$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3FE91CB574CBB62E72FE36F319435F77100CFD79.cer File: 3FE91CB574CBB62E72FE36F319435F77100CFD79.cer (raw, json) Hash identifier: FEr8FOKp44JiHF5+K1N6JzvhZWdnxlj/1yBPSAXc72Y= Subject key identifier: 3F:E9:1C:B5:74:CB:B6:2E:72:FE:36:F3:19:43:5F:77:10:0C:FD:79 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 6A1CBB0DA568059E7AEE1849AA5923749B8026BC Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/C1020E150BA6B339FCC409A6EC5E727C1B15037DDB9D9D5AF4F74A3938176355/0/3FE91CB574CBB62E72FE36F319435F77100CFD79.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/C1020E150BA6B339FCC409A6EC5E727C1B15037DDB9D9D5AF4F74A3938176355/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Thu 29 Jan 2026 01:21:29 +0000 Certificate not after: Thu 28 Jan 2027 01:26:29 +0000 Subordinate resources: AS: 273978 IP: 2803:70d0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 05 Mar 2026 11:41:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:1c:bb:0d:a5:68:05:9e:7a:ee:18:49:aa:59:23:74:9b:80:26:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 29 01:21:29 2026 GMT Not After : Jan 28 01:26:29 2027 GMT Subject: CN=3FE91CB574CBB62E72FE36F319435F77100CFD79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:d1:0a:62:30:af:fa:ed:76:4a:ec:c6:fe:e7: 23:d3:7f:1e:2c:a1:66:a6:5d:a8:f7:59:6e:9d:a8: 35:dd:73:b2:d8:1f:ac:2c:46:75:70:1a:02:64:f7: 5a:3e:fb:ee:42:b5:91:b1:7f:f8:2d:f3:17:5f:6c: f0:47:94:cf:f5:3e:87:75:18:cb:94:bf:7a:5b:81: 31:01:b4:c0:87:0b:2c:58:04:69:48:40:68:1d:21: ed:95:36:c6:ca:51:cd:53:49:1a:94:80:bc:28:aa: e0:b1:ef:17:7c:3a:86:46:46:a8:99:c7:0b:71:79: e5:09:aa:2b:82:8f:f0:5e:5d:51:c0:6d:60:89:2c: 1a:0f:1c:5c:eb:fa:5d:43:3c:e8:f4:82:46:d9:9a: 50:5c:93:dd:b1:55:d0:5e:b3:ab:73:ab:6a:6c:e1: de:c5:d5:3f:e4:91:ed:0f:99:92:aa:fc:3f:99:00: 4d:24:98:66:7f:84:22:12:20:92:ee:dd:58:49:f7: 90:13:20:b8:cf:8d:55:d3:d7:5b:e6:d6:51:a6:04: 0e:e8:b7:3c:d3:ed:67:d7:36:3d:bc:a4:e1:a1:48: 8e:74:78:13:b2:17:39:43:76:70:a5:e7:67:3b:51: 29:3b:a1:08:54:25:95:74:98:0d:10:69:07:b3:38: c0:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3F:E9:1C:B5:74:CB:B6:2E:72:FE:36:F3:19:43:5F:77:10:0C:FD:79 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/C1020E150BA6B339FCC409A6EC5E727C1B15037DDB9D9D5AF4F74A3938176355/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/C1020E150BA6B339FCC409A6EC5E727C1B15037DDB9D9D5AF4F74A3938176355/0/3FE91CB574CBB62E72FE36F319435F77100CFD79.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:70d0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273978 Signature Algorithm: sha256WithRSAEncryption 35:45:39:39:1c:8f:c7:63:db:1b:ba:99:53:ae:5d:8b:7d:9c: 10:92:c8:f0:b3:cf:b5:8d:3c:56:5c:ce:10:16:af:73:a6:cd: 5d:83:52:eb:f1:6d:67:a1:c9:ea:ee:c9:88:d6:1a:e2:8b:cd: 86:56:a5:f4:4a:25:39:9c:b4:24:a7:d8:dd:9e:64:35:fd:c7: 87:8f:e9:87:c3:53:72:05:38:99:0e:50:1c:0e:7d:68:e8:d2: 25:b2:64:78:c0:14:ea:c4:d8:74:70:f4:26:fc:41:58:a8:be: a7:b3:a6:60:de:fa:ff:03:91:06:41:2a:1e:69:9c:ec:77:c4: 06:cf:69:d6:04:18:26:95:17:81:68:d0:c8:40:3c:b3:66:1c: c3:e3:16:27:d3:2f:d2:b0:6a:42:78:39:33:b9:ce:e7:d8:5f: 8f:c3:1a:38:97:bd:34:62:0a:05:6b:e4:1f:04:8d:79:e4:d5: a0:2a:6f:b8:4c:cc:f0:17:1d:22:9a:99:2f:2a:54:72:ba:83: 06:d2:2f:03:b9:92:49:49:90:42:9d:81:65:8b:51:5a:44:8b: ac:b0:a0:32:de:f6:61:91:57:47:d5:df:38:e1:37:fa:31:ef: 5e:d7:1a:62:a3:bc:a7:8c:9e:63:58:ab:98:4a:90:71:8a:a1: 4a:6c:2a:fc -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUahy7DaVoBZ567hhJqlkjdJuAJrwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjkwMTIxMjlaFw0yNzAxMjgwMTI2MjlaMDMxMTAvBgNV BAMTKDNGRTkxQ0I1NzRDQkI2MkU3MkZFMzZGMzE5NDM1Rjc3MTAwQ0ZENzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU0QpiMK/67XZK7Mb+5yPTfx4s oWamXaj3WW6dqDXdc7LYH6wsRnVwGgJk91o+++5CtZGxf/gt8xdfbPBHlM/1Pod1 GMuUv3pbgTEBtMCHCyxYBGlIQGgdIe2VNsbKUc1TSRqUgLwoquCx7xd8OoZGRqiZ xwtxeeUJqiuCj/BeXVHAbWCJLBoPHFzr+l1DPOj0gkbZmlBck92xVdBes6tzq2ps 4d7F1T/kke0PmZKq/D+ZAE0kmGZ/hCISIJLu3VhJ95ATILjPjVXT11vm1lGmBA7o tzzT7WfXNj28pOGhSI50eBOyFzlDdnCl52c7USk7oQhUJZV0mA0QaQezOMCtAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ/6Ry1dMu2LnL+ NvMZQ193EAz9eTAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQzEwMjBFMTUwQkE2QjMzOUZDQzQwOUE2 RUM1RTcyN0MxQjE1MDM3RERCOUQ5RDVBRjRGNzRBMzkzODE3NjM1NS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9DMTAyMEUxNTBCQTZCMzM5RkNDNDA5QTZFQzVFNzI3QzFCMTUwMzdEREI5 RDlENUFGNEY3NEEzOTM4MTc2MzU1LzAvM0ZFOTFDQjU3NENCQjYyRTcyRkUzNkYz MTk0MzVGNzcxMDBDRkQ3OS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKANw0DAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMELjowDQYJKoZIhvcNAQELBQADggEBADVFOTkc j8dj2xu6mVOuXYt9nBCSyPCzz7WNPFZczhAWr3OmzV2DUuvxbWehyeruyYjWGuKL zYZWpfRKJTmctCSn2N2eZDX9x4eP6YfDU3IFOJkOUBwOfWjo0iWyZHjAFOrE2HRw 9Cb8QViovqezpmDe+v8DkQZBKh5pnOx3xAbPadYEGCaVF4Fo0MhAPLNmHMPjFifT L9KwakJ4OTO5zufYX4/DGjiXvTRiCgVr5B8EjXnk1aAqb7hMzPAXHSKamS8qVHK6 gwbSLwO5kklJkEKdgWWLUVpEi6ywoDLe9mGRV0fV3zjhN/ox717XGmKjvKeMnmNY q5hKkHGKoUpsKvw= -----END CERTIFICATE-----Generated at Mon Mar 2 13:39:03 2026 by rpki-client