$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/531C79BB5F44C69E53BEDF5DA241BA6FB7C2122A.cer File: 531C79BB5F44C69E53BEDF5DA241BA6FB7C2122A.cer (raw, json) Hash identifier: 5X++YboFm3E1IK/f9tTeDszLganN63EKOMx0InZnmcQ= Subject key identifier: 53:1C:79:BB:5F:44:C6:9E:53:BE:DF:5D:A2:41:BA:6F:B7:C2:12:2A Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 3B4B8D113881186F874AC4F7EBF205B75BC5B841 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/8BAA6F9A5890F75A7A18B1B3A6DFA00B185916180EA86327BA911CE3A440B654/0/531C79BB5F44C69E53BEDF5DA241BA6FB7C2122A.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/8BAA6F9A5890F75A7A18B1B3A6DFA00B185916180EA86327BA911CE3A440B654/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 02 Jun 2026 18:55:01 +0000 Certificate not after: Tue 01 Jun 2027 19:00:01 +0000 Subordinate resources: AS: 52321 IP: 186.189.252.0/22 IP: 190.123.120.0/22 IP: 2800:900::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 17 Jun 2026 16:50:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:4b:8d:11:38:81:18:6f:87:4a:c4:f7:eb:f2:05:b7:5b:c5:b8:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jun 2 18:55:01 2026 GMT Not After : Jun 1 19:00:01 2027 GMT Subject: CN=531C79BB5F44C69E53BEDF5DA241BA6FB7C2122A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b5:5f:2b:3a:f2:bc:c4:d5:a0:5a:95:95:94: ae:82:be:5f:c3:87:e0:89:47:2a:ec:02:e7:9e:28: e0:4f:55:d8:e5:02:99:d3:a4:01:5d:f1:6f:9f:82: 1f:93:23:4c:7f:fd:36:32:7d:6f:7a:3b:0f:95:01: 34:ff:03:df:e7:42:fb:b6:63:7f:8e:7a:d8:02:7f: 52:85:d9:8f:81:17:1e:56:18:cc:d7:14:c0:a1:4b: 4a:27:3d:6b:4f:94:13:a7:66:18:99:38:ec:13:6d: 7c:78:01:3c:fc:f9:c0:94:df:b9:3b:48:17:12:96: 53:61:39:93:40:97:70:ba:14:f7:e4:a1:12:8e:e9: c4:36:e4:e1:db:c9:b5:e3:7f:70:74:4b:06:b3:fc: 21:74:cb:bb:ca:22:d9:50:73:34:2d:5c:04:c5:b7: 69:8f:83:db:4e:50:91:a4:49:2b:0f:70:54:97:39: a1:f3:06:b1:52:7a:19:dc:15:26:e0:05:00:94:dd: e1:47:e8:12:b4:37:41:24:62:57:89:25:a8:a5:67: a3:72:05:4f:a9:27:37:41:57:f7:cd:0c:6d:0a:f2: eb:21:49:23:4d:43:99:6e:6b:17:e7:dc:fe:49:eb: 7f:d7:e1:23:ca:e3:7e:7a:ea:3b:29:27:17:74:52: 62:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 53:1C:79:BB:5F:44:C6:9E:53:BE:DF:5D:A2:41:BA:6F:B7:C2:12:2A X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/8BAA6F9A5890F75A7A18B1B3A6DFA00B185916180EA86327BA911CE3A440B654/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/8BAA6F9A5890F75A7A18B1B3A6DFA00B185916180EA86327BA911CE3A440B654/0/531C79BB5F44C69E53BEDF5DA241BA6FB7C2122A.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 186.189.252.0/22 190.123.120.0/22 IPv6: 2800:900::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52321 Signature Algorithm: sha256WithRSAEncryption 88:61:92:82:f5:3e:d9:d3:d2:8d:33:46:17:17:5a:ac:4d:31: e0:00:25:a0:87:a2:09:04:25:4d:e9:cd:d6:d9:df:e6:3a:65: 5e:c0:11:d7:18:fa:67:c9:69:9f:2f:99:9f:c8:14:0f:1f:7f: cd:c2:2b:b4:c4:04:e9:df:11:4d:3c:bb:5e:a5:ee:49:3d:28: f6:ff:63:e3:a5:b2:93:35:9b:3f:06:f9:38:fe:98:0a:e7:60: a1:79:61:cd:e4:e1:0b:cf:46:ad:84:60:a3:04:6b:fd:1a:9b: f1:5b:bc:c2:31:d5:3d:c2:d7:53:82:90:20:00:d0:95:29:08: 26:b3:a4:84:57:1b:82:15:41:39:c6:0e:62:68:55:08:e2:fe: f6:a0:1e:fa:1c:29:f6:aa:a0:fd:7d:18:45:34:69:0e:f0:51: bd:cb:4d:90:e4:92:c7:11:18:49:78:a6:31:36:c1:af:32:98: a2:a6:98:96:7f:44:63:2e:70:9e:cb:31:5d:8d:9d:00:d1:e0: 9f:ed:ae:a6:8c:9c:17:0c:04:49:81:09:b0:13:81:f7:a2:83: 3e:a1:ab:cd:62:a1:b2:ac:b4:da:48:16:cc:e2:de:3b:a5:f4: e8:7f:32:83:69:58:69:4b:9e:65:34:a7:9e:cb:e0:0c:24:18: 9b:4d:2c:39 -----BEGIN CERTIFICATE----- MIIGqzCCBZOgAwIBAgIUO0uNETiBGG+HSsT36/IFt1vFuEEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjA2MDIxODU1MDFaFw0yNzA2MDExOTAwMDFaMDMxMTAvBgNV BAMTKDUzMUM3OUJCNUY0NEM2OUU1M0JFREY1REEyNDFCQTZGQjdDMjEyMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCetV8rOvK8xNWgWpWVlK6Cvl/D h+CJRyrsAueeKOBPVdjlApnTpAFd8W+fgh+TI0x//TYyfW96Ow+VATT/A9/nQvu2 Y3+OetgCf1KF2Y+BFx5WGMzXFMChS0onPWtPlBOnZhiZOOwTbXx4ATz8+cCU37k7 SBcSllNhOZNAl3C6FPfkoRKO6cQ25OHbybXjf3B0Swaz/CF0y7vKItlQczQtXATF t2mPg9tOUJGkSSsPcFSXOaHzBrFSehncFSbgBQCU3eFH6BK0N0EkYleJJailZ6Ny BU+pJzdBV/fNDG0K8ushSSNNQ5luaxfn3P5J63/X4SPK43566jspJxd0UmJHAgMB AAGjggO1MIIDsTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRTHHm7X0TGnlO+ 312iQbpvt8ISKjAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvOEJBQTZGOUE1ODkwRjc1QTdBMThCMUIz QTZERkEwMEIxODU5MTYxODBFQTg2MzI3QkE5MTFDRTNBNDQwQjY1NC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy84QkFBNkY5QTU4OTBGNzVBN0ExOEIxQjNBNkRGQTAwQjE4NTkxNjE4MEVB ODYzMjdCQTkxMUNFM0E0NDBCNjU0LzAvNTMxQzc5QkI1RjQ0QzY5RTUzQkVERjVE QTI0MUJBNkZCN0MyMTIyQS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCur38AwQCvnt4 MA0EAgACMAcDBQAoAAkAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDMYTANBgkq hkiG9w0BAQsFAAOCAQEAiGGSgvU+2dPSjTNGFxdarE0x4AAloIeiCQQlTenN1tnf 5jplXsAR1xj6Z8lpny+Zn8gUDx9/zcIrtMQE6d8RTTy7XqXuST0o9v9j46WykzWb Pwb5OP6YCudgoXlhzeThC89GrYRgowRr/Rqb8Vu8wjHVPcLXU4KQIADQlSkIJrOk hFcbghVBOcYOYmhVCOL+9qAe+hwp9qqg/X0YRTRpDvBRvctNkOSSxxEYSXimMTbB rzKYoqaYln9EYy5wnssxXY2dANHgn+2upoycFwwESYEJsBOB96KDPqGrzWKhsqy0 2kgWzOLeO6X06H8yg2lYaUueZTSnnsvgDCQYm00sOQ== -----END CERTIFICATE-----Generated at Sat Jun 13 22:08:04 2026 by rpki-client