$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11F658F3ECB47E63D04F4D095F673974FA8ADB33.cer File: 11F658F3ECB47E63D04F4D095F673974FA8ADB33.cer (raw, json) Hash identifier: e5fhroUDFlBUSgOUmR4AiSU9wAv0HM8wx80OkyqZD3c= Subject key identifier: 11:F6:58:F3:EC:B4:7E:63:D0:4F:4D:09:5F:67:39:74:FA:8A:DB:33 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 60DB3C6D8AC331006BAE194C060C4B6F16DE5FF2 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/557958203BD79F21861AEF3166891E688BA91F4711C7C1910157FC3B4FA758BE/0/11F658F3ECB47E63D04F4D095F673974FA8ADB33.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/557958203BD79F21861AEF3166891E688BA91F4711C7C1910157FC3B4FA758BE/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 15 Apr 2026 23:55:01 +0000 Certificate not after: Thu 15 Apr 2027 00:00:01 +0000 Subordinate resources: AS: 273267 IP: 2001:1224::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 22 Apr 2026 04:33:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:db:3c:6d:8a:c3:31:00:6b:ae:19:4c:06:0c:4b:6f:16:de:5f:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Apr 15 23:55:01 2026 GMT Not After : Apr 15 00:00:01 2027 GMT Subject: CN=11F658F3ECB47E63D04F4D095F673974FA8ADB33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:39:54:64:68:1f:c5:4d:69:e6:04:7e:69:fe: d1:d7:a2:1f:1a:90:91:61:fb:60:cd:15:1a:28:f3: a8:63:8c:35:54:22:0b:33:c4:01:3e:b0:67:b8:0a: f7:d7:88:a2:ec:81:ea:aa:fb:3e:1b:7f:a1:cc:97: 2e:3a:40:05:b4:bf:95:60:33:bc:ca:66:52:2d:b0: 5b:ca:7e:20:09:72:77:b9:a8:95:c3:c6:99:7e:d3: 27:d5:2f:99:9c:ca:58:21:48:f7:fd:8b:6e:56:ca: 39:4d:b7:9d:d1:d3:ed:ba:63:06:8e:c4:b7:6d:72: 11:31:34:b2:cc:31:fd:39:72:70:fa:2c:52:b1:4d: 4e:2b:49:d5:62:1c:45:2a:8a:16:69:20:9c:39:7d: f0:97:31:d1:89:db:2e:30:39:9d:51:cf:b2:dc:c4: 9f:c0:17:ff:49:c2:21:80:db:58:09:43:6f:08:80: 9c:de:e4:6d:93:25:cb:e3:0a:d9:af:45:82:81:71: 68:df:f6:20:78:b7:65:97:c3:b7:b7:1b:89:7c:6b: 01:10:42:c8:88:f7:77:fc:d6:3e:b3:d5:b4:1a:59: 8b:1d:4f:db:42:ad:35:32:f0:69:e4:c2:a9:a6:ed: 9a:84:d1:20:fc:eb:bf:c1:97:c5:93:85:bb:19:80: 3a:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 11:F6:58:F3:EC:B4:7E:63:D0:4F:4D:09:5F:67:39:74:FA:8A:DB:33 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/557958203BD79F21861AEF3166891E688BA91F4711C7C1910157FC3B4FA758BE/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/557958203BD79F21861AEF3166891E688BA91F4711C7C1910157FC3B4FA758BE/0/11F658F3ECB47E63D04F4D095F673974FA8ADB33.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:1224::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273267 Signature Algorithm: sha256WithRSAEncryption 18:ef:0a:ba:4d:d9:27:81:ac:0c:70:37:7b:69:89:e8:93:dc: 09:72:51:b2:03:26:c4:ac:22:13:0c:d2:32:6e:3c:ad:06:08: 1a:b2:47:44:da:9b:3d:26:07:86:fa:63:1b:c3:ff:56:ce:fe: 90:6b:e9:b4:55:da:f2:ac:6d:93:1b:59:a8:42:c5:37:2a:cc: 7c:de:82:63:97:0e:ba:87:1d:32:0e:f4:3d:15:ea:4b:66:7e: 3a:ce:82:0a:52:85:18:94:46:65:13:55:ea:7e:1e:98:da:01: d3:51:3b:89:87:c0:63:0b:87:21:2a:4a:9d:13:cb:eb:35:6b: 33:f2:27:6d:d7:00:6f:5e:85:da:d1:fd:fa:6a:fb:54:1e:20: dd:45:f2:a6:fe:77:31:a9:f8:cb:9b:46:0d:2e:02:35:65:3b: e2:17:4c:f7:22:a1:1d:97:7c:75:28:02:ac:73:4c:8e:a8:bc: a7:30:93:43:7b:0d:55:8f:db:97:d5:b0:50:64:75:98:03:c5: 32:a2:76:f9:ab:8f:2b:cf:35:37:7e:0b:87:d8:a7:63:3e:a6: dc:d7:89:27:bd:77:e0:d3:b0:c3:89:82:d8:6a:31:ae:6e:70: b5:6f:b5:e4:26:9b:30:03:18:fe:82:c6:d3:bf:99:9b:a0:99: 9c:7e:4d:66 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUYNs8bYrDMQBrrhlMBgxLbxbeX/IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjA0MTUyMzU1MDFaFw0yNzA0MTUwMDAwMDFaMDMxMTAvBgNV BAMTKDExRjY1OEYzRUNCNDdFNjNEMDRGNEQwOTVGNjczOTc0RkE4QURCMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtOVRkaB/FTWnmBH5p/tHXoh8a kJFh+2DNFRoo86hjjDVUIgszxAE+sGe4CvfXiKLsgeqq+z4bf6HMly46QAW0v5Vg M7zKZlItsFvKfiAJcne5qJXDxpl+0yfVL5mcylghSPf9i25WyjlNt53R0+26YwaO xLdtchExNLLMMf05cnD6LFKxTU4rSdViHEUqihZpIJw5ffCXMdGJ2y4wOZ1Rz7Lc xJ/AF/9JwiGA21gJQ28IgJze5G2TJcvjCtmvRYKBcWjf9iB4t2WXw7e3G4l8awEQ QsiI93f81j6z1bQaWYsdT9tCrTUy8Gnkwqmm7ZqE0SD867/Bl8WThbsZgDoNAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQR9ljz7LR+Y9BP TQlfZzl0+orbMzAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNTU3OTU4MjAzQkQ3OUYyMTg2MUFFRjMx NjY4OTFFNjg4QkE5MUY0NzExQzdDMTkxMDE1N0ZDM0I0RkE3NThCRS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy81NTc5NTgyMDNCRDc5RjIxODYxQUVGMzE2Njg5MUU2ODhCQTkxRjQ3MTFD N0MxOTEwMTU3RkMzQjRGQTc1OEJFLzAvMTFGNjU4RjNFQ0I0N0U2M0QwNEY0RDA5 NUY2NzM5NzRGQThBREIzMy5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAIAESJDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEK3MwDQYJKoZIhvcNAQELBQADggEBABjvCrpN 2SeBrAxwN3tpieiT3AlyUbIDJsSsIhMM0jJuPK0GCBqyR0Tamz0mB4b6YxvD/1bO /pBr6bRV2vKsbZMbWahCxTcqzHzegmOXDrqHHTIO9D0V6ktmfjrOggpShRiURmUT Vep+HpjaAdNRO4mHwGMLhyEqSp0Ty+s1azPyJ23XAG9ehdrR/fpq+1QeIN1F8qb+ dzGp+MubRg0uAjVlO+IXTPcioR2XfHUoAqxzTI6ovKcwk0N7DVWP25fVsFBkdZgD xTKidvmrjyvPNTd+C4fYp2M+ptzXiSe9d+DTsMOJgthqMa5ucLVvteQmmzADGP6C xtO/mZugmZx+TWY= -----END CERTIFICATE-----Generated at Fri Apr 17 22:56:18 2026 by rpki-client