$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/53B336617D5C208C7302EDE353FBAA3CA17D2995.cer File: 53B336617D5C208C7302EDE353FBAA3CA17D2995.cer (raw, json) Hash identifier: Yzc5jkLDplyIRrQ/MGaVjfBweZJMJGWCAXWjVXVC19c= Subject key identifier: 53:B3:36:61:7D:5C:20:8C:73:02:ED:E3:53:FB:AA:3C:A1:7D:29:95 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 09B11D9FF6976998189141D059F0325611F6B9FB Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/51D08F5CD1E57C657B421FE7DEE02589BE6FE9CC58B68DF7A871689EC9C58C27/0/53B336617D5C208C7302EDE353FBAA3CA17D2995.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/51D08F5CD1E57C657B421FE7DEE02589BE6FE9CC58B68DF7A871689EC9C58C27/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 27 Jan 2026 20:34:13 +0000 Certificate not after: Tue 26 Jan 2027 20:39:13 +0000 Subordinate resources: AS: 271949 IP: 2803:5610::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 05 Mar 2026 11:41:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:b1:1d:9f:f6:97:69:98:18:91:41:d0:59:f0:32:56:11:f6:b9:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 27 20:34:13 2026 GMT Not After : Jan 26 20:39:13 2027 GMT Subject: CN=53B336617D5C208C7302EDE353FBAA3CA17D2995 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:6e:f3:34:98:ae:01:60:61:f1:57:8d:c9:d5: 4f:ec:0a:db:e6:dc:ab:9f:6f:46:37:79:f2:6d:eb: 80:7f:58:b2:5a:86:8e:26:a1:35:89:09:a9:a1:ea: 44:4a:bc:b5:8e:39:7b:41:0f:90:dc:fa:c1:da:b7: 67:42:db:ed:5f:0b:b8:08:18:d2:96:9d:73:82:2e: bc:e5:93:af:7e:8d:1a:46:62:a2:d3:33:28:8d:b8: ae:0c:ec:3f:71:d2:b8:15:59:a2:1a:fd:43:51:83: ae:e3:be:11:f4:8f:d2:d2:8e:4e:cb:39:f5:17:55: ce:70:01:19:0d:34:d6:9c:13:71:31:3e:bd:25:d7: 36:da:3e:5a:84:f1:19:9c:96:46:14:6f:fd:2f:3c: 2f:41:90:8e:28:d4:ed:33:5f:c2:36:05:d6:3d:9f: df:0b:08:42:2d:2a:97:1c:01:6c:54:3d:1c:dd:00: c5:79:e6:e1:57:93:b8:97:ce:67:7f:b2:f3:7d:3d: 0b:f1:ee:e2:65:21:0a:cd:62:d1:71:43:04:25:ca: 5b:ab:69:a2:35:17:10:a5:f1:4d:e1:87:52:cf:b8: 66:a0:4a:14:e7:ff:a1:1c:5c:62:ac:0c:08:5d:40: 7b:0a:e1:00:ac:fe:b2:1d:47:a7:fe:ac:91:df:89: a8:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 53:B3:36:61:7D:5C:20:8C:73:02:ED:E3:53:FB:AA:3C:A1:7D:29:95 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/51D08F5CD1E57C657B421FE7DEE02589BE6FE9CC58B68DF7A871689EC9C58C27/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/51D08F5CD1E57C657B421FE7DEE02589BE6FE9CC58B68DF7A871689EC9C58C27/0/53B336617D5C208C7302EDE353FBAA3CA17D2995.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:5610::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 271949 Signature Algorithm: sha256WithRSAEncryption 0d:f7:20:39:63:8a:39:ee:0c:52:e7:7c:31:02:69:92:f8:fb: f5:57:f2:9e:e8:89:85:6c:c7:01:17:cb:77:56:0f:ea:92:c9: 02:ff:dd:95:16:d3:22:76:92:13:12:1c:0a:7c:c0:68:08:da: bd:ea:85:df:38:75:b1:4f:8a:89:14:34:3f:e6:15:d4:c6:3f: b7:9a:68:73:9b:5d:e5:b6:c1:07:aa:b8:7d:1c:96:04:c4:00: 9f:72:f7:c9:7c:fc:c4:e5:f8:96:42:37:57:0c:9e:2a:db:2e: e9:16:54:b8:da:e7:5a:fa:46:56:4f:a7:74:da:5b:a4:23:b6: 2a:e9:b7:f3:1c:a1:f8:37:55:a1:41:9a:eb:9f:d7:d5:aa:52: 27:3c:1c:4d:fb:9b:b9:d1:96:0d:d4:39:21:0f:46:78:70:71: d7:57:be:1c:b8:42:6c:91:a1:f9:ff:ba:51:f8:88:0e:d0:46: 99:81:b8:1f:ba:b5:bf:a4:1f:0a:92:93:df:19:b9:7a:34:e0: 13:d7:2c:cd:e2:92:fc:7c:dd:26:0b:75:cb:e9:71:0d:7c:f7: 9f:a6:01:29:9f:23:35:41:c2:97:f6:ca:2b:bc:e8:e7:ec:ac: d2:eb:08:54:c2:28:0d:00:e2:f2:ea:fa:f2:50:3b:e0:96:57: 52:91:67:68 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUCbEdn/aXaZgYkUHQWfAyVhH2ufswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjcyMDM0MTNaFw0yNzAxMjYyMDM5MTNaMDMxMTAvBgNV BAMTKDUzQjMzNjYxN0Q1QzIwOEM3MzAyRURFMzUzRkJBQTNDQTE3RDI5OTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZbvM0mK4BYGHxV43J1U/sCtvm 3Kufb0Y3efJt64B/WLJaho4moTWJCamh6kRKvLWOOXtBD5Dc+sHat2dC2+1fC7gI GNKWnXOCLrzlk69+jRpGYqLTMyiNuK4M7D9x0rgVWaIa/UNRg67jvhH0j9LSjk7L OfUXVc5wARkNNNacE3ExPr0l1zbaPlqE8RmclkYUb/0vPC9BkI4o1O0zX8I2BdY9 n98LCEItKpccAWxUPRzdAMV55uFXk7iXzmd/svN9PQvx7uJlIQrNYtFxQwQlylur aaI1FxCl8U3hh1LPuGagShTn/6EcXGKsDAhdQHsK4QCs/rIdR6f+rJHfiag1AgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRTszZhfVwgjHMC 7eNT+6o8oX0plTAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNTFEMDhGNUNEMUU1N0M2NTdCNDIxRkU3 REVFMDI1ODlCRTZGRTlDQzU4QjY4REY3QTg3MTY4OUVDOUM1OEMyNy8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy81MUQwOEY1Q0QxRTU3QzY1N0I0MjFGRTdERUUwMjU4OUJFNkZFOUNDNThC NjhERjdBODcxNjg5RUM5QzU4QzI3LzAvNTNCMzM2NjE3RDVDMjA4QzczMDJFREUz NTNGQkFBM0NBMTdEMjk5NS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKANWEDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEJk0wDQYJKoZIhvcNAQELBQADggEBAA33IDlj ijnuDFLnfDECaZL4+/VX8p7oiYVsxwEXy3dWD+qSyQL/3ZUW0yJ2khMSHAp8wGgI 2r3qhd84dbFPiokUND/mFdTGP7eaaHObXeW2wQequH0clgTEAJ9y98l8/MTl+JZC N1cMnirbLukWVLja51r6RlZPp3TaW6Qjtirpt/Mcofg3VaFBmuuf19WqUic8HE37 m7nRlg3UOSEPRnhwcddXvhy4QmyRofn/ulH4iA7QRpmBuB+6tb+kHwqSk98ZuXo0 4BPXLM3ikvx83SYLdcvpcQ1895+mASmfIzVBwpf2yiu86OfsrNLrCFTCKA0A4vLq +vJQO+CWV1KRZ2g= -----END CERTIFICATE-----Generated at Mon Mar 2 09:49:23 2026 by rpki-client