$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4DBBA1AD6CEE2163B1AC098C7F88A2C692FD4C7F.cer File: 4DBBA1AD6CEE2163B1AC098C7F88A2C692FD4C7F.cer (raw, json) Hash identifier: K5WjaWLlWU7Fxt+EfM/Ob6rQjyeSvZkv1jCkLCl3b2Q= Subject key identifier: 4D:BB:A1:AD:6C:EE:21:63:B1:AC:09:8C:7F:88:A2:C6:92:FD:4C:7F Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 33B9E5536479A55F65D14EDC95DDE98D0F80A618 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/C9037AAD5AED81C2789D9341CDAF5E43030A46DBCCE00C451C2A3AFE26FEF8CF/0/4DBBA1AD6CEE2163B1AC098C7F88A2C692FD4C7F.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/C9037AAD5AED81C2789D9341CDAF5E43030A46DBCCE00C451C2A3AFE26FEF8CF/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Thu 11 Jun 2026 18:20:01 +0000 Certificate not after: Thu 10 Jun 2027 18:25:01 +0000 Subordinate resources: AS: 274946 IP: 2803:a930::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 17 Jun 2026 16:50:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:b9:e5:53:64:79:a5:5f:65:d1:4e:dc:95:dd:e9:8d:0f:80:a6:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jun 11 18:20:01 2026 GMT Not After : Jun 10 18:25:01 2027 GMT Subject: CN=4DBBA1AD6CEE2163B1AC098C7F88A2C692FD4C7F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:e1:fc:aa:cd:b9:eb:a1:a2:ba:b6:8b:62:55: cf:be:16:cb:b5:e9:ea:02:e6:ea:58:66:99:73:b8: 85:8a:1f:30:cd:9a:76:db:95:83:09:7e:5d:1b:10: ae:75:af:ba:0e:16:e3:69:a7:5b:00:25:14:f7:af: 7d:21:24:15:14:dc:e3:5e:b8:f3:ca:b8:fe:cc:ab: 59:d7:b5:5f:ae:1b:64:56:29:15:23:36:dc:c0:94: 7b:fb:42:22:63:e6:da:3d:c8:b4:9f:c8:75:9b:b5: 72:13:2f:16:76:a3:3d:77:1d:41:28:37:5e:1c:0c: 6c:a5:8f:8f:69:d6:b4:5c:1a:24:d7:c9:08:52:87: ef:6a:62:95:aa:ad:f8:fe:9e:38:e3:70:7f:d6:93: a1:3c:bc:b1:5a:ab:89:62:29:2a:c9:db:31:e2:9f: 49:6f:c7:3a:d0:e2:cc:55:41:db:a6:92:78:ed:94: 69:3a:2b:df:73:61:2c:3d:7e:68:70:bb:81:82:47: 9d:39:59:1c:27:4d:27:33:46:12:20:4b:f2:c2:de: 2b:10:28:08:b5:f4:ad:fe:fc:9b:ba:9e:30:b0:3a: 5c:d2:63:90:11:1c:be:08:62:d3:ea:a2:f1:55:43: 1a:80:fe:8f:7b:42:38:f2:c9:e5:9b:7f:7d:64:8a: ae:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4D:BB:A1:AD:6C:EE:21:63:B1:AC:09:8C:7F:88:A2:C6:92:FD:4C:7F X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/C9037AAD5AED81C2789D9341CDAF5E43030A46DBCCE00C451C2A3AFE26FEF8CF/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/C9037AAD5AED81C2789D9341CDAF5E43030A46DBCCE00C451C2A3AFE26FEF8CF/0/4DBBA1AD6CEE2163B1AC098C7F88A2C692FD4C7F.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:a930::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 274946 Signature Algorithm: sha256WithRSAEncryption 4f:0b:0f:ec:75:21:f7:3e:b6:be:e6:26:bd:f4:52:fb:19:5b: 2f:cb:35:5d:cf:a6:a9:78:15:fd:2a:a2:8a:14:1a:02:33:89: e9:c8:c9:21:ef:8e:60:b0:31:7d:0c:69:fb:df:0f:0d:a0:fe: 37:21:f3:52:39:24:b7:52:cb:f0:95:50:7e:fc:9b:3a:4c:89: e6:0a:ee:c4:b5:46:61:8f:6d:57:a1:43:dd:be:f5:27:16:4a: e3:94:81:2a:ce:1d:1c:6f:91:b0:76:5e:ff:62:5a:d0:dd:ea: d8:6a:a0:2a:2d:79:17:80:06:6f:b9:be:81:44:52:5f:4a:f6: fd:a9:36:ba:b8:a1:6f:e9:e5:d2:4e:94:f3:8a:77:85:11:a0: 42:a8:6f:ed:03:8a:87:0f:03:3c:a6:2b:9b:a7:e4:07:0d:f2: a2:e6:b6:07:6f:88:88:a7:0b:44:41:f9:7d:9a:58:ed:89:b1: 84:c7:06:ca:9e:65:89:4d:da:f7:6e:96:a0:fc:b7:e8:2d:6b: f5:08:17:eb:1c:5a:81:f8:94:e2:96:9e:aa:16:dd:71:5e:12: 31:b2:84:0f:7a:dc:1e:7c:85:a6:1a:c0:c1:61:0c:87:41:d1: 04:0f:3f:e2:38:fe:7f:a4:69:18:3f:3f:a3:9d:b4:de:ca:3d: 20:d4:b9:d2 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUM7nlU2R5pV9l0U7cld3pjQ+AphgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjA2MTExODIwMDFaFw0yNzA2MTAxODI1MDFaMDMxMTAvBgNV BAMTKDREQkJBMUFENkNFRTIxNjNCMUFDMDk4QzdGODhBMkM2OTJGRDRDN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ4fyqzbnroaK6totiVc++Fsu1 6eoC5upYZplzuIWKHzDNmnbblYMJfl0bEK51r7oOFuNpp1sAJRT3r30hJBUU3ONe uPPKuP7Mq1nXtV+uG2RWKRUjNtzAlHv7QiJj5to9yLSfyHWbtXITLxZ2oz13HUEo N14cDGylj49p1rRcGiTXyQhSh+9qYpWqrfj+njjjcH/Wk6E8vLFaq4liKSrJ2zHi n0lvxzrQ4sxVQdumknjtlGk6K99zYSw9fmhwu4GCR505WRwnTSczRhIgS/LC3isQ KAi19K3+/Ju6njCwOlzSY5ARHL4IYtPqovFVQxqA/o97QjjyyeWbf31kiq4HAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRNu6GtbO4hY7Gs CYx/iKLGkv1MfzAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQzkwMzdBQUQ1QUVEODFDMjc4OUQ5MzQx Q0RBRjVFNDMwMzBBNDZEQkNDRTAwQzQ1MUMyQTNBRkUyNkZFRjhDRi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9DOTAzN0FBRDVBRUQ4MUMyNzg5RDkzNDFDREFGNUU0MzAzMEE0NkRCQ0NF MDBDNDUxQzJBM0FGRTI2RkVGOENGLzAvNERCQkExQUQ2Q0VFMjE2M0IxQUMwOThD N0Y4OEEyQzY5MkZENEM3Ri5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAOpMDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEMgIwDQYJKoZIhvcNAQELBQADggEBAE8LD+x1 Ifc+tr7mJr30UvsZWy/LNV3Ppql4Ff0qoooUGgIzienIySHvjmCwMX0MafvfDw2g /jch81I5JLdSy/CVUH78mzpMieYK7sS1RmGPbVehQ92+9ScWSuOUgSrOHRxvkbB2 Xv9iWtDd6thqoCoteReABm+5voFEUl9K9v2pNrq4oW/p5dJOlPOKd4URoEKob+0D iocPAzymK5un5AcN8qLmtgdviIinC0RB+X2aWO2JsYTHBsqeZYlN2vdulqD8t+gt a/UIF+scWoH4lOKWnqoW3XFeEjGyhA963B58haYawMFhDIdB0QQPP+I4/n+kaRg/ P6OdtN7KPSDUudI= -----END CERTIFICATE-----Generated at Sat Jun 13 09:56:35 2026 by rpki-client