$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5145CDCB2E8521E02DC6523594019C25D7A03E0C.cer File: 5145CDCB2E8521E02DC6523594019C25D7A03E0C.cer (raw, json) Hash identifier: NUqZ7sMB8yWENYqmoODcF4FzDTww+Yw9vnX8ZoEGfDg= Subject key identifier: 51:45:CD:CB:2E:85:21:E0:2D:C6:52:35:94:01:9C:25:D7:A0:3E:0C Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 3C8C691042BCC87B231D42CDCF865F8A9BF94704 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/D8B2E93B9279EBF3595507F8F48361E0BD2117E64A35FB5F335B42AE022CF488/0/5145CDCB2E8521E02DC6523594019C25D7A03E0C.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/D8B2E93B9279EBF3595507F8F48361E0BD2117E64A35FB5F335B42AE022CF488/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 04:09:37 +0000 Certificate not after: Wed 27 Jan 2027 04:14:37 +0000 Subordinate resources: AS: 273051 IP: 2803:7b90::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:8c:69:10:42:bc:c8:7b:23:1d:42:cd:cf:86:5f:8a:9b:f9:47:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 04:09:37 2026 GMT Not After : Jan 27 04:14:37 2027 GMT Subject: CN=5145CDCB2E8521E02DC6523594019C25D7A03E0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:af:93:b1:96:5d:7b:d4:83:b5:27:55:c7:ab: 47:11:75:ed:f7:f2:d4:f9:0d:d8:85:27:f5:66:f8: f5:ca:3b:6c:4b:e6:0f:9d:f1:b5:22:1e:4c:1f:e8: 45:23:e2:1c:ed:57:af:23:c6:d5:68:4d:49:ed:34: 29:36:e4:78:65:84:f1:fe:7f:34:0b:cd:d9:22:c5: 64:61:80:86:e3:bb:21:88:20:ee:86:51:fe:6b:fa: ab:b2:7b:45:12:6d:7b:72:0d:f2:a3:52:ea:f9:e8: f4:82:70:20:ca:c4:a7:03:f6:57:7c:9e:ef:16:af: 2f:c0:5c:9f:4f:6c:03:29:c5:c1:db:dd:ba:03:08: d4:8f:90:44:e6:7b:ab:2c:6f:5f:d5:82:16:27:83: bb:4d:31:cf:37:a0:fa:48:3f:f6:0a:43:c2:4e:97: 63:b7:8f:e1:17:6e:98:5f:c2:df:82:a9:fb:43:ed: 15:2e:5a:5c:99:0d:56:e4:d9:dc:97:0d:c8:b2:88: d3:76:15:a3:b6:28:eb:85:9d:58:98:6d:13:80:52: 0c:96:6a:8c:ee:29:92:c6:9f:65:2d:30:8f:d4:9b: fa:69:e7:eb:cd:5d:e9:d5:8e:1a:8c:33:b6:ed:ff: 6d:12:ee:9e:91:67:f5:9f:b0:3d:f3:5e:b2:13:60: 5c:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 51:45:CD:CB:2E:85:21:E0:2D:C6:52:35:94:01:9C:25:D7:A0:3E:0C X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/D8B2E93B9279EBF3595507F8F48361E0BD2117E64A35FB5F335B42AE022CF488/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/D8B2E93B9279EBF3595507F8F48361E0BD2117E64A35FB5F335B42AE022CF488/0/5145CDCB2E8521E02DC6523594019C25D7A03E0C.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:7b90::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273051 Signature Algorithm: sha256WithRSAEncryption 33:16:e3:01:80:86:7b:fa:f0:73:61:77:6f:44:2d:e2:15:0c: 62:0b:5e:ea:1c:37:2b:09:15:91:1d:e7:35:33:ca:a8:4b:36: 90:3d:c5:d7:b1:4e:58:d0:71:62:8a:be:9a:a9:4d:48:18:ee: 18:95:1e:95:ad:ba:30:0e:f4:48:e8:c5:d0:e0:a6:4c:44:1f: 06:3d:af:c3:e5:c8:5b:4c:e7:bb:ca:b2:e7:72:4b:1f:22:d6: f2:4f:e1:35:f6:ef:88:4a:17:a1:bf:3c:6c:08:78:48:91:ab: 28:44:08:ab:de:1d:c5:73:df:34:e8:36:82:6a:bc:ad:3d:ff: ae:9c:b0:a9:96:9d:60:ac:d1:0d:fe:56:26:9e:72:1c:07:8b: 2e:a8:84:ae:bf:a6:06:97:a8:13:34:5b:ae:43:96:cd:94:96: 1b:72:99:f3:d5:01:e6:5f:3d:10:9f:8a:f0:b1:50:59:97:7c: 77:8b:e7:a0:91:c8:b5:56:ef:f0:c1:81:13:df:ed:b8:93:59: ed:01:c3:d7:50:51:b8:f7:01:e0:00:15:34:f9:96:fe:cb:4f: d1:91:27:9b:de:69:f6:f8:41:46:76:70:dc:a7:ef:aa:85:bc: 0b:ad:3f:60:cd:1d:17:89:8a:ab:06:f8:1f:21:a0:52:a3:f2: 87:bc:8c:7b -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUPIxpEEK8yHsjHULNz4Zfipv5RwQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgwNDA5MzdaFw0yNzAxMjcwNDE0MzdaMDMxMTAvBgNV BAMTKDUxNDVDRENCMkU4NTIxRTAyREM2NTIzNTk0MDE5QzI1RDdBMDNFMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwr5Oxll171IO1J1XHq0cRde33 8tT5DdiFJ/Vm+PXKO2xL5g+d8bUiHkwf6EUj4hztV68jxtVoTUntNCk25HhlhPH+ fzQLzdkixWRhgIbjuyGIIO6GUf5r+quye0USbXtyDfKjUur56PSCcCDKxKcD9ld8 nu8Wry/AXJ9PbAMpxcHb3boDCNSPkETme6ssb1/VghYng7tNMc83oPpIP/YKQ8JO l2O3j+EXbphfwt+CqftD7RUuWlyZDVbk2dyXDciyiNN2FaO2KOuFnViYbROAUgyW aozuKZLGn2UtMI/Um/pp5+vNXenVjhqMM7bt/20S7p6RZ/WfsD3zXrITYFx/AgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRRRc3LLoUh4C3G UjWUAZwl16A+DDAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRDhCMkU5M0I5Mjc5RUJGMzU5NTUwN0Y4 RjQ4MzYxRTBCRDIxMTdFNjRBMzVGQjVGMzM1QjQyQUUwMjJDRjQ4OC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9EOEIyRTkzQjkyNzlFQkYzNTk1NTA3RjhGNDgzNjFFMEJEMjExN0U2NEEz NUZCNUYzMzVCNDJBRTAyMkNGNDg4LzAvNTE0NUNEQ0IyRTg1MjFFMDJEQzY1MjM1 OTQwMTlDMjVEN0EwM0UwQy5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAN7kDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEKpswDQYJKoZIhvcNAQELBQADggEBADMW4wGA hnv68HNhd29ELeIVDGILXuocNysJFZEd5zUzyqhLNpA9xdexTljQcWKKvpqpTUgY 7hiVHpWtujAO9EjoxdDgpkxEHwY9r8PlyFtM57vKsudySx8i1vJP4TX274hKF6G/ PGwIeEiRqyhECKveHcVz3zToNoJqvK09/66csKmWnWCs0Q3+ViaechwHiy6ohK6/ pgaXqBM0W65Dls2UlhtymfPVAeZfPRCfivCxUFmXfHeL56CRyLVW7/DBgRPf7biT We0Bw9dQUbj3AeAAFTT5lv7LT9GRJ5veafb4QUZ2cNyn76qFvAutP2DNHReJiqsG +B8hoFKj8oe8jHs= -----END CERTIFICATE-----Generated at Mon Mar 2 15:33:59 2026 by rpki-client