$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C7B69A1EF4CA7800FEB038E1DD0633839F3995F.cer File: 3C7B69A1EF4CA7800FEB038E1DD0633839F3995F.cer (raw, json) Hash identifier: p6wku6ymoop9C+DfP/fNPJWyMlvc2A2ygcFhcvJJpa8= Subject key identifier: 3C:7B:69:A1:EF:4C:A7:80:0F:EB:03:8E:1D:D0:63:38:39:F3:99:5F Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 081DCF0753BE1EF8F218098264C85C031B51162E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/84591308665CBDC145A209F10CB5F5D6B0D1E18FB8FCA648E2C6A15B57CD6D5B/0/3C7B69A1EF4CA7800FEB038E1DD0633839F3995F.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/84591308665CBDC145A209F10CB5F5D6B0D1E18FB8FCA648E2C6A15B57CD6D5B/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Thu 29 Jan 2026 02:17:11 +0000 Certificate not after: Thu 28 Jan 2027 02:22:11 +0000 Subordinate resources: AS: 272950 IP: 2803:2990::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:1d:cf:07:53:be:1e:f8:f2:18:09:82:64:c8:5c:03:1b:51:16:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 29 02:17:11 2026 GMT Not After : Jan 28 02:22:11 2027 GMT Subject: CN=3C7B69A1EF4CA7800FEB038E1DD0633839F3995F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:b1:45:e4:a9:74:08:f7:f1:6f:89:de:db:fb: 45:83:e6:7a:e3:69:01:5b:d8:96:0e:7a:51:e5:45: 9d:4b:d1:f9:48:19:51:1e:65:90:81:5d:f5:77:c9: 8c:7a:de:10:81:3e:80:22:d5:2b:0e:f0:b8:ab:db: 18:73:c8:f4:63:e1:c5:25:7f:3b:e9:6b:dc:fb:f6: ea:bf:63:1c:48:f6:9d:e7:2c:37:91:10:80:69:5e: 22:20:ae:f7:f6:cb:a3:30:a8:e5:83:8a:88:11:3e: 5c:54:12:8c:a2:72:8c:a8:80:33:00:e9:0e:38:bb: 44:44:89:a0:76:5b:66:eb:cf:ee:98:cb:92:68:dc: 86:81:c0:f1:67:99:4a:5c:cd:e9:9f:37:e8:6b:59: 8f:21:25:d1:26:1c:be:1d:10:4f:8e:f8:5f:cd:3c: ec:bd:0e:ed:48:ff:16:7a:a9:7f:6a:40:3b:ab:bf: 74:04:35:c9:d0:e0:21:ea:35:8c:9e:f9:db:6c:de: 2c:11:d2:a0:7d:9f:9f:eb:3d:e1:55:1c:89:a7:a2: 6f:8d:b3:24:74:8d:74:cb:62:1a:54:10:7c:a4:9a: e1:e3:4a:ee:85:f7:9b:cb:d1:33:aa:28:39:5f:8a: f1:b7:d0:43:a1:c3:c2:9d:55:6e:ca:12:a7:b3:38: 0e:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3C:7B:69:A1:EF:4C:A7:80:0F:EB:03:8E:1D:D0:63:38:39:F3:99:5F X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/84591308665CBDC145A209F10CB5F5D6B0D1E18FB8FCA648E2C6A15B57CD6D5B/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/84591308665CBDC145A209F10CB5F5D6B0D1E18FB8FCA648E2C6A15B57CD6D5B/0/3C7B69A1EF4CA7800FEB038E1DD0633839F3995F.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:2990::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 272950 Signature Algorithm: sha256WithRSAEncryption 17:d4:e3:d3:0e:d2:15:b7:6e:47:0b:f0:4f:27:31:f5:c8:1b: 24:68:2b:24:d8:f0:e3:e7:d8:e2:50:26:89:a8:9a:9a:03:4a: 09:69:0d:e3:00:5f:e2:0a:54:03:6f:73:5f:86:8e:e4:af:6d: 46:14:da:3f:35:d1:0a:0d:b7:17:09:4a:81:89:bd:4b:83:bc: 04:f7:6a:d0:8e:42:5a:69:a3:6c:a3:65:1e:26:10:c3:81:e4: 09:fe:64:a1:de:43:13:18:a3:c1:df:fc:ff:3e:60:0e:8e:bd: ee:ea:ff:84:15:c6:06:42:cb:c5:5a:9c:f5:ae:13:39:46:04: b9:51:c3:96:2a:6d:13:ec:3f:42:b5:a2:c6:6a:2a:79:4f:89: 4a:c3:94:b0:f4:02:de:3c:91:73:b3:9c:65:3f:17:df:43:ed: 5f:a2:cf:5f:d0:cb:20:2a:9a:ea:15:88:6d:97:3c:61:8f:41: 1c:8f:3a:06:4b:27:47:d5:20:0f:8f:e3:27:a3:55:ab:54:88: b8:b3:79:78:8d:d0:fb:2a:ea:c2:01:a4:28:85:ee:eb:fa:be: 79:65:69:aa:5a:32:24:c7:37:74:80:72:6a:f1:ce:35:e4:72: d6:19:69:9f:11:96:17:9f:f4:dd:18:81:ae:50:2f:8f:78:93: f6:bd:44:56 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUCB3PB1O+HvjyGAmCZMhcAxtRFi4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjkwMjE3MTFaFw0yNzAxMjgwMjIyMTFaMDMxMTAvBgNV BAMTKDNDN0I2OUExRUY0Q0E3ODAwRkVCMDM4RTFERDA2MzM4MzlGMzk5NUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcsUXkqXQI9/Fvid7b+0WD5nrj aQFb2JYOelHlRZ1L0flIGVEeZZCBXfV3yYx63hCBPoAi1SsO8Lir2xhzyPRj4cUl fzvpa9z79uq/YxxI9p3nLDeREIBpXiIgrvf2y6MwqOWDiogRPlxUEoyicoyogDMA 6Q44u0REiaB2W2brz+6Yy5Jo3IaBwPFnmUpczemfN+hrWY8hJdEmHL4dEE+O+F/N POy9Du1I/xZ6qX9qQDurv3QENcnQ4CHqNYye+dts3iwR0qB9n5/rPeFVHImnom+N syR0jXTLYhpUEHykmuHjSu6F95vL0TOqKDlfivG30EOhw8KdVW7KEqezOA4TAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ8e2mh70yngA/r A44d0GM4OfOZXzAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvODQ1OTEzMDg2NjVDQkRDMTQ1QTIwOUYx MENCNUY1RDZCMEQxRTE4RkI4RkNBNjQ4RTJDNkExNUI1N0NENkQ1Qi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy84NDU5MTMwODY2NUNCREMxNDVBMjA5RjEwQ0I1RjVENkIwRDFFMThGQjhG Q0E2NDhFMkM2QTE1QjU3Q0Q2RDVCLzAvM0M3QjY5QTFFRjRDQTc4MDBGRUIwMzhF MUREMDYzMzgzOUYzOTk1Ri5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAMpkDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEKjYwDQYJKoZIhvcNAQELBQADggEBABfU49MO 0hW3bkcL8E8nMfXIGyRoKyTY8OPn2OJQJomompoDSglpDeMAX+IKVANvc1+GjuSv bUYU2j810QoNtxcJSoGJvUuDvAT3atCOQlppo2yjZR4mEMOB5An+ZKHeQxMYo8Hf /P8+YA6Ove7q/4QVxgZCy8VanPWuEzlGBLlRw5YqbRPsP0K1osZqKnlPiUrDlLD0 At48kXOznGU/F99D7V+iz1/QyyAqmuoViG2XPGGPQRyPOgZLJ0fVIA+P4yejVatU iLizeXiN0Psq6sIBpCiF7uv6vnllaapaMiTHN3SAcmrxzjXkctYZaZ8Rlhef9N0Y ga5QL494k/a9RFY= -----END CERTIFICATE-----Generated at Mon Mar 2 17:43:45 2026 by rpki-client