$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1813C40CE3A714B18B4EFD24F4EFB92E73588A9B.cer File: 1813C40CE3A714B18B4EFD24F4EFB92E73588A9B.cer (raw, json) Hash identifier: a0kXDb7KxRx3zbiIBu1PfN6sr42lEXvudIG/oqTdXy0= Subject key identifier: 18:13:C4:0C:E3:A7:14:B1:8B:4E:FD:24:F4:EF:B9:2E:73:58:8A:9B Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 4DF4F1AB8971874A96087AEE6C498FF9EA3817FA Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/C14034B20C55A40453E0DB7FB953CD631E538AE04B83E595BB6C9096B3847E4B/0/1813C40CE3A714B18B4EFD24F4EFB92E73588A9B.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/C14034B20C55A40453E0DB7FB953CD631E538AE04B83E595BB6C9096B3847E4B/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Thu 29 Jan 2026 00:33:55 +0000 Certificate not after: Thu 28 Jan 2027 00:38:55 +0000 Subordinate resources: AS: 273895 IP: 2803:5350::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:f4:f1:ab:89:71:87:4a:96:08:7a:ee:6c:49:8f:f9:ea:38:17:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 29 00:33:55 2026 GMT Not After : Jan 28 00:38:55 2027 GMT Subject: CN=1813C40CE3A714B18B4EFD24F4EFB92E73588A9B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:b1:24:70:f4:6b:fc:b2:7e:1b:bc:9b:b3:07: c9:c9:ed:68:c2:87:c2:ef:de:90:01:26:11:19:d9: 99:3f:70:f3:8d:96:33:ae:14:64:2f:46:22:93:d6: 23:d7:62:36:e6:ce:9a:bf:71:79:e8:23:46:84:98: 51:ff:ed:d5:8d:58:28:08:37:fd:3d:51:ae:e5:ab: e2:72:dd:53:b5:7f:22:73:74:dc:fa:ef:42:36:35: 92:83:d5:2d:e7:dd:3d:08:d2:96:2c:36:1a:e1:06: 4b:6e:53:6d:c2:2d:64:f9:e9:41:44:77:e4:0a:68: 1d:57:c2:b0:ca:6a:8e:33:ad:3c:93:e3:5b:8f:85: 41:f0:26:f0:05:e3:47:2f:cc:43:9a:68:22:20:16: 99:5c:6c:87:20:0f:0d:fe:8a:a4:33:07:4c:6a:53: 29:8b:31:2b:17:49:80:7e:3b:c0:14:c2:16:97:0d: 15:e1:cf:94:c1:67:48:80:62:90:ed:e4:6f:2d:34: c1:da:8a:ff:f0:c3:30:8a:11:85:a3:2e:15:e8:15: 0f:cd:4e:1d:41:66:da:1f:95:86:79:24:53:f6:6f: 58:32:50:a2:a5:1d:26:8c:26:64:2e:a0:9b:21:b5: 5d:a7:9f:53:03:23:ff:fe:b3:4a:2f:ff:e0:64:d5: 33:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 18:13:C4:0C:E3:A7:14:B1:8B:4E:FD:24:F4:EF:B9:2E:73:58:8A:9B X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/C14034B20C55A40453E0DB7FB953CD631E538AE04B83E595BB6C9096B3847E4B/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/C14034B20C55A40453E0DB7FB953CD631E538AE04B83E595BB6C9096B3847E4B/0/1813C40CE3A714B18B4EFD24F4EFB92E73588A9B.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:5350::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273895 Signature Algorithm: sha256WithRSAEncryption 1e:0b:5d:39:05:02:01:d0:bb:d8:d0:67:2b:60:37:53:e8:85: 83:31:db:dc:47:29:04:8c:4e:52:70:e6:9f:be:3f:b1:8f:5d: 78:f2:ee:bc:18:9b:d7:3e:be:c3:7d:d0:c1:ad:c8:e2:d7:d1: e7:b6:78:f5:e5:97:9b:94:10:20:1f:7c:63:80:6d:88:fe:f5: 5f:68:60:f9:fd:d1:ee:27:43:e8:e5:d8:7b:c4:dd:db:13:47: be:3c:a3:4f:9e:a8:84:90:da:46:bd:39:e4:5c:e2:d5:c8:b6: 6c:58:f8:6e:d6:62:cb:12:ce:68:a6:e7:dc:c6:1b:15:f6:ca: 80:1b:fa:bc:1a:b7:e8:13:62:fb:bb:91:23:1d:46:ac:0a:53: c5:e5:60:58:63:76:04:71:82:a9:3e:09:1f:cf:b7:a2:c3:08: 5c:2d:f8:ba:62:7f:13:ef:f9:fc:2d:09:cc:a5:65:b3:d8:a2: 27:ca:7c:66:39:1d:cf:57:c0:8f:0d:cd:16:25:43:93:29:7c: a5:5c:65:7e:2b:35:7f:2e:c8:6a:bc:cd:c2:04:c7:14:d8:80: 41:6e:83:98:39:c0:c7:ec:37:d0:b1:cf:7e:16:08:c7:27:4c: 2b:29:82:3f:17:61:6f:72:86:89:db:75:0a:c9:e4:6a:ab:f7: a6:61:20:66 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUTfTxq4lxh0qWCHrubEmP+eo4F/owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjkwMDMzNTVaFw0yNzAxMjgwMDM4NTVaMDMxMTAvBgNV BAMTKDE4MTNDNDBDRTNBNzE0QjE4QjRFRkQyNEY0RUZCOTJFNzM1ODhBOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJsSRw9Gv8sn4bvJuzB8nJ7WjC h8Lv3pABJhEZ2Zk/cPONljOuFGQvRiKT1iPXYjbmzpq/cXnoI0aEmFH/7dWNWCgI N/09Ua7lq+Jy3VO1fyJzdNz670I2NZKD1S3n3T0I0pYsNhrhBktuU23CLWT56UFE d+QKaB1XwrDKao4zrTyT41uPhUHwJvAF40cvzEOaaCIgFplcbIcgDw3+iqQzB0xq UymLMSsXSYB+O8AUwhaXDRXhz5TBZ0iAYpDt5G8tNMHaiv/wwzCKEYWjLhXoFQ/N Th1BZtoflYZ5JFP2b1gyUKKlHSaMJmQuoJshtV2nn1MDI//+s0ov/+Bk1TMpAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQYE8QM46cUsYtO /ST077kuc1iKmzAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQzE0MDM0QjIwQzU1QTQwNDUzRTBEQjdG Qjk1M0NENjMxRTUzOEFFMDRCODNFNTk1QkI2QzkwOTZCMzg0N0U0Qi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9DMTQwMzRCMjBDNTVBNDA0NTNFMERCN0ZCOTUzQ0Q2MzFFNTM4QUUwNEI4 M0U1OTVCQjZDOTA5NkIzODQ3RTRCLzAvMTgxM0M0MENFM0E3MTRCMThCNEVGRDI0 RjRFRkI5MkU3MzU4OEE5Qi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKANTUDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMELecwDQYJKoZIhvcNAQELBQADggEBAB4LXTkF AgHQu9jQZytgN1PohYMx29xHKQSMTlJw5p++P7GPXXjy7rwYm9c+vsN90MGtyOLX 0ee2ePXll5uUECAffGOAbYj+9V9oYPn90e4nQ+jl2HvE3dsTR748o0+eqISQ2ka9 OeRc4tXItmxY+G7WYssSzmim59zGGxX2yoAb+rwat+gTYvu7kSMdRqwKU8XlYFhj dgRxgqk+CR/Pt6LDCFwt+LpifxPv+fwtCcylZbPYoifKfGY5Hc9XwI8NzRYlQ5Mp fKVcZX4rNX8uyGq8zcIExxTYgEFug5g5wMfsN9Cxz34WCMcnTCspgj8XYW9yhonb dQrJ5Gqr96ZhIGY= -----END CERTIFICATE-----Generated at Mon Mar 2 17:14:09 2026 by rpki-client