$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3845894FA68B5BFFC7570574C015E8DBA3977EB3.cer File: 3845894FA68B5BFFC7570574C015E8DBA3977EB3.cer (raw, json) Hash identifier: 81XhQYmh89LISDQ9izEhLsE0Wcafg/tg0Pip41G7Hp8= Subject key identifier: 38:45:89:4F:A6:8B:5B:FF:C7:57:05:74:C0:15:E8:DB:A3:97:7E:B3 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 7D6419D2BA26E9697796AAF38BE4EAA3E25F1D76 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/E084DFE46BA1DC17B794BEDC10138FD6C81D260063346170B1642831E5781778/0/3845894FA68B5BFFC7570574C015E8DBA3977EB3.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/E084DFE46BA1DC17B794BEDC10138FD6C81D260063346170B1642831E5781778/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 27 Jan 2026 19:40:13 +0000 Certificate not after: Tue 26 Jan 2027 19:45:13 +0000 Subordinate resources: AS: 274166 IP: 2803:85d0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 05 Mar 2026 11:41:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:64:19:d2:ba:26:e9:69:77:96:aa:f3:8b:e4:ea:a3:e2:5f:1d:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 27 19:40:13 2026 GMT Not After : Jan 26 19:45:13 2027 GMT Subject: CN=3845894FA68B5BFFC7570574C015E8DBA3977EB3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:59:b3:45:f1:06:dc:d2:c8:1f:36:ae:4c:05: 15:3f:95:47:fc:b6:2c:db:d3:eb:83:f3:e4:b8:39: 8c:ab:9d:c2:72:81:1c:06:1f:8e:b7:e0:e0:b4:ef: 8c:50:a3:16:ee:65:6a:23:4c:35:19:86:98:03:ce: 6d:32:64:0f:6e:23:c1:39:31:30:af:a1:dd:78:e0: de:e4:c7:e0:5a:69:56:3f:59:28:8d:7e:b4:bc:fb: 6b:9a:ba:13:7c:a7:10:12:fe:56:c2:9c:c2:ce:cc: 23:b6:10:b3:13:70:cc:5f:90:ae:bf:40:2c:ff:73: 50:29:5f:a6:88:68:6d:ca:eb:9c:80:11:d8:9f:9b: d3:69:f3:21:62:cb:3e:bf:03:b8:96:2a:05:ed:93: 69:37:5a:af:52:25:40:31:b8:2e:04:28:ad:92:fa: e4:76:f7:b2:6c:d0:21:be:78:63:c6:77:13:e2:70: 88:a4:90:3d:c3:35:2f:81:f8:6c:ba:79:fd:09:e9: e4:c9:95:e9:cf:a5:d6:e0:0c:7a:1b:57:72:61:02: c4:57:ac:9b:39:34:11:e6:48:04:db:30:82:9f:63: a1:a4:63:97:7b:99:a4:60:e5:f3:9a:3a:6a:17:9e: 38:31:e3:9f:b2:c6:cf:05:d3:89:cf:91:db:81:b6: 6c:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 38:45:89:4F:A6:8B:5B:FF:C7:57:05:74:C0:15:E8:DB:A3:97:7E:B3 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/E084DFE46BA1DC17B794BEDC10138FD6C81D260063346170B1642831E5781778/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/E084DFE46BA1DC17B794BEDC10138FD6C81D260063346170B1642831E5781778/0/3845894FA68B5BFFC7570574C015E8DBA3977EB3.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:85d0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 274166 Signature Algorithm: sha256WithRSAEncryption 19:31:ab:e9:a3:71:2d:fa:dd:65:73:4d:53:3e:3f:31:74:06: e3:0b:6e:36:ec:94:a0:3b:5b:8c:a2:0d:13:6f:3d:0e:82:2f: cf:c0:6f:3a:2f:c4:36:32:6a:94:61:cc:44:96:17:59:8c:91: c5:2f:2a:51:b1:fb:d9:d8:b3:c4:4e:c8:7e:d3:d9:85:64:31: 98:5c:89:b6:8d:f2:5c:bf:59:64:86:36:82:67:8b:10:d7:7a: ad:d4:a9:1b:df:40:a5:da:a6:17:b0:80:e0:88:57:a9:e4:3a: 58:32:d2:ba:2e:d7:8e:23:b1:9e:8b:33:86:02:29:0d:78:46: 52:6e:77:65:aa:49:06:8a:b0:71:00:35:d6:38:36:ef:1c:fe: ae:98:78:f1:6b:ce:0d:96:ae:10:e6:17:d1:c7:59:c9:a6:45: 9d:c8:5b:0d:72:27:53:6d:4b:8d:11:de:48:00:94:dc:02:40: 56:24:32:a1:67:7c:26:a1:09:21:db:d9:99:e7:f0:a5:f6:7e: e7:5d:2d:90:88:1e:db:f8:67:21:b6:ee:ec:41:5b:62:6d:1c: d1:e7:8b:9a:9a:fc:23:fc:f2:ff:da:cc:55:0a:5c:19:8a:8f: a3:58:da:6c:7d:8e:13:dc:d1:4f:bf:b7:c7:ea:25:1f:e8:87: 08:70:4f:6b -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUfWQZ0rom6Wl3lqrzi+Tqo+JfHXYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjcxOTQwMTNaFw0yNzAxMjYxOTQ1MTNaMDMxMTAvBgNV BAMTKDM4NDU4OTRGQTY4QjVCRkZDNzU3MDU3NEMwMTVFOERCQTM5NzdFQjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXWbNF8Qbc0sgfNq5MBRU/lUf8 tizb0+uD8+S4OYyrncJygRwGH4634OC074xQoxbuZWojTDUZhpgDzm0yZA9uI8E5 MTCvod144N7kx+BaaVY/WSiNfrS8+2uauhN8pxAS/lbCnMLOzCO2ELMTcMxfkK6/ QCz/c1ApX6aIaG3K65yAEdifm9Np8yFiyz6/A7iWKgXtk2k3Wq9SJUAxuC4EKK2S +uR297Js0CG+eGPGdxPicIikkD3DNS+B+Gy6ef0J6eTJlenPpdbgDHobV3JhAsRX rJs5NBHmSATbMIKfY6GkY5d7maRg5fOaOmoXnjgx45+yxs8F04nPkduBtmxtAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ4RYlPpotb/8dX BXTAFejbo5d+szAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTA4NERGRTQ2QkExREMxN0I3OTRCRURD MTAxMzhGRDZDODFEMjYwMDYzMzQ2MTcwQjE2NDI4MzFFNTc4MTc3OC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9FMDg0REZFNDZCQTFEQzE3Qjc5NEJFREMxMDEzOEZENkM4MUQyNjAwNjMz NDYxNzBCMTY0MjgzMUU1NzgxNzc4LzAvMzg0NTg5NEZBNjhCNUJGRkM3NTcwNTc0 QzAxNUU4REJBMzk3N0VCMy5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAOF0DAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMELvYwDQYJKoZIhvcNAQELBQADggEBABkxq+mj cS363WVzTVM+PzF0BuMLbjbslKA7W4yiDRNvPQ6CL8/AbzovxDYyapRhzESWF1mM kcUvKlGx+9nYs8ROyH7T2YVkMZhcibaN8ly/WWSGNoJnixDXeq3UqRvfQKXaphew gOCIV6nkOlgy0rou144jsZ6LM4YCKQ14RlJud2WqSQaKsHEANdY4Nu8c/q6YePFr zg2WrhDmF9HHWcmmRZ3IWw1yJ1NtS40R3kgAlNwCQFYkMqFnfCahCSHb2Znn8KX2 fuddLZCIHtv4ZyG27uxBW2JtHNHni5qa/CP88v/azFUKXBmKj6NY2mx9jhPc0U+/ t8fqJR/ohwhwT2s= -----END CERTIFICATE-----Generated at Mon Mar 2 13:23:38 2026 by rpki-client