$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/38172E208090DA1CCDCCB92ECB746ADEB1E10A48.cer File: 38172E208090DA1CCDCCB92ECB746ADEB1E10A48.cer (raw, json) Hash identifier: faXHoG8xPlLRyquHNg8t5Yzdm65PJzA+zFhSXIxQSwM= Subject key identifier: 38:17:2E:20:80:90:DA:1C:CD:CC:B9:2E:CB:74:6A:DE:B1:E1:0A:48 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 63F0ED3838CDC17CA7BAB0C4AEC77021BEF80813 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/15EFFDD977710FB3591BE01AF136EE9E9F6785918A557615F499C48019B4415F/0/38172E208090DA1CCDCCB92ECB746ADEB1E10A48.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/15EFFDD977710FB3591BE01AF136EE9E9F6785918A557615F499C48019B4415F/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Sat 23 May 2026 11:10:01 +0000 Certificate not after: Sat 22 May 2027 11:15:01 +0000 Subordinate resources: AS: 274909 IP: 2803:9e30::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 17 Jun 2026 16:50:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:f0:ed:38:38:cd:c1:7c:a7:ba:b0:c4:ae:c7:70:21:be:f8:08:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: May 23 11:10:01 2026 GMT Not After : May 22 11:15:01 2027 GMT Subject: CN=38172E208090DA1CCDCCB92ECB746ADEB1E10A48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d5:49:d7:f1:4e:c2:8b:95:2a:f6:aa:d1:86: 5d:d6:e4:77:e9:46:4a:88:52:9e:b7:9c:d1:50:37: 85:81:66:82:e4:82:99:b2:98:94:25:f0:e2:35:26: 11:30:3d:9c:f6:4f:df:c0:99:cc:b3:97:f0:fe:a6: d4:f0:2f:4e:71:ef:af:2e:78:72:b7:c3:f1:d2:f5: 46:b0:38:d5:2e:aa:3d:66:16:80:9e:e8:54:f3:3b: f1:fd:18:41:b4:5d:79:13:3b:7c:91:8e:77:80:5d: 11:21:c3:fc:06:d8:5e:60:02:0e:9e:39:f4:86:f1: ff:5a:2c:fc:ed:5e:fd:0d:7d:d5:2e:6a:ca:09:ca: c5:0b:98:68:82:e3:b5:83:5b:a5:be:9a:95:8d:e0: 99:6f:14:f5:b6:21:11:64:2f:c9:88:22:96:a5:3d: 84:c3:fa:e5:8d:6c:c4:6d:cd:c1:40:58:64:00:7e: cc:15:7a:32:50:3f:07:3d:39:ee:16:d0:5c:25:5e: c6:06:63:d7:75:bb:3b:d5:23:7e:a1:50:ff:e2:3c: 30:0f:c9:45:dd:ec:2c:6b:34:01:5c:a7:6f:d6:57: b8:a5:1c:74:74:ba:d8:be:85:1f:78:52:c4:bb:62: f0:6f:55:8d:2a:b7:59:fa:a2:60:1c:27:ed:ab:77: 3f:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 38:17:2E:20:80:90:DA:1C:CD:CC:B9:2E:CB:74:6A:DE:B1:E1:0A:48 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/15EFFDD977710FB3591BE01AF136EE9E9F6785918A557615F499C48019B4415F/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/15EFFDD977710FB3591BE01AF136EE9E9F6785918A557615F499C48019B4415F/0/38172E208090DA1CCDCCB92ECB746ADEB1E10A48.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:9e30::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 274909 Signature Algorithm: sha256WithRSAEncryption 11:0d:6c:7a:cc:98:7c:42:8e:b9:42:9a:35:f3:0e:91:d2:ce: 64:eb:6a:25:f9:ab:2a:29:0e:10:f1:ca:b8:96:b8:d8:3b:1a: 5d:f0:4e:59:5f:cf:4c:5c:b2:2e:a4:e2:4c:ab:90:c1:65:3a: 0b:00:41:cc:e3:6c:df:9a:2d:0f:da:e7:d5:24:1f:e6:70:a7: 26:c8:fe:c8:ff:e9:58:95:31:3f:24:48:c2:b7:c9:a7:28:0b: 35:23:27:e8:7d:19:ce:3f:76:5a:23:01:6b:fc:10:30:f0:a6: c4:90:22:c6:2a:bb:b9:32:6e:46:97:39:47:99:4f:ca:c5:05: 92:78:72:f8:7c:84:14:64:0e:42:fb:e5:f4:85:c6:78:a2:70: cb:74:d1:38:86:db:91:a9:0e:b0:d3:31:70:dd:4a:00:38:58: 6f:47:db:35:a3:f9:90:94:3f:a7:dd:2d:3e:4d:fa:a0:92:90: fe:d8:70:e3:b5:59:0c:9f:6b:2a:47:37:8e:61:97:de:64:50: 59:5f:af:a4:34:3a:c4:cf:08:76:6d:a6:a3:6f:5e:9c:94:ca: f0:21:e2:af:17:f2:10:e0:28:21:9a:3f:8f:ef:06:6f:fd:dc: ea:ae:36:71:98:22:7d:32:17:a7:98:45:66:fd:93:c1:1c:37: 13:cb:26:a5 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUY/DtODjNwXynurDErsdwIb74CBMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjA1MjMxMTEwMDFaFw0yNzA1MjIxMTE1MDFaMDMxMTAvBgNV BAMTKDM4MTcyRTIwODA5MERBMUNDRENDQjkyRUNCNzQ2QURFQjFFMTBBNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN1UnX8U7Ci5Uq9qrRhl3W5Hfp RkqIUp63nNFQN4WBZoLkgpmymJQl8OI1JhEwPZz2T9/Amcyzl/D+ptTwL05x768u eHK3w/HS9UawONUuqj1mFoCe6FTzO/H9GEG0XXkTO3yRjneAXREhw/wG2F5gAg6e OfSG8f9aLPztXv0NfdUuasoJysULmGiC47WDW6W+mpWN4JlvFPW2IRFkL8mIIpal PYTD+uWNbMRtzcFAWGQAfswVejJQPwc9Oe4W0FwlXsYGY9d1uzvVI36hUP/iPDAP yUXd7CxrNAFcp2/WV7ilHHR0uti+hR94UsS7YvBvVY0qt1n6omAcJ+2rdz+VAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ4Fy4ggJDaHM3M uS7LdGreseEKSDAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMTVFRkZERDk3NzcxMEZCMzU5MUJFMDFB RjEzNkVFOUU5RjY3ODU5MThBNTU3NjE1RjQ5OUM0ODAxOUI0NDE1Ri8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8xNUVGRkREOTc3NzEwRkIzNTkxQkUwMUFGMTM2RUU5RTlGNjc4NTkxOEE1 NTc2MTVGNDk5QzQ4MDE5QjQ0MTVGLzAvMzgxNzJFMjA4MDkwREExQ0NEQ0NCOTJF Q0I3NDZBREVCMUUxMEE0OC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAOeMDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEMd0wDQYJKoZIhvcNAQELBQADggEBABENbHrM mHxCjrlCmjXzDpHSzmTraiX5qyopDhDxyriWuNg7Gl3wTllfz0xcsi6k4kyrkMFl OgsAQczjbN+aLQ/a59UkH+ZwpybI/sj/6ViVMT8kSMK3yacoCzUjJ+h9Gc4/dloj AWv8EDDwpsSQIsYqu7kybkaXOUeZT8rFBZJ4cvh8hBRkDkL75fSFxniicMt00TiG 25GpDrDTMXDdSgA4WG9H2zWj+ZCUP6fdLT5N+qCSkP7YcOO1WQyfaypHN45hl95k UFlfr6Q0OsTPCHZtpqNvXpyUyvAh4q8X8hDgKCGaP4/vBm/93OquNnGYIn0yF6eY RWb9k8EcNxPLJqU= -----END CERTIFICATE-----Generated at Sat Jun 13 20:06:54 2026 by rpki-client