$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4401FB356C9BA31ACC0B781201E29CDD245C8CB5.cer File: 4401FB356C9BA31ACC0B781201E29CDD245C8CB5.cer (raw, json) Hash identifier: NEwjWmNrmPcwDXC/xbQ7hjNDvhtH65Gj18VyqgmbdM4= Subject key identifier: 44:01:FB:35:6C:9B:A3:1A:CC:0B:78:12:01:E2:9C:DD:24:5C:8C:B5 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 76AECDAD26356275B5F76946277BED29493E4635 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/3075B35EC802BEAFB945E9AF1E1866D6BCAA025FC719D85F6DE9796AA8F1538D/0/4401FB356C9BA31ACC0B781201E29CDD245C8CB5.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/3075B35EC802BEAFB945E9AF1E1866D6BCAA025FC719D85F6DE9796AA8F1538D/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 13:14:06 +0000 Certificate not after: Wed 27 Jan 2027 13:19:06 +0000 Subordinate resources: AS: 274001 IP: 2803:f8d0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 05 Mar 2026 11:41:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:ae:cd:ad:26:35:62:75:b5:f7:69:46:27:7b:ed:29:49:3e:46:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 13:14:06 2026 GMT Not After : Jan 27 13:19:06 2027 GMT Subject: CN=4401FB356C9BA31ACC0B781201E29CDD245C8CB5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:51:2d:10:53:c3:d1:10:a5:33:f3:ff:6c:36: c5:4f:c2:38:e7:b8:f7:b6:47:94:c6:c3:0b:bf:5e: 28:82:54:cf:fa:40:0f:a1:24:61:c8:ea:c9:8a:9b: 30:3a:61:23:56:f5:be:5f:c1:33:85:5c:75:0b:88: 2c:ec:c8:d0:25:cb:85:30:f9:7f:50:66:4f:9d:8a: 70:a7:5f:cc:84:8e:f7:aa:87:ad:36:c4:bf:30:67: 8c:3e:ca:b1:f0:8a:32:c7:e9:a5:23:3d:b9:cb:56: aa:67:59:70:c6:84:fb:03:0c:33:b4:e9:0c:a4:75: 71:8c:b5:3b:3d:bc:4e:a9:ff:0d:0b:b7:4b:08:d7: 3d:03:7d:64:f8:17:e6:65:0d:c3:e0:a5:ea:8a:3d: be:0c:7c:c0:bc:30:05:6f:d3:42:31:9c:31:c5:97: e0:23:b3:ec:9c:0f:a0:e0:30:7d:bd:91:a1:b8:9f: 59:dc:f8:22:93:74:06:41:0c:be:7f:90:30:aa:0d: b2:99:0a:92:18:8a:90:e0:7c:e4:f0:a5:17:27:86: 40:66:40:b8:d4:2f:97:a4:b2:77:40:a0:00:29:00: 6e:5f:dd:4e:61:69:d3:77:08:6f:40:d9:d3:f4:5f: f1:0b:18:31:fc:48:8a:24:4b:06:40:aa:56:70:c6: 3d:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 44:01:FB:35:6C:9B:A3:1A:CC:0B:78:12:01:E2:9C:DD:24:5C:8C:B5 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/3075B35EC802BEAFB945E9AF1E1866D6BCAA025FC719D85F6DE9796AA8F1538D/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/3075B35EC802BEAFB945E9AF1E1866D6BCAA025FC719D85F6DE9796AA8F1538D/0/4401FB356C9BA31ACC0B781201E29CDD245C8CB5.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:f8d0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 274001 Signature Algorithm: sha256WithRSAEncryption 19:df:bb:50:ce:54:c0:10:06:fe:4c:cd:36:fb:3f:8f:d1:1d: 3e:4b:c1:81:58:c1:19:ac:8f:c0:38:8d:00:ca:04:74:a9:8d: 88:02:a1:c5:ac:88:dd:48:e7:7e:f7:96:78:f0:ba:42:3a:09: 54:7c:8c:7a:fa:5f:c0:fe:fa:10:03:23:36:f7:93:36:3c:ee: e7:f4:07:26:02:32:75:00:8f:0e:67:a3:6f:5a:36:14:75:81: 7f:51:6d:dc:64:e6:90:05:9c:4d:c5:cd:4f:16:60:a0:44:8b: 60:d0:c3:81:35:2b:75:17:9d:8c:50:8b:0d:e6:0e:34:12:d8: ea:c3:75:d0:cb:72:63:8c:b5:17:18:09:d8:bd:f9:d6:26:bb: 21:11:f2:78:93:20:66:39:bb:47:dd:78:58:88:ba:0a:00:33: 52:72:5f:09:96:57:7f:a3:78:f5:cd:ad:9f:27:dc:59:c8:e2: 2e:0b:9b:8f:e9:1c:6e:08:06:f1:81:54:bd:c0:fc:27:c3:85: 64:d5:0f:7c:55:55:c6:46:ea:b8:81:14:0e:4b:10:ed:55:7f: 0d:b9:92:87:b7:79:b7:08:69:d8:ba:1a:b9:e5:1e:01:72:19: 78:77:b7:16:fc:fb:94:7d:f7:26:41:d1:da:1b:1e:2d:cc:72: 65:08:22:95 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUdq7NrSY1YnW192lGJ3vtKUk+RjUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgxMzE0MDZaFw0yNzAxMjcxMzE5MDZaMDMxMTAvBgNV BAMTKDQ0MDFGQjM1NkM5QkEzMUFDQzBCNzgxMjAxRTI5Q0REMjQ1QzhDQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8US0QU8PREKUz8/9sNsVPwjjn uPe2R5TGwwu/XiiCVM/6QA+hJGHI6smKmzA6YSNW9b5fwTOFXHULiCzsyNAly4Uw +X9QZk+dinCnX8yEjveqh602xL8wZ4w+yrHwijLH6aUjPbnLVqpnWXDGhPsDDDO0 6QykdXGMtTs9vE6p/w0Lt0sI1z0DfWT4F+ZlDcPgpeqKPb4MfMC8MAVv00IxnDHF l+Ajs+ycD6DgMH29kaG4n1nc+CKTdAZBDL5/kDCqDbKZCpIYipDgfOTwpRcnhkBm QLjUL5eksndAoAApAG5f3U5hadN3CG9A2dP0X/ELGDH8SIokSwZAqlZwxj3VAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBREAfs1bJujGswL eBIB4pzdJFyMtTAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMzA3NUIzNUVDODAyQkVBRkI5NDVFOUFG MUUxODY2RDZCQ0FBMDI1RkM3MTlEODVGNkRFOTc5NkFBOEYxNTM4RC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8zMDc1QjM1RUM4MDJCRUFGQjk0NUU5QUYxRTE4NjZENkJDQUEwMjVGQzcx OUQ4NUY2REU5Nzk2QUE4RjE1MzhELzAvNDQwMUZCMzU2QzlCQTMxQUNDMEI3ODEy MDFFMjlDREQyNDVDOENCNS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAP40DAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMELlEwDQYJKoZIhvcNAQELBQADggEBABnfu1DO VMAQBv5MzTb7P4/RHT5LwYFYwRmsj8A4jQDKBHSpjYgCocWsiN1I5373lnjwukI6 CVR8jHr6X8D++hADIzb3kzY87uf0ByYCMnUAjw5no29aNhR1gX9Rbdxk5pAFnE3F zU8WYKBEi2DQw4E1K3UXnYxQiw3mDjQS2OrDddDLcmOMtRcYCdi9+dYmuyER8niT IGY5u0fdeFiIugoAM1JyXwmWV3+jePXNrZ8n3FnI4i4Lm4/pHG4IBvGBVL3A/CfD hWTVD3xVVcZG6riBFA5LEO1Vfw25koe3ebcIadi6GrnlHgFyGXh3txb8+5R99yZB 0dobHi3McmUIIpU= -----END CERTIFICATE-----Generated at Mon Mar 2 13:38:38 2026 by rpki-client