$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/648FB535ED8DF446D027D23BA04E6ACF6ACBFB7C.cer File: 648FB535ED8DF446D027D23BA04E6ACF6ACBFB7C.cer (raw, json) Hash identifier: Bld3DudBGhuZD/ojYqrI+mTmMpW6jc23NRwVrhsn+5c= Subject key identifier: 64:8F:B5:35:ED:8D:F4:46:D0:27:D2:3B:A0:4E:6A:CF:6A:CB:FB:7C Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 6F147B638955835C2C2730171BD42265F4520914 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/5D89FACD0185C07216FF5CBEB37918674DA4797CA63D8D93638DE3F4B25EFEDE/0/648FB535ED8DF446D027D23BA04E6ACF6ACBFB7C.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/5D89FACD0185C07216FF5CBEB37918674DA4797CA63D8D93638DE3F4B25EFEDE/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 22:10:28 +0000 Certificate not after: Wed 27 Jan 2027 22:15:28 +0000 Subordinate resources: AS: 272409 IP: 2806:42d::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 05 Mar 2026 11:41:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:14:7b:63:89:55:83:5c:2c:27:30:17:1b:d4:22:65:f4:52:09:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 22:10:28 2026 GMT Not After : Jan 27 22:15:28 2027 GMT Subject: CN=648FB535ED8DF446D027D23BA04E6ACF6ACBFB7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:02:59:8a:50:1b:90:1f:bc:de:1d:e6:46:61: f0:1d:c6:43:29:b6:42:d5:c0:fa:5d:c7:41:fb:f3: e7:c9:94:65:ee:83:ce:82:99:ee:20:1b:12:26:ce: 18:2b:90:97:26:0a:c5:24:0b:e9:d5:72:b7:5f:ff: 01:6e:a0:77:06:10:0f:92:18:15:20:5e:c4:86:77: 78:8b:c0:4e:e2:2a:6c:8f:55:a1:05:15:73:48:19: 52:9e:a3:27:99:95:bc:dd:c1:d7:64:a4:9d:77:cb: 42:66:c4:0b:da:a5:32:5b:06:3f:17:f0:2e:99:7f: 4f:17:7d:32:79:e8:37:a0:2a:c0:d3:3e:f4:6a:9e: a8:ee:9c:23:03:48:68:c5:c7:1a:bb:ad:54:38:ae: b8:90:eb:d4:0e:ae:fc:56:27:10:a8:62:9e:8b:8b: 73:21:f8:76:d3:ea:9a:53:6a:b7:79:30:34:1f:cb: af:ab:bf:80:9d:bb:7e:64:47:af:72:80:83:dc:00: 41:b1:92:03:96:06:31:a7:9f:cf:b8:47:24:53:56: 29:95:ac:95:5b:42:8a:f0:a1:a3:58:fd:eb:23:10: 11:8c:27:80:9b:6f:be:38:ce:cd:0b:32:67:7a:30: 7d:42:8e:9e:bc:03:e3:2c:6e:50:dc:bc:f6:25:a7: 60:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 64:8F:B5:35:ED:8D:F4:46:D0:27:D2:3B:A0:4E:6A:CF:6A:CB:FB:7C X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/5D89FACD0185C07216FF5CBEB37918674DA4797CA63D8D93638DE3F4B25EFEDE/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/5D89FACD0185C07216FF5CBEB37918674DA4797CA63D8D93638DE3F4B25EFEDE/0/648FB535ED8DF446D027D23BA04E6ACF6ACBFB7C.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2806:42d::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 272409 Signature Algorithm: sha256WithRSAEncryption 1e:62:ab:c3:15:cb:ff:ba:93:89:6d:1a:e8:70:62:6c:6f:85: fb:f8:7e:1a:33:e3:4f:5c:49:8f:a7:d9:fe:27:26:26:66:f1: ea:f7:18:78:11:bd:0f:f2:7e:71:9b:6e:0b:4c:b2:73:be:44: e5:3a:a0:88:ce:f1:f8:49:21:82:68:2e:cc:15:06:18:fa:23: d2:3c:73:b7:67:db:da:79:30:99:29:23:a7:32:27:72:51:50: 91:05:bc:e6:cf:3b:d8:37:22:6a:f7:b9:1f:1e:96:6b:16:3f: 2b:ce:25:29:78:6f:89:c4:44:04:47:a7:db:3b:9f:a4:5d:12: 95:3d:ea:9e:c3:3d:6f:a2:0d:62:e9:af:92:02:68:08:6a:cd: da:bb:81:d6:30:5d:3b:c3:17:8b:3f:01:d2:3d:04:bc:7e:0a: 8e:27:b3:42:58:4b:7d:b0:62:c5:b3:e2:2d:2c:17:01:99:06: 0a:65:50:2a:19:aa:a7:fa:a7:8b:f3:74:94:38:24:a2:df:d3: 03:cf:bc:f8:77:36:c9:f8:49:0d:41:a1:e1:b3:45:cc:d6:d0: 5d:f2:65:c2:95:33:d2:3f:79:93:f5:f1:98:54:bf:21:ea:0a: 56:d5:89:fe:fa:91:2a:87:a8:81:79:1c:2f:ab:a2:f0:5c:8c: 63:50:5f:69 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUbxR7Y4lVg1wsJzAXG9QiZfRSCRQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgyMjEwMjhaFw0yNzAxMjcyMjE1MjhaMDMxMTAvBgNV BAMTKDY0OEZCNTM1RUQ4REY0NDZEMDI3RDIzQkEwNEU2QUNGNkFDQkZCN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrAlmKUBuQH7zeHeZGYfAdxkMp tkLVwPpdx0H78+fJlGXug86Cme4gGxImzhgrkJcmCsUkC+nVcrdf/wFuoHcGEA+S GBUgXsSGd3iLwE7iKmyPVaEFFXNIGVKeoyeZlbzdwddkpJ13y0JmxAvapTJbBj8X 8C6Zf08XfTJ56DegKsDTPvRqnqjunCMDSGjFxxq7rVQ4rriQ69QOrvxWJxCoYp6L i3Mh+HbT6ppTard5MDQfy6+rv4Cdu35kR69ygIPcAEGxkgOWBjGnn8+4RyRTVimV rJVbQorwoaNY/esjEBGMJ4Cbb744zs0LMmd6MH1Cjp68A+MsblDcvPYlp2AtAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRkj7U17Y30RtAn 0jugTmrPasv7fDAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNUQ4OUZBQ0QwMTg1QzA3MjE2RkY1Q0JF QjM3OTE4Njc0REE0Nzk3Q0E2M0Q4RDkzNjM4REUzRjRCMjVFRkVERS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy81RDg5RkFDRDAxODVDMDcyMTZGRjVDQkVCMzc5MTg2NzREQTQ3OTdDQTYz RDhEOTM2MzhERTNGNEIyNUVGRURFLzAvNjQ4RkI1MzVFRDhERjQ0NkQwMjdEMjNC QTA0RTZBQ0Y2QUNCRkI3Qy5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAYELTAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEKBkwDQYJKoZIhvcNAQELBQADggEBAB5iq8MV y/+6k4ltGuhwYmxvhfv4fhoz409cSY+n2f4nJiZm8er3GHgRvQ/yfnGbbgtMsnO+ ROU6oIjO8fhJIYJoLswVBhj6I9I8c7dn29p5MJkpI6cyJ3JRUJEFvObPO9g3Imr3 uR8elmsWPyvOJSl4b4nERARHp9s7n6RdEpU96p7DPW+iDWLpr5ICaAhqzdq7gdYw XTvDF4s/AdI9BLx+Co4ns0JYS32wYsWz4i0sFwGZBgplUCoZqqf6p4vzdJQ4JKLf 0wPPvPh3Nsn4SQ1BoeGzRczW0F3yZcKVM9I/eZP18ZhUvyHqClbVif76kSqHqIF5 HC+rovBcjGNQX2k= -----END CERTIFICATE-----Generated at Mon Mar 2 10:22:53 2026 by rpki-client