$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4C48E6BE82DE7671F0F95DC8F5FE39EFAE1A6378.cer File: 4C48E6BE82DE7671F0F95DC8F5FE39EFAE1A6378.cer (raw, json) Hash identifier: dTAtgCu+wI+MNbKzBpSvu+jz6T4byjFiifWeRGnQpG8= Subject key identifier: 4C:48:E6:BE:82:DE:76:71:F0:F9:5D:C8:F5:FE:39:EF:AE:1A:63:78 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 10DF7D4C81A1E8DD1B9C6F18B3A7E00A1AB6537B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/4FE5D2957AAB1DDC4F1113A25577A903DD850C830CAD7318A59EFF3F89C8FF4B/0/4C48E6BE82DE7671F0F95DC8F5FE39EFAE1A6378.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/4FE5D2957AAB1DDC4F1113A25577A903DD850C830CAD7318A59EFF3F89C8FF4B/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 13:02:13 +0000 Certificate not after: Wed 27 Jan 2027 13:07:13 +0000 Subordinate resources: AS: 273032 IP: 2803:2790::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:df:7d:4c:81:a1:e8:dd:1b:9c:6f:18:b3:a7:e0:0a:1a:b6:53:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 13:02:13 2026 GMT Not After : Jan 27 13:07:13 2027 GMT Subject: CN=4C48E6BE82DE7671F0F95DC8F5FE39EFAE1A6378 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a9:28:f8:4e:36:06:4d:00:b7:fe:16:6c:50: da:75:45:da:87:44:da:dc:80:3e:9d:83:07:a8:3e: 19:4e:98:3a:f9:1b:09:4d:02:61:6c:d9:ca:f1:06: 61:83:74:df:28:77:c1:91:30:05:90:84:f3:42:4b: 78:26:c8:88:97:de:22:24:65:60:97:fc:12:cd:77: 9f:40:8e:43:07:cc:6f:74:70:72:9a:25:d5:e4:cb: a6:47:ef:63:bd:3a:b2:e3:80:b4:c9:f7:3b:4e:d0: 85:2a:da:a1:e9:ed:8f:2f:04:1b:64:27:40:d6:de: 03:f2:cf:c8:68:44:44:f8:41:9b:86:77:d4:26:03: 48:46:99:3d:37:34:80:50:d8:0e:00:d0:75:88:46: 7c:1f:7f:5c:fa:2f:9f:8a:68:77:1b:31:0b:6c:f2: 0a:7d:8f:af:97:54:23:f0:97:50:b1:34:f4:6b:ba: 40:6e:bb:15:51:9d:5e:d3:1d:f5:04:d1:11:01:5c: 08:42:0c:ca:d7:e3:45:18:e9:79:d2:e2:18:89:fd: e2:6a:a9:c6:b9:d4:0e:fc:1a:06:73:ff:d5:e3:9c: 54:bd:9d:0d:71:ac:db:5a:f6:e0:ab:aa:ea:97:78: 90:6a:f4:4d:ed:da:ae:2e:fe:01:ed:9a:fa:54:f7: 08:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4C:48:E6:BE:82:DE:76:71:F0:F9:5D:C8:F5:FE:39:EF:AE:1A:63:78 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/4FE5D2957AAB1DDC4F1113A25577A903DD850C830CAD7318A59EFF3F89C8FF4B/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/4FE5D2957AAB1DDC4F1113A25577A903DD850C830CAD7318A59EFF3F89C8FF4B/0/4C48E6BE82DE7671F0F95DC8F5FE39EFAE1A6378.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:2790::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273032 Signature Algorithm: sha256WithRSAEncryption 47:05:7c:81:7d:20:84:6d:2a:d3:bf:2d:0e:58:6f:f5:fd:91: 48:e2:8d:eb:df:e5:53:b9:21:21:2e:f3:1d:9e:8e:b5:8a:b3: d7:4f:36:8f:fa:b5:29:ed:d7:93:1d:83:d5:b0:29:a9:e2:85: 38:73:b9:70:9d:ea:1d:66:28:cd:cd:72:82:18:83:75:fc:ce: 1f:1b:88:d4:18:3b:ac:71:69:f1:85:3b:70:f5:0b:eb:33:49: 5f:9e:83:ee:22:f4:d9:7d:c1:4d:ba:8c:e0:a3:c9:c7:95:0f: 1d:99:50:68:ca:95:d9:c3:9f:1b:82:e9:1e:19:a0:00:19:f0: 56:91:56:99:09:f2:1f:7f:0e:8b:8b:c2:bf:f0:d4:c0:46:25: 87:0a:cf:29:3f:f2:aa:dd:84:87:4c:fb:df:68:8c:86:cd:15: 8f:49:e5:4e:91:05:39:7e:92:36:ee:1f:05:c7:1f:c7:58:a2: a7:b8:3c:6c:e4:08:d8:4a:93:ad:a7:9e:0c:a3:6f:1c:7b:a0: 93:56:44:ab:43:74:5b:27:72:c4:41:f4:e8:95:a2:8f:11:5c: d2:0a:63:35:40:ee:aa:0f:b2:b7:09:2f:bd:ba:29:ab:da:32: f8:ee:cc:34:28:ef:6a:b5:3e:94:9c:e0:d7:48:1d:df:eb:24: 50:7a:01:74 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUEN99TIGh6N0bnG8Ys6fgChq2U3swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgxMzAyMTNaFw0yNzAxMjcxMzA3MTNaMDMxMTAvBgNV BAMTKDRDNDhFNkJFODJERTc2NzFGMEY5NURDOEY1RkUzOUVGQUUxQTYzNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChqSj4TjYGTQC3/hZsUNp1RdqH RNrcgD6dgweoPhlOmDr5GwlNAmFs2crxBmGDdN8od8GRMAWQhPNCS3gmyIiX3iIk ZWCX/BLNd59AjkMHzG90cHKaJdXky6ZH72O9OrLjgLTJ9ztO0IUq2qHp7Y8vBBtk J0DW3gPyz8hoRET4QZuGd9QmA0hGmT03NIBQ2A4A0HWIRnwff1z6L5+KaHcbMQts 8gp9j6+XVCPwl1CxNPRrukBuuxVRnV7THfUE0REBXAhCDMrX40UY6XnS4hiJ/eJq qca51A78GgZz/9XjnFS9nQ1xrNta9uCrquqXeJBq9E3t2q4u/gHtmvpU9wilAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRMSOa+gt52cfD5 Xcj1/jnvrhpjeDAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNEZFNUQyOTU3QUFCMUREQzRGMTExM0Ey NTU3N0E5MDNERDg1MEM4MzBDQUQ3MzE4QTU5RUZGM0Y4OUM4RkY0Qi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80RkU1RDI5NTdBQUIxRERDNEYxMTEzQTI1NTc3QTkwM0REODUwQzgzMENB RDczMThBNTlFRkYzRjg5QzhGRjRCLzAvNEM0OEU2QkU4MkRFNzY3MUYwRjk1REM4 RjVGRTM5RUZBRTFBNjM3OC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAMnkDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEKogwDQYJKoZIhvcNAQELBQADggEBAEcFfIF9 IIRtKtO/LQ5Yb/X9kUjijevf5VO5ISEu8x2ejrWKs9dPNo/6tSnt15Mdg9WwKani hThzuXCd6h1mKM3NcoIYg3X8zh8biNQYO6xxafGFO3D1C+szSV+eg+4i9Nl9wU26 jOCjyceVDx2ZUGjKldnDnxuC6R4ZoAAZ8FaRVpkJ8h9/DouLwr/w1MBGJYcKzyk/ 8qrdhIdM+99ojIbNFY9J5U6RBTl+kjbuHwXHH8dYoqe4PGzkCNhKk62nngyjbxx7 oJNWRKtDdFsncsRB9OiVoo8RXNIKYzVA7qoPsrcJL726KavaMvjuzDQo72q1PpSc 4NdIHd/rJFB6AXQ= -----END CERTIFICATE-----Generated at Mon Mar 2 17:43:47 2026 by rpki-client