$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/621B61967B5EDEEDD5BDF8BDFD1EFEF970FC2747.cer File: 621B61967B5EDEEDD5BDF8BDFD1EFEF970FC2747.cer (raw, json) Hash identifier: LnCk89gqB8zWhj0PPITVmgb1SUOXFTIVXXgyC8/xUtc= Subject key identifier: 62:1B:61:96:7B:5E:DE:ED:D5:BD:F8:BD:FD:1E:FE:F9:70:FC:27:47 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 2AACFF7C143400FE4270C17E6CC19D98CF168C85 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/243D35EF51CF9EA9DC08C2F82850287DBFD24EFC47AA3030A4C3DD406930A65A/0/621B61967B5EDEEDD5BDF8BDFD1EFEF970FC2747.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/243D35EF51CF9EA9DC08C2F82850287DBFD24EFC47AA3030A4C3DD406930A65A/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 06:46:48 +0000 Certificate not after: Wed 27 Jan 2027 06:51:48 +0000 Subordinate resources: AS: 273118 IP: 2803:d850::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 05 Mar 2026 11:41:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:ac:ff:7c:14:34:00:fe:42:70:c1:7e:6c:c1:9d:98:cf:16:8c:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 06:46:48 2026 GMT Not After : Jan 27 06:51:48 2027 GMT Subject: CN=621B61967B5EDEEDD5BDF8BDFD1EFEF970FC2747 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:42:aa:dd:97:18:af:4f:ef:a0:d3:07:f5:38: 63:52:98:d6:31:58:57:08:3a:80:c5:9a:19:a3:b8: 8f:5e:17:38:11:d8:a2:1b:4a:77:18:be:fb:d6:a9: 4f:53:2e:46:1a:b7:9f:31:ba:27:ec:2e:3b:26:27: 02:9b:df:78:1c:d9:b6:92:b9:36:86:c9:8e:38:3f: 55:12:c4:ac:45:fc:08:97:c6:d0:86:23:b5:bd:e1: 83:dc:4c:93:a6:de:fd:0d:7d:e8:ef:ee:06:bf:d5: d1:a4:47:86:6d:ee:17:4d:c2:b5:16:2b:b9:79:6b: 1f:67:e0:ec:3d:9e:7d:ae:43:db:60:40:0a:c5:f2: ba:6d:5d:7b:55:45:00:89:a4:30:61:0b:1d:30:85: 85:0b:9f:2c:b8:29:bc:2b:98:07:89:d3:19:39:49: 33:56:c8:dd:cf:99:93:ad:4f:28:64:90:8c:cf:27: 41:4f:fa:59:52:0b:c9:fc:d3:d6:69:2f:9d:cd:da: 8d:ee:33:d3:ef:bc:fd:dc:26:bb:7e:8f:3e:2a:e2: ed:5e:4c:ed:8a:53:cb:21:41:49:f3:71:f9:ca:9c: 6f:20:88:8e:18:c0:8f:0e:66:2b:f1:74:c1:c9:8f: 62:f3:7a:cc:16:09:a0:72:a0:75:8c:cd:a8:f8:34: 75:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 62:1B:61:96:7B:5E:DE:ED:D5:BD:F8:BD:FD:1E:FE:F9:70:FC:27:47 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/243D35EF51CF9EA9DC08C2F82850287DBFD24EFC47AA3030A4C3DD406930A65A/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/243D35EF51CF9EA9DC08C2F82850287DBFD24EFC47AA3030A4C3DD406930A65A/0/621B61967B5EDEEDD5BDF8BDFD1EFEF970FC2747.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:d850::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273118 Signature Algorithm: sha256WithRSAEncryption 4c:bb:20:bf:4b:84:4d:4d:f9:6d:66:09:9c:97:4d:8f:fa:93: 76:ec:98:af:27:39:79:d0:9c:a7:be:31:01:fd:ee:36:7c:92: 29:91:1a:59:49:28:b3:b2:25:8a:fa:3b:9f:95:1e:5c:f9:76: 21:d6:14:61:ec:4b:75:a9:67:37:9e:47:d4:00:1d:d2:11:57: 4e:5f:9c:ad:f6:21:31:52:04:25:fc:19:6d:a2:a5:dc:f7:37: 72:af:5c:0a:3c:c1:1f:a8:bc:83:ef:b1:88:dc:34:48:5a:7c: 62:d1:e2:91:f0:ea:88:ef:4a:50:ae:c9:25:1f:f2:b2:b6:56: 52:23:65:80:11:03:a1:1b:50:16:62:a9:ad:14:1c:cd:3f:9e: c2:31:c0:2e:07:9f:72:58:ba:d4:ef:dc:35:08:a4:f4:ce:fb: 2b:54:1c:6b:8f:08:89:55:8c:e3:7b:9a:a3:3b:60:d1:bc:97: 08:05:8c:ca:1b:de:b7:e9:5b:76:e5:76:22:33:5b:47:ec:84: dd:5b:c8:2f:d6:6a:a0:e7:ac:d3:a0:68:cb:8a:b0:42:36:73: 30:b9:c8:94:aa:45:be:a6:48:47:5e:83:a5:29:ee:7d:29:70: 3b:1b:97:86:de:2c:18:d9:c1:91:4e:a8:04:b0:e4:90:4b:c0: 25:0c:2c:7c -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUKqz/fBQ0AP5CcMF+bMGdmM8WjIUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgwNjQ2NDhaFw0yNzAxMjcwNjUxNDhaMDMxMTAvBgNV BAMTKDYyMUI2MTk2N0I1RURFRURENUJERjhCREZEMUVGRUY5NzBGQzI3NDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFQqrdlxivT++g0wf1OGNSmNYx WFcIOoDFmhmjuI9eFzgR2KIbSncYvvvWqU9TLkYat58xuifsLjsmJwKb33gc2baS uTaGyY44P1USxKxF/AiXxtCGI7W94YPcTJOm3v0Nfejv7ga/1dGkR4Zt7hdNwrUW K7l5ax9n4Ow9nn2uQ9tgQArF8rptXXtVRQCJpDBhCx0whYULnyy4KbwrmAeJ0xk5 STNWyN3PmZOtTyhkkIzPJ0FP+llSC8n809ZpL53N2o3uM9PvvP3cJrt+jz4q4u1e TO2KU8shQUnzcfnKnG8giI4YwI8OZivxdMHJj2LzeswWCaByoHWMzaj4NHXDAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRiG2GWe17e7dW9 +L39Hv75cPwnRzAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMjQzRDM1RUY1MUNGOUVBOURDMDhDMkY4 Mjg1MDI4N0RCRkQyNEVGQzQ3QUEzMDMwQTRDM0RENDA2OTMwQTY1QS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8yNDNEMzVFRjUxQ0Y5RUE5REMwOEMyRjgyODUwMjg3REJGRDI0RUZDNDdB QTMwMzBBNEMzREQ0MDY5MzBBNjVBLzAvNjIxQjYxOTY3QjVFREVFREQ1QkRGOEJE RkQxRUZFRjk3MEZDMjc0Ny5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAPYUDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEKt4wDQYJKoZIhvcNAQELBQADggEBAEy7IL9L hE1N+W1mCZyXTY/6k3bsmK8nOXnQnKe+MQH97jZ8kimRGllJKLOyJYr6O5+VHlz5 diHWFGHsS3WpZzeeR9QAHdIRV05fnK32ITFSBCX8GW2ipdz3N3KvXAo8wR+ovIPv sYjcNEhafGLR4pHw6ojvSlCuySUf8rK2VlIjZYARA6EbUBZiqa0UHM0/nsIxwC4H n3JYutTv3DUIpPTO+ytUHGuPCIlVjON7mqM7YNG8lwgFjMob3rfpW3bldiIzW0fs hN1byC/WaqDnrNOgaMuKsEI2czC5yJSqRb6mSEdeg6Up7n0pcDsbl4beLBjZwZFO qASw5JBLwCUMLHw= -----END CERTIFICATE-----Generated at Mon Mar 2 09:50:13 2026 by rpki-client