$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/39956370C43807CD505618A96E0AB1D69E7FFD91.cer File: 39956370C43807CD505618A96E0AB1D69E7FFD91.cer (raw, json) Hash identifier: NU6uQkxiUJanInmyP9CPGL8TVD2IcuCB+1D1eMP0hB8= Subject key identifier: 39:95:63:70:C4:38:07:CD:50:56:18:A9:6E:0A:B1:D6:9E:7F:FD:91 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 53CC503E86F16B3244B1EE15E65E316B348D9A4C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/7F0918D6517867679DD148C742709E1C321ED2AAA07DA51B89F4E9E473593A88/0/39956370C43807CD505618A96E0AB1D69E7FFD91.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/7F0918D6517867679DD148C742709E1C321ED2AAA07DA51B89F4E9E473593A88/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 07:54:52 +0000 Certificate not after: Wed 27 Jan 2027 07:59:52 +0000 Subordinate resources: AS: 272017 IP: 2803:8510::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:cc:50:3e:86:f1:6b:32:44:b1:ee:15:e6:5e:31:6b:34:8d:9a:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 07:54:52 2026 GMT Not After : Jan 27 07:59:52 2027 GMT Subject: CN=39956370C43807CD505618A96E0AB1D69E7FFD91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ea:0d:56:a2:62:ab:6b:da:59:dc:86:9f:70: 71:91:63:bd:3e:71:d2:2e:2b:cb:e5:c0:62:aa:f5: 12:98:b2:f7:57:c5:36:41:0b:f4:90:3c:b7:b4:7f: f3:7d:94:e3:bd:6f:ae:0d:e1:89:ed:8f:ec:68:b8: 50:07:dd:b9:ca:5c:7d:a7:c1:af:07:4a:46:ad:df: 3f:4a:85:44:4e:7c:8c:c4:43:4d:41:78:8f:7f:36: 83:54:53:8f:56:68:e2:e9:dd:1e:ef:29:45:dc:7a: 88:e5:6c:0f:38:94:de:c2:70:ed:9a:47:b0:51:8b: 8a:4e:6c:77:d5:0d:65:53:cf:00:8f:2f:cb:6a:63: d4:60:0a:10:ba:cb:e0:30:a7:f0:05:d5:01:06:48: 7e:52:35:0b:92:97:e8:f7:5e:49:6c:0a:bb:bf:10: b1:51:52:8c:12:68:71:ce:1a:71:98:9f:6a:d3:33: 5b:97:f7:53:44:35:db:ff:fb:cd:57:5e:76:7b:a5: 8b:9b:fe:d5:2d:2a:d4:b7:a7:e7:2f:84:f5:f5:46: dd:be:69:24:ea:6b:4e:e3:dc:a8:0d:c6:ed:56:b8: b3:21:39:5b:a8:79:6f:64:25:9e:32:34:2c:93:0a: 67:3d:4a:70:35:83:9c:1b:91:07:6c:8f:64:20:57: db:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 39:95:63:70:C4:38:07:CD:50:56:18:A9:6E:0A:B1:D6:9E:7F:FD:91 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/7F0918D6517867679DD148C742709E1C321ED2AAA07DA51B89F4E9E473593A88/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/7F0918D6517867679DD148C742709E1C321ED2AAA07DA51B89F4E9E473593A88/0/39956370C43807CD505618A96E0AB1D69E7FFD91.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:8510::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 272017 Signature Algorithm: sha256WithRSAEncryption 87:a6:10:80:a1:29:7d:ed:89:7e:ae:b8:8a:f7:4e:99:b0:93: b4:13:d1:5f:55:14:4b:72:0a:81:39:4d:67:2f:a8:fd:92:49: 7c:45:87:d5:9a:b1:47:bb:52:94:fb:ca:42:38:87:0e:af:46: a4:2f:62:4d:4c:db:9e:d6:47:28:14:0b:32:3c:b8:34:95:ba: e3:5c:e3:0c:c7:48:34:09:4f:c1:42:75:07:84:f5:51:6f:0c: eb:78:8c:2a:8d:32:aa:48:e8:f3:c8:c3:9c:93:8f:39:2e:ab: 8e:8f:45:1f:7d:73:28:52:2d:1f:12:2a:31:ab:a7:2b:8d:95: 09:01:10:70:ec:8b:08:af:5e:a0:db:4b:75:94:b8:a9:e1:bf: fb:1b:95:2b:83:b1:f5:e7:66:15:71:45:d9:f7:f4:37:90:90: c2:41:6b:76:7e:68:ed:d8:39:0b:bb:0d:74:96:44:17:36:9d: eb:a3:b2:8b:15:8d:b4:3b:93:43:28:1f:5e:3d:ef:50:2e:60: bc:27:8e:ee:34:d6:94:c3:03:ef:0d:dc:29:ee:eb:17:36:9c: 4e:11:b1:22:0c:c4:c7:51:ea:2f:ef:64:02:cd:12:42:2f:de: b6:6b:9f:27:66:67:04:36:db:3e:6d:e8:89:38:19:7e:2b:11: f2:0a:e9:4d -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUU8xQPobxazJEse4V5l4xazSNmkwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgwNzU0NTJaFw0yNzAxMjcwNzU5NTJaMDMxMTAvBgNV BAMTKDM5OTU2MzcwQzQzODA3Q0Q1MDU2MThBOTZFMEFCMUQ2OUU3RkZEOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC66g1WomKra9pZ3IafcHGRY70+ cdIuK8vlwGKq9RKYsvdXxTZBC/SQPLe0f/N9lOO9b64N4Yntj+xouFAH3bnKXH2n wa8HSkat3z9KhUROfIzEQ01BeI9/NoNUU49WaOLp3R7vKUXceojlbA84lN7CcO2a R7BRi4pObHfVDWVTzwCPL8tqY9RgChC6y+Awp/AF1QEGSH5SNQuSl+j3XklsCru/ ELFRUowSaHHOGnGYn2rTM1uX91NENdv/+81XXnZ7pYub/tUtKtS3p+cvhPX1Rt2+ aSTqa07j3KgNxu1WuLMhOVuoeW9kJZ4yNCyTCmc9SnA1g5wbkQdsj2QgV9u9AgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ5lWNwxDgHzVBW GKluCrHWnn/9kTAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvN0YwOTE4RDY1MTc4Njc2NzlERDE0OEM3 NDI3MDlFMUMzMjFFRDJBQUEwN0RBNTFCODlGNEU5RTQ3MzU5M0E4OC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy83RjA5MThENjUxNzg2NzY3OUREMTQ4Qzc0MjcwOUUxQzMyMUVEMkFBQTA3 REE1MUI4OUY0RTlFNDczNTkzQTg4LzAvMzk5NTYzNzBDNDM4MDdDRDUwNTYxOEE5 NkUwQUIxRDY5RTdGRkQ5MS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAOFEDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEJpEwDQYJKoZIhvcNAQELBQADggEBAIemEICh KX3tiX6uuIr3Tpmwk7QT0V9VFEtyCoE5TWcvqP2SSXxFh9WasUe7UpT7ykI4hw6v RqQvYk1M257WRygUCzI8uDSVuuNc4wzHSDQJT8FCdQeE9VFvDOt4jCqNMqpI6PPI w5yTjzkuq46PRR99cyhSLR8SKjGrpyuNlQkBEHDsiwivXqDbS3WUuKnhv/sblSuD sfXnZhVxRdn39DeQkMJBa3Z+aO3YOQu7DXSWRBc2neujsosVjbQ7k0MoH14971Au YLwnju401pTDA+8N3Cnu6xc2nE4RsSIMxMdR6i/vZALNEkIv3rZrnydmZwQ22z5t 6Ik4GX4rEfIK6U0= -----END CERTIFICATE-----Generated at Mon Mar 2 22:48:54 2026 by rpki-client