$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28ADF75E69FFB5858712D3356CEDEA5943CE5F0E.cer File: 28ADF75E69FFB5858712D3356CEDEA5943CE5F0E.cer (raw, json) Hash identifier: lfJ75z4enWBWQKfBm/7bD/4qnzO7+ebG1g4EGXsKV2M= Subject key identifier: 28:AD:F7:5E:69:FF:B5:85:87:12:D3:35:6C:ED:EA:59:43:CE:5F:0E Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 37CA72F9414CAF9DCFBC0D1748E80F979E121A71 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/3BFFCC001BB6CC2E562B29E6048FE02DE1B18E00B41B5558537725FF279DF68D/0/28ADF75E69FFB5858712D3356CEDEA5943CE5F0E.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/3BFFCC001BB6CC2E562B29E6048FE02DE1B18E00B41B5558537725FF279DF68D/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Mon 06 Apr 2026 15:40:01 +0000 Certificate not after: Mon 05 Apr 2027 15:45:01 +0000 Subordinate resources: AS: 274869 IP: 2803:2a30::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Apr 2026 12:20:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:ca:72:f9:41:4c:af:9d:cf:bc:0d:17:48:e8:0f:97:9e:12:1a:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Apr 6 15:40:01 2026 GMT Not After : Apr 5 15:45:01 2027 GMT Subject: CN=28ADF75E69FFB5858712D3356CEDEA5943CE5F0E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:df:15:22:a6:f7:a4:05:df:c5:ed:80:c6:54: bd:a1:f6:22:c6:13:5c:22:58:b9:2d:5d:c3:b8:89: c9:bc:c6:fc:aa:35:61:7e:a6:9d:69:d0:99:7e:59: 19:f5:35:64:6d:e3:23:70:08:a6:c5:b7:77:4d:c4: 0a:dd:1a:cc:f4:e8:d7:65:ae:7f:75:e6:a4:04:c0: 52:3b:82:45:b5:ea:07:d5:91:6c:96:29:dd:04:2b: b8:ed:f4:2d:a9:7a:c9:b8:34:98:b6:5e:01:35:3a: 6f:d2:0f:e5:3c:51:f1:7f:60:9f:ca:d9:39:96:00: 45:7e:87:78:a6:2c:62:72:b4:f0:5e:97:78:6e:4f: 45:46:ea:2e:98:38:fb:cb:a8:83:68:75:e6:78:78: ab:f1:cb:e2:41:43:e7:d6:f1:ec:96:26:8d:2f:44: 5b:15:c2:ae:4d:8a:d6:c4:e9:10:bb:c7:14:70:bf: 36:3c:10:5a:04:d4:73:ce:59:38:89:87:3f:87:7e: 0c:b8:78:01:38:68:07:63:14:57:01:e5:f7:74:20: e8:32:73:41:df:3c:ed:8b:d9:7c:f5:08:8a:25:de: c0:7c:fe:6b:ec:f3:c0:69:cb:1f:62:e8:d4:f5:48: 02:ce:54:1f:0b:ca:a3:7c:6d:b9:3f:fe:a9:b6:58: d9:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 28:AD:F7:5E:69:FF:B5:85:87:12:D3:35:6C:ED:EA:59:43:CE:5F:0E X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/3BFFCC001BB6CC2E562B29E6048FE02DE1B18E00B41B5558537725FF279DF68D/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/3BFFCC001BB6CC2E562B29E6048FE02DE1B18E00B41B5558537725FF279DF68D/0/28ADF75E69FFB5858712D3356CEDEA5943CE5F0E.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:2a30::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 274869 Signature Algorithm: sha256WithRSAEncryption 7a:f1:17:4d:83:ea:67:6a:4a:89:4a:b3:11:c1:dd:84:25:82: 50:6d:7c:b6:44:9d:cd:75:85:ea:6e:4a:df:61:db:86:9c:a9: 0d:3e:d7:d3:5b:16:92:3b:4f:59:ea:21:30:da:ee:c2:cc:e6: 29:44:15:4e:91:b7:57:fe:77:f2:18:6a:4e:23:32:20:0d:6c: 36:52:33:1b:a4:fc:c0:cd:f7:73:ea:be:2b:75:df:fd:b5:d4: 1f:eb:fb:b3:07:c9:31:01:fa:70:39:d2:ad:09:4c:7a:0c:ae: 91:94:12:12:a2:f2:45:29:ef:98:58:58:fd:fe:39:08:ff:d7: b8:4e:43:aa:a5:01:41:12:92:56:16:01:e7:66:c8:06:de:4d: 84:29:c8:39:93:87:2b:fa:5e:85:04:8c:df:be:bb:7a:00:f3: 28:18:2c:df:26:8a:8e:5b:c8:f8:18:87:bc:69:88:3e:d7:4d: 00:41:e6:d5:b7:94:7f:55:5a:39:aa:ce:3d:de:91:b9:75:a4: 70:5d:e4:cb:28:84:4e:e9:51:bb:0a:d7:9b:6f:a1:36:e7:94: ba:5c:31:50:ac:fd:99:55:70:dc:b6:73:95:7e:1b:5a:88:11: e9:b1:2d:73:7e:76:3c:f9:00:6e:e0:11:64:04:a0:44:9b:ed: 5c:75:82:42 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUN8py+UFMr53PvA0XSOgPl54SGnEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjA0MDYxNTQwMDFaFw0yNzA0MDUxNTQ1MDFaMDMxMTAvBgNV BAMTKDI4QURGNzVFNjlGRkI1ODU4NzEyRDMzNTZDRURFQTU5NDNDRTVGMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF3xUipvekBd/F7YDGVL2h9iLG E1wiWLktXcO4icm8xvyqNWF+pp1p0Jl+WRn1NWRt4yNwCKbFt3dNxArdGsz06Ndl rn915qQEwFI7gkW16gfVkWyWKd0EK7jt9C2pesm4NJi2XgE1Om/SD+U8UfF/YJ/K 2TmWAEV+h3imLGJytPBel3huT0VG6i6YOPvLqINodeZ4eKvxy+JBQ+fW8eyWJo0v RFsVwq5NitbE6RC7xxRwvzY8EFoE1HPOWTiJhz+Hfgy4eAE4aAdjFFcB5fd0IOgy c0HfPO2L2Xz1CIol3sB8/mvs88Bpyx9i6NT1SALOVB8LyqN8bbk//qm2WNmTAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQorfdeaf+1hYcS 0zVs7epZQ85fDjAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvM0JGRkNDMDAxQkI2Q0MyRTU2MkIyOUU2 MDQ4RkUwMkRFMUIxOEUwMEI0MUI1NTU4NTM3NzI1RkYyNzlERjY4RC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8zQkZGQ0MwMDFCQjZDQzJFNTYyQjI5RTYwNDhGRTAyREUxQjE4RTAwQjQx QjU1NTg1Mzc3MjVGRjI3OURGNjhELzAvMjhBREY3NUU2OUZGQjU4NTg3MTJEMzM1 NkNFREVBNTk0M0NFNUYwRS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAMqMDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEMbUwDQYJKoZIhvcNAQELBQADggEBAHrxF02D 6mdqSolKsxHB3YQlglBtfLZEnc11hepuSt9h24acqQ0+19NbFpI7T1nqITDa7sLM 5ilEFU6Rt1f+d/IYak4jMiANbDZSMxuk/MDN93Pqvit13/211B/r+7MHyTEB+nA5 0q0JTHoMrpGUEhKi8kUp75hYWP3+OQj/17hOQ6qlAUESklYWAedmyAbeTYQpyDmT hyv6XoUEjN++u3oA8ygYLN8mio5byPgYh7xpiD7XTQBB5tW3lH9VWjmqzj3ekbl1 pHBd5MsohE7pUbsK15tvoTbnlLpcMVCs/ZlVcNy2c5V+G1qIEemxLXN+djz5AG7g EWQEoESb7Vx1gkI= -----END CERTIFICATE-----Generated at Fri Apr 17 10:10:39 2026 by rpki-client