$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3360E7A4F7043EDDC877AD1A89727CA151E15193.cer File: 3360E7A4F7043EDDC877AD1A89727CA151E15193.cer (raw, json) Hash identifier: LuTFBOxF01D0WfnDl4ye7n/eoREVMnR9it+Z3dRlNLw= Subject key identifier: 33:60:E7:A4:F7:04:3E:DD:C8:77:AD:1A:89:72:7C:A1:51:E1:51:93 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 699D90EBF72EDB40418F0724ECEF84C4834DF2C5 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/41C43066F5694C4BAF7D7F4F49B5819427D5CF15708BC91FE01D0CF365AF543A/0/3360E7A4F7043EDDC877AD1A89727CA151E15193.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/41C43066F5694C4BAF7D7F4F49B5819427D5CF15708BC91FE01D0CF365AF543A/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 14:04:14 +0000 Certificate not after: Wed 27 Jan 2027 14:09:14 +0000 Subordinate resources: AS: 273276 IP: 2806:44b::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:9d:90:eb:f7:2e:db:40:41:8f:07:24:ec:ef:84:c4:83:4d:f2:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 14:04:14 2026 GMT Not After : Jan 27 14:09:14 2027 GMT Subject: CN=3360E7A4F7043EDDC877AD1A89727CA151E15193 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d7:cb:e0:0e:e7:37:a8:80:98:ba:41:e4:74: bd:ff:8a:bd:6e:33:70:62:c0:ec:f8:53:2d:8a:85: 6d:d9:9c:de:34:f9:d8:9d:69:68:06:0e:0e:69:5f: 69:10:bf:8d:14:ea:bc:ec:13:56:e7:fa:60:ef:a9: 19:1d:39:60:af:e6:99:77:39:a7:2d:d8:aa:95:58: df:17:c8:37:a3:46:fe:83:e0:ac:ec:64:38:37:86: f5:fd:47:21:69:cd:65:ff:fd:5f:5e:01:72:fb:85: fb:ef:11:5f:f9:31:85:9b:0e:c2:ea:4e:89:43:86: c8:78:dc:0b:75:cf:34:d3:e3:5c:64:a5:47:5a:40: 9e:4a:f5:30:a1:b6:56:79:ab:3d:54:fe:73:0d:84: 90:ce:f1:8c:d1:9a:8a:81:c4:17:73:bd:0d:72:34: 4a:6a:d3:81:a8:3b:f2:c1:67:15:da:a6:50:d1:c9: 22:4d:79:e1:11:7e:be:5d:92:28:90:36:01:17:77: 01:6b:de:18:2c:0d:93:14:76:5e:38:3c:bf:2b:6e: 1e:9f:73:5e:d1:81:37:ca:d0:d2:34:36:61:44:a9: db:e4:72:ca:eb:9e:01:0d:7d:f5:cc:74:20:67:c9: 5b:68:6e:0a:e8:d1:5b:b6:ec:9c:a0:db:28:72:71: 47:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 33:60:E7:A4:F7:04:3E:DD:C8:77:AD:1A:89:72:7C:A1:51:E1:51:93 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/41C43066F5694C4BAF7D7F4F49B5819427D5CF15708BC91FE01D0CF365AF543A/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/41C43066F5694C4BAF7D7F4F49B5819427D5CF15708BC91FE01D0CF365AF543A/0/3360E7A4F7043EDDC877AD1A89727CA151E15193.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2806:44b::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273276 Signature Algorithm: sha256WithRSAEncryption 4b:60:d1:a7:d3:2e:33:4b:db:55:1e:d9:11:03:29:cc:57:1d: 8c:77:67:92:2a:13:18:28:c4:69:b1:9d:9e:22:ac:fe:b5:40: 5c:d7:c8:f2:20:63:1a:f0:ab:46:5e:e3:f8:40:0c:aa:17:61: 7e:7d:6a:7c:8a:fe:53:cc:2c:fc:e4:f6:85:c2:36:2e:dc:f5: d9:e2:ef:32:11:ea:dd:c9:ae:7f:14:a8:84:4f:8d:f4:cb:46: 9a:35:4b:dc:b2:9d:1d:02:ab:b3:fe:54:1f:de:38:67:5c:4f: 2a:bb:c6:f7:5c:13:70:b0:42:45:62:d2:b1:15:ad:4a:13:22: 8c:e6:39:7d:7f:de:b6:31:ba:6a:f3:08:6e:1c:da:66:c5:de: 3c:c6:64:9b:be:55:4f:4b:04:5a:62:c2:a2:26:fd:80:98:5f: c9:50:db:e0:64:91:50:01:8c:e1:aa:5a:ad:c6:87:61:9a:5b: d5:d3:b9:4d:20:cf:a7:45:7e:ae:14:0c:3d:ea:87:5b:ae:0c: c1:2e:db:81:b5:11:4e:64:5d:f0:f3:a1:a2:c1:22:90:e4:15: 38:9b:69:4a:db:8b:6b:19:75:e8:0e:63:dd:24:2e:8a:e2:8b: 3e:bc:80:cc:5f:6c:64:e2:7e:9d:ec:c7:53:20:ec:46:b0:dd: 42:3d:bb:17 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUaZ2Q6/cu20BBjwck7O+ExINN8sUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgxNDA0MTRaFw0yNzAxMjcxNDA5MTRaMDMxMTAvBgNV BAMTKDMzNjBFN0E0RjcwNDNFRERDODc3QUQxQTg5NzI3Q0ExNTFFMTUxOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC218vgDuc3qICYukHkdL3/ir1u M3BiwOz4Uy2KhW3ZnN40+didaWgGDg5pX2kQv40U6rzsE1bn+mDvqRkdOWCv5pl3 Oact2KqVWN8XyDejRv6D4KzsZDg3hvX9RyFpzWX//V9eAXL7hfvvEV/5MYWbDsLq TolDhsh43At1zzTT41xkpUdaQJ5K9TChtlZ5qz1U/nMNhJDO8YzRmoqBxBdzvQ1y NEpq04GoO/LBZxXaplDRySJNeeERfr5dkiiQNgEXdwFr3hgsDZMUdl44PL8rbh6f c17RgTfK0NI0NmFEqdvkcsrrngENffXMdCBnyVtobgro0Vu27Jyg2yhycUe3AgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQzYOek9wQ+3ch3 rRqJcnyhUeFRkzAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNDFDNDMwNjZGNTY5NEM0QkFGN0Q3RjRG NDlCNTgxOTQyN0Q1Q0YxNTcwOEJDOTFGRTAxRDBDRjM2NUFGNTQzQS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80MUM0MzA2NkY1Njk0QzRCQUY3RDdGNEY0OUI1ODE5NDI3RDVDRjE1NzA4 QkM5MUZFMDFEMENGMzY1QUY1NDNBLzAvMzM2MEU3QTRGNzA0M0VEREM4NzdBRDFB ODk3MjdDQTE1MUUxNTE5My5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAYESzAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEK3wwDQYJKoZIhvcNAQELBQADggEBAEtg0afT LjNL21Ue2REDKcxXHYx3Z5IqExgoxGmxnZ4irP61QFzXyPIgYxrwq0Ze4/hADKoX YX59anyK/lPMLPzk9oXCNi7c9dni7zIR6t3Jrn8UqIRPjfTLRpo1S9yynR0Cq7P+ VB/eOGdcTyq7xvdcE3CwQkVi0rEVrUoTIozmOX1/3rYxumrzCG4c2mbF3jzGZJu+ VU9LBFpiwqIm/YCYX8lQ2+BkkVABjOGqWq3Gh2GaW9XTuU0gz6dFfq4UDD3qh1uu DMEu24G1EU5kXfDzoaLBIpDkFTibaUrbi2sZdegOY90kLoriiz68gMxfbGTifp3s x1Mg7Eaw3UI9uxc= -----END CERTIFICATE-----Generated at Mon Mar 2 15:02:32 2026 by rpki-client