$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1EB366A35C302CF4E20900E65713C5A4AC4C0424.cer File: 1EB366A35C302CF4E20900E65713C5A4AC4C0424.cer (raw, json) Hash identifier: ymmUoeHnJ0/uhCdd2xizDhtujM3prXRbNdz/j/mC/nI= Subject key identifier: 1E:B3:66:A3:5C:30:2C:F4:E2:09:00:E6:57:13:C5:A4:AC:4C:04:24 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 07827B0849B06092DE2791D8F3EEEB394D2F3A68 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/C6E41D540026E0511CFC295E33E29A0BA86A35A2B5E09AE8A9DED6794BD57EB6/0/1EB366A35C302CF4E20900E65713C5A4AC4C0424.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/C6E41D540026E0511CFC295E33E29A0BA86A35A2B5E09AE8A9DED6794BD57EB6/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 27 Jan 2026 19:37:15 +0000 Certificate not after: Tue 26 Jan 2027 19:42:15 +0000 Subordinate resources: AS: 273007 IP: 2803:5c50::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 05 Mar 2026 11:41:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:82:7b:08:49:b0:60:92:de:27:91:d8:f3:ee:eb:39:4d:2f:3a:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 27 19:37:15 2026 GMT Not After : Jan 26 19:42:15 2027 GMT Subject: CN=1EB366A35C302CF4E20900E65713C5A4AC4C0424 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:87:0d:c5:02:93:d4:5e:74:96:87:c4:e5:22: 54:53:cd:19:1e:ba:0d:9b:d6:eb:ef:ff:f2:8a:3b: 0f:f1:66:29:ab:bd:b8:79:3b:df:57:0c:28:47:92: 5b:3b:0d:b1:37:49:14:5e:fc:d7:05:80:ae:2b:31: 76:23:0b:8b:bc:66:42:b3:d5:ee:29:c7:81:0f:46: 53:dd:a6:61:16:69:ba:3e:ba:fb:2f:19:7c:08:c5: 22:69:7e:09:5f:2a:3b:61:cf:77:58:ec:60:52:4c: 69:8e:11:7c:a2:68:60:e1:93:1f:0c:76:d8:56:37: 65:66:74:00:70:44:47:c8:c3:a5:e0:e3:78:6c:60: a3:0f:fe:d1:69:fd:c5:18:87:28:5f:9c:49:98:a2: 23:19:9b:f3:b1:d0:cc:12:e1:d3:24:17:67:17:4e: fa:dc:70:b5:fe:b5:72:a9:85:20:5f:4e:75:ed:9f: 25:7c:82:fc:cd:7d:c3:ca:b5:ab:21:21:59:93:86: a4:c5:c7:72:5d:ef:fa:e5:7a:90:f3:26:00:bc:b8: b7:a1:4e:5c:6f:cb:1e:88:52:61:9f:00:e8:ac:7c: 32:a8:dc:a5:84:a2:04:da:67:6d:6a:c0:b2:cf:01: 82:b1:49:3d:ec:14:f4:63:32:7a:95:b5:4d:61:10: b2:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1E:B3:66:A3:5C:30:2C:F4:E2:09:00:E6:57:13:C5:A4:AC:4C:04:24 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/C6E41D540026E0511CFC295E33E29A0BA86A35A2B5E09AE8A9DED6794BD57EB6/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/C6E41D540026E0511CFC295E33E29A0BA86A35A2B5E09AE8A9DED6794BD57EB6/0/1EB366A35C302CF4E20900E65713C5A4AC4C0424.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:5c50::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273007 Signature Algorithm: sha256WithRSAEncryption 4a:14:d0:b7:3c:19:10:dd:bb:36:42:b1:8c:ae:7e:dd:0c:3d: 7b:25:68:bf:06:4d:28:4c:53:57:54:c3:d4:61:3a:f7:de:b1: f6:ea:e4:65:3f:fa:af:53:bb:c5:71:60:e6:98:c1:a7:a0:a4: 5c:b3:b1:9a:90:ac:98:90:35:25:91:58:29:05:7f:9c:17:a1: 4f:cb:3f:e3:ec:69:b0:c5:7d:fa:93:65:05:99:d3:cc:ce:cf: 90:9b:98:e1:c9:df:34:3f:3b:58:10:47:8c:f0:ba:75:12:60: 5e:e7:d1:b5:83:bf:87:b7:d4:ef:d7:13:e1:5a:b1:42:f0:1d: bf:e6:79:27:49:48:c1:38:fd:a0:6c:08:4f:ce:b5:38:1c:4b: 84:37:bd:2b:1b:2d:8e:66:c3:33:69:70:d5:4e:1c:1f:5d:c3: 00:6c:02:5d:24:60:fa:9d:4e:c6:0b:15:c9:65:28:81:ac:53: 28:4a:d6:d4:9e:80:83:f2:62:83:0b:ce:d8:1a:6c:2e:98:30: c1:e4:2d:f5:34:bb:c3:a9:a9:83:f4:47:48:7b:61:f7:cb:27: fd:1a:73:c6:50:4f:77:37:65:5d:d2:dd:d2:69:63:1c:72:35: 84:f3:8e:05:1a:d7:21:ff:b7:8f:58:43:79:df:d4:93:63:e0: 4b:1b:ed:9d -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUB4J7CEmwYJLeJ5HY8+7rOU0vOmgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjcxOTM3MTVaFw0yNzAxMjYxOTQyMTVaMDMxMTAvBgNV BAMTKDFFQjM2NkEzNUMzMDJDRjRFMjA5MDBFNjU3MTNDNUE0QUM0QzA0MjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJhw3FApPUXnSWh8TlIlRTzRke ug2b1uvv//KKOw/xZimrvbh5O99XDChHkls7DbE3SRRe/NcFgK4rMXYjC4u8ZkKz 1e4px4EPRlPdpmEWabo+uvsvGXwIxSJpfglfKjthz3dY7GBSTGmOEXyiaGDhkx8M dthWN2VmdABwREfIw6Xg43hsYKMP/tFp/cUYhyhfnEmYoiMZm/Ox0MwS4dMkF2cX TvrccLX+tXKphSBfTnXtnyV8gvzNfcPKtashIVmThqTFx3Jd7/rlepDzJgC8uLeh Tlxvyx6IUmGfAOisfDKo3KWEogTaZ21qwLLPAYKxST3sFPRjMnqVtU1hELKBAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQes2ajXDAs9OIJ AOZXE8WkrEwEJDAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQzZFNDFENTQwMDI2RTA1MTFDRkMyOTVF MzNFMjlBMEJBODZBMzVBMkI1RTA5QUU4QTlERUQ2Nzk0QkQ1N0VCNi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9DNkU0MUQ1NDAwMjZFMDUxMUNGQzI5NUUzM0UyOUEwQkE4NkEzNUEyQjVF MDlBRThBOURFRDY3OTRCRDU3RUI2LzAvMUVCMzY2QTM1QzMwMkNGNEUyMDkwMEU2 NTcxM0M1QTRBQzRDMDQyNC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKANcUDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEKm8wDQYJKoZIhvcNAQELBQADggEBAEoU0Lc8 GRDduzZCsYyuft0MPXslaL8GTShMU1dUw9RhOvfesfbq5GU/+q9Tu8VxYOaYwaeg pFyzsZqQrJiQNSWRWCkFf5wXoU/LP+PsabDFffqTZQWZ08zOz5CbmOHJ3zQ/O1gQ R4zwunUSYF7n0bWDv4e31O/XE+FasULwHb/meSdJSME4/aBsCE/OtTgcS4Q3vSsb LY5mwzNpcNVOHB9dwwBsAl0kYPqdTsYLFcllKIGsUyhK1tSegIPyYoMLztgabC6Y MMHkLfU0u8OpqYP0R0h7YffLJ/0ac8ZQT3c3ZV3S3dJpYxxyNYTzjgUa1yH/t49Y Q3nf1JNj4Esb7Z0= -----END CERTIFICATE-----Generated at Mon Mar 2 11:25:16 2026 by rpki-client