$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44D0DEB3B3FFEBD553B64FD664A3C50846134BD9.cer File: 44D0DEB3B3FFEBD553B64FD664A3C50846134BD9.cer (raw, json) Hash identifier: Opb7O4SUsqjGLYEGitrLXDNPTq1SlEScFSrV17QMoYM= Subject key identifier: 44:D0:DE:B3:B3:FF:EB:D5:53:B6:4F:D6:64:A3:C5:08:46:13:4B:D9 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 76E8A714194EFFB22CA10D3A6AB3C793F6DA909E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/6EB9E3F581A0D7F1DCE4FE9F5C1BC199E17C8E587B9416375DFFF71D783E1542/0/44D0DEB3B3FFEBD553B64FD664A3C50846134BD9.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/6EB9E3F581A0D7F1DCE4FE9F5C1BC199E17C8E587B9416375DFFF71D783E1542/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Mon 09 Feb 2026 21:30:00 +0000 Certificate not after: Mon 08 Feb 2027 21:35:00 +0000 Subordinate resources: AS: 274265 IP: 2801:15:400::/48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:e8:a7:14:19:4e:ff:b2:2c:a1:0d:3a:6a:b3:c7:93:f6:da:90:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Feb 9 21:30:00 2026 GMT Not After : Feb 8 21:35:00 2027 GMT Subject: CN=44D0DEB3B3FFEBD553B64FD664A3C50846134BD9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:53:82:05:0e:c0:c7:93:de:00:62:c6:d7:63: b7:81:b7:a9:17:91:27:62:fe:61:aa:5a:29:99:d8: c8:12:03:f6:f6:fb:60:18:d6:13:53:e7:51:b9:1a: 37:f7:69:91:59:28:f9:57:16:58:79:21:5f:40:8a: bc:c2:b8:77:55:10:b6:19:e0:64:ee:47:0a:69:87: d5:35:e1:a4:f9:a4:13:43:24:c9:e3:6f:7c:93:ef: 2e:3c:8b:0f:d2:59:db:f7:30:c1:13:af:4c:11:ce: d5:54:8b:40:90:c1:0c:6e:57:21:c9:11:2f:28:71: f3:46:55:21:7f:87:a0:75:5d:0b:be:69:46:a1:32: 4e:f5:69:aa:79:c5:40:e0:53:a2:e1:cc:08:b9:c5: af:0f:7c:f1:3c:ed:c5:50:78:9b:fb:e3:61:dc:8e: 51:58:d0:fc:d8:d4:dc:83:35:40:6a:37:a7:fe:0d: 54:9b:51:e4:44:67:cb:f3:a5:3d:03:7b:71:1a:dd: e4:52:cc:8e:24:68:33:ee:38:80:70:f7:9b:fa:a2: 68:13:17:b9:c4:6c:0c:4c:67:bd:f9:a7:50:d9:67: f1:4e:86:e5:9f:84:b4:a2:09:c2:4e:e1:17:96:7a: bc:c5:9a:2c:cc:3d:de:cb:d1:87:6c:70:61:6b:07: eb:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 44:D0:DE:B3:B3:FF:EB:D5:53:B6:4F:D6:64:A3:C5:08:46:13:4B:D9 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6EB9E3F581A0D7F1DCE4FE9F5C1BC199E17C8E587B9416375DFFF71D783E1542/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6EB9E3F581A0D7F1DCE4FE9F5C1BC199E17C8E587B9416375DFFF71D783E1542/0/44D0DEB3B3FFEBD553B64FD664A3C50846134BD9.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2801:15:400::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 274265 Signature Algorithm: sha256WithRSAEncryption 78:28:ca:1f:db:cb:9e:6f:69:ca:ac:14:1e:56:38:54:bf:4e: 7b:95:a3:6c:4b:18:fa:17:f4:13:e9:df:0c:48:d2:c2:15:5f: 75:77:99:36:2a:45:f8:20:1d:df:c6:5b:27:d9:10:64:10:13: 0a:18:b6:14:fd:24:f3:fb:6f:3f:db:32:79:1b:cf:a3:b2:0f: e2:08:18:c5:b8:3f:35:70:41:61:56:96:9f:84:03:78:15:5f: 7c:6d:89:f8:ac:29:70:01:ac:28:43:4d:e8:00:e0:28:2e:bc: e1:10:b2:7e:9f:c9:f0:9d:2f:84:1e:4a:0c:c3:88:a5:45:7c: a9:c1:46:f6:d7:b6:1d:6e:64:0a:31:eb:2c:b2:9d:8a:14:2a: 5a:0c:04:9d:fd:55:16:e2:7f:9f:0f:7f:dc:c0:fa:81:53:70: 6b:60:54:ad:4b:df:4f:82:62:07:d2:eb:ad:30:c2:f2:79:66: cb:d8:0c:77:33:13:21:5e:65:39:4e:8f:40:e9:6b:b7:e8:a6: 07:e2:d1:18:58:15:18:fa:21:9c:59:72:22:a4:44:ea:aa:9e: f3:00:51:95:6c:e8:91:5b:b9:b1:58:87:02:16:9a:61:c2:1f: 1a:f7:19:7f:1b:c7:d7:f4:99:90:0c:5d:8e:5c:a9:cf:33:d2: b7:d1:73:da -----BEGIN CERTIFICATE----- MIIGmTCCBYGgAwIBAgIUduinFBlO/7IsoQ06arPHk/bakJ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAyMDkyMTMwMDBaFw0yNzAyMDgyMTM1MDBaMDMxMTAvBgNV BAMTKDQ0RDBERUIzQjNGRkVCRDU1M0I2NEZENjY0QTNDNTA4NDYxMzRCRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWU4IFDsDHk94AYsbXY7eBt6kX kSdi/mGqWimZ2MgSA/b2+2AY1hNT51G5Gjf3aZFZKPlXFlh5IV9AirzCuHdVELYZ 4GTuRwpph9U14aT5pBNDJMnjb3yT7y48iw/SWdv3MMETr0wRztVUi0CQwQxuVyHJ ES8ocfNGVSF/h6B1XQu+aUahMk71aap5xUDgU6LhzAi5xa8PfPE87cVQeJv742Hc jlFY0PzY1NyDNUBqN6f+DVSbUeREZ8vzpT0De3Ea3eRSzI4kaDPuOIBw95v6omgT F7nEbAxMZ735p1DZZ/FOhuWfhLSiCcJO4ReWerzFmizMPd7L0YdscGFrB+vvAgMB AAGjggOjMIIDnzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRE0N6zs//r1VO2 T9Zko8UIRhNL2TAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNkVCOUUzRjU4MUEwRDdGMURDRTRGRTlG NUMxQkMxOTlFMTdDOEU1ODdCOTQxNjM3NURGRkY3MUQ3ODNFMTU0Mi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy82RUI5RTNGNTgxQTBEN0YxRENFNEZFOUY1QzFCQzE5OUUxN0M4RTU4N0I5 NDE2Mzc1REZGRjcxRDc4M0UxNTQyLzAvNDREMERFQjNCM0ZGRUJENTUzQjY0RkQ2 NjRBM0M1MDg0NjEzNEJEOS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKAEAFQQAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwQvWTANBgkqhkiG9w0BAQsFAAOCAQEAeCjK H9vLnm9pyqwUHlY4VL9Oe5WjbEsY+hf0E+nfDEjSwhVfdXeZNipF+CAd38ZbJ9kQ ZBATChi2FP0k8/tvP9syeRvPo7IP4ggYxbg/NXBBYVaWn4QDeBVffG2J+KwpcAGs KENN6ADgKC684RCyfp/J8J0vhB5KDMOIpUV8qcFG9te2HW5kCjHrLLKdihQqWgwE nf1VFuJ/nw9/3MD6gVNwa2BUrUvfT4JiB9LrrTDC8nlmy9gMdzMTIV5lOU6PQOlr t+imB+LRGFgVGPohnFlyIqRE6qqe8wBRlWzokVu5sViHAhaaYcIfGvcZfxvH1/SZ kAxdjlypzzPSt9Fz2g== -----END CERTIFICATE-----Generated at Mon Mar 2 14:47:03 2026 by rpki-client