$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B81794CD98EF0A02BE2F181B268BD8569A7BE41.cer File: 5B81794CD98EF0A02BE2F181B268BD8569A7BE41.cer (raw, json) Hash identifier: 2ximHdwkWL72pgHI+1GxmxkF8OVxOYHCnDajcmslFIs= Subject key identifier: 5B:81:79:4C:D9:8E:F0:A0:2B:E2:F1:81:B2:68:BD:85:69:A7:BE:41 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 4F843625212CCA17EBB413C3F3F060D1A2664FCA Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/AE2B17A5E948EDBEE25BA20C857C5CFEA9D4A1FA57A927CE63B9367D23762EB2/0/5B81794CD98EF0A02BE2F181B268BD8569A7BE41.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/AE2B17A5E948EDBEE25BA20C857C5CFEA9D4A1FA57A927CE63B9367D23762EB2/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 00:42:34 +0000 Certificate not after: Wed 27 Jan 2027 00:47:34 +0000 Subordinate resources: AS: 272891 IP: 2803:c690::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:84:36:25:21:2c:ca:17:eb:b4:13:c3:f3:f0:60:d1:a2:66:4f:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 00:42:34 2026 GMT Not After : Jan 27 00:47:34 2027 GMT Subject: CN=5B81794CD98EF0A02BE2F181B268BD8569A7BE41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e8:ac:af:a9:49:98:72:b1:8a:83:db:8d:c7: 84:99:08:e8:b2:b1:c5:a2:9f:91:e6:6f:59:e4:31: 46:17:83:4c:ef:81:85:10:ca:90:ec:4f:f4:fa:66: a4:7c:4f:33:1f:c7:ac:b9:ae:bd:4c:fb:b0:84:c2: d4:b0:43:d8:30:8e:a6:7f:5e:8b:b6:ce:d0:13:dc: 6a:7b:d9:f6:cc:ba:46:1a:53:8f:f2:63:f1:16:00: b8:54:b5:9a:8f:bc:ef:98:b7:6c:d2:4b:e5:f6:3b: 4b:2a:76:ed:cf:73:9f:04:73:24:ae:02:c4:2a:c1: 84:06:f0:ab:99:bf:c4:8e:27:84:7d:c0:b9:1a:7c: aa:25:c6:4d:80:59:34:73:64:48:df:fc:07:5d:3e: 7b:48:95:21:73:b3:62:68:d0:2d:95:94:49:c6:7b: 50:db:36:4c:c1:d1:11:b8:5c:79:3c:d5:34:06:e3: fc:7c:c3:e9:c7:d4:83:f5:f3:9a:59:f7:d8:16:52: ca:de:72:d3:ed:04:8a:1f:51:dd:16:69:7f:c4:50: 39:d8:6b:5d:88:75:28:a5:b5:20:31:80:b7:fd:e3: e9:0f:af:8a:92:63:50:a8:b0:7d:46:c9:00:d7:01: 5b:54:12:26:4d:74:ea:68:f8:6d:e0:d9:8f:07:5d: 3e:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5B:81:79:4C:D9:8E:F0:A0:2B:E2:F1:81:B2:68:BD:85:69:A7:BE:41 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/AE2B17A5E948EDBEE25BA20C857C5CFEA9D4A1FA57A927CE63B9367D23762EB2/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/AE2B17A5E948EDBEE25BA20C857C5CFEA9D4A1FA57A927CE63B9367D23762EB2/0/5B81794CD98EF0A02BE2F181B268BD8569A7BE41.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:c690::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 272891 Signature Algorithm: sha256WithRSAEncryption 2d:61:2c:99:e2:8d:04:a3:58:35:c3:b0:3c:20:46:63:83:b7: cb:ca:65:b4:45:11:9c:6a:24:11:0e:cd:42:60:9c:d2:45:47: 5b:66:16:61:98:fa:cb:7f:9c:fb:a7:8c:61:fc:b4:36:a6:1a: f9:67:7a:ff:88:14:a7:a4:4d:3c:e0:d5:d6:63:6f:be:60:0b: 9b:78:1e:e4:df:e7:40:62:d5:94:c0:29:67:7f:a9:57:af:3e: dd:c5:dd:8c:96:7e:08:24:71:47:1b:eb:5b:fe:0d:35:e9:98: 32:7f:ac:73:f1:01:94:32:f7:22:d2:4e:f6:80:76:7e:5a:72: 9f:25:12:f0:f2:75:af:fa:83:cb:5d:d7:99:e9:5e:d3:4c:cc: e6:01:48:24:ca:86:85:b9:c7:6c:0f:33:8e:e8:f2:95:64:5e: d3:87:1b:e8:cd:9c:e6:66:86:7e:6d:56:ea:d0:11:b8:53:73: d4:d3:c7:c7:90:f2:19:8c:5f:b4:77:b2:36:b4:9b:5f:9c:47: 0a:00:76:d0:4d:b5:10:ad:6a:98:a4:6f:f5:fc:4b:e4:24:8e: 7e:c1:5d:f2:a5:83:81:5e:62:8b:fc:e0:f2:be:04:57:6f:35: 0f:a4:aa:8d:a2:72:41:08:a6:a7:23:10:92:95:bf:1f:4d:7b: 70:43:9b:c1 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUT4Q2JSEsyhfrtBPD8/Bg0aJmT8owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgwMDQyMzRaFw0yNzAxMjcwMDQ3MzRaMDMxMTAvBgNV BAMTKDVCODE3OTRDRDk4RUYwQTAyQkUyRjE4MUIyNjhCRDg1NjlBN0JFNDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC06KyvqUmYcrGKg9uNx4SZCOiy scWin5Hmb1nkMUYXg0zvgYUQypDsT/T6ZqR8TzMfx6y5rr1M+7CEwtSwQ9gwjqZ/ Xou2ztAT3Gp72fbMukYaU4/yY/EWALhUtZqPvO+Yt2zSS+X2O0sqdu3Pc58EcySu AsQqwYQG8KuZv8SOJ4R9wLkafKolxk2AWTRzZEjf/AddPntIlSFzs2Jo0C2VlEnG e1DbNkzB0RG4XHk81TQG4/x8w+nH1IP185pZ99gWUsrectPtBIofUd0WaX/EUDnY a12IdSiltSAxgLf94+kPr4qSY1CosH1GyQDXAVtUEiZNdOpo+G3g2Y8HXT5lAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRbgXlM2Y7woCvi 8YGyaL2Faae+QTAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQUUyQjE3QTVFOTQ4RURCRUUyNUJBMjBD ODU3QzVDRkVBOUQ0QTFGQTU3QTkyN0NFNjNCOTM2N0QyMzc2MkVCMi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9BRTJCMTdBNUU5NDhFREJFRTI1QkEyMEM4NTdDNUNGRUE5RDRBMUZBNTdB OTI3Q0U2M0I5MzY3RDIzNzYyRUIyLzAvNUI4MTc5NENEOThFRjBBMDJCRTJGMTgx QjI2OEJEODU2OUE3QkU0MS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAPGkDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEKfswDQYJKoZIhvcNAQELBQADggEBAC1hLJni jQSjWDXDsDwgRmODt8vKZbRFEZxqJBEOzUJgnNJFR1tmFmGY+st/nPunjGH8tDam Gvlnev+IFKekTTzg1dZjb75gC5t4HuTf50Bi1ZTAKWd/qVevPt3F3YyWfggkcUcb 61v+DTXpmDJ/rHPxAZQy9yLSTvaAdn5acp8lEvDyda/6g8td15npXtNMzOYBSCTK hoW5x2wPM47o8pVkXtOHG+jNnOZmhn5tVurQEbhTc9TTx8eQ8hmMX7R3sja0m1+c RwoAdtBNtRCtapikb/X8S+Qkjn7BXfKlg4FeYov84PK+BFdvNQ+kqo2ickEIpqcj EJKVvx9Ne3BDm8E= -----END CERTIFICATE-----Generated at Mon Mar 2 15:19:38 2026 by rpki-client