$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/203538EC3BB5B3738F8FB7C71C9FA4B0FDF9C01C.cer File: 203538EC3BB5B3738F8FB7C71C9FA4B0FDF9C01C.cer (raw, json) Hash identifier: XxzukhSwiLSJXVbfqe1ebDPqRnlvgdHZhcN78SOXCW4= Subject key identifier: 20:35:38:EC:3B:B5:B3:73:8F:8F:B7:C7:1C:9F:A4:B0:FD:F9:C0:1C Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 3B816C9A352CACA347CC14E2BA6735DD951A6B56 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/FD3348D2FE8410D58966387875D9AA10D5C7C9786A4C18D9C495156F8AA4DF0F/0/203538EC3BB5B3738F8FB7C71C9FA4B0FDF9C01C.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/FD3348D2FE8410D58966387875D9AA10D5C7C9786A4C18D9C495156F8AA4DF0F/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Fri 27 Mar 2026 13:50:01 +0000 Certificate not after: Fri 26 Mar 2027 13:55:01 +0000 Subordinate resources: AS: 274324 IP: 2803:c30::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Apr 2026 12:20:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:81:6c:9a:35:2c:ac:a3:47:cc:14:e2:ba:67:35:dd:95:1a:6b:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Mar 27 13:50:01 2026 GMT Not After : Mar 26 13:55:01 2027 GMT Subject: CN=203538EC3BB5B3738F8FB7C71C9FA4B0FDF9C01C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b6:f6:fa:88:58:11:b5:56:04:cf:af:9f:e0: 74:c1:1e:4c:87:24:81:04:a7:aa:48:ab:ce:8f:be: 83:e8:76:cf:90:10:5c:67:80:ed:e5:23:75:c4:f6: 98:8c:8c:67:64:9f:d4:75:43:21:61:15:e5:e4:ed: ef:51:49:cc:b1:0e:1c:8f:6b:b3:eb:3a:1c:ec:0e: 97:33:ba:34:d1:26:07:53:11:82:54:6f:1a:bc:18: c0:43:b6:20:c2:55:55:34:b8:8e:cb:d4:4e:68:34: d4:65:70:37:09:21:38:33:ca:ed:29:d8:ee:81:dc: de:5b:d8:96:42:02:42:18:e6:27:d8:ce:a9:ac:b1: fa:10:b3:f2:98:3c:b5:92:37:9d:23:58:d9:1c:ac: 91:a2:d7:dd:15:21:cd:53:74:21:67:15:f2:97:be: ad:60:8e:24:6c:c9:f4:3a:bd:dd:4d:32:fe:90:5f: 3f:64:b7:1e:f7:6b:07:78:f6:d5:67:7d:d6:31:0a: 46:93:2e:44:8e:8b:79:e4:39:2e:78:3b:3e:69:4f: 99:96:24:00:07:2b:9c:2b:89:31:f8:f6:ae:7a:5b: b6:c4:e2:35:74:67:37:0f:bf:56:d9:60:61:a7:43: 57:4d:41:f7:82:2b:eb:f4:ee:7c:01:46:9e:c4:48: c8:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 20:35:38:EC:3B:B5:B3:73:8F:8F:B7:C7:1C:9F:A4:B0:FD:F9:C0:1C X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/FD3348D2FE8410D58966387875D9AA10D5C7C9786A4C18D9C495156F8AA4DF0F/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/FD3348D2FE8410D58966387875D9AA10D5C7C9786A4C18D9C495156F8AA4DF0F/0/203538EC3BB5B3738F8FB7C71C9FA4B0FDF9C01C.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:c30::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 274324 Signature Algorithm: sha256WithRSAEncryption 3b:8c:72:02:a9:65:43:97:99:1d:75:c9:7c:a1:15:8c:97:4c: a0:5c:d5:0a:29:a0:f1:c3:42:34:c1:a1:f4:16:0c:be:69:8d: 89:84:74:19:7b:47:1d:ce:90:3d:9c:5f:18:e3:9d:5d:58:b2: 6c:b6:66:7f:ee:f8:dd:5b:86:2f:44:6a:4b:8a:3d:9e:a1:e5: 01:b2:3f:88:3d:5f:43:6d:a2:99:b9:3f:0a:5e:eb:a9:71:6c: 3a:19:2d:fa:eb:81:5b:a6:4e:3d:5e:20:b2:64:03:fe:1d:75: 10:2d:67:77:74:da:0f:b9:95:de:95:95:cc:ec:ed:c2:b9:b3: 58:b0:5c:8c:7c:70:b4:12:15:2b:19:4d:4e:b1:63:30:b9:80: 78:77:e6:1c:bb:20:80:e2:c1:cc:24:ed:ed:db:85:a7:87:b1: 00:9e:d7:be:e0:c3:44:af:9d:de:21:c3:ba:2a:8a:a5:cc:b4: df:4d:65:88:b7:50:3c:5e:72:50:82:86:d3:bb:e6:ad:d0:14: 7e:ae:be:03:29:f3:d1:62:93:c0:6f:38:32:43:62:39:9e:06: 6d:6b:7f:f7:77:0f:eb:8f:cb:11:b4:b7:eb:26:d3:74:03:61: ee:a7:52:4b:ae:e6:2b:6d:0c:75:6c:38:a6:4e:21:0f:06:ca: 9c:d7:aa:90 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUO4FsmjUsrKNHzBTiumc13ZUaa1YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAzMjcxMzUwMDFaFw0yNzAzMjYxMzU1MDFaMDMxMTAvBgNV BAMTKDIwMzUzOEVDM0JCNUIzNzM4RjhGQjdDNzFDOUZBNEIwRkRGOUMwMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6tvb6iFgRtVYEz6+f4HTBHkyH JIEEp6pIq86PvoPods+QEFxngO3lI3XE9piMjGdkn9R1QyFhFeXk7e9RScyxDhyP a7PrOhzsDpczujTRJgdTEYJUbxq8GMBDtiDCVVU0uI7L1E5oNNRlcDcJITgzyu0p 2O6B3N5b2JZCAkIY5ifYzqmssfoQs/KYPLWSN50jWNkcrJGi190VIc1TdCFnFfKX vq1gjiRsyfQ6vd1NMv6QXz9ktx73awd49tVnfdYxCkaTLkSOi3nkOS54Oz5pT5mW JAAHK5wriTH49q56W7bE4jV0ZzcPv1bZYGGnQ1dNQfeCK+v07nwBRp7ESMgTAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQgNTjsO7Wzc4+P t8ccn6Sw/fnAHDAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRkQzMzQ4RDJGRTg0MTBENTg5NjYzODc4 NzVEOUFBMTBENUM3Qzk3ODZBNEMxOEQ5QzQ5NTE1NkY4QUE0REYwRi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9GRDMzNDhEMkZFODQxMEQ1ODk2NjM4Nzg3NUQ5QUExMEQ1QzdDOTc4NkE0 QzE4RDlDNDk1MTU2RjhBQTRERjBGLzAvMjAzNTM4RUMzQkI1QjM3MzhGOEZCN0M3 MUM5RkE0QjBGREY5QzAxQy5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAMMMDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEL5QwDQYJKoZIhvcNAQELBQADggEBADuMcgKp ZUOXmR11yXyhFYyXTKBc1QopoPHDQjTBofQWDL5pjYmEdBl7Rx3OkD2cXxjjnV1Y smy2Zn/u+N1bhi9EakuKPZ6h5QGyP4g9X0Ntopm5Pwpe66lxbDoZLfrrgVumTj1e ILJkA/4ddRAtZ3d02g+5ld6Vlczs7cK5s1iwXIx8cLQSFSsZTU6xYzC5gHh35hy7 IIDiwcwk7e3bhaeHsQCe177gw0Svnd4hw7oqiqXMtN9NZYi3UDxeclCChtO75q3Q FH6uvgMp89Fik8BvODJDYjmeBm1rf/d3D+uPyxG0t+sm03QDYe6nUkuu5ittDHVs OKZOIQ8GypzXqpA= -----END CERTIFICATE-----Generated at Fri Apr 17 11:01:23 2026 by rpki-client