$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF9B7E84E1B01E99BA7E27C6865947CAD9933BA1.cer File: FF9B7E84E1B01E99BA7E27C6865947CAD9933BA1.cer (raw, json) Hash identifier: hiVRGy8N/ibyXC4MDWCL/1om/bbxENjqbOT0nJjhBUQ= Subject key identifier: FF:9B:7E:84:E1:B0:1E:99:BA:7E:27:C6:86:59:47:CA:D9:93:3B:A1 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 34742C102DAF4CA2FBA8A48FA14B22BDD0A0AB88 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/F83E18265E9659CF02DED6635CDD846AA73278628C6894EB10B9BE95842CD122/0/FF9B7E84E1B01E99BA7E27C6865947CAD9933BA1.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/F83E18265E9659CF02DED6635CDD846AA73278628C6894EB10B9BE95842CD122/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Aug 2026 14:05:01 +0000 Certificate not after: Wed 04 Aug 2027 14:10:01 +0000 Subordinate resources: AS: 265802 IP: 181.191.156.0/22 IP: 2803:4820::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Sep 2026 08:52:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:74:2c:10:2d:af:4c:a2:fb:a8:a4:8f:a1:4b:22:bd:d0:a0:ab:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Aug 5 14:05:01 2026 GMT Not After : Aug 4 14:10:01 2027 GMT Subject: CN=FF9B7E84E1B01E99BA7E27C6865947CAD9933BA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:6b:04:eb:13:8f:21:17:7b:03:d8:d2:32:1a: 64:c7:17:cf:1a:81:39:e0:55:69:32:f3:c2:4b:2f: c2:0d:a8:99:51:5b:cd:73:6b:ac:52:95:2e:b3:2e: eb:8e:93:54:74:44:0d:80:a0:dc:2a:ce:3b:29:bc: 64:1e:55:8c:2d:78:38:2d:2f:30:55:36:25:33:d0: 8a:9e:92:bb:34:b1:e6:00:a9:91:47:c6:ed:7e:7b: 3b:a5:9d:bc:b4:19:80:20:cd:fc:a4:e2:11:4c:59: 4c:f4:aa:72:24:13:99:33:18:ed:13:e3:86:aa:22: 87:f7:1d:16:a0:eb:1e:06:e3:00:ba:d6:24:7c:f8: 40:c0:a1:04:e7:38:6c:c3:af:0f:ee:74:d1:d8:82: 5a:63:04:35:21:37:ce:6f:57:ab:b3:c8:12:e6:6e: e4:68:ac:d7:af:23:80:27:4c:ed:54:68:05:ad:a9: dd:e9:54:38:48:b7:92:a8:83:9d:f0:ea:43:7a:b5: 25:7d:52:26:49:20:a2:35:6f:40:8c:69:f6:74:86: 7c:7f:9e:46:05:ab:6b:9b:58:fb:e0:df:6b:6f:b8: 1c:6b:34:27:47:1d:c6:0b:e5:6a:d9:df:71:f7:a6: 65:f7:bf:cb:49:ae:70:24:a3:52:7e:6a:b0:e5:43: 17:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FF:9B:7E:84:E1:B0:1E:99:BA:7E:27:C6:86:59:47:CA:D9:93:3B:A1 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/F83E18265E9659CF02DED6635CDD846AA73278628C6894EB10B9BE95842CD122/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/F83E18265E9659CF02DED6635CDD846AA73278628C6894EB10B9BE95842CD122/0/FF9B7E84E1B01E99BA7E27C6865947CAD9933BA1.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 181.191.156.0/22 IPv6: 2803:4820::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265802 Signature Algorithm: sha256WithRSAEncryption 02:e5:b2:86:fb:09:b7:19:65:d0:76:68:1b:c0:30:b1:65:33: d3:56:9d:d4:12:74:e3:24:e3:75:1d:1c:dd:af:fd:36:b2:a7: 5f:7c:62:5f:b6:b4:6e:fd:5e:a4:57:ab:a1:20:cb:d9:58:92: 35:b3:af:a0:0b:c8:0e:7e:fb:2c:c4:f3:e4:3a:6f:da:6a:ba: 7c:fc:6f:4c:9e:7b:17:31:7e:38:41:a7:4e:b0:56:ed:38:f9: e4:cf:72:27:ab:f7:eb:4b:ba:dc:2e:a2:5e:f2:6c:20:b7:c2: 78:b2:83:ea:09:ac:9f:47:68:57:ca:58:21:6b:bc:13:4b:df: 39:3c:97:91:bb:db:d4:72:cd:db:f3:ab:73:6f:8c:78:3e:93: a3:63:5c:fa:55:f5:20:48:5b:d4:7d:25:77:35:ab:2c:12:22: 6a:14:2a:4d:5b:09:9e:01:da:39:21:ee:18:72:67:b9:08:05: 2d:77:06:9d:38:4e:bc:ad:c9:3c:86:87:8b:1c:9c:8f:66:8b: 80:17:b7:0f:b0:78:04:f5:ce:8b:ae:1d:9c:ea:48:41:e9:3d: 75:e8:ef:09:12:b3:a7:b8:7e:4c:7f:da:28:75:02:ae:64:c5: de:ab:03:86:be:1f:d6:d9:3b:b1:0b:ae:8d:e2:18:36:0c:f0: 59:78:f3:38 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUNHQsEC2vTKL7qKSPoUsivdCgq4gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjA4MDUxNDA1MDFaFw0yNzA4MDQxNDEwMDFaMDMxMTAvBgNV BAMTKEZGOUI3RTg0RTFCMDFFOTlCQTdFMjdDNjg2NTk0N0NBRDk5MzNCQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcawTrE48hF3sD2NIyGmTHF88a gTngVWky88JLL8INqJlRW81za6xSlS6zLuuOk1R0RA2AoNwqzjspvGQeVYwteDgt LzBVNiUz0Iqekrs0seYAqZFHxu1+ezulnby0GYAgzfyk4hFMWUz0qnIkE5kzGO0T 44aqIof3HRag6x4G4wC61iR8+EDAoQTnOGzDrw/udNHYglpjBDUhN85vV6uzyBLm buRorNevI4AnTO1UaAWtqd3pVDhIt5Kog53w6kN6tSV9UiZJIKI1b0CMafZ0hnx/ nkYFq2ubWPvg32tvuBxrNCdHHcYL5WrZ33H3pmX3v8tJrnAko1J+arDlQxdlAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT/m36E4bAembp+ J8aGWUfK2ZM7oTAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRjgzRTE4MjY1RTk2NTlDRjAyREVENjYz NUNERDg0NkFBNzMyNzg2MjhDNjg5NEVCMTBCOUJFOTU4NDJDRDEyMi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9GODNFMTgyNjVFOTY1OUNGMDJERUQ2NjM1Q0REODQ2QUE3MzI3ODYyOEM2 ODk0RUIxMEI5QkU5NTg0MkNEMTIyLzAvRkY5QjdFODRFMUIwMUU5OUJBN0UyN0M2 ODY1OTQ3Q0FEOTkzM0JBMS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCtb+cMA0EAgAC MAcDBQAoA0ggMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQOSjANBgkqhkiG9w0B AQsFAAOCAQEAAuWyhvsJtxll0HZoG8AwsWUz01ad1BJ04yTjdR0c3a/9NrKnX3xi X7a0bv1epFeroSDL2ViSNbOvoAvIDn77LMTz5Dpv2mq6fPxvTJ57FzF+OEGnTrBW 7Tj55M9yJ6v360u63C6iXvJsILfCeLKD6gmsn0doV8pYIWu8E0vfOTyXkbvb1HLN 2/Orc2+MeD6To2Nc+lX1IEhb1H0ldzWrLBIiahQqTVsJngHaOSHuGHJnuQgFLXcG nThOvK3JPIaHixycj2aLgBe3D7B4BPXOi64dnOpIQek9dejvCRKzp7h+TH/aKHUC rmTF3qsDhr4f1tk7sQuujeIYNgzwWXjzOA== -----END CERTIFICATE-----Generated at Fri Sep 18 18:53:15 2026 by rpki-client