$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34876C211DED020995F3573311D003E759D03242.cer File: 34876C211DED020995F3573311D003E759D03242.cer (raw, json) Hash identifier: n5nIWpNRZRrxG/EBB59sXttrFNnDv0/U9Xb0keX2CNg= Subject key identifier: 34:87:6C:21:1D:ED:02:09:95:F3:57:33:11:D0:03:E7:59:D0:32:42 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 3502A32532F5A37623DEE966EAA18EBD0FA4D084 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/B78BE177F6E9EBA22CA38DA26923D98EE7331BD0C9A71FAF2808858A066FF0F7/0/34876C211DED020995F3573311D003E759D03242.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/B78BE177F6E9EBA22CA38DA26923D98EE7331BD0C9A71FAF2808858A066FF0F7/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Thu 16 Apr 2026 00:15:01 +0000 Certificate not after: Thu 15 Apr 2027 00:20:01 +0000 Subordinate resources: AS: 272911 IP: 2803:4e90::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 22 Apr 2026 04:33:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:02:a3:25:32:f5:a3:76:23:de:e9:66:ea:a1:8e:bd:0f:a4:d0:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Apr 16 00:15:01 2026 GMT Not After : Apr 15 00:20:01 2027 GMT Subject: CN=34876C211DED020995F3573311D003E759D03242 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:55:87:be:e4:a8:60:84:ae:ec:68:d9:02:dc: 61:bb:f1:e4:69:cf:b7:c5:3f:fe:22:2f:2c:17:69: 59:82:6f:06:98:18:3f:14:da:8d:7a:57:d7:99:fb: b5:4c:27:6e:c8:cb:7c:9c:24:de:70:4c:86:8c:0e: 37:fe:9a:6f:c1:0f:36:ec:dd:d5:f6:10:7d:39:80: d0:a8:9f:9b:70:2d:09:3b:8b:81:87:b3:aa:52:43: 6c:82:c9:69:f8:a0:c7:9f:63:5f:ae:ed:38:18:78: 5a:7a:a3:0a:a5:9b:9e:f6:d6:d3:2a:cb:99:5d:e6: fe:18:77:91:84:64:ca:cb:bc:6f:0d:65:c2:96:a9: a6:4b:ad:77:47:04:9f:c9:36:a6:c4:be:49:e3:50: 3b:6a:49:6a:ef:ac:c3:c0:9d:8a:ab:d0:50:5d:73: fa:83:a2:7f:c7:50:df:0e:f8:69:22:7c:cb:d3:7a: 0a:6c:80:1f:4c:28:6b:34:30:ef:8e:d2:df:d1:ed: 98:de:5b:71:0f:85:80:36:89:5a:64:a9:d6:e8:59: 7a:ff:ef:79:be:16:cf:c0:d3:4b:48:08:00:d4:a1: ba:8d:ba:61:d0:71:ac:ed:25:63:a2:e5:dc:40:9b: ea:b2:a8:f2:e5:96:ff:af:81:70:25:d3:88:9d:52: 4e:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 34:87:6C:21:1D:ED:02:09:95:F3:57:33:11:D0:03:E7:59:D0:32:42 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/B78BE177F6E9EBA22CA38DA26923D98EE7331BD0C9A71FAF2808858A066FF0F7/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/B78BE177F6E9EBA22CA38DA26923D98EE7331BD0C9A71FAF2808858A066FF0F7/0/34876C211DED020995F3573311D003E759D03242.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:4e90::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 272911 Signature Algorithm: sha256WithRSAEncryption 3f:be:7e:d1:81:9b:ee:7f:ad:2c:ba:d0:7d:01:c4:e7:d7:eb: f0:d9:58:6f:2f:3f:ea:c1:c5:95:17:66:52:5c:7c:44:4d:d6: 6d:2a:c1:f0:20:72:e0:33:e8:98:b2:b5:6e:5f:c7:62:95:c9: 20:83:c8:2e:b9:21:4e:c2:0f:57:a1:00:24:68:45:e7:15:e2: 9a:bd:2a:f0:7c:24:82:20:bb:f8:d5:22:1e:f6:b9:bd:83:b2: bf:9c:ef:71:7d:e3:ce:b5:70:19:f3:56:30:e6:ff:c2:c1:fd: 4f:5e:31:a2:46:01:87:21:18:09:f2:10:2a:21:24:b2:c9:a6: 9a:7a:63:3a:05:f9:5a:14:cc:ee:88:bd:d4:0d:13:9d:ff:57: b7:f1:bb:5f:e6:17:8c:a2:e4:e5:8f:27:6c:a9:f8:98:6b:6b: 6d:b7:2a:81:c9:a6:7a:77:00:c6:11:d9:82:da:56:86:dd:d5: c1:41:a2:e1:20:ec:c1:38:cb:1e:a3:64:29:08:e3:23:57:07: a6:ad:a4:24:0f:56:a3:68:af:7c:19:17:21:91:c7:00:fa:12: ba:48:e7:6b:1b:85:21:d5:b6:ee:1f:0e:49:07:79:8e:69:e7: 34:8f:74:15:04:02:83:18:ff:cd:35:9d:79:a2:27:28:0d:60: fe:49:d6:38 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUNQKjJTL1o3Yj3ulm6qGOvQ+k0IQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjA0MTYwMDE1MDFaFw0yNzA0MTUwMDIwMDFaMDMxMTAvBgNV BAMTKDM0ODc2QzIxMURFRDAyMDk5NUYzNTczMzExRDAwM0U3NTlEMDMyNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0VYe+5KhghK7saNkC3GG78eRp z7fFP/4iLywXaVmCbwaYGD8U2o16V9eZ+7VMJ27Iy3ycJN5wTIaMDjf+mm/BDzbs 3dX2EH05gNCon5twLQk7i4GHs6pSQ2yCyWn4oMefY1+u7TgYeFp6owqlm5721tMq y5ld5v4Yd5GEZMrLvG8NZcKWqaZLrXdHBJ/JNqbEvknjUDtqSWrvrMPAnYqr0FBd c/qDon/HUN8O+GkifMvTegpsgB9MKGs0MO+O0t/R7ZjeW3EPhYA2iVpkqdboWXr/ 73m+Fs/A00tICADUobqNumHQcaztJWOi5dxAm+qyqPLllv+vgXAl04idUk45AgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ0h2whHe0CCZXz VzMR0APnWdAyQjAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQjc4QkUxNzdGNkU5RUJBMjJDQTM4REEy NjkyM0Q5OEVFNzMzMUJEMEM5QTcxRkFGMjgwODg1OEEwNjZGRjBGNy8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9CNzhCRTE3N0Y2RTlFQkEyMkNBMzhEQTI2OTIzRDk4RUU3MzMxQkQwQzlB NzFGQUYyODA4ODU4QTA2NkZGMEY3LzAvMzQ4NzZDMjExREVEMDIwOTk1RjM1NzMz MTFEMDAzRTc1OUQwMzI0Mi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKANOkDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEKg8wDQYJKoZIhvcNAQELBQADggEBAD++ftGB m+5/rSy60H0BxOfX6/DZWG8vP+rBxZUXZlJcfERN1m0qwfAgcuAz6JiytW5fx2KV ySCDyC65IU7CD1ehACRoRecV4pq9KvB8JIIgu/jVIh72ub2Dsr+c73F94861cBnz VjDm/8LB/U9eMaJGAYchGAnyECohJLLJppp6YzoF+VoUzO6IvdQNE53/V7fxu1/m F4yi5OWPJ2yp+Jhra223KoHJpnp3AMYR2YLaVobd1cFBouEg7ME4yx6jZCkI4yNX B6atpCQPVqNor3wZFyGRxwD6ErpI52sbhSHVtu4fDkkHeY5p5zSPdBUEAoMY/801 nXmiJygNYP5J1jg= -----END CERTIFICATE-----Generated at Sat Apr 18 06:06:22 2026 by rpki-client