$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34F278024F3378A97207D423D1B592D8A544DF9C.cer File: 34F278024F3378A97207D423D1B592D8A544DF9C.cer (raw, json) Hash identifier: Nd/zob8JA/1JCJfdrmnhPB69F3AZPw89xtmpAxeVTds= Subject key identifier: 34:F2:78:02:4F:33:78:A9:72:07:D4:23:D1:B5:92:D8:A5:44:DF:9C Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 606C2AF9FCC7507C5E0F9C67462980817D6B86D4 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/03FCEED51A9C93F6512E9F617A3DA2EAACA7CF747A49D8E84F0668C499E5B980/0/34F278024F3378A97207D423D1B592D8A544DF9C.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/03FCEED51A9C93F6512E9F617A3DA2EAACA7CF747A49D8E84F0668C499E5B980/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 27 Jan 2026 22:56:20 +0000 Certificate not after: Tue 26 Jan 2027 23:01:20 +0000 Subordinate resources: AS: 274144 IP: 2803:f1d0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 05 Mar 2026 11:41:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:6c:2a:f9:fc:c7:50:7c:5e:0f:9c:67:46:29:80:81:7d:6b:86:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 27 22:56:20 2026 GMT Not After : Jan 26 23:01:20 2027 GMT Subject: CN=34F278024F3378A97207D423D1B592D8A544DF9C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:be:19:75:80:9f:6a:56:97:07:f5:5b:14:8d: da:8b:6a:ba:12:e4:a9:6c:88:b0:a9:2f:30:d8:da: b1:d6:75:ea:35:f7:cf:ee:70:28:aa:48:67:30:ea: 15:3e:ae:a0:12:dd:e3:f9:e7:b5:de:5d:d7:0c:4f: af:83:ae:24:92:82:2e:62:fe:31:11:af:cf:62:44: fc:33:0f:b0:a8:3b:d9:8d:90:5a:cb:96:1c:ce:d8: 01:44:4f:19:42:6b:e5:0c:22:74:92:52:43:54:98: 41:8a:b9:51:8b:f1:e0:1e:78:94:94:f2:28:b5:8a: 9a:60:be:6c:f2:c6:26:c2:2b:c9:98:8b:69:9e:5c: fe:2b:57:1e:e0:dd:05:69:7f:5e:3e:16:57:a9:50: 61:1c:af:1d:12:22:37:f5:9c:87:dd:0c:6c:6b:76: af:14:b4:89:2b:cb:cd:dc:12:95:21:55:fe:f2:0b: 60:d9:f1:f3:7d:15:a7:3c:28:d2:ec:10:d4:34:22: ac:33:3a:2f:b7:a1:cb:c8:9e:9b:e4:a8:16:41:23: 38:a4:f1:9a:ab:a8:9b:82:0d:32:53:6e:a3:32:94: 30:43:15:d8:c9:9a:31:fc:79:60:d8:13:d3:6b:d4: 85:2b:ea:35:e3:cb:56:ab:ac:85:3f:98:cd:5d:8d: 59:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 34:F2:78:02:4F:33:78:A9:72:07:D4:23:D1:B5:92:D8:A5:44:DF:9C X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/03FCEED51A9C93F6512E9F617A3DA2EAACA7CF747A49D8E84F0668C499E5B980/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/03FCEED51A9C93F6512E9F617A3DA2EAACA7CF747A49D8E84F0668C499E5B980/0/34F278024F3378A97207D423D1B592D8A544DF9C.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:f1d0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 274144 Signature Algorithm: sha256WithRSAEncryption 74:4e:1c:59:6c:47:43:8e:ae:b4:37:2b:85:69:3b:8f:57:0d: c9:cf:46:24:f6:51:1e:8e:82:1c:ca:39:a7:ed:5b:36:06:ea: 42:c9:fd:26:73:10:66:59:88:df:5c:c0:5e:34:b4:52:b3:01: d8:16:79:bc:c9:70:75:2d:6a:db:b5:8d:5a:89:17:74:98:28: d2:53:4e:3a:0d:36:c0:d2:86:8c:b0:a7:20:73:8a:b3:c3:54: 06:fc:52:2c:4f:e6:61:8f:3f:9f:4d:02:08:96:ed:fa:f2:cf: c7:c9:7a:4b:3a:66:1b:a5:28:c9:42:26:9c:99:85:18:8c:10: b0:85:5b:51:75:bf:d3:6f:fb:88:d9:cf:a3:b0:5b:bc:9d:6e: 9c:db:73:a4:a1:a3:a8:24:e7:5d:96:14:23:03:70:37:5d:6d: 1e:c1:11:6d:27:ab:50:8a:6e:c7:28:08:90:eb:21:41:93:df: 3e:98:e2:9b:5a:f4:4a:f2:40:86:e2:a1:c8:e7:8e:44:99:e2: e5:19:c1:c6:d8:5d:c4:03:f6:4c:8b:b9:84:5a:63:92:5c:e1: 1f:7d:97:e6:41:d2:0b:eb:c8:14:71:42:30:38:c1:8b:e5:2b: e4:b1:d4:61:cc:48:4a:b6:e6:e9:2a:6b:61:96:af:37:00:e8: 41:eb:51:d4 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUYGwq+fzHUHxeD5xnRimAgX1rhtQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjcyMjU2MjBaFw0yNzAxMjYyMzAxMjBaMDMxMTAvBgNV BAMTKDM0RjI3ODAyNEYzMzc4QTk3MjA3RDQyM0QxQjU5MkQ4QTU0NERGOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEvhl1gJ9qVpcH9VsUjdqLaroS 5KlsiLCpLzDY2rHWdeo198/ucCiqSGcw6hU+rqAS3eP557XeXdcMT6+DriSSgi5i /jERr89iRPwzD7CoO9mNkFrLlhzO2AFETxlCa+UMInSSUkNUmEGKuVGL8eAeeJSU 8ii1ippgvmzyxibCK8mYi2meXP4rVx7g3QVpf14+FlepUGEcrx0SIjf1nIfdDGxr dq8UtIkry83cEpUhVf7yC2DZ8fN9Fac8KNLsENQ0IqwzOi+3ocvInpvkqBZBIzik 8ZqrqJuCDTJTbqMylDBDFdjJmjH8eWDYE9Nr1IUr6jXjy1arrIU/mM1djVkfAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ08ngCTzN4qXIH 1CPRtZLYpUTfnDAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMDNGQ0VFRDUxQTlDOTNGNjUxMkU5RjYx N0EzREEyRUFBQ0E3Q0Y3NDdBNDlEOEU4NEYwNjY4QzQ5OUU1Qjk4MC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8wM0ZDRUVENTFBOUM5M0Y2NTEyRTlGNjE3QTNEQTJFQUFDQTdDRjc0N0E0 OUQ4RTg0RjA2NjhDNDk5RTVCOTgwLzAvMzRGMjc4MDI0RjMzNzhBOTcyMDdENDIz RDFCNTkyRDhBNTQ0REY5Qy5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAPx0DAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMELuAwDQYJKoZIhvcNAQELBQADggEBAHROHFls R0OOrrQ3K4VpO49XDcnPRiT2UR6OghzKOaftWzYG6kLJ/SZzEGZZiN9cwF40tFKz AdgWebzJcHUtatu1jVqJF3SYKNJTTjoNNsDShoywpyBzirPDVAb8UixP5mGPP59N AgiW7fryz8fJeks6ZhulKMlCJpyZhRiMELCFW1F1v9Nv+4jZz6OwW7ydbpzbc6Sh o6gk512WFCMDcDddbR7BEW0nq1CKbscoCJDrIUGT3z6Y4pta9EryQIbiocjnjkSZ 4uUZwcbYXcQD9kyLuYRaY5Jc4R99l+ZB0gvryBRxQjA4wYvlK+Sx1GHMSEq25ukq a2GWrzcA6EHrUdQ= -----END CERTIFICATE-----Generated at Mon Mar 2 12:24:05 2026 by rpki-client