$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F926C131BCEF5FAF059927C2DD200E8ED3300EA.cer File: 9F926C131BCEF5FAF059927C2DD200E8ED3300EA.cer (raw, json) Hash identifier: 7lKxXzb/A1sbAnCLyORNlZTlUox74oGofd7FAKukejs= Subject key identifier: 9F:92:6C:13:1B:CE:F5:FA:F0:59:92:7C:2D:D2:00:E8:ED:33:00:EA Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 0EDA2C025FA1FB30E596CD2DCCBD82BFA2BFA4FE Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/CB8E6048BFB3002CB477FA75E7A60C21F5388B036BD8A5EDAA09F9AC40956A9E/0/9F926C131BCEF5FAF059927C2DD200E8ED3300EA.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/CB8E6048BFB3002CB477FA75E7A60C21F5388B036BD8A5EDAA09F9AC40956A9E/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Fri 10 Apr 2026 23:10:00 +0000 Certificate not after: Fri 09 Apr 2027 23:15:00 +0000 Subordinate resources: AS: 270214 IP: 2806:3fc::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Apr 2026 19:03:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:da:2c:02:5f:a1:fb:30:e5:96:cd:2d:cc:bd:82:bf:a2:bf:a4:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Apr 10 23:10:00 2026 GMT Not After : Apr 9 23:15:00 2027 GMT Subject: CN=9F926C131BCEF5FAF059927C2DD200E8ED3300EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b2:45:2e:ef:32:6d:47:7c:a4:cc:74:7e:ae: c8:d8:c6:d5:4f:d0:ea:d0:42:fd:b4:50:50:dc:55: 38:16:3c:48:de:ea:e6:06:78:0a:67:ea:e7:de:5e: d5:a3:7a:c6:d0:25:aa:37:be:ba:2a:f8:63:2b:03: 24:4d:fa:d2:63:5f:58:73:86:0f:f7:56:c6:c4:a5: fe:08:27:d6:ca:72:d4:e6:3a:83:f2:d8:d5:3e:c8: 13:5a:56:3b:8b:23:69:63:e7:b8:d1:76:f7:07:9c: 0d:5d:15:fb:2f:f9:8f:f4:08:83:02:0d:b4:5d:de: bf:c2:3b:1c:10:a9:f3:21:fe:a4:7c:5f:80:cc:e8: c9:ab:df:29:a9:b8:7e:60:a6:74:7f:d7:4f:46:d7: 63:38:fc:c6:95:b8:02:a0:2f:ee:fc:00:38:c8:fa: 02:64:19:cb:0e:3c:45:85:9f:b0:68:c0:36:1e:d6: 88:06:00:4b:14:3c:09:a5:41:94:52:18:fc:95:cc: 51:a3:bf:44:59:8f:59:58:50:a9:f7:a5:ef:6e:c2: 28:cc:2b:27:70:bc:d3:b2:a0:42:a5:5a:ff:b0:09: 48:f8:bc:7a:4f:68:b8:e4:07:72:ee:5e:90:ac:d2: 51:3b:bd:bd:dc:20:af:d0:01:1b:34:43:f3:ca:ee: af:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9F:92:6C:13:1B:CE:F5:FA:F0:59:92:7C:2D:D2:00:E8:ED:33:00:EA X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/CB8E6048BFB3002CB477FA75E7A60C21F5388B036BD8A5EDAA09F9AC40956A9E/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/CB8E6048BFB3002CB477FA75E7A60C21F5388B036BD8A5EDAA09F9AC40956A9E/0/9F926C131BCEF5FAF059927C2DD200E8ED3300EA.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2806:3fc::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 270214 Signature Algorithm: sha256WithRSAEncryption 44:16:32:78:1e:93:13:80:19:5f:51:b0:d2:9b:46:c2:0d:a6: b7:12:ba:18:5b:5c:cc:56:fe:3d:f4:6d:02:61:f7:4a:22:a3: 04:69:e8:d6:40:47:a5:b1:82:d0:3a:1d:bb:3f:f8:4c:e5:1c: 38:6e:20:26:bf:ad:ed:d7:c0:96:41:ff:03:e6:e1:66:f3:2c: e7:84:4e:00:13:1e:3e:92:b6:77:44:c8:6d:77:6f:80:89:fe: 31:f3:37:e3:c2:1a:fd:12:a5:20:29:46:38:16:ac:da:c5:6d: fe:24:90:f1:c8:69:8d:2c:c3:80:16:15:d0:69:59:4e:4d:32: f4:36:07:c8:77:1e:17:2a:b3:c1:77:50:82:75:e3:84:7b:85: b4:12:78:d4:b4:b3:a0:5d:8a:7f:e9:07:9f:36:71:be:e4:90: d4:e6:04:6b:6f:1e:85:22:4a:f9:85:67:7e:33:36:84:f8:af: 6a:49:4b:e2:6d:42:42:31:31:99:e6:9d:ef:c8:ad:a4:c0:8f: 62:dd:b7:1e:e7:68:85:30:12:e1:f2:fd:ec:5d:2a:11:75:32: c0:8e:be:d4:51:a9:0c:4e:90:e8:fe:d9:c7:69:d3:7c:0b:b8: 96:34:a6:f4:22:30:b1:11:4f:ab:20:8c:6d:24:5a:8f:6e:af: cb:15:e0:af -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUDtosAl+h+zDlls0tzL2Cv6K/pP4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjA0MTAyMzEwMDBaFw0yNzA0MDkyMzE1MDBaMDMxMTAvBgNV BAMTKDlGOTI2QzEzMUJDRUY1RkFGMDU5OTI3QzJERDIwMEU4RUQzMzAwRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwskUu7zJtR3ykzHR+rsjYxtVP 0OrQQv20UFDcVTgWPEje6uYGeApn6ufeXtWjesbQJao3vroq+GMrAyRN+tJjX1hz hg/3VsbEpf4IJ9bKctTmOoPy2NU+yBNaVjuLI2lj57jRdvcHnA1dFfsv+Y/0CIMC DbRd3r/COxwQqfMh/qR8X4DM6Mmr3ympuH5gpnR/109G12M4/MaVuAKgL+78ADjI +gJkGcsOPEWFn7BowDYe1ogGAEsUPAmlQZRSGPyVzFGjv0RZj1lYUKn3pe9uwijM KydwvNOyoEKlWv+wCUj4vHpPaLjkB3LuXpCs0lE7vb3cIK/QARs0Q/PK7q8xAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSfkmwTG871+vBZ knwt0gDo7TMA6jAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQ0I4RTYwNDhCRkIzMDAyQ0I0NzdGQTc1 RTdBNjBDMjFGNTM4OEIwMzZCRDhBNUVEQUEwOUY5QUM0MDk1NkE5RS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9DQjhFNjA0OEJGQjMwMDJDQjQ3N0ZBNzVFN0E2MEMyMUY1Mzg4QjAzNkJE OEE1RURBQTA5RjlBQzQwOTU2QTlFLzAvOUY5MjZDMTMxQkNFRjVGQUYwNTk5MjdD MkREMjAwRThFRDMzMDBFQS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAYD/DAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEH4YwDQYJKoZIhvcNAQELBQADggEBAEQWMnge kxOAGV9RsNKbRsINprcSuhhbXMxW/j30bQJh90oiowRp6NZAR6WxgtA6Hbs/+Ezl HDhuICa/re3XwJZB/wPm4WbzLOeETgATHj6StndEyG13b4CJ/jHzN+PCGv0SpSAp RjgWrNrFbf4kkPHIaY0sw4AWFdBpWU5NMvQ2B8h3Hhcqs8F3UIJ144R7hbQSeNS0 s6Bdin/pB582cb7kkNTmBGtvHoUiSvmFZ34zNoT4r2pJS+JtQkIxMZnmne/IraTA j2Ldtx7naIUwEuHy/exdKhF1MsCOvtRRqQxOkOj+2cdp03wLuJY0pvQiMLERT6sg jG0kWo9ur8sV4K8= -----END CERTIFICATE-----Generated at Fri Apr 17 19:10:01 2026 by rpki-client