$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A26DB1C45A0B2221F41942659EC6674B93A3222.cer File: 6A26DB1C45A0B2221F41942659EC6674B93A3222.cer (raw, json) Hash identifier: FsqIrWwpyXE7ChmFEJi0XX5D3FXe5z2r30Ye2BNu2/0= Subject key identifier: 6A:26:DB:1C:45:A0:B2:22:1F:41:94:26:59:EC:66:74:B9:3A:32:22 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 1C8D057D68DBBF7248E0A89C9DA4585D99945817 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/B19B3B26A7CCC4A2C3477911A3A26C385299F35117C1BB942A488B0F9EA2D312/0/6A26DB1C45A0B2221F41942659EC6674B93A3222.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/B19B3B26A7CCC4A2C3477911A3A26C385299F35117C1BB942A488B0F9EA2D312/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 07 Apr 2026 16:55:01 +0000 Certificate not after: Tue 06 Apr 2027 17:00:01 +0000 Subordinate resources: AS: 274414 IP: 2806:461::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 22 Apr 2026 04:33:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:8d:05:7d:68:db:bf:72:48:e0:a8:9c:9d:a4:58:5d:99:94:58:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Apr 7 16:55:01 2026 GMT Not After : Apr 6 17:00:01 2027 GMT Subject: CN=6A26DB1C45A0B2221F41942659EC6674B93A3222 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:24:02:a2:59:0e:b2:03:0a:b9:21:38:e5:fd: 24:06:cc:21:84:7e:bb:3e:ff:db:71:47:58:2e:14: a9:b7:cb:66:1d:fb:6f:fe:b1:fe:19:d0:19:9b:42: 1b:33:cf:99:d7:f5:00:49:e2:15:d7:e0:0c:7e:42: 21:07:4b:19:e9:a9:cb:92:be:b6:b9:d1:84:f0:5c: 5a:92:45:a8:4f:57:44:9c:7f:4a:62:5d:54:76:cf: 9c:e9:30:d6:94:d3:20:e7:c7:4c:59:89:ec:e4:97: 55:4d:27:9a:26:a4:ca:04:94:eb:a0:17:8f:ed:02: d7:29:95:87:5c:11:d2:fb:1f:73:0f:6d:93:ec:70: 88:ea:d2:1b:92:6f:09:9a:d1:9e:b7:4b:9a:04:98: be:6b:1b:f2:be:cd:b3:22:c1:44:c4:ea:bd:21:9f: d5:46:5b:17:24:27:8c:39:52:a2:c0:f4:89:8b:2f: 59:13:49:46:f4:ac:5c:9b:63:3a:c1:0d:cf:cc:2a: bb:05:68:2d:82:77:93:f5:d6:c6:bc:9f:cc:2e:51: 0e:de:49:68:f0:48:0d:b3:0e:79:23:91:47:89:59: 24:cf:32:b2:7b:54:f6:4e:07:13:45:ae:a9:18:ce: 92:83:d7:f1:32:c2:a6:45:68:41:dd:5e:de:bd:a0: 1f:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 6A:26:DB:1C:45:A0:B2:22:1F:41:94:26:59:EC:66:74:B9:3A:32:22 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/B19B3B26A7CCC4A2C3477911A3A26C385299F35117C1BB942A488B0F9EA2D312/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/B19B3B26A7CCC4A2C3477911A3A26C385299F35117C1BB942A488B0F9EA2D312/0/6A26DB1C45A0B2221F41942659EC6674B93A3222.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2806:461::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 274414 Signature Algorithm: sha256WithRSAEncryption 0c:13:93:27:a5:c4:e2:53:69:d7:58:df:a8:65:cc:73:de:2e: df:99:df:cf:14:3f:0c:74:d0:03:37:38:bd:0a:7a:c6:5b:e6: 4c:ab:9a:bb:98:fa:f4:e0:92:9c:c6:9d:40:92:76:87:a6:08: 8e:e2:34:7f:44:fd:31:f9:1c:6a:1f:18:f8:1b:b3:41:59:0a: b4:98:0c:25:31:4d:a0:e1:42:92:b9:cf:db:cd:75:be:63:02: 49:c6:04:fd:17:bd:c0:96:d9:2d:cd:b6:e9:0a:bc:1d:bf:fe: 66:3c:76:06:65:15:57:56:90:dc:d6:eb:53:01:6d:59:c7:9b: 84:3f:dc:ce:d2:d2:b1:97:25:e5:50:0a:49:57:83:70:eb:b9: f1:50:03:7d:7d:6b:31:77:9f:17:ae:28:b1:26:99:c5:8a:8d: 9a:75:e2:09:7b:43:f4:f4:b8:ca:42:d5:6e:61:b2:42:a8:25: 4c:55:92:1d:10:de:40:0f:ce:ac:83:56:43:8d:04:68:be:1c: 76:4d:de:59:b8:c0:1d:31:f0:db:1b:be:99:c3:86:d0:a4:d3: 1b:17:93:85:e0:8b:92:3d:12:41:dc:d8:17:e2:dc:0a:3b:62: 50:05:aa:57:30:25:c2:d2:c8:7e:42:15:83:6d:07:14:f9:6e: f9:72:fa:61 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUHI0FfWjbv3JI4KicnaRYXZmUWBcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjA0MDcxNjU1MDFaFw0yNzA0MDYxNzAwMDFaMDMxMTAvBgNV BAMTKDZBMjZEQjFDNDVBMEIyMjIxRjQxOTQyNjU5RUM2Njc0QjkzQTMyMjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2JAKiWQ6yAwq5ITjl/SQGzCGE frs+/9txR1guFKm3y2Yd+2/+sf4Z0BmbQhszz5nX9QBJ4hXX4Ax+QiEHSxnpqcuS vra50YTwXFqSRahPV0Scf0piXVR2z5zpMNaU0yDnx0xZiezkl1VNJ5ompMoElOug F4/tAtcplYdcEdL7H3MPbZPscIjq0huSbwma0Z63S5oEmL5rG/K+zbMiwUTE6r0h n9VGWxckJ4w5UqLA9ImLL1kTSUb0rFybYzrBDc/MKrsFaC2Cd5P11sa8n8wuUQ7e SWjwSA2zDnkjkUeJWSTPMrJ7VPZOBxNFrqkYzpKD1/EywqZFaEHdXt69oB+xAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRqJtscRaCyIh9B lCZZ7GZ0uToyIjAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQjE5QjNCMjZBN0NDQzRBMkMzNDc3OTEx QTNBMjZDMzg1Mjk5RjM1MTE3QzFCQjk0MkE0ODhCMEY5RUEyRDMxMi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9CMTlCM0IyNkE3Q0NDNEEyQzM0Nzc5MTFBM0EyNkMzODUyOTlGMzUxMTdD MUJCOTQyQTQ4OEIwRjlFQTJEMzEyLzAvNkEyNkRCMUM0NUEwQjIyMjFGNDE5NDI2 NTlFQzY2NzRCOTNBMzIyMi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAYEYTAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEL+4wDQYJKoZIhvcNAQELBQADggEBAAwTkyel xOJTaddY36hlzHPeLt+Z388UPwx00AM3OL0KesZb5kyrmruY+vTgkpzGnUCSdoem CI7iNH9E/TH5HGofGPgbs0FZCrSYDCUxTaDhQpK5z9vNdb5jAknGBP0XvcCW2S3N tukKvB2//mY8dgZlFVdWkNzW61MBbVnHm4Q/3M7S0rGXJeVQCklXg3DrufFQA319 azF3nxeuKLEmmcWKjZp14gl7Q/T0uMpC1W5hskKoJUxVkh0Q3kAPzqyDVkONBGi+ HHZN3lm4wB0x8NsbvpnDhtCk0xsXk4Xgi5I9EkHc2Bfi3Ao7YlAFqlcwJcLSyH5C FYNtBxT5bvly+mE= -----END CERTIFICATE-----Generated at Fri Apr 17 22:41:26 2026 by rpki-client