$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D8A5D8A34E265B308F626454D8A6E920C65D608.cer File: 2D8A5D8A34E265B308F626454D8A6E920C65D608.cer (raw, json) Hash identifier: OuV4hXsIMbGSE/Zerv/boN1IhGhTlKDmhpuDfMlVkVw= Subject key identifier: 2D:8A:5D:8A:34:E2:65:B3:08:F6:26:45:4D:8A:6E:92:0C:65:D6:08 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 4A627390D22297B6FFA762CF850293CE8387D86B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/86AF7F5A91E2D9513088A1BAA9E8B8D786BC52A7FBCFCCA73D29C6BB6ADD62C0/0/2D8A5D8A34E265B308F626454D8A6E920C65D608.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/86AF7F5A91E2D9513088A1BAA9E8B8D786BC52A7FBCFCCA73D29C6BB6ADD62C0/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 20:51:36 +0000 Certificate not after: Wed 27 Jan 2027 20:56:36 +0000 Subordinate resources: AS: 272964 IP: 2803:590::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:62:73:90:d2:22:97:b6:ff:a7:62:cf:85:02:93:ce:83:87:d8:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 20:51:36 2026 GMT Not After : Jan 27 20:56:36 2027 GMT Subject: CN=2D8A5D8A34E265B308F626454D8A6E920C65D608 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:72:24:6a:c6:45:e2:4f:eb:50:f0:7a:2f:64: 7c:cf:8f:9d:bb:1a:aa:f8:6a:6c:2b:7e:db:8d:5a: 37:8c:01:a2:bf:d7:33:e6:ef:51:63:13:42:eb:1c: 8c:72:fb:6e:49:8c:a0:a8:f0:0a:dc:93:20:2a:b3: 67:f6:75:cd:59:79:3d:55:2b:ec:ca:97:f9:4a:b7: dd:6c:01:97:de:07:1a:04:5f:7d:ae:76:37:00:cc: aa:8b:7c:8d:ba:d3:64:4d:11:02:69:81:c2:98:fb: 69:2b:25:a9:99:ad:3c:b3:71:1f:1e:f3:d7:41:8f: 28:7a:68:ac:cd:59:d2:d5:b8:d1:01:66:71:87:73: e7:45:43:b0:fd:00:52:8d:f9:47:12:e4:39:0f:b6: 7f:92:40:1c:51:17:1c:f2:37:f8:1f:b6:f5:af:8d: 50:c9:98:6e:cd:82:cd:00:ec:8d:c8:95:ca:eb:c1: a8:8b:12:6d:21:01:13:dc:95:68:42:d1:20:f6:a1: 34:aa:ea:aa:4f:d1:a6:ac:3b:96:18:1c:b9:8c:b3: c8:22:da:af:95:b9:d4:ce:13:85:25:31:3d:e0:6d: 14:c4:f0:b9:a1:46:30:3a:2f:8d:99:17:74:b3:cd: b5:f7:76:1b:a4:8a:98:c1:c2:db:66:dc:d5:02:4e: 33:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2D:8A:5D:8A:34:E2:65:B3:08:F6:26:45:4D:8A:6E:92:0C:65:D6:08 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/86AF7F5A91E2D9513088A1BAA9E8B8D786BC52A7FBCFCCA73D29C6BB6ADD62C0/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/86AF7F5A91E2D9513088A1BAA9E8B8D786BC52A7FBCFCCA73D29C6BB6ADD62C0/0/2D8A5D8A34E265B308F626454D8A6E920C65D608.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:590::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 272964 Signature Algorithm: sha256WithRSAEncryption 3c:66:b0:e1:0d:9b:c9:84:dd:85:1d:7d:84:0b:59:a5:77:db: 63:d3:b5:f3:9c:e6:c4:9a:87:76:de:6c:10:be:95:d5:09:e6: f5:9a:f4:fc:29:16:a3:c2:6d:66:15:32:bc:ff:fc:f1:42:f7: a3:fc:dc:59:a7:20:64:b4:06:9c:70:94:02:2e:ff:73:56:f5: 14:37:5b:60:91:21:eb:f8:bd:3e:fd:48:e5:5d:5a:df:61:a8: d1:e9:74:d0:ef:35:82:1e:36:ef:a0:0d:53:11:ca:30:70:e4: 18:3e:66:44:86:27:35:cb:67:88:a8:d8:c1:29:76:42:c3:dc: b1:80:c0:26:d3:1e:f7:74:00:eb:8f:0f:05:c0:66:c0:27:80: 55:29:16:1b:0b:f3:9b:3c:72:09:3c:12:38:1a:13:c4:17:c2: fe:8d:a7:32:cc:dd:e4:df:09:66:6b:58:b0:d4:f3:85:04:c0: c0:65:57:cd:52:b4:d3:ea:eb:41:e6:6d:78:d6:81:3d:d2:25: 1c:7d:a1:7b:69:5d:84:3e:e9:a0:84:d8:f8:e7:08:55:4d:99: 9f:83:26:a1:29:38:2f:72:2b:a4:c6:12:50:33:ac:0a:e3:fa: 7c:35:07:79:54:dc:f9:0e:04:ad:a5:60:7b:22:7f:25:37:f6: 6d:79:14:4f -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUSmJzkNIil7b/p2LPhQKTzoOH2GswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgyMDUxMzZaFw0yNzAxMjcyMDU2MzZaMDMxMTAvBgNV BAMTKDJEOEE1RDhBMzRFMjY1QjMwOEY2MjY0NTREOEE2RTkyMEM2NUQ2MDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbciRqxkXiT+tQ8HovZHzPj527 Gqr4amwrftuNWjeMAaK/1zPm71FjE0LrHIxy+25JjKCo8ArckyAqs2f2dc1ZeT1V K+zKl/lKt91sAZfeBxoEX32udjcAzKqLfI2602RNEQJpgcKY+2krJamZrTyzcR8e 89dBjyh6aKzNWdLVuNEBZnGHc+dFQ7D9AFKN+UcS5DkPtn+SQBxRFxzyN/gftvWv jVDJmG7Ngs0A7I3IlcrrwaiLEm0hARPclWhC0SD2oTSq6qpP0aasO5YYHLmMs8gi 2q+VudTOE4UlMT3gbRTE8LmhRjA6L42ZF3SzzbX3dhukipjBwttm3NUCTjOlAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQtil2KNOJlswj2 JkVNim6SDGXWCDAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvODZBRjdGNUE5MUUyRDk1MTMwODhBMUJB QTlFOEI4RDc4NkJDNTJBN0ZCQ0ZDQ0E3M0QyOUM2QkI2QURENjJDMC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy84NkFGN0Y1QTkxRTJEOTUxMzA4OEExQkFBOUU4QjhENzg2QkM1MkE3RkJD RkNDQTczRDI5QzZCQjZBREQ2MkMwLzAvMkQ4QTVEOEEzNEUyNjVCMzA4RjYyNjQ1 NEQ4QTZFOTIwQzY1RDYwOC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAMFkDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEKkQwDQYJKoZIhvcNAQELBQADggEBADxmsOEN m8mE3YUdfYQLWaV322PTtfOc5sSah3bebBC+ldUJ5vWa9PwpFqPCbWYVMrz//PFC 96P83FmnIGS0BpxwlAIu/3NW9RQ3W2CRIev4vT79SOVdWt9hqNHpdNDvNYIeNu+g DVMRyjBw5Bg+ZkSGJzXLZ4io2MEpdkLD3LGAwCbTHvd0AOuPDwXAZsAngFUpFhsL 85s8cgk8EjgaE8QXwv6NpzLM3eTfCWZrWLDU84UEwMBlV81StNPq60HmbXjWgT3S JRx9oXtpXYQ+6aCE2PjnCFVNmZ+DJqEpOC9yK6TGElAzrArj+nw1B3lU3PkOBK2l YHsifyU39m15FE8= -----END CERTIFICATE-----Generated at Mon Mar 2 15:38:57 2026 by rpki-client