$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5C9F35426CBFAC00427A9F8D8404B210D52AFA08.cer File: 5C9F35426CBFAC00427A9F8D8404B210D52AFA08.cer (raw, json) Hash identifier: YjKIs928X9wogSQyGRtQfDzp0wLbgq9KzbhhPstiip0= Subject key identifier: 5C:9F:35:42:6C:BF:AC:00:42:7A:9F:8D:84:04:B2:10:D5:2A:FA:08 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 028BC2A1F3F870E9ED1D063EC6A9900D0DC01AE2 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/ABE8CE0828DF846C62073F8735555A7CF819B0D58FD1543798ED4FD101474FFD/0/5C9F35426CBFAC00427A9F8D8404B210D52AFA08.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/ABE8CE0828DF846C62073F8735555A7CF819B0D58FD1543798ED4FD101474FFD/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 09:24:09 +0000 Certificate not after: Wed 27 Jan 2027 09:29:09 +0000 Subordinate resources: AS: 274163 IP: 2803:f9d0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 05 Mar 2026 11:41:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:8b:c2:a1:f3:f8:70:e9:ed:1d:06:3e:c6:a9:90:0d:0d:c0:1a:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 09:24:09 2026 GMT Not After : Jan 27 09:29:09 2027 GMT Subject: CN=5C9F35426CBFAC00427A9F8D8404B210D52AFA08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:4e:84:33:a9:47:54:e1:17:72:8b:fc:1f:78: 86:d2:d3:1e:4f:d6:c8:15:cb:e8:6d:d1:96:eb:89: 63:a5:08:8c:58:21:90:fa:a4:7f:15:f4:67:a7:a7: 2e:51:14:ae:24:1c:61:2d:34:ea:d1:eb:cb:a3:d4: c8:d9:29:b9:41:98:3f:e4:5c:b9:f4:f5:52:21:2e: 62:35:2f:84:44:b9:f7:b2:82:5b:0f:98:ca:5c:10: a0:4a:0a:8f:af:5b:bf:3b:23:15:21:51:08:43:a9: 1c:8a:3f:0b:0b:57:84:e7:95:9e:46:e6:0c:ce:50: 96:25:eb:d6:79:03:cc:89:aa:98:6a:ba:6e:63:2e: e7:bb:6a:a2:5a:3b:f8:78:15:9a:0e:a0:ad:58:ac: 68:ff:5b:0f:d6:94:0c:16:76:e8:ce:38:c7:e3:7a: 5e:61:9d:a2:a9:f5:05:8a:76:7a:50:53:94:c9:f3: 88:bb:08:ea:68:d1:2d:7e:9b:78:ab:4f:81:d1:91: f4:c2:ed:41:8f:53:b8:18:6c:90:0d:c1:d5:ec:33: 41:24:79:51:f7:d2:fa:52:76:08:d9:88:d2:8d:6c: 43:7e:35:6b:21:c3:43:2f:c4:95:2f:0e:de:3a:ab: 98:7c:32:8e:b5:a6:2b:4e:3a:56:ff:c6:f7:32:10: 1c:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5C:9F:35:42:6C:BF:AC:00:42:7A:9F:8D:84:04:B2:10:D5:2A:FA:08 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/ABE8CE0828DF846C62073F8735555A7CF819B0D58FD1543798ED4FD101474FFD/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/ABE8CE0828DF846C62073F8735555A7CF819B0D58FD1543798ED4FD101474FFD/0/5C9F35426CBFAC00427A9F8D8404B210D52AFA08.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:f9d0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 274163 Signature Algorithm: sha256WithRSAEncryption 86:37:1e:db:79:99:b6:3b:1a:26:f7:a2:89:14:fe:19:3f:ef: 6b:44:fc:90:fe:69:58:25:ac:ec:71:c2:e4:80:02:b7:35:82: bf:5b:0f:41:ef:e7:5f:10:ad:2f:fd:b3:e1:78:3c:e0:1a:a6: a2:e4:a7:08:14:7f:32:fd:0c:a5:8b:70:b1:e5:63:22:37:1d: 6b:27:8a:82:3d:10:e6:cf:62:7d:85:8f:79:1c:a1:35:33:ea: 8d:a2:9d:69:38:c7:15:eb:f8:32:47:5c:f5:c1:02:c9:df:70: d1:10:6a:e2:a8:f4:cf:f7:eb:18:4c:b2:61:79:04:73:0a:1d: e7:3f:ae:e9:2a:ea:9d:4c:b5:10:64:b0:97:38:3d:81:b8:3e: 7e:04:f2:aa:d4:b4:32:8a:c2:1b:62:1e:8a:12:ca:91:dd:ee: 6b:cc:e7:5c:3b:59:7f:cc:11:b6:d7:56:97:96:ab:9b:08:ce: 38:23:38:6b:dc:f0:f7:55:e8:9d:07:47:c1:bd:51:2d:41:ed: 93:5f:ae:55:9f:c4:31:02:35:73:07:58:de:02:e5:08:f0:22: a3:80:0a:be:41:25:eb:0a:cb:78:63:76:43:63:27:a3:13:68: 40:fd:71:b0:53:19:ed:ec:4b:63:f5:6e:68:b5:63:09:9d:8c: 70:0c:92:6e -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUAovCofP4cOntHQY+xqmQDQ3AGuIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgwOTI0MDlaFw0yNzAxMjcwOTI5MDlaMDMxMTAvBgNV BAMTKDVDOUYzNTQyNkNCRkFDMDA0MjdBOUY4RDg0MDRCMjEwRDUyQUZBMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHToQzqUdU4Rdyi/wfeIbS0x5P 1sgVy+ht0ZbriWOlCIxYIZD6pH8V9Genpy5RFK4kHGEtNOrR68uj1MjZKblBmD/k XLn09VIhLmI1L4REufeyglsPmMpcEKBKCo+vW787IxUhUQhDqRyKPwsLV4TnlZ5G 5gzOUJYl69Z5A8yJqphqum5jLue7aqJaO/h4FZoOoK1YrGj/Ww/WlAwWdujOOMfj el5hnaKp9QWKdnpQU5TJ84i7COpo0S1+m3irT4HRkfTC7UGPU7gYbJANwdXsM0Ek eVH30vpSdgjZiNKNbEN+NWshw0MvxJUvDt46q5h8Mo61pitOOlb/xvcyEBxXAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRcnzVCbL+sAEJ6 n42EBLIQ1Sr6CDAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQUJFOENFMDgyOERGODQ2QzYyMDczRjg3 MzU1NTVBN0NGODE5QjBENThGRDE1NDM3OThFRDRGRDEwMTQ3NEZGRC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9BQkU4Q0UwODI4REY4NDZDNjIwNzNGODczNTU1NUE3Q0Y4MTlCMEQ1OEZE MTU0Mzc5OEVENEZEMTAxNDc0RkZELzAvNUM5RjM1NDI2Q0JGQUMwMDQyN0E5RjhE ODQwNEIyMTBENTJBRkEwOC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAP50DAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMELvMwDQYJKoZIhvcNAQELBQADggEBAIY3Htt5 mbY7Gib3ookU/hk/72tE/JD+aVglrOxxwuSAArc1gr9bD0Hv518QrS/9s+F4POAa pqLkpwgUfzL9DKWLcLHlYyI3HWsnioI9EObPYn2Fj3kcoTUz6o2inWk4xxXr+DJH XPXBAsnfcNEQauKo9M/36xhMsmF5BHMKHec/rukq6p1MtRBksJc4PYG4Pn4E8qrU tDKKwhtiHooSypHd7mvM51w7WX/MEbbXVpeWq5sIzjgjOGvc8PdV6J0HR8G9US1B 7ZNfrlWfxDECNXMHWN4C5QjwIqOACr5BJesKy3hjdkNjJ6MTaED9cbBTGe3sS2P1 bmi1YwmdjHAMkm4= -----END CERTIFICATE-----Generated at Mon Mar 2 12:45:10 2026 by rpki-client