$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12A0DE8A4244131397DB58771A7DFF385EAA5549.cer File: 12A0DE8A4244131397DB58771A7DFF385EAA5549.cer (raw, json) Hash identifier: U7N90P/NOWxOqkNKIqMmeZlEHzmCfHxckhjHb31lQ0w= Subject key identifier: 12:A0:DE:8A:42:44:13:13:97:DB:58:77:1A:7D:FF:38:5E:AA:55:49 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 5666C92B399DCC730597581E3D9225C7E4BEF30C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/9AC938FADCD1EA5564628EFA40BA74137B7C293103C1197183CD5AACA00A1C0B/0/12A0DE8A4244131397DB58771A7DFF385EAA5549.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/9AC938FADCD1EA5564628EFA40BA74137B7C293103C1197183CD5AACA00A1C0B/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 27 Jan 2026 19:13:43 +0000 Certificate not after: Tue 26 Jan 2027 19:18:43 +0000 Subordinate resources: AS: 271977 IP: 2803:5e10::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:66:c9:2b:39:9d:cc:73:05:97:58:1e:3d:92:25:c7:e4:be:f3:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 27 19:13:43 2026 GMT Not After : Jan 26 19:18:43 2027 GMT Subject: CN=12A0DE8A4244131397DB58771A7DFF385EAA5549 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:df:bf:4b:c8:c5:93:ee:c9:82:c2:91:33:a5: 0b:1e:67:f9:67:c9:18:ef:0f:60:15:52:84:e1:26: 75:f4:20:e9:a6:f0:0d:ef:46:04:ff:11:04:52:a8: 74:10:d9:a9:4f:8d:a7:3d:6d:fe:b4:58:90:c9:5e: 05:26:48:b5:d2:22:f5:c8:02:1b:26:c0:27:76:1b: 7d:43:ce:88:d6:47:4c:f5:1a:a8:b0:bc:cc:b2:c2: 5b:c5:61:71:d3:4f:b6:30:86:00:c6:5a:c7:62:62: ff:de:f1:1b:01:46:1e:8b:06:a9:ad:70:d7:49:6d: f5:36:9f:d9:02:d4:5e:21:e3:ea:fe:6a:2f:50:27: df:e5:77:dc:fa:d7:14:1b:d6:69:41:c5:40:d6:03: 2e:44:9f:17:14:7d:51:6c:6b:5b:67:e3:72:af:bb: 05:8b:37:06:1d:42:b6:a7:a1:70:b3:8e:15:14:21: ae:e6:79:28:68:38:82:9d:7e:8f:b3:2e:bb:09:7f: aa:a1:1a:53:b3:22:37:a0:4b:e2:bf:19:93:65:89: 62:52:b8:90:be:d6:d7:8b:40:5a:60:b2:4d:69:11: 85:54:3a:f9:7e:13:2d:c3:5f:ec:64:e2:71:d0:96: e5:cd:8d:33:0d:67:f5:6e:99:0e:fd:56:a7:18:42: 07:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 12:A0:DE:8A:42:44:13:13:97:DB:58:77:1A:7D:FF:38:5E:AA:55:49 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/9AC938FADCD1EA5564628EFA40BA74137B7C293103C1197183CD5AACA00A1C0B/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/9AC938FADCD1EA5564628EFA40BA74137B7C293103C1197183CD5AACA00A1C0B/0/12A0DE8A4244131397DB58771A7DFF385EAA5549.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:5e10::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 271977 Signature Algorithm: sha256WithRSAEncryption 83:fa:50:7f:39:6c:19:bb:c5:b1:86:48:7e:31:8a:bf:65:93: 8c:54:70:b4:45:d7:e9:29:e0:10:85:bd:bf:0c:b1:a2:9a:be: e6:84:13:76:7a:ef:9e:af:09:cd:df:ea:fe:42:08:94:5a:77: 3f:37:70:b6:cc:2d:e3:5a:29:4f:a1:71:6c:86:6f:48:b1:ae: d7:8b:f9:97:7e:b7:cd:4a:ca:0d:ed:c0:8f:3c:ca:84:9f:e4: f5:ec:60:a2:06:32:13:5b:32:35:b7:0a:83:f3:10:5e:37:b0: 5a:29:68:eb:3a:b5:42:04:2f:fb:af:fa:29:18:8c:ee:5e:50: a1:62:08:7d:3c:77:a5:32:21:5d:c2:45:d4:e4:8b:de:b4:95: 56:87:e7:e2:36:87:76:12:46:16:16:14:5c:10:31:e5:57:81: 7d:ed:22:bb:2a:1c:19:76:4e:fa:71:e4:86:73:16:44:55:fe: 8d:0d:5f:ca:7b:2a:bc:93:54:f3:07:f7:5f:fa:23:57:ce:b8: 1d:b9:51:45:f3:7d:f3:d4:fb:3b:ae:64:ec:a2:a0:ef:ec:66: 50:69:f7:80:5b:5e:89:0a:c5:d4:b1:f5:d4:22:63:90:a4:3a: cc:75:fd:e1:cb:69:bb:dc:dc:7c:ea:10:da:53:81:63:14:46: 80:03:db:09 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUVmbJKzmdzHMFl1gePZIlx+S+8wwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjcxOTEzNDNaFw0yNzAxMjYxOTE4NDNaMDMxMTAvBgNV BAMTKDEyQTBERThBNDI0NDEzMTM5N0RCNTg3NzFBN0RGRjM4NUVBQTU1NDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm379LyMWT7smCwpEzpQseZ/ln yRjvD2AVUoThJnX0IOmm8A3vRgT/EQRSqHQQ2alPjac9bf60WJDJXgUmSLXSIvXI AhsmwCd2G31DzojWR0z1GqiwvMyywlvFYXHTT7YwhgDGWsdiYv/e8RsBRh6LBqmt cNdJbfU2n9kC1F4h4+r+ai9QJ9/ld9z61xQb1mlBxUDWAy5EnxcUfVFsa1tn43Kv uwWLNwYdQranoXCzjhUUIa7meShoOIKdfo+zLrsJf6qhGlOzIjegS+K/GZNliWJS uJC+1teLQFpgsk1pEYVUOvl+Ey3DX+xk4nHQluXNjTMNZ/VumQ79VqcYQgd1AgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQSoN6KQkQTE5fb WHcaff84XqpVSTAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvOUFDOTM4RkFEQ0QxRUE1NTY0NjI4RUZB NDBCQTc0MTM3QjdDMjkzMTAzQzExOTcxODNDRDVBQUNBMDBBMUMwQi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy85QUM5MzhGQURDRDFFQTU1NjQ2MjhFRkE0MEJBNzQxMzdCN0MyOTMxMDND MTE5NzE4M0NENUFBQ0EwMEExQzBCLzAvMTJBMERFOEE0MjQ0MTMxMzk3REI1ODc3 MUE3REZGMzg1RUFBNTU0OS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKANeEDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEJmkwDQYJKoZIhvcNAQELBQADggEBAIP6UH85 bBm7xbGGSH4xir9lk4xUcLRF1+kp4BCFvb8MsaKavuaEE3Z6756vCc3f6v5CCJRa dz83cLbMLeNaKU+hcWyGb0ixrteL+Zd+t81Kyg3twI88yoSf5PXsYKIGMhNbMjW3 CoPzEF43sFopaOs6tUIEL/uv+ikYjO5eUKFiCH08d6UyIV3CRdTki960lVaH5+I2 h3YSRhYWFFwQMeVXgX3tIrsqHBl2Tvpx5IZzFkRV/o0NX8p7KryTVPMH91/6I1fO uB25UUXzffPU+zuuZOyioO/sZlBp94BbXokKxdSx9dQiY5CkOsx1/eHLabvc3Hzq ENpTgWMURoAD2wk= -----END CERTIFICATE-----Generated at Mon Mar 2 19:46:17 2026 by rpki-client