$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F949BC02AE1544B7E1ED42D3BEB518F6F4785187.cer File: F949BC02AE1544B7E1ED42D3BEB518F6F4785187.cer (raw, json) Hash identifier: qCGIZ8I33I8IKFrgQqs4OW0L3xNaEsJ6UlZHy/Op1UU= Subject key identifier: F9:49:BC:02:AE:15:44:B7:E1:ED:42:D3:BE:B5:18:F6:F4:78:51:87 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 4DB53E82E4C825855776AD4168193A587B92EC4A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/08288645B23F04DFDBC0BEB93739FDD5F2159D9F4A801EAA45E349313F1CF486/0/F949BC02AE1544B7E1ED42D3BEB518F6F4785187.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/08288645B23F04DFDBC0BEB93739FDD5F2159D9F4A801EAA45E349313F1CF486/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 16 Sep 2026 17:15:01 +0000 Certificate not after: Wed 15 Sep 2027 17:20:01 +0000 Subordinate resources: AS: 275046 IP: 2803:f30::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Sep 2026 08:52:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:b5:3e:82:e4:c8:25:85:57:76:ad:41:68:19:3a:58:7b:92:ec:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Sep 16 17:15:01 2026 GMT Not After : Sep 15 17:20:01 2027 GMT Subject: CN=F949BC02AE1544B7E1ED42D3BEB518F6F4785187 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:72:fe:14:f8:ee:b7:1c:f2:86:d9:52:38:06: 8d:ee:01:b0:63:e5:07:f2:71:5f:1f:14:4b:0a:ec: b5:4d:c0:01:68:01:29:61:61:a4:42:d8:96:14:33: 12:52:b1:45:b8:8d:94:48:bb:4c:e5:06:87:5e:d9: b2:8d:a4:db:cc:ab:51:ef:d4:4d:3b:51:8c:ab:8b: dd:3b:22:57:c1:b6:89:01:39:88:17:32:fd:5f:d1: d7:e7:a7:9b:d7:46:13:d5:bb:96:b4:f2:2b:cd:c7: 67:20:25:6f:84:23:da:2d:c5:93:a8:52:ad:16:0c: bc:94:c0:c5:9e:7b:32:0e:0a:63:67:90:09:8f:03: 03:b8:a7:05:26:1f:9b:07:00:c0:7e:27:51:d4:e9: 34:9a:eb:a1:68:d9:4c:17:6d:fd:91:23:4b:10:00: 69:46:b8:9c:bd:53:63:b3:cb:ae:05:a7:b5:3b:54: 06:ec:13:37:c7:57:44:67:22:f0:94:32:ab:5c:c2: 20:a0:91:94:47:a9:88:12:c3:0d:2f:71:a9:df:95: 15:82:16:86:f0:b6:76:74:ed:4c:1d:2e:b2:f5:26: 8b:72:3c:3f:0e:03:5b:b1:47:a7:66:b3:08:8e:ef: fd:67:10:78:d2:23:83:02:71:e3:61:c6:77:0b:8b: cc:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F9:49:BC:02:AE:15:44:B7:E1:ED:42:D3:BE:B5:18:F6:F4:78:51:87 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/08288645B23F04DFDBC0BEB93739FDD5F2159D9F4A801EAA45E349313F1CF486/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/08288645B23F04DFDBC0BEB93739FDD5F2159D9F4A801EAA45E349313F1CF486/0/F949BC02AE1544B7E1ED42D3BEB518F6F4785187.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:f30::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 275046 Signature Algorithm: sha256WithRSAEncryption 0a:c4:44:64:e0:bf:ab:61:15:17:58:f8:5b:7e:9e:d8:d1:0f: 82:a1:2c:ec:66:ac:fc:06:08:65:49:d9:f8:51:2a:57:60:de: 0d:07:ff:d3:6f:ec:a3:eb:67:69:7b:b8:d2:1d:a6:2f:e9:d3: db:be:4a:62:81:ce:13:90:6c:0c:d2:77:92:1f:d9:87:8c:dd: dc:00:6b:02:c3:af:d5:4a:e7:24:45:97:04:06:c3:fe:44:4c: 95:14:f4:79:b1:62:e0:f9:cc:06:f7:1c:ea:be:b4:64:fc:0a: ea:3c:43:dc:ec:39:30:ff:ac:5f:6a:75:a1:12:73:d5:5d:01: b9:20:d3:b8:64:61:37:e9:ae:4b:78:e1:72:d2:23:e8:fa:27: 76:f1:27:70:62:0d:b0:d7:1f:ee:a1:49:af:05:ce:71:be:78: 6d:25:f4:d9:51:4b:a6:22:51:57:40:db:91:5e:2e:9b:e5:d6: 96:0e:27:fb:7b:77:e9:b8:ee:f9:f2:ae:22:24:be:24:03:63: fc:30:ad:9e:a0:fa:1b:c7:fe:a8:4b:74:be:3c:9a:10:49:b1: 94:c0:cd:d4:c0:d9:70:7e:a6:1b:bb:c4:87:cb:70:7b:22:18: e5:2c:68:15:9d:21:e1:f7:77:9c:43:2a:6b:2b:d5:12:a8:ed: ec:b3:de:7b -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUTbU+guTIJYVXdq1BaBk6WHuS7EowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjA5MTYxNzE1MDFaFw0yNzA5MTUxNzIwMDFaMDMxMTAvBgNV BAMTKEY5NDlCQzAyQUUxNTQ0QjdFMUVENDJEM0JFQjUxOEY2RjQ3ODUxODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCocv4U+O63HPKG2VI4Bo3uAbBj 5QfycV8fFEsK7LVNwAFoASlhYaRC2JYUMxJSsUW4jZRIu0zlBode2bKNpNvMq1Hv 1E07UYyri907IlfBtokBOYgXMv1f0dfnp5vXRhPVu5a08ivNx2cgJW+EI9otxZOo Uq0WDLyUwMWeezIOCmNnkAmPAwO4pwUmH5sHAMB+J1HU6TSa66Fo2UwXbf2RI0sQ AGlGuJy9U2Ozy64Fp7U7VAbsEzfHV0RnIvCUMqtcwiCgkZRHqYgSww0vcanflRWC FobwtnZ07UwdLrL1JotyPD8OA1uxR6dmswiO7/1nEHjSI4MCceNhxncLi8xZAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT5SbwCrhVEt+Ht QtO+tRj29HhRhzAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMDgyODg2NDVCMjNGMDRERkRCQzBCRUI5 MzczOUZERDVGMjE1OUQ5RjRBODAxRUFBNDVFMzQ5MzEzRjFDRjQ4Ni8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8wODI4ODY0NUIyM0YwNERGREJDMEJFQjkzNzM5RkRENUYyMTU5RDlGNEE4 MDFFQUE0NUUzNDkzMTNGMUNGNDg2LzAvRjk0OUJDMDJBRTE1NDRCN0UxRUQ0MkQz QkVCNTE4RjZGNDc4NTE4Ny5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAMPMDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEMmYwDQYJKoZIhvcNAQELBQADggEBAArERGTg v6thFRdY+Ft+ntjRD4KhLOxmrPwGCGVJ2fhRKldg3g0H/9Nv7KPrZ2l7uNIdpi/p 09u+SmKBzhOQbAzSd5If2YeM3dwAawLDr9VK5yRFlwQGw/5ETJUU9HmxYuD5zAb3 HOq+tGT8Cuo8Q9zsOTD/rF9qdaESc9VdAbkg07hkYTfprkt44XLSI+j6J3bxJ3Bi DbDXH+6hSa8FznG+eG0l9NlRS6YiUVdA25FeLpvl1pYOJ/t7d+m47vnyriIkviQD Y/wwrZ6g+hvH/qhLdL48mhBJsZTAzdTA2XB+phu7xIfLcHsiGOUsaBWdIeH3d5xD Kmsr1RKo7eyz3ns= -----END CERTIFICATE-----Generated at Fri Sep 18 18:05:12 2026 by rpki-client