$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D74784D7E5E292D48F736FFEB50979227E438E3.cer File: 0D74784D7E5E292D48F736FFEB50979227E438E3.cer (raw, json) Hash identifier: 1TzVx2axtM6oTbw8V1Xmo1+eBSPNHXHGOlfLz23QFCw= Subject key identifier: 0D:74:78:4D:7E:5E:29:2D:48:F7:36:FF:EB:50:97:92:27:E4:38:E3 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 199EC086E60BA4D447A8E25FD52695AD7C460545 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/0E3AF633EDE6ED1731C003BE4AC6267D0EB7EC77881E31078EB548EB170DBC4A/0/0D74784D7E5E292D48F736FFEB50979227E438E3.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/0E3AF633EDE6ED1731C003BE4AC6267D0EB7EC77881E31078EB548EB170DBC4A/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 27 Jan 2026 17:50:56 +0000 Certificate not after: Tue 26 Jan 2027 17:55:56 +0000 Subordinate resources: AS: 64139 IP: 2803:7090::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:9e:c0:86:e6:0b:a4:d4:47:a8:e2:5f:d5:26:95:ad:7c:46:05:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 27 17:50:56 2026 GMT Not After : Jan 26 17:55:56 2027 GMT Subject: CN=0D74784D7E5E292D48F736FFEB50979227E438E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:75:e2:8f:e1:69:dd:6a:7a:ef:2f:1a:f7:f9: 5c:c2:5a:14:b1:7b:25:d8:fe:dd:5f:83:79:a8:a6: c2:0b:e5:2f:2f:b5:bc:3a:c9:3e:d4:1f:a5:b7:aa: 3b:90:07:49:dc:ec:f2:37:f5:04:c0:63:9e:1d:0b: e2:f6:a9:2d:2a:a5:25:31:68:7d:1f:d2:80:c5:be: 05:98:b6:e0:7c:41:05:46:ce:10:ae:6e:15:d6:ea: 3a:66:bc:02:10:f8:e7:59:02:67:cd:43:ad:c1:15: 5a:32:9d:b0:1a:d9:e9:68:27:5d:6b:b9:d9:c6:55: 0b:e5:c2:ef:f7:c9:1b:83:65:9b:ad:41:25:40:42: 52:15:e1:ce:f4:6c:cc:b7:0f:85:49:21:fb:0a:db: 80:60:c2:22:2d:71:55:13:eb:21:ae:3f:d1:b6:1d: 82:09:f7:e1:23:cd:39:b3:5d:cb:23:c2:a2:8c:a6: 18:f8:30:50:19:ef:fa:89:c9:8e:7d:23:bf:05:3f: 34:d3:10:c9:cb:ce:d8:47:6c:8c:ec:f1:eb:2e:31: 45:f2:36:2d:7b:56:df:ce:66:af:e8:eb:c3:3d:8a: 9f:e0:85:15:bd:e3:e3:96:73:52:79:b3:e1:72:de: 05:ef:ac:68:d0:00:16:9f:b7:22:2e:d7:d9:3d:9f: ea:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 0D:74:78:4D:7E:5E:29:2D:48:F7:36:FF:EB:50:97:92:27:E4:38:E3 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0E3AF633EDE6ED1731C003BE4AC6267D0EB7EC77881E31078EB548EB170DBC4A/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0E3AF633EDE6ED1731C003BE4AC6267D0EB7EC77881E31078EB548EB170DBC4A/0/0D74784D7E5E292D48F736FFEB50979227E438E3.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:7090::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 64139 Signature Algorithm: sha256WithRSAEncryption 22:20:b8:d4:17:b5:1e:37:8b:08:a8:0b:08:60:2e:23:e6:ca: 3e:9f:26:00:b5:9a:0c:12:ef:0a:b0:f0:82:15:c5:15:f0:6b: ed:03:52:4b:e1:de:3e:cd:82:8d:d1:7c:0a:ab:fc:8f:81:e9: 88:b1:de:dd:0b:40:8f:da:71:03:57:33:5d:d1:35:be:7e:16: 03:e8:1b:22:60:4e:d7:26:7a:f7:96:cf:ed:76:89:c6:95:2b: 0b:66:00:b8:8f:2b:12:b7:b2:7a:e3:31:06:9f:72:c9:d0:db: 0b:df:3c:4a:5f:b6:7d:ab:59:4e:16:57:dd:02:dd:a1:d3:e2: 23:4d:0b:46:62:9b:a2:8b:ca:b5:38:23:81:8b:77:5b:c9:2d: c9:30:9f:4d:1d:b6:1e:53:97:03:e1:52:89:5e:74:7b:f4:b8: 5d:b8:2d:a8:5a:61:55:19:20:94:3f:6d:ae:18:58:13:37:f5: e1:67:f7:91:0d:66:ef:e5:ac:9f:12:cc:70:82:6e:3c:39:d5: fd:ab:c5:72:0a:62:c4:a1:57:d5:1a:de:b1:6a:38:47:00:11: 20:6a:78:78:03:29:92:47:b1:d0:ed:53:82:9f:18:c1:62:97: 0f:f1:30:44:87:88:d8:a3:78:80:ac:9d:77:c8:28:b5:17:23: e4:f3:a0:84 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUGZ7AhuYLpNRHqOJf1SaVrXxGBUUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjcxNzUwNTZaFw0yNzAxMjYxNzU1NTZaMDMxMTAvBgNV BAMTKDBENzQ3ODREN0U1RTI5MkQ0OEY3MzZGRkVCNTA5NzkyMjdFNDM4RTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6deKP4WndanrvLxr3+VzCWhSx eyXY/t1fg3mopsIL5S8vtbw6yT7UH6W3qjuQB0nc7PI39QTAY54dC+L2qS0qpSUx aH0f0oDFvgWYtuB8QQVGzhCubhXW6jpmvAIQ+OdZAmfNQ63BFVoynbAa2eloJ11r udnGVQvlwu/3yRuDZZutQSVAQlIV4c70bMy3D4VJIfsK24BgwiItcVUT6yGuP9G2 HYIJ9+EjzTmzXcsjwqKMphj4MFAZ7/qJyY59I78FPzTTEMnLzthHbIzs8esuMUXy Ni17Vt/OZq/o68M9ip/ghRW94+OWc1J5s+Fy3gXvrGjQABaftyIu19k9n+rFAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQNdHhNfl4pLUj3 Nv/rUJeSJ+Q44zAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMEUzQUY2MzNFREU2RUQxNzMxQzAwM0JF NEFDNjI2N0QwRUI3RUM3Nzg4MUUzMTA3OEVCNTQ4RUIxNzBEQkM0QS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8wRTNBRjYzM0VERTZFRDE3MzFDMDAzQkU0QUM2MjY3RDBFQjdFQzc3ODgx RTMxMDc4RUI1NDhFQjE3MERCQzRBLzAvMEQ3NDc4NEQ3RTVFMjkyRDQ4RjczNkZG RUI1MDk3OTIyN0U0MzhFMy5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKANwkDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMA+oswDQYJKoZIhvcNAQELBQADggEBACIguNQX tR43iwioCwhgLiPmyj6fJgC1mgwS7wqw8IIVxRXwa+0DUkvh3j7Ngo3RfAqr/I+B 6Yix3t0LQI/acQNXM13RNb5+FgPoGyJgTtcmeveWz+12icaVKwtmALiPKxK3snrj MQafcsnQ2wvfPEpftn2rWU4WV90C3aHT4iNNC0Zim6KLyrU4I4GLd1vJLckwn00d th5TlwPhUoledHv0uF24LahaYVUZIJQ/ba4YWBM39eFn95ENZu/lrJ8SzHCCbjw5 1f2rxXIKYsShV9Ua3rFqOEcAESBqeHgDKZJHsdDtU4KfGMFilw/xMESHiNijeICs nXfIKLUXI+TzoIQ= -----END CERTIFICATE-----Generated at Mon Mar 2 14:13:25 2026 by rpki-client