$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/335C82477D1BA8C3AC648FBB8F9C2A961E13BD7D.cer File: 335C82477D1BA8C3AC648FBB8F9C2A961E13BD7D.cer (raw, json) Hash identifier: b4WimcHJHxj2khY2cfg8XDEItFaxGlPEbdDdcsHtUdk= Subject key identifier: 33:5C:82:47:7D:1B:A8:C3:AC:64:8F:BB:8F:9C:2A:96:1E:13:BD:7D Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 7182D001577C1A19C68E0D6BED83A0C8E901C221 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/7A4B6605A1E0D74E67CF435B613AC4FE5D27D4FC272067518691FDC4D0EF0F8E/0/335C82477D1BA8C3AC648FBB8F9C2A961E13BD7D.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/7A4B6605A1E0D74E67CF435B613AC4FE5D27D4FC272067518691FDC4D0EF0F8E/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 27 Jan 2026 22:18:56 +0000 Certificate not after: Tue 26 Jan 2027 22:23:56 +0000 Subordinate resources: AS: 273067 IP: 2803:3790::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:82:d0:01:57:7c:1a:19:c6:8e:0d:6b:ed:83:a0:c8:e9:01:c2:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 27 22:18:56 2026 GMT Not After : Jan 26 22:23:56 2027 GMT Subject: CN=335C82477D1BA8C3AC648FBB8F9C2A961E13BD7D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c5:52:dd:6f:dd:94:94:69:34:80:a0:94:b5: 20:b5:6d:13:05:44:81:77:0c:1e:a1:7a:fe:7f:78: 33:d1:47:63:72:f9:70:c5:ea:93:cc:f0:1a:95:d9: 2d:27:ae:4a:c6:c0:66:e4:f2:ff:55:e4:45:57:4a: 47:3b:1c:ef:62:2f:2d:ae:8c:c8:cb:76:db:eb:33: ae:88:05:6c:0d:f8:45:cf:ab:2d:9a:6e:78:b2:4c: 5a:49:a7:74:d1:c8:d4:11:e3:82:85:fe:b4:6b:61: 91:18:28:dd:dd:44:3c:17:99:64:8a:a6:e8:1d:05: d5:20:9d:7e:b3:0c:90:9d:2e:96:cc:3f:16:45:ec: 7a:30:63:bd:44:10:1b:da:de:bf:53:e2:07:5c:f3: 2d:c7:1a:67:95:2c:2c:8f:65:67:ce:3c:e5:94:58: 9d:2d:bd:f7:3c:51:bf:ad:df:62:a8:90:f7:ff:17: d6:4a:01:fd:71:ec:92:f8:24:39:b8:88:21:ed:b9: af:b0:73:d7:10:90:96:7f:67:b9:87:72:1b:4d:be: 07:9a:dc:a4:95:57:bc:5e:f9:93:0e:9f:25:a2:13: b1:61:2a:b3:06:3c:37:28:57:99:85:1b:c6:cb:5b: cb:36:ae:3f:36:02:c8:89:e5:dc:67:b5:18:09:1e: e4:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 33:5C:82:47:7D:1B:A8:C3:AC:64:8F:BB:8F:9C:2A:96:1E:13:BD:7D X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/7A4B6605A1E0D74E67CF435B613AC4FE5D27D4FC272067518691FDC4D0EF0F8E/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/7A4B6605A1E0D74E67CF435B613AC4FE5D27D4FC272067518691FDC4D0EF0F8E/0/335C82477D1BA8C3AC648FBB8F9C2A961E13BD7D.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:3790::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273067 Signature Algorithm: sha256WithRSAEncryption 26:e8:0a:a7:a8:65:4a:27:4a:4d:9c:ab:ee:fc:cd:18:0d:d2: 73:4c:bd:85:58:d7:70:bd:03:62:44:08:78:10:12:1f:97:98: 2e:b4:78:08:84:f8:10:4a:f5:57:62:91:02:e0:03:34:e0:ab: 3f:2e:b8:ed:ff:02:35:5e:7b:f4:f9:c9:bf:75:27:86:dc:a0: 79:a9:00:1c:6e:db:75:71:81:9a:a0:55:6b:b4:34:b9:64:da: 27:c6:8a:84:58:6b:51:5f:3e:ca:2a:d8:15:d0:1d:db:a6:0b: 46:af:fa:eb:5b:c5:2f:c9:11:4a:d0:c7:ca:96:11:a7:30:b6: f5:d2:8e:4d:ce:9f:03:8a:6e:c9:af:9f:62:a0:8e:d8:fb:05: 01:73:0c:bf:a5:5f:ea:de:8d:d6:0e:b3:84:ba:42:77:00:ff: 43:8f:c8:f2:90:f9:fc:03:9a:d8:78:5e:31:61:0c:04:9d:2e: e9:47:96:28:9c:a1:d1:1d:b9:40:0b:2e:9b:55:aa:07:18:13: 80:ce:af:50:89:7b:7e:65:8e:db:af:5c:a8:62:e4:0b:8a:03: 58:6d:ae:52:ec:16:87:43:96:11:94:b0:4b:9a:02:46:40:38: 21:65:3e:a0:af:80:3f:2f:b6:af:c7:3b:e8:26:a7:64:6d:d8: a2:e4:41:ea -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUcYLQAVd8GhnGjg1r7YOgyOkBwiEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjcyMjE4NTZaFw0yNzAxMjYyMjIzNTZaMDMxMTAvBgNV BAMTKDMzNUM4MjQ3N0QxQkE4QzNBQzY0OEZCQjhGOUMyQTk2MUUxM0JEN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4xVLdb92UlGk0gKCUtSC1bRMF RIF3DB6hev5/eDPRR2Ny+XDF6pPM8BqV2S0nrkrGwGbk8v9V5EVXSkc7HO9iLy2u jMjLdtvrM66IBWwN+EXPqy2abniyTFpJp3TRyNQR44KF/rRrYZEYKN3dRDwXmWSK pugdBdUgnX6zDJCdLpbMPxZF7HowY71EEBva3r9T4gdc8y3HGmeVLCyPZWfOPOWU WJ0tvfc8Ub+t32KokPf/F9ZKAf1x7JL4JDm4iCHtua+wc9cQkJZ/Z7mHchtNvgea 3KSVV7xe+ZMOnyWiE7FhKrMGPDcoV5mFG8bLW8s2rj82AsiJ5dxntRgJHuStAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQzXIJHfRuow6xk j7uPnCqWHhO9fTAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvN0E0QjY2MDVBMUUwRDc0RTY3Q0Y0MzVC NjEzQUM0RkU1RDI3RDRGQzI3MjA2NzUxODY5MUZEQzREMEVGMEY4RS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy83QTRCNjYwNUExRTBENzRFNjdDRjQzNUI2MTNBQzRGRTVEMjdENEZDMjcy MDY3NTE4NjkxRkRDNEQwRUYwRjhFLzAvMzM1QzgyNDc3RDFCQThDM0FDNjQ4RkJC OEY5QzJBOTYxRTEzQkQ3RC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAM3kDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEKqswDQYJKoZIhvcNAQELBQADggEBACboCqeo ZUonSk2cq+78zRgN0nNMvYVY13C9A2JECHgQEh+XmC60eAiE+BBK9VdikQLgAzTg qz8uuO3/AjVee/T5yb91J4bcoHmpABxu23VxgZqgVWu0NLlk2ifGioRYa1FfPsoq 2BXQHdumC0av+utbxS/JEUrQx8qWEacwtvXSjk3OnwOKbsmvn2Kgjtj7BQFzDL+l X+rejdYOs4S6QncA/0OPyPKQ+fwDmth4XjFhDASdLulHliicodEduUALLptVqgcY E4DOr1CJe35ljtuvXKhi5AuKA1htrlLsFodDlhGUsEuaAkZAOCFlPqCvgD8vtq/H O+gmp2Rt2KLkQeo= -----END CERTIFICATE-----Generated at Mon Mar 2 14:13:19 2026 by rpki-client