$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/125A2BB1C08E302BAC233C8E1060AE7CA97F327C.cer File: 125A2BB1C08E302BAC233C8E1060AE7CA97F327C.cer (raw, json) Hash identifier: n2YEDsZ9rgfcVJ+LZYbS4VcSe6kTJAx7CBobLaRyPlA= Subject key identifier: 12:5A:2B:B1:C0:8E:30:2B:AC:23:3C:8E:10:60:AE:7C:A9:7F:32:7C Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 315C438D4F4F7F7ADD32B61BD4FDB39E7EF8D2FB Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/BE34255981C65285B462BD37CF376111843E73B0A394F64B22A97A43FC869B9D/0/125A2BB1C08E302BAC233C8E1060AE7CA97F327C.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/BE34255981C65285B462BD37CF376111843E73B0A394F64B22A97A43FC869B9D/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 20:13:09 +0000 Certificate not after: Wed 27 Jan 2027 20:18:09 +0000 Subordinate resources: AS: 273134 IP: 2803:5450::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:5c:43:8d:4f:4f:7f:7a:dd:32:b6:1b:d4:fd:b3:9e:7e:f8:d2:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 20:13:09 2026 GMT Not After : Jan 27 20:18:09 2027 GMT Subject: CN=125A2BB1C08E302BAC233C8E1060AE7CA97F327C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:bf:50:fe:89:ac:16:06:15:fb:0b:a0:26:62: 5d:de:13:07:76:b3:7b:3c:0a:d0:f2:03:50:b5:06: e9:5c:3e:62:81:3e:cf:18:b4:24:f5:49:b6:eb:13: e8:e0:26:93:58:59:6f:45:cd:b5:93:10:11:da:a2: 3a:bd:9b:04:70:79:9c:c8:2d:58:0d:b1:55:a6:ca: 74:f7:00:a9:c8:68:95:24:70:a7:38:12:86:52:00: f1:ba:a9:a4:a2:af:4a:43:35:de:01:38:f1:08:95: 5a:3a:77:a5:20:b6:01:32:63:19:ac:13:ed:58:dc: fd:79:5e:96:5d:57:7d:c8:e7:3e:7c:26:cc:de:82: 39:e6:1a:01:73:8e:cb:82:09:0e:27:5d:8c:2a:2c: be:dd:37:1a:51:43:f1:44:34:af:d2:34:4f:4a:a7: 1c:d1:33:af:83:77:ed:c9:22:a1:bf:c8:ef:32:05: 75:2d:ce:7a:e5:40:fb:c8:c0:94:41:f5:54:fc:0a: 8c:b3:d6:ca:d9:59:0c:d0:9b:dc:5c:31:70:8d:89: f8:cb:a3:54:79:e0:87:e2:9c:16:e2:af:43:7d:6a: 79:fb:cc:6d:fd:d1:59:08:fc:18:9c:0f:bb:7c:69: 26:83:b8:06:72:b8:4f:75:64:f4:ec:95:91:4a:84: 09:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 12:5A:2B:B1:C0:8E:30:2B:AC:23:3C:8E:10:60:AE:7C:A9:7F:32:7C X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/BE34255981C65285B462BD37CF376111843E73B0A394F64B22A97A43FC869B9D/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/BE34255981C65285B462BD37CF376111843E73B0A394F64B22A97A43FC869B9D/0/125A2BB1C08E302BAC233C8E1060AE7CA97F327C.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:5450::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273134 Signature Algorithm: sha256WithRSAEncryption 76:cf:ab:48:e2:5d:32:f3:59:59:5f:7d:93:1f:d7:5e:52:32: cf:ae:d1:93:59:12:99:ad:dc:4f:d6:ea:b3:cc:db:58:c8:59: 14:b0:d1:b3:b9:2a:78:70:c4:6e:d8:3f:f6:b5:03:08:11:63: 7e:82:83:bc:e9:0a:26:b2:21:65:93:fe:c4:cc:f7:c4:ef:03: f6:86:ad:d8:a0:9c:c4:e9:a7:bd:a5:70:9d:a7:df:89:61:29: 3f:1e:78:67:66:40:1a:1f:22:e8:3b:c9:65:39:61:2e:bd:85: f5:2c:83:b4:e0:6a:88:0f:93:93:17:5f:fd:b9:75:48:94:da: 3e:d9:a7:ac:95:be:99:be:ab:4b:a7:0b:ed:41:5a:f6:77:da: 48:29:3d:9d:40:3f:fd:04:42:f0:50:cf:53:b4:4e:51:60:5e: 52:f3:12:89:0d:0e:48:50:ae:74:ef:bc:88:ee:a9:af:91:77: 3d:08:f9:0a:1e:78:d4:27:a2:d1:66:22:2b:b5:5a:19:f1:39: 07:e6:d4:28:88:4c:88:ee:9e:a1:da:3c:35:81:3c:df:e7:d3: ef:e0:3a:eb:60:63:c8:5c:b1:74:a0:ca:4d:c3:e7:37:0c:45: 5f:44:5f:7e:72:f3:e7:f2:71:84:06:07:a9:dd:a8:18:64:9d: 4b:3d:d9:03 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUMVxDjU9Pf3rdMrYb1P2znn740vswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgyMDEzMDlaFw0yNzAxMjcyMDE4MDlaMDMxMTAvBgNV BAMTKDEyNUEyQkIxQzA4RTMwMkJBQzIzM0M4RTEwNjBBRTdDQTk3RjMyN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2v1D+iawWBhX7C6AmYl3eEwd2 s3s8CtDyA1C1BulcPmKBPs8YtCT1SbbrE+jgJpNYWW9FzbWTEBHaojq9mwRweZzI LVgNsVWmynT3AKnIaJUkcKc4EoZSAPG6qaSir0pDNd4BOPEIlVo6d6UgtgEyYxms E+1Y3P15XpZdV33I5z58JszegjnmGgFzjsuCCQ4nXYwqLL7dNxpRQ/FENK/SNE9K pxzRM6+Dd+3JIqG/yO8yBXUtznrlQPvIwJRB9VT8Coyz1srZWQzQm9xcMXCNifjL o1R54IfinBbir0N9ann7zG390VkI/BicD7t8aSaDuAZyuE91ZPTslZFKhAmvAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQSWiuxwI4wK6wj PI4QYK58qX8yfDAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQkUzNDI1NTk4MUM2NTI4NUI0NjJCRDM3 Q0YzNzYxMTE4NDNFNzNCMEEzOTRGNjRCMjJBOTdBNDNGQzg2OUI5RC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9CRTM0MjU1OTgxQzY1Mjg1QjQ2MkJEMzdDRjM3NjExMTg0M0U3M0IwQTM5 NEY2NEIyMkE5N0E0M0ZDODY5QjlELzAvMTI1QTJCQjFDMDhFMzAyQkFDMjMzQzhF MTA2MEFFN0NBOTdGMzI3Qy5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKANUUDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEKu4wDQYJKoZIhvcNAQELBQADggEBAHbPq0ji XTLzWVlffZMf115SMs+u0ZNZEpmt3E/W6rPM21jIWRSw0bO5KnhwxG7YP/a1AwgR Y36Cg7zpCiayIWWT/sTM98TvA/aGrdignMTpp72lcJ2n34lhKT8eeGdmQBofIug7 yWU5YS69hfUsg7TgaogPk5MXX/25dUiU2j7Zp6yVvpm+q0unC+1BWvZ32kgpPZ1A P/0EQvBQz1O0TlFgXlLzEokNDkhQrnTvvIjuqa+Rdz0I+QoeeNQnotFmIiu1Whnx OQfm1CiITIjunqHaPDWBPN/n0+/gOutgY8hcsXSgyk3D5zcMRV9EX35y8+fycYQG B6ndqBhknUs92QM= -----END CERTIFICATE-----Generated at Mon Mar 2 17:59:16 2026 by rpki-client