$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/288658416F17E533470F7A2E7B4C74F21F6EDACF.cer File: 288658416F17E533470F7A2E7B4C74F21F6EDACF.cer (raw, json) Hash identifier: TZ2JhU8okXDWlwrBZ3BLFDNQRVPjbuBzwcrJeaa241I= Subject key identifier: 28:86:58:41:6F:17:E5:33:47:0F:7A:2E:7B:4C:74:F2:1F:6E:DA:CF Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 0469437B7485E318A7D2B86FB759A022E8104F33 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/7383AE475702236667F0CEBE8DBB208657FD3EFBC223AAA32E2A49645AA88E54/0/288658416F17E533470F7A2E7B4C74F21F6EDACF.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/7383AE475702236667F0CEBE8DBB208657FD3EFBC223AAA32E2A49645AA88E54/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 27 Jan 2026 18:29:32 +0000 Certificate not after: Tue 26 Jan 2027 18:34:32 +0000 Subordinate resources: AS: 274208 IP: 2803:e3d0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:69:43:7b:74:85:e3:18:a7:d2:b8:6f:b7:59:a0:22:e8:10:4f:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 27 18:29:32 2026 GMT Not After : Jan 26 18:34:32 2027 GMT Subject: CN=288658416F17E533470F7A2E7B4C74F21F6EDACF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:0e:e4:9a:ab:0d:ea:67:e0:28:33:ad:b8:82: 20:93:86:01:e6:b1:de:5c:6d:68:c9:ba:e9:50:91: a0:13:3a:58:aa:e1:a3:81:45:98:28:f9:c5:d6:3d: c8:a7:e1:81:e0:a7:59:ad:19:95:20:7a:92:09:bb: a6:31:c5:0e:cc:ca:e3:53:53:bc:f9:d3:41:39:1a: 92:c5:7e:1f:1b:35:04:a8:98:2d:85:0a:30:c0:ca: 35:1d:31:0c:dd:de:b7:ca:a5:21:4a:e1:39:b3:0f: 54:e0:fd:bb:7c:7f:6a:0d:36:36:3b:f8:2f:3c:0f: 45:af:44:c3:90:48:00:96:c3:5f:5b:98:53:40:e1: 25:bf:e5:e4:be:01:a4:df:4f:13:bb:c9:ce:70:43: b6:8e:d3:c8:e6:88:57:f5:8f:45:b7:54:60:7b:cc: ce:a0:23:7f:a7:70:d9:5a:71:c9:a3:d9:1b:e7:1e: 9e:28:cc:4d:87:fd:09:18:5e:47:fe:66:f5:91:dd: b4:a1:c5:0a:73:a2:2d:20:98:34:8a:e9:cf:02:05: a7:80:b7:90:f8:23:a1:56:8b:fe:de:d7:b0:97:8b: 25:7a:2f:1e:09:e6:af:09:54:6b:5e:3d:5f:fe:25: d9:6e:01:1d:76:c7:28:a0:5c:3b:03:3a:60:ba:4c: fd:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 28:86:58:41:6F:17:E5:33:47:0F:7A:2E:7B:4C:74:F2:1F:6E:DA:CF X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/7383AE475702236667F0CEBE8DBB208657FD3EFBC223AAA32E2A49645AA88E54/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/7383AE475702236667F0CEBE8DBB208657FD3EFBC223AAA32E2A49645AA88E54/0/288658416F17E533470F7A2E7B4C74F21F6EDACF.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:e3d0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 274208 Signature Algorithm: sha256WithRSAEncryption 46:18:a2:88:1c:b4:b5:5e:0d:ac:a6:a6:d9:de:3c:e5:94:bf: 0c:a0:52:10:79:3f:6d:09:2f:4a:ae:f5:2f:06:45:de:9c:a2: a9:83:59:3a:01:14:3f:07:52:39:ab:a6:84:3b:b3:cc:5e:b4: 93:7a:23:18:4b:4c:82:fe:9d:48:eb:49:25:96:2a:c6:5e:a5: 95:6b:6e:bb:df:17:0c:98:a4:46:91:87:40:e5:33:37:44:51: 3f:a3:21:c1:b5:7e:82:ac:98:2c:be:70:2b:6c:14:e9:cd:af: 60:f0:1e:bb:2e:e2:50:e2:94:05:bd:b3:16:38:4a:6b:ce:a5: 9b:08:25:45:3e:dd:07:91:47:b1:bb:69:06:9c:53:62:eb:72: 08:35:dd:c5:34:5f:d8:4f:32:77:b6:26:65:49:cc:f2:3e:80: 82:b4:30:9f:80:10:6c:ac:c0:b2:95:a8:59:dc:cc:38:f6:0a: b4:30:3a:c3:b8:35:d9:14:ab:bb:82:2a:04:5b:96:e8:bf:d6: f4:80:8a:25:d2:42:af:89:cb:ff:5c:39:21:35:26:e2:4f:53: b6:a5:33:2f:e2:b8:64:c3:73:09:33:44:3a:dc:36:13:35:36: 3e:de:4a:f8:7b:d5:be:ed:e7:2e:f6:cf:82:af:5c:01:94:5b: 2e:67:d8:f0 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUBGlDe3SF4xin0rhvt1mgIugQTzMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjcxODI5MzJaFw0yNzAxMjYxODM0MzJaMDMxMTAvBgNV BAMTKDI4ODY1ODQxNkYxN0U1MzM0NzBGN0EyRTdCNEM3NEYyMUY2RURBQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0DuSaqw3qZ+AoM624giCThgHm sd5cbWjJuulQkaATOliq4aOBRZgo+cXWPcin4YHgp1mtGZUgepIJu6YxxQ7MyuNT U7z500E5GpLFfh8bNQSomC2FCjDAyjUdMQzd3rfKpSFK4TmzD1Tg/bt8f2oNNjY7 +C88D0WvRMOQSACWw19bmFNA4SW/5eS+AaTfTxO7yc5wQ7aO08jmiFf1j0W3VGB7 zM6gI3+ncNlaccmj2RvnHp4ozE2H/QkYXkf+ZvWR3bShxQpzoi0gmDSK6c8CBaeA t5D4I6FWi/7e17CXiyV6Lx4J5q8JVGtePV/+JdluAR12xyigXDsDOmC6TP1/AgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQohlhBbxflM0cP ei57THTyH27azzAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNzM4M0FFNDc1NzAyMjM2NjY3RjBDRUJF OERCQjIwODY1N0ZEM0VGQkMyMjNBQUEzMkUyQTQ5NjQ1QUE4OEU1NC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy83MzgzQUU0NzU3MDIyMzY2NjdGMENFQkU4REJCMjA4NjU3RkQzRUZCQzIy M0FBQTMyRTJBNDk2NDVBQTg4RTU0LzAvMjg4NjU4NDE2RjE3RTUzMzQ3MEY3QTJF N0I0Qzc0RjIxRjZFREFDRi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAPj0DAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMELyAwDQYJKoZIhvcNAQELBQADggEBAEYYoogc tLVeDaymptnePOWUvwygUhB5P20JL0qu9S8GRd6coqmDWToBFD8HUjmrpoQ7s8xe tJN6IxhLTIL+nUjrSSWWKsZepZVrbrvfFwyYpEaRh0DlMzdEUT+jIcG1foKsmCy+ cCtsFOnNr2DwHrsu4lDilAW9sxY4SmvOpZsIJUU+3QeRR7G7aQacU2Lrcgg13cU0 X9hPMne2JmVJzPI+gIK0MJ+AEGyswLKVqFnczDj2CrQwOsO4NdkUq7uCKgRblui/ 1vSAiiXSQq+Jy/9cOSE1JuJPU7alMy/iuGTDcwkzRDrcNhM1Nj7eSvh71b7t5y72 z4KvXAGUWy5n2PA= -----END CERTIFICATE-----Generated at Mon Mar 2 17:30:15 2026 by rpki-client