$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0112D41BCB154C6D895A8F7F12E40C950EA901DE.cer File: 0112D41BCB154C6D895A8F7F12E40C950EA901DE.cer (raw, json) Hash identifier: fCJwhgUJzVC7Igi1H1P6j5qyrOab1XfQUMoGZhJ+feg= Subject key identifier: 01:12:D4:1B:CB:15:4C:6D:89:5A:8F:7F:12:E4:0C:95:0E:A9:01:DE Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 6E9C888B493B03862444E8462E3F85ABC2E55D78 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/E596F63D61FA387D22125079EDFDEE3839C2B7AC01C54D4057B156E9FDD0A6ED/0/0112D41BCB154C6D895A8F7F12E40C950EA901DE.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/E596F63D61FA387D22125079EDFDEE3839C2B7AC01C54D4057B156E9FDD0A6ED/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Mon 02 Mar 2026 03:45:01 +0000 Certificate not after: Mon 01 Mar 2027 03:50:01 +0000 Subordinate resources: AS: 274849 IP: 2803:8230::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:9c:88:8b:49:3b:03:86:24:44:e8:46:2e:3f:85:ab:c2:e5:5d:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Mar 2 03:45:01 2026 GMT Not After : Mar 1 03:50:01 2027 GMT Subject: CN=0112D41BCB154C6D895A8F7F12E40C950EA901DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:59:6a:79:c6:d4:47:ca:17:17:e6:04:4e:63: 6d:33:d5:74:3e:11:39:98:97:d6:86:fb:bf:87:f8: df:ff:4d:a8:9f:56:dd:dd:e6:d0:43:06:bf:59:a4: 6f:8d:3f:d4:12:ce:9c:08:3c:97:29:e7:c0:8f:89: 3e:1e:5b:12:1c:9c:1e:9f:0c:cf:30:37:88:ac:bf: 94:ed:ec:bd:ff:95:02:33:1f:e5:b9:c4:2c:56:0d: d6:4f:be:e6:ea:10:2c:23:0a:23:f3:9a:59:48:ee: 7c:10:f5:d9:59:71:c7:6b:06:d0:3a:5f:79:ee:25: ea:b4:94:3a:3e:4e:51:2d:4e:57:cd:f0:9c:7f:06: ec:86:cd:45:d9:cf:f7:66:73:97:62:c8:e5:ac:1d: a0:ca:76:08:7c:5f:20:f1:a2:7c:79:6e:7b:0c:c0: 86:45:19:cc:83:2f:ab:b4:b1:fd:50:36:43:1a:03: 78:f0:47:4d:c1:de:a8:5c:31:87:4f:60:1b:0d:f4: 1b:b9:81:4b:c9:fd:7c:d6:ec:94:93:ba:b7:07:29: 64:2f:d9:5b:29:73:92:8b:63:75:75:37:c4:4d:ed: 96:52:90:a5:5b:75:6b:f6:a8:a4:85:76:0c:a5:0c: 7d:71:ca:d1:35:dc:d9:17:7c:d9:7a:9f:75:47:6b: 23:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 01:12:D4:1B:CB:15:4C:6D:89:5A:8F:7F:12:E4:0C:95:0E:A9:01:DE X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/E596F63D61FA387D22125079EDFDEE3839C2B7AC01C54D4057B156E9FDD0A6ED/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/E596F63D61FA387D22125079EDFDEE3839C2B7AC01C54D4057B156E9FDD0A6ED/0/0112D41BCB154C6D895A8F7F12E40C950EA901DE.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:8230::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 274849 Signature Algorithm: sha256WithRSAEncryption 83:fb:e5:38:43:48:be:df:15:5b:d2:ff:b0:14:c7:7d:08:6c: 8a:7a:7a:bb:06:f9:76:5b:d5:34:23:22:94:c3:ea:6e:63:a4: 2e:e2:44:e8:7f:f0:29:cd:fe:83:36:3e:4b:40:9a:99:85:2c: d6:a4:a5:d5:6f:d9:d7:22:a4:5a:16:ec:0a:5c:1c:ee:8d:e7: a5:a0:74:02:24:14:55:f7:f4:2a:42:25:05:08:42:7f:d4:eb: 02:cd:58:89:d0:bb:6f:51:7a:d0:f0:1d:2d:be:ba:7c:77:cf: e5:0f:8f:43:d2:81:e7:ee:fe:81:50:08:d2:c2:88:6e:ae:a1: 5b:5d:15:5e:28:cb:98:af:00:8e:e2:c4:00:1e:65:12:00:49: b3:86:2d:2b:b5:6a:eb:12:90:9b:81:38:a0:05:32:2a:02:87: c4:f0:31:c1:1d:7b:19:af:26:85:4c:f5:03:d2:c7:3e:df:44: d6:98:86:d5:20:69:1c:66:c6:b4:d5:6b:57:8a:7a:7a:04:22: f4:73:0d:78:72:ed:47:4b:28:07:35:79:d8:47:b6:88:89:e1: 26:81:90:58:6f:3f:73:88:86:eb:8a:2f:eb:db:c3:9c:0f:09: a9:e8:f6:20:5b:88:46:f0:31:7f:25:93:77:e5:57:e3:72:bc: 7f:a0:24:45 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUbpyIi0k7A4YkROhGLj+Fq8LlXXgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAzMDIwMzQ1MDFaFw0yNzAzMDEwMzUwMDFaMDMxMTAvBgNV BAMTKDAxMTJENDFCQ0IxNTRDNkQ4OTVBOEY3RjEyRTQwQzk1MEVBOTAxREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmWWp5xtRHyhcX5gROY20z1XQ+ ETmYl9aG+7+H+N//TaifVt3d5tBDBr9ZpG+NP9QSzpwIPJcp58CPiT4eWxIcnB6f DM8wN4isv5Tt7L3/lQIzH+W5xCxWDdZPvubqECwjCiPzmllI7nwQ9dlZccdrBtA6 X3nuJeq0lDo+TlEtTlfN8Jx/BuyGzUXZz/dmc5diyOWsHaDKdgh8XyDxonx5bnsM wIZFGcyDL6u0sf1QNkMaA3jwR03B3qhcMYdPYBsN9Bu5gUvJ/XzW7JSTurcHKWQv 2Vspc5KLY3V1N8RN7ZZSkKVbdWv2qKSFdgylDH1xytE13NkXfNl6n3VHayPjAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQBEtQbyxVMbYla j38S5AyVDqkB3jAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTU5NkY2M0Q2MUZBMzg3RDIyMTI1MDc5 RURGREVFMzgzOUMyQjdBQzAxQzU0RDQwNTdCMTU2RTlGREQwQTZFRC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9FNTk2RjYzRDYxRkEzODdEMjIxMjUwNzlFREZERUUzODM5QzJCN0FDMDFD NTRENDA1N0IxNTZFOUZERDBBNkVELzAvMDExMkQ0MUJDQjE1NEM2RDg5NUE4RjdG MTJFNDBDOTUwRUE5MDFERS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAOCMDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEMaEwDQYJKoZIhvcNAQELBQADggEBAIP75ThD SL7fFVvS/7AUx30IbIp6ersG+XZb1TQjIpTD6m5jpC7iROh/8CnN/oM2PktAmpmF LNakpdVv2dcipFoW7ApcHO6N56WgdAIkFFX39CpCJQUIQn/U6wLNWInQu29RetDw HS2+unx3z+UPj0PSgefu/oFQCNLCiG6uoVtdFV4oy5ivAI7ixAAeZRIASbOGLSu1 ausSkJuBOKAFMioCh8TwMcEdexmvJoVM9QPSxz7fRNaYhtUgaRxmxrTVa1eKenoE IvRzDXhy7UdLKAc1edhHtoiJ4SaBkFhvP3OIhuuKL+vbw5wPCano9iBbiEbwMX8l k3flV+NyvH+gJEU= -----END CERTIFICATE-----Generated at Mon Mar 2 18:21:11 2026 by rpki-client