$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08E1D005859DBE3C114C7D529B50ECE6F551C0FF.cer File: 08E1D005859DBE3C114C7D529B50ECE6F551C0FF.cer (raw, json) Hash identifier: 6wOeNYv/8GS5fNLM5DW8TUSgi+mRUiNkVnWMRQRGtP8= Subject key identifier: 08:E1:D0:05:85:9D:BE:3C:11:4C:7D:52:9B:50:EC:E6:F5:51:C0:FF Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 5F8DDA9D0953B9E9E84CEBFDD9D56ACF7F505E26 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/D71199B0D46FAD9B2376D7EF9E84F1AD6B97129C5F406CE4D61131D65645E5E8/0/08E1D005859DBE3C114C7D529B50ECE6F551C0FF.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/D71199B0D46FAD9B2376D7EF9E84F1AD6B97129C5F406CE4D61131D65645E5E8/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 22:49:27 +0000 Certificate not after: Wed 27 Jan 2027 22:54:27 +0000 Subordinate resources: IP: 2801:1ad::/40 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:8d:da:9d:09:53:b9:e9:e8:4c:eb:fd:d9:d5:6a:cf:7f:50:5e:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 22:49:27 2026 GMT Not After : Jan 27 22:54:27 2027 GMT Subject: CN=08E1D005859DBE3C114C7D529B50ECE6F551C0FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:07:e4:be:f3:e0:95:33:1d:d7:77:28:e6:85: 15:3b:37:7b:8b:1c:83:e8:f0:32:35:ad:1f:d5:0e: 0d:ab:7a:be:95:67:c5:f0:78:e9:28:ca:a3:5f:6d: 0a:8c:de:bc:fa:f2:fa:70:93:dd:fd:9c:73:c6:6b: 66:c3:d0:20:85:9c:d7:6d:51:8f:4b:e5:7c:54:b1: 28:6d:c4:0d:06:a2:06:c4:b6:e6:91:ed:0a:e2:a6: 49:19:74:c3:43:8f:cc:ee:e8:7c:a1:28:89:33:01: aa:20:1b:0d:5b:2d:b1:be:b3:af:10:08:52:b1:92: a1:70:f5:a9:fd:e3:72:38:c4:32:09:8f:d3:b9:62: d3:68:01:31:c0:13:47:a0:0d:1a:2c:73:0f:96:03: 1b:3f:d0:d5:b4:33:f6:b3:93:f5:30:7b:28:9a:50: d6:35:bd:56:41:ce:de:4a:a8:e5:49:2e:e0:9d:db: a7:7c:d3:ed:e2:d2:4c:88:40:15:13:9c:98:82:27: a9:d3:72:35:6c:e8:58:7c:02:71:93:7c:10:dd:15: 1a:88:4b:a6:e8:42:f1:09:ff:b5:34:6b:f4:46:b4: 79:dc:be:99:ba:4c:85:e0:7b:0f:7b:2f:a9:6f:d2: 8b:43:75:1c:c1:26:1d:65:f9:7f:4f:56:a3:2e:3c: 4d:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 08:E1:D0:05:85:9D:BE:3C:11:4C:7D:52:9B:50:EC:E6:F5:51:C0:FF X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/D71199B0D46FAD9B2376D7EF9E84F1AD6B97129C5F406CE4D61131D65645E5E8/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/D71199B0D46FAD9B2376D7EF9E84F1AD6B97129C5F406CE4D61131D65645E5E8/0/08E1D005859DBE3C114C7D529B50ECE6F551C0FF.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2801:1ad::/40 Signature Algorithm: sha256WithRSAEncryption 6f:a5:19:d4:ef:63:14:28:90:1e:5d:ca:57:a4:bb:20:3e:39: 90:5e:4d:05:01:3e:15:e6:3b:5b:6e:4b:06:19:20:a0:b5:fb: 9b:f9:c2:71:1f:9b:05:ce:87:b5:2d:fd:06:de:b2:d5:56:f5: 60:72:d9:1e:e3:79:00:3e:d2:c8:09:cb:80:d1:40:34:ac:13: 0f:1a:b0:0f:ae:98:88:cd:85:56:e6:60:06:4d:4e:0f:8f:ca: 3e:f8:20:fc:1e:e7:b2:ba:7d:27:40:38:ee:38:c4:b8:e8:e7: 71:47:f3:f2:91:8a:54:04:ce:d9:fe:7e:7e:98:d6:de:fd:b0: 46:dc:9c:ce:da:b6:49:ca:e6:f2:90:96:e6:9e:b9:c2:b7:df: 84:38:70:d1:85:71:a7:f8:cf:c6:6c:38:6b:55:51:68:b7:cf: 96:72:15:02:17:b7:6b:d5:31:b0:8f:8b:7a:d1:dc:24:d2:81: c4:21:ff:8e:c5:ac:cc:66:de:8c:14:99:99:c2:ae:7a:f6:74: c7:08:68:1a:0a:a3:d4:db:a0:0a:13:fc:a4:01:7b:0e:b9:e1: 24:63:ad:66:3d:e0:7f:58:6d:b4:a0:cd:d5:0b:7a:a3:ef:21: 16:7e:4f:25:d9:56:c0:df:15:75:8d:da:6b:1a:b5:bc:3f:38: 3a:92:05:94 -----BEGIN CERTIFICATE----- MIIGfDCCBWSgAwIBAgIUX43anQlTuenoTOv92dVqz39QXiYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgyMjQ5MjdaFw0yNzAxMjcyMjU0MjdaMDMxMTAvBgNV BAMTKDA4RTFEMDA1ODU5REJFM0MxMTRDN0Q1MjlCNTBFQ0U2RjU1MUMwRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0B+S+8+CVMx3XdyjmhRU7N3uL HIPo8DI1rR/VDg2rer6VZ8XweOkoyqNfbQqM3rz68vpwk939nHPGa2bD0CCFnNdt UY9L5XxUsShtxA0GogbEtuaR7QripkkZdMNDj8zu6HyhKIkzAaogGw1bLbG+s68Q CFKxkqFw9an943I4xDIJj9O5YtNoATHAE0egDRoscw+WAxs/0NW0M/azk/Uweyia UNY1vVZBzt5KqOVJLuCd26d80+3i0kyIQBUTnJiCJ6nTcjVs6Fh8AnGTfBDdFRqI S6boQvEJ/7U0a/RGtHncvpm6TIXgew97L6lv0otDdRzBJh1l+X9PVqMuPE19AgMB AAGjggOGMIIDgjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQI4dAFhZ2+PBFM fVKbUOzm9VHA/zAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRDcxMTk5QjBENDZGQUQ5QjIzNzZEN0VG OUU4NEYxQUQ2Qjk3MTI5QzVGNDA2Q0U0RDYxMTMxRDY1NjQ1RTVFOC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9ENzExOTlCMEQ0NkZBRDlCMjM3NkQ3RUY5RTg0RjFBRDZCOTcxMjlDNUY0 MDZDRTRENjExMzFENjU2NDVFNUU4LzAvMDhFMUQwMDU4NTlEQkUzQzExNEM3RDUy OUI1MEVDRTZGNTUxQzBGRi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKAEBrQAwDQYJ KoZIhvcNAQELBQADggEBAG+lGdTvYxQokB5dylekuyA+OZBeTQUBPhXmO1tuSwYZ IKC1+5v5wnEfmwXOh7Ut/QbestVW9WBy2R7jeQA+0sgJy4DRQDSsEw8asA+umIjN hVbmYAZNTg+Pyj74IPwe57K6fSdAOO44xLjo53FH8/KRilQEztn+fn6Y1t79sEbc nM7atknK5vKQluaeucK334Q4cNGFcaf4z8ZsOGtVUWi3z5ZyFQIXt2vVMbCPi3rR 3CTSgcQh/47FrMxm3owUmZnCrnr2dMcIaBoKo9TboAoT/KQBew654SRjrWY94H9Y bbSgzdULeqPvIRZ+TyXZVsDfFXWN2msatbw/ODqSBZQ= -----END CERTIFICATE-----Generated at Mon Mar 2 14:15:17 2026 by rpki-client