$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0783118E3DB9EF6C452DF9A64D6409CCFBC5BF0E.cer File: 0783118E3DB9EF6C452DF9A64D6409CCFBC5BF0E.cer (raw, json) Hash identifier: DS5+1S9ws7V8HRIDNV4tNQ+m8cUP3pH2Pe+emdxmHAk= Subject key identifier: 07:83:11:8E:3D:B9:EF:6C:45:2D:F9:A6:4D:64:09:CC:FB:C5:BF:0E Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 0E2CD7714E882018CAA2376A98A26E688A6E6789 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/F4D8221D5720392C9C4D58EBE8E647D6916C55C606B2576137A2212C706761A5/0/0783118E3DB9EF6C452DF9A64D6409CCFBC5BF0E.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/F4D8221D5720392C9C4D58EBE8E647D6916C55C606B2576137A2212C706761A5/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 11:11:03 +0000 Certificate not after: Wed 27 Jan 2027 11:16:03 +0000 Subordinate resources: AS: 272974 IP: 2803:9590::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 05 Mar 2026 11:41:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:2c:d7:71:4e:88:20:18:ca:a2:37:6a:98:a2:6e:68:8a:6e:67:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 11:11:03 2026 GMT Not After : Jan 27 11:16:03 2027 GMT Subject: CN=0783118E3DB9EF6C452DF9A64D6409CCFBC5BF0E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:bd:cf:ba:7a:aa:2c:aa:8e:12:f7:e7:b0:d8: 26:fc:78:ff:f9:eb:1e:b0:fa:25:dd:1a:bf:8d:6a: da:13:b7:24:51:a4:84:b0:63:5d:29:84:23:2e:a2: 70:e5:6a:d1:fd:83:7c:92:fd:fb:80:de:c1:f5:fc: ce:a5:be:40:39:cc:12:d9:65:92:5a:4f:f7:da:8a: 97:02:9e:0e:c3:00:ca:93:da:97:06:00:7d:ee:d6: 9d:ea:ed:2a:ad:a4:ec:31:ac:b2:2c:8b:3f:23:7f: e3:2e:22:89:57:76:02:0a:df:f0:e3:76:f6:23:d0: d1:6c:19:89:fc:6d:fb:76:f6:4e:de:39:b7:bb:ed: fe:ff:b5:21:7e:39:df:54:38:19:8b:01:50:e2:db: 19:24:3f:93:ef:19:36:47:3d:13:18:d5:96:d9:14: b7:86:ab:b7:b5:9f:de:ca:83:8e:40:56:c7:82:5f: 26:14:f5:aa:bb:40:be:8e:3b:5d:2b:3c:8e:68:09: 5e:b5:e4:3b:ec:4e:19:e3:69:90:84:7c:42:ee:09: a8:4e:20:ba:d7:ca:a6:37:fe:ad:c8:32:ba:c7:e4: c0:0b:6e:8b:b5:32:84:7b:6e:03:18:14:69:cc:6e: 46:2e:02:fe:a0:98:0c:e7:c3:e4:9d:fe:5e:56:6e: 92:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 07:83:11:8E:3D:B9:EF:6C:45:2D:F9:A6:4D:64:09:CC:FB:C5:BF:0E X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/F4D8221D5720392C9C4D58EBE8E647D6916C55C606B2576137A2212C706761A5/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/F4D8221D5720392C9C4D58EBE8E647D6916C55C606B2576137A2212C706761A5/0/0783118E3DB9EF6C452DF9A64D6409CCFBC5BF0E.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:9590::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 272974 Signature Algorithm: sha256WithRSAEncryption 8d:9d:76:84:74:33:fb:72:9d:8b:6c:a1:0f:2f:97:91:67:ab: fb:e2:68:f0:f9:34:aa:8f:1f:fd:42:d0:97:c0:8f:73:65:73: 29:20:6d:fe:25:f7:7e:e5:4e:7e:99:9d:6a:fa:b9:18:ca:3f: ff:1f:e6:3b:e9:58:c3:c1:76:36:02:57:f5:98:74:4d:38:52: 9a:77:50:41:1d:9a:5b:48:3b:c0:a4:ca:f1:f0:8b:b7:d1:8d: 94:38:df:2c:8f:6c:a6:6e:a9:0f:c5:91:1d:ac:95:9a:57:4b: 90:2a:91:82:53:83:a0:1e:c5:ba:fd:6c:7f:ca:05:45:1a:6c: ad:41:7b:a9:9d:d4:5a:43:40:82:ba:9a:b6:32:4b:b0:23:5e: b5:ae:32:8f:d1:c1:7f:13:ed:1b:81:e3:04:81:2b:87:15:c9: 72:96:57:cb:99:7b:a8:46:71:62:a9:6b:c1:26:f6:f1:6d:56: d1:c6:91:c9:ed:2d:72:9e:73:0b:c2:67:2a:70:3b:99:03:ef: 0d:6e:e9:6d:18:61:78:61:f8:38:13:32:42:d2:14:05:ec:30: cc:b4:c7:a3:2e:f3:67:2f:c1:74:87:a4:86:62:b1:35:86:b5: 46:33:ef:84:b3:d6:7c:73:81:f7:2e:19:80:f4:d2:57:bf:66: 40:08:ce:3e -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUDizXcU6IIBjKojdqmKJuaIpuZ4kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgxMTExMDNaFw0yNzAxMjcxMTE2MDNaMDMxMTAvBgNV BAMTKDA3ODMxMThFM0RCOUVGNkM0NTJERjlBNjRENjQwOUNDRkJDNUJGMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4vc+6eqosqo4S9+ew2Cb8eP/5 6x6w+iXdGr+NatoTtyRRpISwY10phCMuonDlatH9g3yS/fuA3sH1/M6lvkA5zBLZ ZZJaT/faipcCng7DAMqT2pcGAH3u1p3q7SqtpOwxrLIsiz8jf+MuIolXdgIK3/Dj dvYj0NFsGYn8bft29k7eObe77f7/tSF+Od9UOBmLAVDi2xkkP5PvGTZHPRMY1ZbZ FLeGq7e1n97Kg45AVseCXyYU9aq7QL6OO10rPI5oCV615DvsThnjaZCEfELuCahO ILrXyqY3/q3IMrrH5MALbou1MoR7bgMYFGnMbkYuAv6gmAznw+Sd/l5WbpItAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQHgxGOPbnvbEUt +aZNZAnM+8W/DjAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRjREODIyMUQ1NzIwMzkyQzlDNEQ1OEVC RThFNjQ3RDY5MTZDNTVDNjA2QjI1NzYxMzdBMjIxMkM3MDY3NjFBNS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9GNEQ4MjIxRDU3MjAzOTJDOUM0RDU4RUJFOEU2NDdENjkxNkM1NUM2MDZC MjU3NjEzN0EyMjEyQzcwNjc2MUE1LzAvMDc4MzExOEUzREI5RUY2QzQ1MkRGOUE2 NEQ2NDA5Q0NGQkM1QkYwRS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAOVkDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEKk4wDQYJKoZIhvcNAQELBQADggEBAI2ddoR0 M/tynYtsoQ8vl5Fnq/viaPD5NKqPH/1C0JfAj3Nlcykgbf4l937lTn6ZnWr6uRjK P/8f5jvpWMPBdjYCV/WYdE04Upp3UEEdmltIO8CkyvHwi7fRjZQ43yyPbKZuqQ/F kR2slZpXS5AqkYJTg6Aexbr9bH/KBUUabK1Be6md1FpDQIK6mrYyS7AjXrWuMo/R wX8T7RuB4wSBK4cVyXKWV8uZe6hGcWKpa8Em9vFtVtHGkcntLXKecwvCZypwO5kD 7w1u6W0YYXhh+DgTMkLSFAXsMMy0x6Mu82cvwXSHpIZisTWGtUYz74Sz1nxzgfcu GYD00le/ZkAIzj4= -----END CERTIFICATE-----Generated at Mon Mar 2 13:39:20 2026 by rpki-client