$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0DFF2DC79EE538393460BA53D01DC71916150D41.cer File: 0DFF2DC79EE538393460BA53D01DC71916150D41.cer (raw, json) Hash identifier: 7PfmXZD82X2aEsRVu15tSMyTBm2kvwhC0NT5EEcsqmw= Subject key identifier: 0D:FF:2D:C7:9E:E5:38:39:34:60:BA:53:D0:1D:C7:19:16:15:0D:41 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 599B15876D2DB11CBBF25E9302EF5E8D4BFDC036 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/A799CC9E3583D4E8E794A0ABEEC59F9B172E6489CBCBFA2E66491362C3C5964F/0/0DFF2DC79EE538393460BA53D01DC71916150D41.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/A799CC9E3583D4E8E794A0ABEEC59F9B172E6489CBCBFA2E66491362C3C5964F/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 10:26:58 +0000 Certificate not after: Wed 27 Jan 2027 10:31:58 +0000 Subordinate resources: AS: 273068 IP: 2803:b790::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 05 Mar 2026 11:41:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:9b:15:87:6d:2d:b1:1c:bb:f2:5e:93:02:ef:5e:8d:4b:fd:c0:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 10:26:58 2026 GMT Not After : Jan 27 10:31:58 2027 GMT Subject: CN=0DFF2DC79EE538393460BA53D01DC71916150D41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:74:94:63:51:73:cd:57:02:3d:62:42:a3:51: ab:c2:e3:7a:8c:f8:d3:48:b9:2a:48:6d:40:c9:0a: b9:3c:68:26:4b:99:38:c5:cd:17:3c:f1:4c:7f:76: 47:fe:94:d4:a7:d3:12:aa:69:78:aa:55:1b:21:ff: c8:1f:d5:fe:0d:14:88:a7:f8:17:f8:50:87:20:32: a7:1f:fe:e5:dd:69:f5:19:13:9b:10:ab:11:35:a1: 42:7a:4d:e5:00:ad:1b:49:f8:f8:6c:15:a2:05:01: 0b:53:cf:f7:83:20:09:76:02:ea:13:83:e4:12:dd: 4c:9d:ab:e1:3b:e3:42:73:94:e8:2f:46:8e:4a:68: 28:85:51:b9:73:d0:b3:21:8e:30:bc:6e:25:24:ff: 35:5e:63:dc:e3:ec:65:72:13:7f:38:bb:f4:a4:ae: ca:54:ed:09:be:8e:28:b5:eb:97:dd:b6:09:82:19: 23:5c:72:04:fd:96:5e:6b:f2:8c:c5:e6:e6:7b:08: a6:61:cd:2f:90:dc:3f:73:a1:f5:83:88:c8:55:37: 32:de:9a:4e:f4:eb:03:70:a4:ee:47:9b:22:0e:44: 3e:a5:a4:f7:56:6e:44:a4:76:d4:b3:90:d7:6a:60: c7:e0:f2:5d:d7:78:77:86:3b:e9:28:58:d3:ba:fc: ae:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 0D:FF:2D:C7:9E:E5:38:39:34:60:BA:53:D0:1D:C7:19:16:15:0D:41 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/A799CC9E3583D4E8E794A0ABEEC59F9B172E6489CBCBFA2E66491362C3C5964F/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/A799CC9E3583D4E8E794A0ABEEC59F9B172E6489CBCBFA2E66491362C3C5964F/0/0DFF2DC79EE538393460BA53D01DC71916150D41.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:b790::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273068 Signature Algorithm: sha256WithRSAEncryption 0d:ab:cd:33:ee:23:34:85:4b:0b:b9:d1:46:c8:2f:5e:d3:99: 51:36:b0:89:0f:77:a5:04:d4:88:c3:17:89:a1:d2:6e:2d:1b: ef:67:ef:9e:17:ad:0f:33:56:d7:c9:47:d9:1b:ad:0d:74:db: da:16:eb:9f:ba:81:aa:79:79:55:1f:00:be:d2:a2:79:9d:14: 39:ca:82:ba:b0:be:e5:42:04:50:83:fb:56:d8:28:f9:2e:20: 8e:66:fa:ca:4a:32:87:fe:63:7a:bd:96:1d:0e:40:54:96:ff: 6d:37:0e:51:ed:0d:09:8e:97:48:a5:33:25:41:3b:b4:ed:ee: ad:90:24:77:97:15:14:19:98:a5:6b:0d:b8:be:14:fd:e1:da: ff:fb:3d:4e:e5:3c:85:be:77:25:a7:2e:90:f5:58:4d:dd:23: 64:97:a6:b5:14:de:4c:5e:16:8d:68:b8:16:b3:89:cc:e7:71: d9:8b:1d:80:df:a6:96:3b:73:2a:5c:7a:2c:9f:42:8d:d6:c2: 39:8d:5c:44:fc:f0:4b:39:6f:2d:a9:94:cd:8e:d8:40:fe:ca: 52:07:f4:5c:0b:54:5e:3d:d8:bd:8e:d0:7d:c8:82:94:0f:0f: 0f:49:72:72:81:f8:12:57:d4:b9:0e:d5:7e:3f:19:87:94:39: cb:4d:0f:83 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUWZsVh20tsRy78l6TAu9ejUv9wDYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgxMDI2NThaFw0yNzAxMjcxMDMxNThaMDMxMTAvBgNV BAMTKDBERkYyREM3OUVFNTM4MzkzNDYwQkE1M0QwMURDNzE5MTYxNTBENDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5dJRjUXPNVwI9YkKjUavC43qM +NNIuSpIbUDJCrk8aCZLmTjFzRc88Ux/dkf+lNSn0xKqaXiqVRsh/8gf1f4NFIin +Bf4UIcgMqcf/uXdafUZE5sQqxE1oUJ6TeUArRtJ+PhsFaIFAQtTz/eDIAl2AuoT g+QS3Uydq+E740JzlOgvRo5KaCiFUblz0LMhjjC8biUk/zVeY9zj7GVyE384u/Sk rspU7Qm+jii165fdtgmCGSNccgT9ll5r8ozF5uZ7CKZhzS+Q3D9zofWDiMhVNzLe mk706wNwpO5HmyIORD6lpPdWbkSkdtSzkNdqYMfg8l3XeHeGO+koWNO6/K5hAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQN/y3HnuU4OTRg ulPQHccZFhUNQTAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQTc5OUNDOUUzNTgzRDRFOEU3OTRBMEFC RUVDNTlGOUIxNzJFNjQ4OUNCQ0JGQTJFNjY0OTEzNjJDM0M1OTY0Ri8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9BNzk5Q0M5RTM1ODNENEU4RTc5NEEwQUJFRUM1OUY5QjE3MkU2NDg5Q0JD QkZBMkU2NjQ5MTM2MkMzQzU5NjRGLzAvMERGRjJEQzc5RUU1MzgzOTM0NjBCQTUz RDAxREM3MTkxNjE1MEQ0MS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAO3kDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEKqwwDQYJKoZIhvcNAQELBQADggEBAA2rzTPu IzSFSwu50UbIL17TmVE2sIkPd6UE1IjDF4mh0m4tG+9n754XrQ8zVtfJR9kbrQ10 29oW65+6gap5eVUfAL7SonmdFDnKgrqwvuVCBFCD+1bYKPkuII5m+spKMof+Y3q9 lh0OQFSW/203DlHtDQmOl0ilMyVBO7Tt7q2QJHeXFRQZmKVrDbi+FP3h2v/7PU7l PIW+dyWnLpD1WE3dI2SXprUU3kxeFo1ouBaziczncdmLHYDfppY7cypceiyfQo3W wjmNXET88Es5by2plM2O2ED+ylIH9FwLVF492L2O0H3IgpQPDw9JcnKB+BJX1LkO 1X4/GYeUOctND4M= -----END CERTIFICATE-----Generated at Mon Mar 2 13:05:16 2026 by rpki-client