$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0FD9060A0CDF11D8263A9F5FE4A73B3158EB514D.cer File: 0FD9060A0CDF11D8263A9F5FE4A73B3158EB514D.cer (raw, json) Hash identifier: L2SYLXF90/BeV0gyd/XsLfl+zaZlkog+CmZP64NXIAk= Subject key identifier: 0F:D9:06:0A:0C:DF:11:D8:26:3A:9F:5F:E4:A7:3B:31:58:EB:51:4D Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 3F4844065F84C27D0D631C942F121B23A50F0030 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/5F936BB71781BA91F54347FB7DDDE99666988D0FFDD9F0D83C3BD3ED0780A607/0/0FD9060A0CDF11D8263A9F5FE4A73B3158EB514D.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/5F936BB71781BA91F54347FB7DDDE99666988D0FFDD9F0D83C3BD3ED0780A607/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 22:34:52 +0000 Certificate not after: Wed 27 Jan 2027 22:39:52 +0000 Subordinate resources: AS: 274160 IP: 2803:39d0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:48:44:06:5f:84:c2:7d:0d:63:1c:94:2f:12:1b:23:a5:0f:00:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 22:34:52 2026 GMT Not After : Jan 27 22:39:52 2027 GMT Subject: CN=0FD9060A0CDF11D8263A9F5FE4A73B3158EB514D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:78:24:ab:14:c5:e8:95:df:a3:1e:80:a0:54: a5:66:7e:81:75:c1:f9:ef:8e:83:75:b5:16:8e:60: 69:bd:b7:ee:e7:10:66:51:ea:4e:8e:3d:9d:ba:9f: 5e:67:40:ff:68:8b:ce:e3:27:0d:46:df:90:c0:7d: 85:fb:b7:c6:45:0d:39:5b:6e:f9:9e:5c:23:da:be: 08:f0:be:41:02:f4:5c:5f:5e:09:72:45:35:82:b6: e7:0d:ad:ec:0c:2c:96:4e:4c:cd:6b:8b:c2:84:45: 6d:e8:33:91:db:94:6e:29:f9:30:6f:57:76:a4:1e: 20:88:cf:cc:86:6d:dd:ea:0b:17:0d:ad:87:d2:26: 21:0c:50:6f:95:10:5c:af:11:e7:74:f4:6f:fa:16: a5:af:42:f1:f3:7b:1b:d5:2b:33:e8:23:74:0c:be: 28:1e:16:1d:a4:ef:20:b1:f3:43:29:da:6e:8b:33: 51:c0:31:af:75:e1:11:d4:4d:e5:d4:4c:dd:40:f3: 04:d2:50:b7:e2:1c:fb:9c:d4:c4:b4:10:56:38:31: af:92:e0:01:78:5c:91:79:2a:b0:3c:c8:02:4d:89: 38:98:67:9f:36:39:f1:8d:10:82:a1:75:b8:96:5e: a7:d4:18:23:b3:dd:7e:5d:4f:b1:10:3c:d7:46:e1: 69:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 0F:D9:06:0A:0C:DF:11:D8:26:3A:9F:5F:E4:A7:3B:31:58:EB:51:4D X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/5F936BB71781BA91F54347FB7DDDE99666988D0FFDD9F0D83C3BD3ED0780A607/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/5F936BB71781BA91F54347FB7DDDE99666988D0FFDD9F0D83C3BD3ED0780A607/0/0FD9060A0CDF11D8263A9F5FE4A73B3158EB514D.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:39d0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 274160 Signature Algorithm: sha256WithRSAEncryption 29:ae:5d:71:cb:fb:ae:5d:27:fb:ae:79:7d:10:05:52:5c:60: a4:3d:1f:4a:97:b5:33:46:4a:cd:6a:dd:43:22:c2:76:6a:8e: 42:5d:e9:67:12:c9:35:cd:f3:b0:15:15:ec:24:7d:45:de:a6: c5:24:88:70:60:b4:31:98:8e:43:b0:0e:8d:62:54:31:66:6c: 2b:01:0f:5d:b7:38:f8:8c:9f:29:83:44:d5:7a:ad:ac:41:fb: e5:1f:96:57:bf:2a:2a:ca:6d:d1:6f:ad:20:9a:88:41:08:30: 1d:57:75:57:eb:45:7e:d2:e6:21:cb:78:ff:83:14:9d:4a:4d: a8:36:ac:0d:e8:f3:40:0a:da:35:a7:a0:df:ef:ae:19:be:97: 4c:92:f0:01:08:30:b8:13:39:7d:9a:57:17:5d:52:50:35:97: 94:2b:9a:fc:a7:2c:c1:1c:62:97:22:17:57:09:fa:53:cb:38: 0e:b7:0e:5d:5a:00:8e:1d:9b:e1:85:79:44:72:a7:a4:a3:6f: 71:8d:22:58:8f:6a:8b:e4:96:44:69:f0:05:40:09:32:34:c9: e5:7e:4e:a0:60:ac:5b:67:fa:49:14:9c:bb:9c:a0:b5:03:11: f7:ed:71:88:d7:88:51:a3:2e:64:09:ec:a2:2d:cb:32:1a:e0: db:a7:aa:07 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUP0hEBl+Ewn0NYxyULxIbI6UPADAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgyMjM0NTJaFw0yNzAxMjcyMjM5NTJaMDMxMTAvBgNV BAMTKDBGRDkwNjBBMENERjExRDgyNjNBOUY1RkU0QTczQjMxNThFQjUxNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmeCSrFMXold+jHoCgVKVmfoF1 wfnvjoN1tRaOYGm9t+7nEGZR6k6OPZ26n15nQP9oi87jJw1G35DAfYX7t8ZFDTlb bvmeXCPavgjwvkEC9FxfXglyRTWCtucNrewMLJZOTM1ri8KERW3oM5HblG4p+TBv V3akHiCIz8yGbd3qCxcNrYfSJiEMUG+VEFyvEed09G/6FqWvQvHzexvVKzPoI3QM vigeFh2k7yCx80Mp2m6LM1HAMa914RHUTeXUTN1A8wTSULfiHPuc1MS0EFY4Ma+S 4AF4XJF5KrA8yAJNiTiYZ582OfGNEIKhdbiWXqfUGCOz3X5dT7EQPNdG4WkPAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQP2QYKDN8R2CY6 n1/kpzsxWOtRTTAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNUY5MzZCQjcxNzgxQkE5MUY1NDM0N0ZC N0REREU5OTY2Njk4OEQwRkZERDlGMEQ4M0MzQkQzRUQwNzgwQTYwNy8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy81RjkzNkJCNzE3ODFCQTkxRjU0MzQ3RkI3RERERTk5NjY2OTg4RDBGRkRE OUYwRDgzQzNCRDNFRDA3ODBBNjA3LzAvMEZEOTA2MEEwQ0RGMTFEODI2M0E5RjVG RTRBNzNCMzE1OEVCNTE0RC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAM50DAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMELvAwDQYJKoZIhvcNAQELBQADggEBACmuXXHL +65dJ/uueX0QBVJcYKQ9H0qXtTNGSs1q3UMiwnZqjkJd6WcSyTXN87AVFewkfUXe psUkiHBgtDGYjkOwDo1iVDFmbCsBD123OPiMnymDRNV6raxB++Uflle/KirKbdFv rSCaiEEIMB1XdVfrRX7S5iHLeP+DFJ1KTag2rA3o80AK2jWnoN/vrhm+l0yS8AEI MLgTOX2aVxddUlA1l5QrmvynLMEcYpciF1cJ+lPLOA63Dl1aAI4dm+GFeURyp6Sj b3GNIliPaovklkRp8AVACTI0yeV+TqBgrFtn+kkUnLucoLUDEfftcYjXiFGjLmQJ 7KItyzIa4Nunqgc= -----END CERTIFICATE-----Generated at Mon Mar 2 18:48:43 2026 by rpki-client