$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43B6751C9B29A4D5E15D773D14DADDFB2A406E59.cer File: 43B6751C9B29A4D5E15D773D14DADDFB2A406E59.cer (raw, json) Hash identifier: RPrTaNQwy73ZTAECsmKkB0xZNESDGqnOhXhBzeVTANI= Subject key identifier: 43:B6:75:1C:9B:29:A4:D5:E1:5D:77:3D:14:DA:DD:FB:2A:40:6E:59 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 68E0D6E19C75CF0C8F5D28A7675C517212E1784C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/905A0AB4E1113938FE14BA91784224FB32812C624455A031A0F69EFD698B5CD7/0/43B6751C9B29A4D5E15D773D14DADDFB2A406E59.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/905A0AB4E1113938FE14BA91784224FB32812C624455A031A0F69EFD698B5CD7/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 22:35:24 +0000 Certificate not after: Wed 27 Jan 2027 22:40:24 +0000 Subordinate resources: AS: 274223 IP: 2803:6bd0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:e0:d6:e1:9c:75:cf:0c:8f:5d:28:a7:67:5c:51:72:12:e1:78:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 22:35:24 2026 GMT Not After : Jan 27 22:40:24 2027 GMT Subject: CN=43B6751C9B29A4D5E15D773D14DADDFB2A406E59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:01:5b:48:6f:52:82:98:bd:64:14:67:76:df: 18:0e:d5:8f:21:11:2a:b7:d5:bb:d6:31:03:a2:a9: 54:ab:b1:6b:de:c0:fa:34:25:3e:25:c9:37:68:99: 92:70:74:4a:96:83:a6:34:b2:b2:24:45:55:cd:4c: 0a:2e:f4:12:a2:74:46:5c:8a:01:8b:10:38:36:65: 33:40:a3:c6:16:55:bf:b5:9b:59:03:80:18:3e:b9: 47:5a:7a:1b:6d:f8:80:c5:dc:4d:ed:b0:fd:e2:b9: c0:33:41:88:08:ca:15:05:ea:37:03:c0:c8:10:ed: ec:e8:c5:06:e8:b8:d1:6a:22:a7:75:5e:08:97:f0: 2a:2d:fd:97:d1:7b:06:8d:1a:a8:8a:26:3b:36:1a: 15:dd:bb:da:e6:50:41:85:00:ba:6b:de:d2:bf:74: e8:71:d8:f9:78:38:7e:5b:c9:dc:5e:2b:2a:d8:fd: 30:fa:f5:d6:14:d3:61:be:75:14:78:8f:09:ae:56: d4:db:25:23:69:5c:00:ed:49:41:ca:17:89:a6:d3: 60:10:a0:24:0a:c7:3b:14:b5:2a:96:e6:25:c1:7b: 4c:89:80:3a:4a:de:8a:b3:2d:21:e2:42:89:4d:75: 16:24:9f:c4:49:e1:b6:12:1f:55:69:0b:98:75:e8: 2e:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 43:B6:75:1C:9B:29:A4:D5:E1:5D:77:3D:14:DA:DD:FB:2A:40:6E:59 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/905A0AB4E1113938FE14BA91784224FB32812C624455A031A0F69EFD698B5CD7/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/905A0AB4E1113938FE14BA91784224FB32812C624455A031A0F69EFD698B5CD7/0/43B6751C9B29A4D5E15D773D14DADDFB2A406E59.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:6bd0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 274223 Signature Algorithm: sha256WithRSAEncryption 67:f7:15:69:1d:08:7b:7b:4a:82:4e:73:70:d3:75:76:4b:c3: 03:03:b6:89:a7:30:c5:16:3b:64:10:51:9b:85:59:5d:a9:2b: 4d:18:7f:2c:d2:af:89:62:6a:1d:28:08:79:2a:86:29:64:c2: 0b:bc:2c:ed:67:cc:51:96:5b:f6:5d:24:16:f1:0e:6c:63:b5: 92:5f:2e:31:d3:d9:d1:b7:89:a9:cc:15:f5:5a:f3:38:f3:78: 74:a8:07:49:2e:a8:c9:30:a3:9e:3c:f6:30:f8:ac:47:73:56: c9:2e:33:a3:a7:8b:2f:67:40:c3:6e:18:9d:1d:d0:10:51:e0: 10:dd:5d:56:a7:7a:e6:e1:b4:a4:53:37:86:6d:4e:1c:e7:83: 6e:ec:96:be:bc:17:5b:04:96:fb:94:19:6c:12:05:14:02:9e: 2a:39:b2:eb:1b:9a:da:d4:a0:27:92:d2:2c:bb:e5:fe:56:d0: 54:ca:0b:6f:ed:ac:54:4f:d7:96:9f:c3:a6:9f:e1:2e:0e:d7: 26:86:4a:83:06:34:fc:16:87:7c:b9:0d:4d:19:29:9e:b8:49: 71:9a:f2:2a:83:9e:2f:c8:bf:6d:c9:0f:06:c9:f9:3e:4d:e7: 79:1b:95:64:61:d1:27:35:eb:03:47:83:94:f6:80:d1:7c:44: c8:5c:05:88 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUaODW4Zx1zwyPXSinZ1xRchLheEwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgyMjM1MjRaFw0yNzAxMjcyMjQwMjRaMDMxMTAvBgNV BAMTKDQzQjY3NTFDOUIyOUE0RDVFMTVENzczRDE0REFEREZCMkE0MDZFNTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRAVtIb1KCmL1kFGd23xgO1Y8h ESq31bvWMQOiqVSrsWvewPo0JT4lyTdomZJwdEqWg6Y0srIkRVXNTAou9BKidEZc igGLEDg2ZTNAo8YWVb+1m1kDgBg+uUdaehtt+IDF3E3tsP3iucAzQYgIyhUF6jcD wMgQ7ezoxQbouNFqIqd1XgiX8Cot/ZfRewaNGqiKJjs2GhXdu9rmUEGFALpr3tK/ dOhx2Pl4OH5bydxeKyrY/TD69dYU02G+dRR4jwmuVtTbJSNpXADtSUHKF4mm02AQ oCQKxzsUtSqW5iXBe0yJgDpK3oqzLSHiQolNdRYkn8RJ4bYSH1VpC5h16C5FAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRDtnUcmymk1eFd dz0U2t37KkBuWTAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvOTA1QTBBQjRFMTExMzkzOEZFMTRCQTkx Nzg0MjI0RkIzMjgxMkM2MjQ0NTVBMDMxQTBGNjlFRkQ2OThCNUNENy8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy85MDVBMEFCNEUxMTEzOTM4RkUxNEJBOTE3ODQyMjRGQjMyODEyQzYyNDQ1 NUEwMzFBMEY2OUVGRDY5OEI1Q0Q3LzAvNDNCNjc1MUM5QjI5QTRENUUxNUQ3NzNE MTREQURERkIyQTQwNkU1OS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKANr0DAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMELy8wDQYJKoZIhvcNAQELBQADggEBAGf3FWkd CHt7SoJOc3DTdXZLwwMDtomnMMUWO2QQUZuFWV2pK00YfyzSr4liah0oCHkqhilk wgu8LO1nzFGWW/ZdJBbxDmxjtZJfLjHT2dG3ianMFfVa8zjzeHSoB0kuqMkwo548 9jD4rEdzVskuM6Oniy9nQMNuGJ0d0BBR4BDdXVaneubhtKRTN4ZtThzng27slr68 F1sElvuUGWwSBRQCnio5susbmtrUoCeS0iy75f5W0FTKC2/trFRP15afw6af4S4O 1yaGSoMGNPwWh3y5DU0ZKZ64SXGa8iqDni/Iv23JDwbJ+T5N53kblWRh0Sc16wNH g5T2gNF8RMhcBYg= -----END CERTIFICATE-----Generated at Mon Mar 2 17:15:29 2026 by rpki-client