099E77F2/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6C36CA4C2EE199F92BB067D7A7CAC2F918C2A594367D65F7D0FE3969099E77F2/0/E64A847F14F2062EFFE646F0620A3C39EAC5FD6A.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.34.48.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 26595 Signature Algorithm: sha256WithRSAEncryption 14:36:6b:07:24:ae:0c:37:1e:4e:3e:fa:4e:73:ba:52:ad:b9: 75:8a:35:58:e5:e5:85:61:c5:bd:be:6b:80:4d:75:bc:c3:a3: 14:fd:96:93:21:92:79:f9:29:58:05:41:32:4f:16:6e:a5:bb: 8f:d9:d1:52:39:d9:f9:0c:5e:1a:17:f6:9b:42:af:58:5f:0a: 78:df:0a:5e:80:0c:6b:ad:44:d8:52:7f:6d:b9:c4:ad:5c:80: 06:1c:ae:79:81:8a:d3:6e:57:3b:c0:7c:76:41:00:a1:68:6b: dd:ec:42:ce:f5:f7:f4:0f:d7:ee:aa:aa:f5:ab:c2:e2:32:bd: 74:b2:98:14:4a:4f:60:2f:9d:cb:8a:38:46:1f:24:87:ee:c5: df:95:92:80:a6:80:07:09:0d:c9:3d:c1:4b:42:3c:50:1d:ed: 88:7f:f6:a9:6b:8b:2f:fa:e0:b8:3a:2d:8e:90:26:3e:71:4c: 34:58:f9:c2:e5:e8:5f:5f:54:aa:9b:d7:c5:ad:cc:b2:8f:dc: ac:d8:e0:46:82:8d:3d:32:4a:03:ac:f9:a4:11:3b:be:9a:d0: 85:67:c9:21:4e:e6:19:c5:99:89:a7:77:92:04:0b:2d:7c:f1: 02:f0:7a:3d:68:e0:7e:be:5a:00:02:b9:c9:0d:01:6c:cc:79: 4e:4f:e7:0e -----BEGIN CERTIFICATE----- MIIGlTCCBX2gAwIBAgIUIJ8tC8sfXPTWUTH00FOWYPXPfycwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjA4MTMyMjIwMDFaFw0yNzA4MTIyMjI1MDFaMDMxMTAvBgNV BAMTKEU2NEE4NDdGMTRGMjA2MkVGRkU2NDZGMDYyMEEzQzM5RUFDNUZENkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDt6X5gmmKwJFpKkmff5VWvlKvH syRAiefqmRt4aXw2iYi7mlJ4fELNrhkyqz25e8fhHP71Z4O5m7+eaw/9UAsxKDHG WuPsBRdabQeju/SE0wOVrOeLrqy9CzYCU/wCuVF8SelSIy6/kqU2yATk+99Z6B5d LtPTg3f1e1qX+C4PmGcwcFCL1DphEhg7o3b1odsee/T/mPK7DeeWL/VVPDVUQKmf au9ml6NfjhMKyrWwElQMT/h7UQl72mYpDdwJY5PTXfBKjFVgb+pq8mVY6pxf2BUp vnXR2UtwcKxc1fQjZJV+/cCEqjs2FPne4ZTmAP8Ajikp+tN+ADBl2khL3W51AgMB AAGjggOfMIIDmzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTmSoR/FPIGLv/m RvBiCjw56sX9ajAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNkMzNkNBNEMyRUUxOTlGOTJCQjA2N0Q3 QTdDQUMyRjkxOEMyQTU5NDM2N0Q2NUY3RDBGRTM5NjkwOTlFNzdGMi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy82QzM2Q0E0QzJFRTE5OUY5MkJCMDY3RDdBN0NBQzJGOTE4QzJBNTk0MzY3 RDY1RjdEMEZFMzk2OTA5OUU3N0YyLzAvRTY0QTg0N0YxNEYyMDYyRUZGRTY0NkYw NjIwQTNDMzlFQUM1RkQ2QS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDyCIwMBkGCCsG AQUFBwEIAQH/BAowCKAGMAQCAmfjMA0GCSqGSIb3DQEBCwUAA4IBAQAUNmsHJK4M Nx5OPvpOc7pSrbl1ijVY5eWFYcW9vmuATXW8w6MU/ZaTIZJ5+SlYBUEyTxZupbuP 2dFSOdn5DF4aF/abQq9YXwp43wpegAxrrUTYUn9tucStXIAGHK55gYrTblc7wHx2 QQChaGvd7ELO9ff0D9fuqqr1q8LiMr10spgUSk9gL53LijhGHySH7sXflZKApoAH CQ3JPcFLQjxQHe2If/apa4sv+uC4Oi2OkCY+cUw0WPnC5ehfX1Sqm9fFrcyyj9ys 2OBGgo09MkoDrPmkETu+mtCFZ8khTuYZxZmJp3eSBAstfPEC8Ho9aOB+vloAArnJ DQFszHlOT+cO -----END CERTIFICATE-----Generated at Fri Sep 18 18:04:50 2026 by rpki-client