$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8305BDA7E40E8F8AE4D1C71F94B2AB15F216ABAD.cer File: 8305BDA7E40E8F8AE4D1C71F94B2AB15F216ABAD.cer (raw, json) Hash identifier: aE/igNmpaDNxDYFDUfQLNPGN16qiac/MU9jszQyiisE= Subject key identifier: 83:05:BD:A7:E4:0E:8F:8A:E4:D1:C7:1F:94:B2:AB:15:F2:16:AB:AD Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 5D6A6695A98DADBAE4DF408800461AD5416BEEE9 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/7D4D51A4DE9CDF6FB453AFCB01193DF237A00FF7F3AB1C93C94A79553335C8FE/0/8305BDA7E40E8F8AE4D1C71F94B2AB15F216ABAD.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/7D4D51A4DE9CDF6FB453AFCB01193DF237A00FF7F3AB1C93C94A79553335C8FE/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Fri 15 May 2026 19:10:01 +0000 Certificate not after: Fri 14 May 2027 19:15:01 +0000 Subordinate resources: AS: 274928 IP: 2803:1130::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 17 Jun 2026 16:50:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:6a:66:95:a9:8d:ad:ba:e4:df:40:88:00:46:1a:d5:41:6b:ee:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: May 15 19:10:01 2026 GMT Not After : May 14 19:15:01 2027 GMT Subject: CN=8305BDA7E40E8F8AE4D1C71F94B2AB15F216ABAD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:7c:70:94:ce:fd:ea:33:b6:5c:1f:ed:2d:71: 5a:51:22:f3:8e:d5:c6:b4:f6:4a:b4:1b:6b:79:f8: 9f:10:99:a2:21:aa:a6:2f:d0:8b:f1:5c:84:74:c2: 2a:b9:69:8c:8c:77:66:d0:0b:52:d6:98:f6:4b:69: e1:91:b3:fc:2a:7c:0a:b1:46:2d:f0:78:e5:20:71: a9:67:e2:00:4b:37:46:9b:9a:ac:5f:7e:df:59:78: aa:f7:92:44:93:aa:f4:52:77:e8:f4:aa:e8:96:bf: 6b:2e:76:ce:59:00:62:07:9b:e3:0e:50:7e:05:29: 47:3a:06:36:cb:03:1b:00:31:44:a0:d0:c8:e8:39: db:93:26:77:55:d4:aa:59:7a:cf:a4:db:ac:13:d6: 19:ff:43:fd:17:13:76:82:e6:9d:cb:25:92:88:e5: b0:ef:7e:fe:5e:ad:7d:bf:24:52:2e:06:b0:bd:4b: 77:4d:ce:b9:7a:ae:ab:86:59:5b:00:83:fa:55:c8: 19:de:0a:d5:e8:76:35:c3:3c:27:6b:2e:f4:5c:47: e8:a1:3d:bd:1b:3e:46:88:56:44:f6:4d:a4:32:58: 82:c1:e0:6b:89:10:9f:58:66:cc:f6:b2:ba:00:86: 53:ae:7b:84:40:00:05:3b:8a:75:14:37:4d:b4:a1: b2:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 83:05:BD:A7:E4:0E:8F:8A:E4:D1:C7:1F:94:B2:AB:15:F2:16:AB:AD X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/7D4D51A4DE9CDF6FB453AFCB01193DF237A00FF7F3AB1C93C94A79553335C8FE/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/7D4D51A4DE9CDF6FB453AFCB01193DF237A00FF7F3AB1C93C94A79553335C8FE/0/8305BDA7E40E8F8AE4D1C71F94B2AB15F216ABAD.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:1130::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 274928 Signature Algorithm: sha256WithRSAEncryption 29:b4:75:8d:04:53:40:2e:fe:66:8b:ab:50:30:04:fd:46:87: ea:12:9c:11:c4:91:7b:af:13:42:08:02:20:ee:ac:75:02:d0: fb:77:61:29:da:55:12:df:c6:cd:36:82:75:f5:c0:a6:f0:00: d3:1c:8c:0f:5a:a0:d7:20:b8:3e:2c:d1:fd:1f:73:3a:fc:af: 06:c6:f2:3e:ea:fa:0a:b1:f0:ca:6b:2e:4a:95:0c:23:ac:dc: 12:ee:ce:e2:7d:1a:2f:35:ed:c7:2e:5a:c2:fc:e6:fc:3b:79: 6a:49:17:40:13:c3:d1:31:fb:6d:ae:05:a3:41:60:80:82:3f: 35:83:12:00:11:54:87:7e:db:fd:da:f6:7c:2b:7c:31:22:21: 08:19:8a:d0:a8:be:9f:ea:e9:01:98:57:6a:44:fd:1d:f7:58: d1:cf:50:88:ba:0c:23:96:6c:59:c4:e4:b9:a3:65:c0:11:d7: f3:01:a6:e2:54:b0:a3:47:4e:18:2a:ec:71:13:34:c2:65:1d: ce:9a:7f:a9:03:67:0b:fd:ca:eb:72:5f:93:f1:06:06:4f:5c: 00:90:b7:ca:d9:93:9e:6e:a7:32:dc:e1:66:d8:ca:22:db:29: a3:47:a4:e0:9b:30:6a:f4:87:2f:a2:bf:ca:80:41:ec:c6:f9: 2c:97:bf:67 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUXWpmlamNrbrk30CIAEYa1UFr7ukwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjA1MTUxOTEwMDFaFw0yNzA1MTQxOTE1MDFaMDMxMTAvBgNV BAMTKDgzMDVCREE3RTQwRThGOEFFNEQxQzcxRjk0QjJBQjE1RjIxNkFCQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkfHCUzv3qM7ZcH+0tcVpRIvOO 1ca09kq0G2t5+J8QmaIhqqYv0IvxXIR0wiq5aYyMd2bQC1LWmPZLaeGRs/wqfAqx Ri3weOUgcaln4gBLN0abmqxfft9ZeKr3kkSTqvRSd+j0quiWv2suds5ZAGIHm+MO UH4FKUc6BjbLAxsAMUSg0MjoOduTJndV1KpZes+k26wT1hn/Q/0XE3aC5p3LJZKI 5bDvfv5erX2/JFIuBrC9S3dNzrl6rquGWVsAg/pVyBneCtXodjXDPCdrLvRcR+ih Pb0bPkaIVkT2TaQyWILB4GuJEJ9YZsz2sroAhlOue4RAAAU7inUUN020obKrAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSDBb2n5A6PiuTR xx+UsqsV8harrTAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvN0Q0RDUxQTRERTlDREY2RkI0NTNBRkNC MDExOTNERjIzN0EwMEZGN0YzQUIxQzkzQzk0QTc5NTUzMzM1QzhGRS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy83RDRENTFBNERFOUNERjZGQjQ1M0FGQ0IwMTE5M0RGMjM3QTAwRkY3RjNB QjFDOTNDOTRBNzk1NTMzMzVDOEZFLzAvODMwNUJEQTdFNDBFOEY4QUU0RDFDNzFG OTRCMkFCMTVGMjE2QUJBRC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAMRMDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEMfAwDQYJKoZIhvcNAQELBQADggEBACm0dY0E U0Au/maLq1AwBP1Gh+oSnBHEkXuvE0IIAiDurHUC0Pt3YSnaVRLfxs02gnX1wKbw ANMcjA9aoNcguD4s0f0fczr8rwbG8j7q+gqx8MprLkqVDCOs3BLuzuJ9Gi817ccu WsL85vw7eWpJF0ATw9Ex+22uBaNBYICCPzWDEgARVId+2/3a9nwrfDEiIQgZitCo vp/q6QGYV2pE/R33WNHPUIi6DCOWbFnE5LmjZcAR1/MBpuJUsKNHThgq7HETNMJl Hc6af6kDZwv9yutyX5PxBgZPXACQt8rZk55upzLc4WbYyiLbKaNHpOCbMGr0hy+i v8qAQezG+SyXv2c= -----END CERTIFICATE-----Generated at Sat Jun 13 09:56:37 2026 by rpki-client