$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7FE5DBAB02EBD9A97C1E0F15482694D2345208D4.cer File: 7FE5DBAB02EBD9A97C1E0F15482694D2345208D4.cer (raw, json) Hash identifier: gY0jQ1cIjuj+n9wKYD3HS1Mud1sW9Fk1sJDVMjqnt9Y= Subject key identifier: 7F:E5:DB:AB:02:EB:D9:A9:7C:1E:0F:15:48:26:94:D2:34:52:08:D4 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 7B77F3BF4640D34EA895D464FD5FC80B62A9B759 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/A9CB43CE9BB865AA69FED020A18541221B3F890BAA151B8E15F9270E98D4F602/0/7FE5DBAB02EBD9A97C1E0F15482694D2345208D4.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/A9CB43CE9BB865AA69FED020A18541221B3F890BAA151B8E15F9270E98D4F602/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Fri 05 Jun 2026 02:30:00 +0000 Certificate not after: Fri 04 Jun 2027 02:35:00 +0000 Subordinate resources: AS: 27795 IP: 200.1.200.0/21 IP: 2803:5a40::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 17 Jun 2026 16:50:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:77:f3:bf:46:40:d3:4e:a8:95:d4:64:fd:5f:c8:0b:62:a9:b7:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jun 5 02:30:00 2026 GMT Not After : Jun 4 02:35:00 2027 GMT Subject: CN=7FE5DBAB02EBD9A97C1E0F15482694D2345208D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:be:e2:2b:bd:1a:b9:1b:3d:84:ea:19:98:5d: 36:83:ce:42:dc:f4:63:68:84:dd:9c:91:8b:58:d4: 15:76:89:89:91:c9:31:c7:11:27:10:12:05:88:1d: 7b:8e:76:b6:4b:86:81:af:89:ad:3a:ba:c0:5b:5f: 2c:ac:a3:ee:f3:9b:08:4a:ae:14:ca:96:e8:bb:98: 51:a4:fc:2e:33:81:d0:3b:d3:38:79:f6:c8:92:2d: f8:7a:74:51:03:fd:f1:13:89:c5:b3:36:03:06:92: 86:55:44:de:73:2c:a9:59:2d:9e:1f:21:42:f4:0b: 23:34:be:9d:e0:2c:4f:bf:d7:60:f7:ce:68:67:ab: 99:da:7d:b4:6d:54:1e:e5:e6:f4:25:a7:7b:aa:a4: 38:3f:cb:d3:46:2f:a1:83:fb:27:a9:14:20:1c:a3: 0a:a5:8f:83:11:80:9b:9c:10:f3:c4:bc:29:dc:5a: 3b:53:93:b3:f3:a6:7c:30:8a:1d:82:c6:e9:90:7e: 4c:7a:b9:a9:62:38:af:7e:53:b0:7b:0f:ea:8a:7e: ee:18:e8:96:c8:da:fe:42:db:aa:23:26:ea:0f:ac: 7e:d2:74:6e:70:98:45:4f:db:a1:af:61:fe:8e:cd: a0:f5:03:e2:6b:58:18:92:33:4b:0e:74:78:8c:77: 21:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7F:E5:DB:AB:02:EB:D9:A9:7C:1E:0F:15:48:26:94:D2:34:52:08:D4 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/A9CB43CE9BB865AA69FED020A18541221B3F890BAA151B8E15F9270E98D4F602/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/A9CB43CE9BB865AA69FED020A18541221B3F890BAA151B8E15F9270E98D4F602/0/7FE5DBAB02EBD9A97C1E0F15482694D2345208D4.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.1.200.0/21 IPv6: 2803:5a40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 27795 Signature Algorithm: sha256WithRSAEncryption 33:51:2d:c8:e8:e2:05:37:b3:70:63:9c:ae:79:f5:94:e2:88: d2:6d:86:2b:a9:4f:67:e7:af:ef:07:3e:15:15:0e:d5:6f:95: 8a:0d:4e:c0:95:e7:91:4b:32:f0:e1:29:32:0d:06:89:67:83: c7:00:27:13:f7:79:ca:73:42:1a:d8:28:1a:bc:ba:ac:4e:b9: d0:74:71:39:72:ba:b0:f8:89:d5:cd:62:28:29:3f:50:25:5b: 2a:01:95:22:3a:4c:47:b2:05:8c:ce:57:bf:d6:d7:29:b7:ef: 1d:e7:75:a2:ad:78:d5:16:4d:b3:89:38:1d:fe:ad:ca:e2:5e: 3e:fa:94:93:c2:58:fc:76:35:81:de:d1:8c:44:5e:a6:58:85: 67:5c:9c:25:55:7a:c7:35:a3:aa:5f:21:16:aa:86:2a:9d:8d: 8a:bd:52:e9:9f:ea:11:e5:9f:17:10:ee:63:76:c6:26:ae:13: c2:71:4c:96:e7:07:27:56:99:55:18:e9:88:1f:96:ba:d4:0e: fb:10:d3:0b:72:3f:c7:97:8f:13:09:f0:14:0c:b7:1e:57:8b: b7:80:25:65:4b:4d:57:17:55:88:f6:d4:eb:dc:86:f3:b8:c5: ac:03:b9:8b:fc:fd:e9:24:4f:54:47:7e:f5:c6:fd:48:26:64: bd:c2:1f:5b -----BEGIN CERTIFICATE----- MIIGpDCCBYygAwIBAgIUe3fzv0ZA006oldRk/V/IC2Kpt1kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjA2MDUwMjMwMDBaFw0yNzA2MDQwMjM1MDBaMDMxMTAvBgNV BAMTKDdGRTVEQkFCMDJFQkQ5QTk3QzFFMEYxNTQ4MjY5NEQyMzQ1MjA4RDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnvuIrvRq5Gz2E6hmYXTaDzkLc 9GNohN2ckYtY1BV2iYmRyTHHEScQEgWIHXuOdrZLhoGvia06usBbXyyso+7zmwhK rhTKlui7mFGk/C4zgdA70zh59siSLfh6dFED/fETicWzNgMGkoZVRN5zLKlZLZ4f IUL0CyM0vp3gLE+/12D3zmhnq5nafbRtVB7l5vQlp3uqpDg/y9NGL6GD+yepFCAc owqlj4MRgJucEPPEvCncWjtTk7Pzpnwwih2CxumQfkx6ualiOK9+U7B7D+qKfu4Y 6JbI2v5C26ojJuoPrH7SdG5wmEVP26GvYf6OzaD1A+JrWBiSM0sOdHiMdyG7AgMB AAGjggOuMIIDqjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR/5durAuvZqXwe DxVIJpTSNFII1DAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQTlDQjQzQ0U5QkI4NjVBQTY5RkVEMDIw QTE4NTQxMjIxQjNGODkwQkFBMTUxQjhFMTVGOTI3MEU5OEQ0RjYwMi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9BOUNCNDNDRTlCQjg2NUFBNjlGRUQwMjBBMTg1NDEyMjFCM0Y4OTBCQUEx NTFCOEUxNUY5MjcwRTk4RDRGNjAyLzAvN0ZFNURCQUIwMkVCRDlBOTdDMUUwRjE1 NDgyNjk0RDIzNDUyMDhENC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDyAHIMA0EAgAC MAcDBQAoA1pAMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAmyTMA0GCSqGSIb3DQEB CwUAA4IBAQAzUS3I6OIFN7NwY5yuefWU4ojSbYYrqU9n56/vBz4VFQ7Vb5WKDU7A leeRSzLw4SkyDQaJZ4PHACcT93nKc0Ia2CgavLqsTrnQdHE5crqw+InVzWIoKT9Q JVsqAZUiOkxHsgWMzle/1tcpt+8d53WirXjVFk2ziTgd/q3K4l4++pSTwlj8djWB 3tGMRF6mWIVnXJwlVXrHNaOqXyEWqoYqnY2KvVLpn+oR5Z8XEO5jdsYmrhPCcUyW 5wcnVplVGOmIH5a61A77ENMLcj/Hl48TCfAUDLceV4u3gCVlS01XF1WI9tTr3Ibz uMWsA7mL/P3pJE9UR371xv1IJmS9wh9b -----END CERTIFICATE-----Generated at Sun Jun 14 01:05:59 2026 by rpki-client