$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0883966BE5B6856A564CAC730936B0CC5143EE6A.cer File: 0883966BE5B6856A564CAC730936B0CC5143EE6A.cer (raw, json) Hash identifier: Hsln4iceEEqa0mXsY1uOXBGa74Icp88A9tZ4toOnyS4= Subject key identifier: 08:83:96:6B:E5:B6:85:6A:56:4C:AC:73:09:36:B0:CC:51:43:EE:6A Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 3FB56E99A6227377D0174D2FA9366156A7BE59B3 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/6C4303D66338C20B9ED3DE7FE4E7DAD08F476A1D5C503595ED8465EEBE4EF76E/0/0883966BE5B6856A564CAC730936B0CC5143EE6A.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/6C4303D66338C20B9ED3DE7FE4E7DAD08F476A1D5C503595ED8465EEBE4EF76E/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 16:28:41 +0000 Certificate not after: Wed 27 Jan 2027 16:33:41 +0000 Subordinate resources: AS: 273870 IP: 2803:1d50::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:b5:6e:99:a6:22:73:77:d0:17:4d:2f:a9:36:61:56:a7:be:59:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 16:28:41 2026 GMT Not After : Jan 27 16:33:41 2027 GMT Subject: CN=0883966BE5B6856A564CAC730936B0CC5143EE6A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:9f:42:66:89:3b:06:d5:42:ed:ab:27:d1:14: 36:80:65:c5:6f:ad:0e:5d:33:5b:14:0a:6f:1d:f8: 78:9f:ec:9f:e0:37:40:68:09:da:4b:ee:2d:02:32: 70:75:a5:53:1d:78:5a:63:96:3c:80:9c:3b:fa:0c: 7e:9b:39:2e:38:dc:46:75:50:86:45:f9:2e:16:89: be:dd:b4:eb:90:06:f1:3f:c1:57:a5:6a:a6:0c:a0: 29:39:34:22:bf:08:36:2f:38:b7:48:15:20:68:63: 9f:1a:03:4e:bd:0f:72:2a:9d:ab:1f:6a:bd:f4:4d: 83:fe:b7:d9:df:af:0a:11:8c:28:3a:1a:73:18:45: 57:36:5d:ba:19:bd:d5:fe:c4:c1:4c:d2:88:f6:5b: aa:d5:30:0f:61:e9:e6:3a:54:17:4c:48:e2:c2:e3: ca:33:8e:f5:f5:3b:40:b6:fe:a5:56:40:1f:fd:01: 55:e8:81:c5:ec:c5:c4:da:0b:11:0b:17:fb:0e:23: e9:b9:f7:94:68:68:83:ba:6b:82:e3:49:ab:11:38: b4:09:7f:17:ed:09:f3:0f:d0:1d:e6:fe:be:79:4d: 82:7c:33:40:9b:52:ec:42:9e:d8:96:8b:a4:8a:5f: 5e:29:1e:25:4b:fc:09:6c:b8:42:e6:45:09:0a:24: a4:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 08:83:96:6B:E5:B6:85:6A:56:4C:AC:73:09:36:B0:CC:51:43:EE:6A X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6C4303D66338C20B9ED3DE7FE4E7DAD08F476A1D5C503595ED8465EEBE4EF76E/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6C4303D66338C20B9ED3DE7FE4E7DAD08F476A1D5C503595ED8465EEBE4EF76E/0/0883966BE5B6856A564CAC730936B0CC5143EE6A.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:1d50::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273870 Signature Algorithm: sha256WithRSAEncryption 14:14:77:a1:a5:2f:b5:5e:bf:9c:b0:5d:8a:0f:57:19:7a:cd: d7:ef:71:cb:9e:e6:f3:12:a2:6f:a7:a3:f6:f4:33:82:ab:a3: 53:65:80:8e:7b:af:fb:8b:3f:d1:7b:c0:61:6e:66:55:f2:cf: d9:c1:80:03:44:5a:b9:b1:79:19:a1:10:b2:88:a2:36:a3:b0: 5b:cb:45:ba:09:68:f9:20:72:91:a6:33:e1:95:72:a8:9c:e5: 0e:ca:44:b9:ce:bb:b6:66:b9:91:2b:c2:be:82:1a:70:e1:14: c9:e7:b8:e0:53:c3:25:d9:37:d7:a6:a0:26:94:6c:b7:67:07: cb:0a:3e:2a:62:69:ef:3c:5c:fd:50:8c:b7:69:10:35:2d:f1: c6:7a:71:97:cd:84:f6:82:8b:cf:20:37:ab:3a:eb:57:8e:d8: 79:5c:e5:1d:5a:d8:fb:f0:41:c4:e9:51:d6:a2:b9:55:21:e2: 64:5e:fe:8b:58:12:aa:d8:64:f1:c1:b7:53:87:d1:83:41:7b: de:7c:d2:c2:e0:97:b8:65:db:d6:fd:cf:a3:87:e8:b3:89:06: 96:ce:fc:9c:a8:ec:77:3d:fb:ec:57:71:6f:f2:0c:cb:2f:db: ac:0d:73:14:2d:b7:a2:02:b8:a8:60:b7:52:34:54:fc:a7:5e: 23:3b:ee:19 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUP7VumaYic3fQF00vqTZhVqe+WbMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgxNjI4NDFaFw0yNzAxMjcxNjMzNDFaMDMxMTAvBgNV BAMTKDA4ODM5NjZCRTVCNjg1NkE1NjRDQUM3MzA5MzZCMENDNTE0M0VFNkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdn0JmiTsG1ULtqyfRFDaAZcVv rQ5dM1sUCm8d+Hif7J/gN0BoCdpL7i0CMnB1pVMdeFpjljyAnDv6DH6bOS443EZ1 UIZF+S4Wib7dtOuQBvE/wVelaqYMoCk5NCK/CDYvOLdIFSBoY58aA069D3Iqnasf ar30TYP+t9nfrwoRjCg6GnMYRVc2XboZvdX+xMFM0oj2W6rVMA9h6eY6VBdMSOLC 48ozjvX1O0C2/qVWQB/9AVXogcXsxcTaCxELF/sOI+m595RoaIO6a4LjSasROLQJ fxftCfMP0B3m/r55TYJ8M0CbUuxCntiWi6SKX14pHiVL/AlsuELmRQkKJKTTAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQIg5Zr5baFalZM rHMJNrDMUUPuajAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNkM0MzAzRDY2MzM4QzIwQjlFRDNERTdG RTRFN0RBRDA4RjQ3NkExRDVDNTAzNTk1RUQ4NDY1RUVCRTRFRjc2RS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy82QzQzMDNENjYzMzhDMjBCOUVEM0RFN0ZFNEU3REFEMDhGNDc2QTFENUM1 MDM1OTVFRDg0NjVFRUJFNEVGNzZFLzAvMDg4Mzk2NkJFNUI2ODU2QTU2NENBQzcz MDkzNkIwQ0M1MTQzRUU2QS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAMdUDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMELc4wDQYJKoZIhvcNAQELBQADggEBABQUd6Gl L7Vev5ywXYoPVxl6zdfvccue5vMSom+no/b0M4Kro1NlgI57r/uLP9F7wGFuZlXy z9nBgANEWrmxeRmhELKIojajsFvLRboJaPkgcpGmM+GVcqic5Q7KRLnOu7ZmuZEr wr6CGnDhFMnnuOBTwyXZN9emoCaUbLdnB8sKPipiae88XP1QjLdpEDUt8cZ6cZfN hPaCi88gN6s661eO2Hlc5R1a2PvwQcTpUdaiuVUh4mRe/otYEqrYZPHBt1OH0YNB e9580sLgl7hl29b9z6OH6LOJBpbO/Jyo7Hc9++xXcW/yDMsv26wNcxQtt6ICuKhg t1I0VPynXiM77hk= -----END CERTIFICATE-----Generated at Mon Mar 2 18:10:19 2026 by rpki-client