$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A7C2E8A3457845BDAC3CDC5F346F0D6BA4E7D9B.cer File: 6A7C2E8A3457845BDAC3CDC5F346F0D6BA4E7D9B.cer (raw, json) Hash identifier: 0vufZ7LWcgqVuCLViqKXqGgKGOenCdhr1Dg+Z4m1cf0= Subject key identifier: 6A:7C:2E:8A:34:57:84:5B:DA:C3:CD:C5:F3:46:F0:D6:BA:4E:7D:9B Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 324C789FBF69A16E4EB458BD87C03302B58DDB19 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/0D1F4438B683413F798C1D702F449F2637FD855D3B5B084FC60D9F975A89A109/0/6A7C2E8A3457845BDAC3CDC5F346F0D6BA4E7D9B.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/0D1F4438B683413F798C1D702F449F2637FD855D3B5B084FC60D9F975A89A109/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Thu 29 Jan 2026 01:54:21 +0000 Certificate not after: Thu 28 Jan 2027 01:59:21 +0000 Subordinate resources: AS: 273843 IP: 2803:b950::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 05 Mar 2026 11:41:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:4c:78:9f:bf:69:a1:6e:4e:b4:58:bd:87:c0:33:02:b5:8d:db:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 29 01:54:21 2026 GMT Not After : Jan 28 01:59:21 2027 GMT Subject: CN=6A7C2E8A3457845BDAC3CDC5F346F0D6BA4E7D9B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e3:c9:04:0b:8f:c7:d3:8b:be:b5:b5:84:45: 7f:f0:49:ab:77:19:26:d1:88:38:f5:d2:37:53:2c: 14:36:16:09:51:59:a4:67:ad:82:1e:10:47:59:c8: 0c:11:6e:7f:d3:d7:d8:e7:4d:77:3f:06:aa:0d:2e: 34:64:40:cd:9b:99:40:98:0d:41:5e:cd:38:91:46: 06:53:c2:7b:ca:c7:3e:96:3c:34:4a:9e:d7:b2:fc: 6a:6b:26:be:aa:a8:64:68:02:8f:5d:09:1e:1b:77: 3c:78:d9:33:c0:70:0f:4e:6e:8a:93:66:5e:f8:90: 51:c6:c2:81:6c:a6:f0:33:96:cf:20:d0:a7:4d:8e: 41:87:a3:be:cd:7c:2b:87:29:08:e5:2d:d0:82:d2: e8:df:4b:53:00:d1:b1:fd:0f:77:7e:c3:e7:dc:e5: 42:34:d2:1c:ca:df:92:1b:2f:c1:e7:44:d4:a0:82: 73:4a:4a:79:2b:4c:d1:64:79:26:05:0c:ef:9a:c9: 94:13:fa:fc:d4:62:9c:7d:18:b6:5f:34:6e:a7:28: 00:25:09:bf:7f:88:6f:23:0d:f1:75:75:60:b4:b0: b4:bd:de:c7:20:13:87:54:a9:39:17:3f:5d:57:6c: bc:a3:31:5d:7e:7d:e6:6a:0f:36:38:77:d2:f9:95: 07:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 6A:7C:2E:8A:34:57:84:5B:DA:C3:CD:C5:F3:46:F0:D6:BA:4E:7D:9B X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0D1F4438B683413F798C1D702F449F2637FD855D3B5B084FC60D9F975A89A109/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0D1F4438B683413F798C1D702F449F2637FD855D3B5B084FC60D9F975A89A109/0/6A7C2E8A3457845BDAC3CDC5F346F0D6BA4E7D9B.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:b950::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273843 Signature Algorithm: sha256WithRSAEncryption 78:66:0b:f2:6b:bd:60:34:47:d7:f1:f1:f4:9a:99:a1:73:f5: 82:cf:5f:db:df:d1:42:2a:16:07:7e:fd:c6:ad:b4:04:00:d5: 45:c4:da:1a:c5:d7:3e:34:7c:79:1c:09:0c:76:1a:d4:73:49: f1:02:fb:cb:44:a0:8f:06:ea:92:89:62:90:40:e0:3e:33:c5: 14:fd:6d:5b:52:8e:b2:9e:61:80:91:94:2a:2f:e6:56:a9:de: 2d:0a:d1:4b:f5:c6:c0:dc:96:ae:ae:ef:d7:b9:e6:c8:46:4f: d3:3e:dd:88:f2:e4:1c:59:28:a2:c4:1e:4f:d7:a8:2d:05:5e: ac:b6:fd:7b:cd:5d:66:9f:67:aa:e9:bd:f1:07:96:cd:f2:43: 08:8e:bb:de:97:bc:ea:91:a7:7c:01:fe:89:94:bf:c6:9b:b8: e3:6b:14:fb:e5:92:f6:be:9c:32:ef:b9:3f:6e:73:9f:8d:80: 4d:73:17:24:5c:e1:31:d4:77:9e:01:77:e2:f4:12:6f:c1:a9: 75:b0:42:2d:8b:90:7c:d2:fc:36:db:83:c2:19:cb:4f:fd:e3: 75:7c:fc:ad:5c:42:43:ec:50:15:05:ed:08:82:31:70:b2:3d: ac:22:be:70:44:32:6d:a8:a5:a6:f2:e9:ba:bf:c3:52:dc:f1: 61:37:fc:59 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUMkx4n79poW5OtFi9h8AzArWN2xkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjkwMTU0MjFaFw0yNzAxMjgwMTU5MjFaMDMxMTAvBgNV BAMTKDZBN0MyRThBMzQ1Nzg0NUJEQUMzQ0RDNUYzNDZGMEQ2QkE0RTdEOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk48kEC4/H04u+tbWERX/wSat3 GSbRiDj10jdTLBQ2FglRWaRnrYIeEEdZyAwRbn/T19jnTXc/BqoNLjRkQM2bmUCY DUFezTiRRgZTwnvKxz6WPDRKntey/GprJr6qqGRoAo9dCR4bdzx42TPAcA9OboqT Zl74kFHGwoFspvAzls8g0KdNjkGHo77NfCuHKQjlLdCC0ujfS1MA0bH9D3d+w+fc 5UI00hzK35IbL8HnRNSggnNKSnkrTNFkeSYFDO+ayZQT+vzUYpx9GLZfNG6nKAAl Cb9/iG8jDfF1dWC0sLS93scgE4dUqTkXP11XbLyjMV1+feZqDzY4d9L5lQepAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRqfC6KNFeEW9rD zcXzRvDWuk59mzAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMEQxRjQ0MzhCNjgzNDEzRjc5OEMxRDcw MkY0NDlGMjYzN0ZEODU1RDNCNUIwODRGQzYwRDlGOTc1QTg5QTEwOS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8wRDFGNDQzOEI2ODM0MTNGNzk4QzFENzAyRjQ0OUYyNjM3RkQ4NTVEM0I1 QjA4NEZDNjBEOUY5NzVBODlBMTA5LzAvNkE3QzJFOEEzNDU3ODQ1QkRBQzNDREM1 RjM0NkYwRDZCQTRFN0Q5Qi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAO5UDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMELbMwDQYJKoZIhvcNAQELBQADggEBAHhmC/Jr vWA0R9fx8fSamaFz9YLPX9vf0UIqFgd+/cattAQA1UXE2hrF1z40fHkcCQx2GtRz SfEC+8tEoI8G6pKJYpBA4D4zxRT9bVtSjrKeYYCRlCov5lap3i0K0Uv1xsDclq6u 79e55shGT9M+3Yjy5BxZKKLEHk/XqC0FXqy2/XvNXWafZ6rpvfEHls3yQwiOu96X vOqRp3wB/omUv8abuONrFPvlkva+nDLvuT9uc5+NgE1zFyRc4THUd54Bd+L0Em/B qXWwQi2LkHzS/Dbbg8IZy0/943V8/K1cQkPsUBUF7QiCMXCyPawivnBEMm2opaby 6bq/w1Lc8WE3/Fk= -----END CERTIFICATE-----Generated at Mon Mar 2 13:05:43 2026 by rpki-client