$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/36D2DE208BF5201FC54A655E3A7EA7C9AEDF7684.cer File: 36D2DE208BF5201FC54A655E3A7EA7C9AEDF7684.cer (raw, json) Hash identifier: Kn+PRAvRaveNmznqde4ujnBep5q8b0mBMkKu9yOSUvQ= Subject key identifier: 36:D2:DE:20:8B:F5:20:1F:C5:4A:65:5E:3A:7E:A7:C9:AE:DF:76:84 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 76377D4FAA706EFC65FADB03F4AD1FC05F8992CC Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/A5CA4AF9AFEE521992D75F973DB1AEA67CAF36BD54A00F894EC4662D75CFDF5E/0/36D2DE208BF5201FC54A655E3A7EA7C9AEDF7684.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/A5CA4AF9AFEE521992D75F973DB1AEA67CAF36BD54A00F894EC4662D75CFDF5E/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Sat 25 Jul 2026 18:35:01 +0000 Certificate not after: Sat 24 Jul 2027 18:40:01 +0000 Subordinate resources: AS: 274114 IP: 2803:8890::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 01 Aug 2026 06:05:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:37:7d:4f:aa:70:6e:fc:65:fa:db:03:f4:ad:1f:c0:5f:89:92:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jul 25 18:35:01 2026 GMT Not After : Jul 24 18:40:01 2027 GMT Subject: CN=36D2DE208BF5201FC54A655E3A7EA7C9AEDF7684 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:2b:5f:6a:0b:c9:60:15:9c:66:f4:2b:5f:59: f8:c5:56:d6:2e:25:57:89:41:51:aa:23:be:b5:c5: 9f:b1:9b:7b:3c:a7:53:49:9a:45:23:f7:b9:63:76: 9d:ed:37:31:85:8d:3b:50:7a:11:d6:ce:2b:9b:a4: 19:b5:1c:16:0c:57:ce:8a:f7:61:bd:3e:38:e8:2a: ea:83:39:02:2b:a3:15:1b:3c:d2:54:ee:4d:47:aa: 8b:f5:1a:2d:46:71:df:45:10:6e:72:bd:33:ee:17: 4a:b6:f5:81:16:39:7b:99:56:eb:4f:9d:7b:51:a3: 9c:83:3d:f4:dc:df:8b:e3:e8:97:64:97:fe:03:19: 2c:8f:8f:83:24:72:3d:da:a2:b2:0d:a5:66:c7:03: 22:5a:04:25:62:fd:9d:cb:a1:d5:92:f7:95:67:00: ec:06:11:08:f5:a5:61:a8:9b:c0:6b:2a:d3:a5:ca: 61:29:1b:a1:ef:36:5b:5a:15:d0:f5:c5:54:87:ce: 2e:67:c5:57:a4:32:4d:8a:bb:1d:f1:a8:8f:f9:f6: d2:64:79:1a:e5:e7:92:58:2a:b1:6f:40:2f:c7:7a: ba:03:24:9c:c2:20:bd:00:d8:28:2a:a9:f7:c6:cd: d9:70:53:39:a6:df:6e:15:e2:76:e2:10:ab:46:ad: 14:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 36:D2:DE:20:8B:F5:20:1F:C5:4A:65:5E:3A:7E:A7:C9:AE:DF:76:84 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/A5CA4AF9AFEE521992D75F973DB1AEA67CAF36BD54A00F894EC4662D75CFDF5E/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/A5CA4AF9AFEE521992D75F973DB1AEA67CAF36BD54A00F894EC4662D75CFDF5E/0/36D2DE208BF5201FC54A655E3A7EA7C9AEDF7684.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:8890::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 274114 Signature Algorithm: sha256WithRSAEncryption 22:a6:90:da:09:43:a3:02:44:f2:97:d8:ff:b7:78:70:e0:0c: 76:38:af:c7:44:62:1d:a7:6f:97:21:5c:98:74:09:2b:57:1a: 67:12:48:f2:7a:e2:b3:22:62:12:52:d0:d7:70:ca:fe:c6:db: 6e:da:b8:45:e0:29:54:65:0f:a1:58:6e:46:44:23:ef:bf:61: b1:17:ef:51:1c:39:67:ba:55:30:f3:aa:f0:f7:1b:aa:b5:bf: 2f:5b:8a:10:f3:68:50:1e:b9:fa:e5:d8:16:bc:9d:fa:94:f3: b2:94:d2:f5:4b:7c:da:66:e5:0a:fc:d5:2c:56:01:27:21:14: 56:88:5c:06:88:2d:1c:2c:83:b1:8e:6a:71:bd:60:84:34:32: 88:4d:03:e0:63:f6:e8:4c:c4:87:95:85:a9:e2:b6:32:ac:5c: 12:0d:6f:e9:9d:1e:2d:ed:c8:ce:ff:e9:58:10:3b:92:78:ab: fa:71:bb:dc:7a:66:f7:75:2d:0a:62:ce:e3:40:66:b4:79:5c: 89:56:e6:a4:b8:d1:70:5b:c1:28:b5:56:84:24:4b:4f:c4:b5: db:cf:67:63:60:eb:bf:18:7b:0f:9e:2e:ae:4a:a5:34:3c:d9: 28:13:0b:9e:f7:47:4c:5f:2e:e9:22:c2:c3:c8:ff:4a:d4:28: b2:ba:4e:a8 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUdjd9T6pwbvxl+tsD9K0fwF+JkswwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjA3MjUxODM1MDFaFw0yNzA3MjQxODQwMDFaMDMxMTAvBgNV BAMTKDM2RDJERTIwOEJGNTIwMUZDNTRBNjU1RTNBN0VBN0M5QUVERjc2ODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYK19qC8lgFZxm9CtfWfjFVtYu JVeJQVGqI761xZ+xm3s8p1NJmkUj97ljdp3tNzGFjTtQehHWziubpBm1HBYMV86K 92G9PjjoKuqDOQIroxUbPNJU7k1Hqov1Gi1Gcd9FEG5yvTPuF0q29YEWOXuZVutP nXtRo5yDPfTc34vj6Jdkl/4DGSyPj4Mkcj3aorINpWbHAyJaBCVi/Z3LodWS95Vn AOwGEQj1pWGom8BrKtOlymEpG6HvNltaFdD1xVSHzi5nxVekMk2Kux3xqI/59tJk eRrl55JYKrFvQC/HeroDJJzCIL0A2CgqqffGzdlwUzmm324V4nbiEKtGrRRxAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ20t4gi/UgH8VK ZV46fqfJrt92hDAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQTVDQTRBRjlBRkVFNTIxOTkyRDc1Rjk3 M0RCMUFFQTY3Q0FGMzZCRDU0QTAwRjg5NEVDNDY2MkQ3NUNGREY1RS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9BNUNBNEFGOUFGRUU1MjE5OTJENzVGOTczREIxQUVBNjdDQUYzNkJENTRB MDBGODk0RUM0NjYyRDc1Q0ZERjVFLzAvMzZEMkRFMjA4QkY1MjAxRkM1NEE2NTVF M0E3RUE3QzlBRURGNzY4NC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAOIkDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMELsIwDQYJKoZIhvcNAQELBQADggEBACKmkNoJ Q6MCRPKX2P+3eHDgDHY4r8dEYh2nb5chXJh0CStXGmcSSPJ64rMiYhJS0Ndwyv7G 227auEXgKVRlD6FYbkZEI++/YbEX71EcOWe6VTDzqvD3G6q1vy9bihDzaFAeufrl 2Ba8nfqU87KU0vVLfNpm5Qr81SxWASchFFaIXAaILRwsg7GOanG9YIQ0MohNA+Bj 9uhMxIeVhanitjKsXBINb+mdHi3tyM7/6VgQO5J4q/pxu9x6Zvd1LQpizuNAZrR5 XIlW5qS40XBbwSi1VoQkS0/EtdvPZ2Ng678Yew+eLq5KpTQ82SgTC573R0xfLuki wsPI/0rUKLK6Tqg= -----END CERTIFICATE-----Generated at Tue Jul 28 17:15:14 2026 by rpki-client