$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BDE65453DDDE8F22EEE7FF9C222FACD771156F1E.cer File: BDE65453DDDE8F22EEE7FF9C222FACD771156F1E.cer (raw, json) Hash identifier: sB5WeSxp4aiEu9JY3XBKrmQhxzNzyUvQYP/mzfdeDoQ= Subject key identifier: BD:E6:54:53:DD:DE:8F:22:EE:E7:FF:9C:22:2F:AC:D7:71:15:6F:1E Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 370D75691C3D40F49613EB4B23DE9C27A2A3D6B4 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/093C8412EDBA958FE216214D1EE3E19238F6CF25876EF55E7E27AAA6418F50F6/0/BDE65453DDDE8F22EEE7FF9C222FACD771156F1E.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/093C8412EDBA958FE216214D1EE3E19238F6CF25876EF55E7E27AAA6418F50F6/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Thu 15 Oct 2026 05:35:01 +0000 Certificate not after: Thu 14 Oct 2027 05:40:01 +0000 Subordinate resources: AS: 270121 IP: 190.123.4.0/22 IP: 2806:3c2::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 09 Nov 2026 08:43:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:0d:75:69:1c:3d:40:f4:96:13:eb:4b:23:de:9c:27:a2:a3:d6:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Oct 15 05:35:01 2026 GMT Not After : Oct 14 05:40:01 2027 GMT Subject: CN=BDE65453DDDE8F22EEE7FF9C222FACD771156F1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c9:6f:03:01:04:df:2f:4e:b3:c4:2e:e9:45: 4c:d1:d6:a9:23:4c:a2:a7:bc:24:f7:9b:4d:cd:07: 70:30:7c:5a:c4:21:75:4d:c1:ad:03:3e:84:3c:2f: cf:c3:98:f8:89:1d:cd:52:c3:a8:6f:aa:e6:be:d8: 62:09:d6:49:c0:ac:32:d1:b8:c4:63:8a:b1:fb:c3: 4e:dd:21:0e:7c:fc:c4:92:44:71:0c:9b:5f:9e:a7: 55:f1:db:37:79:a8:a9:48:cf:7e:23:45:16:a4:92: c0:37:55:60:ed:34:98:9e:27:53:47:9d:7f:32:be: 0f:48:d9:44:1b:48:aa:66:fc:b1:36:39:fe:07:34: 8b:6a:96:fb:ee:f7:66:ec:0c:ec:93:d9:39:61:ec: 58:7a:0f:1a:dc:9f:a7:1a:00:d8:10:ba:56:e8:75: 5f:6c:d8:8f:c8:52:24:03:23:32:9b:ec:e7:23:3b: 58:55:39:54:44:f8:40:f9:56:24:09:b3:43:86:cb: 53:88:ed:3a:57:16:ea:c2:10:e7:61:55:20:28:2a: 09:b0:26:2c:b6:58:69:61:7a:d6:8e:3a:1e:be:10: 1e:ba:a5:f6:53:9f:0d:36:d0:eb:37:78:fc:46:c0: ee:cf:10:3a:93:a3:3a:c6:dc:37:05:2e:2b:0c:99: 1c:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BD:E6:54:53:DD:DE:8F:22:EE:E7:FF:9C:22:2F:AC:D7:71:15:6F:1E X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/093C8412EDBA958FE216214D1EE3E19238F6CF25876EF55E7E27AAA6418F50F6/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/093C8412EDBA958FE216214D1EE3E19238F6CF25876EF55E7E27AAA6418F50F6/0/BDE65453DDDE8F22EEE7FF9C222FACD771156F1E.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 190.123.4.0/22 IPv6: 2806:3c2::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 270121 Signature Algorithm: sha256WithRSAEncryption 0a:db:68:af:a8:29:f0:a4:b8:90:5d:81:fb:63:b8:ff:db:da: 10:b9:d6:ea:f1:13:a2:19:a9:b7:f5:13:d0:fd:5e:7b:2a:0f: 72:08:07:dc:fd:68:27:3b:8c:42:55:7f:4f:18:a0:51:9a:0e: 23:e9:ef:4a:2c:9d:a4:e7:3b:da:10:b3:e2:36:00:e4:21:e2: 4a:c3:d6:b0:19:b5:68:fa:12:a4:1b:4d:c7:d7:0b:41:78:0b: a0:f4:e1:24:93:4d:f2:9b:5f:fc:fa:90:c2:53:88:b8:81:e9: 35:67:cc:6d:80:e3:a3:82:38:c2:6c:57:88:37:0d:86:a6:24: 83:77:d8:34:c8:c2:bf:a3:4c:91:04:b3:7e:26:a8:0f:33:1a: f9:9d:83:b0:f7:18:d9:98:ea:ea:a5:b3:62:6d:f3:58:a7:c5: 56:9a:bf:4b:48:d9:77:c8:55:34:17:98:fe:c3:0b:4f:0d:64: 13:5e:a0:c3:58:1d:28:00:bf:b3:8e:2d:be:15:49:58:4d:30: 07:fd:b9:47:13:07:dc:73:d2:0c:34:72:29:fa:e1:b8:5f:62: 82:5a:bd:4d:b5:48:26:1d:93:e5:c2:f6:60:25:10:2e:6c:1c: 9e:c5:18:cb:39:49:26:c9:5f:29:d5:fd:c5:95:88:5f:0d:c4: e2:8a:8f:73 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUNw11aRw9QPSWE+tLI96cJ6Kj1rQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjEwMTUwNTM1MDFaFw0yNzEwMTQwNTQwMDFaMDMxMTAvBgNV BAMTKEJERTY1NDUzRERERThGMjJFRUU3RkY5QzIyMkZBQ0Q3NzExNTZGMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqyW8DAQTfL06zxC7pRUzR1qkj TKKnvCT3m03NB3AwfFrEIXVNwa0DPoQ8L8/DmPiJHc1Sw6hvqua+2GIJ1knArDLR uMRjirH7w07dIQ58/MSSRHEMm1+ep1Xx2zd5qKlIz34jRRakksA3VWDtNJieJ1NH nX8yvg9I2UQbSKpm/LE2Of4HNItqlvvu92bsDOyT2Tlh7Fh6Dxrcn6caANgQulbo dV9s2I/IUiQDIzKb7OcjO1hVOVRE+ED5ViQJs0OGy1OI7TpXFurCEOdhVSAoKgmw Jiy2WGlhetaOOh6+EB66pfZTnw020Os3ePxGwO7PEDqTozrG3DcFLisMmRyBAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS95lRT3d6PIu7n /5wiL6zXcRVvHjAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMDkzQzg0MTJFREJBOTU4RkUyMTYyMTRE MUVFM0UxOTIzOEY2Q0YyNTg3NkVGNTVFN0UyN0FBQTY0MThGNTBGNi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8wOTNDODQxMkVEQkE5NThGRTIxNjIxNEQxRUUzRTE5MjM4RjZDRjI1ODc2 RUY1NUU3RTI3QUFBNjQxOEY1MEY2LzAvQkRFNjU0NTNERERFOEYyMkVFRTdGRjlD MjIyRkFDRDc3MTE1NkYxRS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCvnsEMA0EAgAC MAcDBQAoBgPCMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQfKTANBgkqhkiG9w0B AQsFAAOCAQEACttor6gp8KS4kF2B+2O4/9vaELnW6vETohmpt/UT0P1eeyoPcggH 3P1oJzuMQlV/TxigUZoOI+nvSiydpOc72hCz4jYA5CHiSsPWsBm1aPoSpBtNx9cL QXgLoPThJJNN8ptf/PqQwlOIuIHpNWfMbYDjo4I4wmxXiDcNhqYkg3fYNMjCv6NM kQSzfiaoDzMa+Z2DsPcY2Zjq6qWzYm3zWKfFVpq/S0jZd8hVNBeY/sMLTw1kE16g w1gdKAC/s44tvhVJWE0wB/25RxMH3HPSDDRyKfrhuF9iglq9TbVIJh2T5cL2YCUQ LmwcnsUYyzlJJslfKdX9xZWIXw3E4oqPcw== -----END CERTIFICATE-----Generated at Thu Nov 5 07:53:36 2026 by rpki-client