$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B38B8C53EC1C98F7363655F62F1AD6CC7E6717D.cer File: 6B38B8C53EC1C98F7363655F62F1AD6CC7E6717D.cer (raw, json) Hash identifier: 7MEqcKN4/ZVdavZXWucXF7NHTUDyjuX74bWkd2stIds= Subject key identifier: 6B:38:B8:C5:3E:C1:C9:8F:73:63:65:5F:62:F1:AD:6C:C7:E6:71:7D Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 72424F42CA6C17E72E9F9E109079779AF453F0DB Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/CA9D701B1241A7730872E5DB7219D38310E84FDB90ECD661FA9B409F1D1BF149/0/6B38B8C53EC1C98F7363655F62F1AD6CC7E6717D.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/CA9D701B1241A7730872E5DB7219D38310E84FDB90ECD661FA9B409F1D1BF149/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Thu 29 Jan 2026 02:35:31 +0000 Certificate not after: Thu 28 Jan 2027 02:40:31 +0000 Subordinate resources: AS: 274123 IP: 2803:7ed0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 05 Mar 2026 11:41:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:42:4f:42:ca:6c:17:e7:2e:9f:9e:10:90:79:77:9a:f4:53:f0:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 29 02:35:31 2026 GMT Not After : Jan 28 02:40:31 2027 GMT Subject: CN=6B38B8C53EC1C98F7363655F62F1AD6CC7E6717D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:54:a3:e3:5a:e6:51:08:3e:2d:4c:93:f5:23: 83:ae:cb:87:28:bc:3a:0e:ab:35:58:a9:29:4b:f8: 46:6d:39:5a:5c:52:d0:9c:76:04:67:92:33:95:0e: a4:c6:7d:fd:dd:61:79:88:eb:d1:91:86:1a:6d:e0: 09:20:57:e2:49:f8:2e:3b:31:0e:9d:47:c7:fd:20: df:6e:01:bf:4a:f1:6f:21:1d:0a:c8:27:54:7f:9b: df:7f:0d:70:f1:4f:dc:08:f4:ae:f1:0d:ea:ff:14: 68:c2:60:f4:0d:5d:70:04:ea:bb:e3:50:8b:c1:51: a2:42:6a:35:6f:cb:32:51:cd:2d:07:fa:f5:7c:8c: b7:80:84:73:aa:e7:cf:98:8c:bd:fc:63:98:3b:4e: 7d:1d:3b:fe:d6:3a:51:72:cb:29:5b:77:69:c8:45: 2e:24:af:13:02:ec:f6:2a:a5:7c:1b:db:fb:fb:96: 33:dc:e3:80:34:32:b7:21:2b:d3:dc:b0:47:8c:81: e4:5c:09:60:43:92:37:e9:a7:5d:26:e1:71:31:7b: fc:f7:38:a3:fd:2a:bd:8d:48:f9:b3:8f:66:06:44: 5f:29:fe:d7:be:2c:bd:cb:6c:f9:f6:87:e6:28:19: 9b:67:f5:18:c3:a0:f8:77:71:c9:e9:4d:7a:7b:2e: c7:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 6B:38:B8:C5:3E:C1:C9:8F:73:63:65:5F:62:F1:AD:6C:C7:E6:71:7D X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/CA9D701B1241A7730872E5DB7219D38310E84FDB90ECD661FA9B409F1D1BF149/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/CA9D701B1241A7730872E5DB7219D38310E84FDB90ECD661FA9B409F1D1BF149/0/6B38B8C53EC1C98F7363655F62F1AD6CC7E6717D.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:7ed0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 274123 Signature Algorithm: sha256WithRSAEncryption 30:70:63:f3:9f:e8:c7:a1:94:92:22:57:52:d3:fa:b1:a1:92: 4d:ef:56:77:d1:91:6c:06:63:d6:e8:8e:b3:b2:2e:3d:9f:55: 2c:09:53:2d:c3:df:79:20:8c:ed:91:24:18:92:d1:7a:f1:e3: 63:83:74:ad:76:31:72:32:96:32:d2:b8:d9:6e:42:06:5c:14: c8:d5:ab:5c:cb:00:1d:a0:62:be:3f:2a:3f:59:1a:6f:07:c8: 39:ce:84:3b:79:5a:ec:78:bc:7b:70:b8:30:f7:33:05:4f:d9: 08:b7:4e:ba:ba:19:5b:f4:69:33:9c:d1:19:44:4f:b1:08:85: 25:05:e3:6c:5d:73:7a:e5:e0:88:61:64:a3:d7:72:80:ab:93: db:79:42:06:ec:b9:a3:c1:de:8d:ff:45:12:cf:8d:b7:cd:8a: 20:ed:18:2d:d2:92:33:8b:aa:c3:2b:fb:75:4e:07:f3:97:20: c7:63:e8:2e:8b:17:63:8f:91:ce:55:10:ce:65:81:ca:d1:2c: f0:ca:cf:6a:93:9e:9e:d3:cb:03:43:6f:a0:82:2a:e4:a4:5c: 59:09:a7:af:e8:a1:28:38:aa:c3:61:7d:50:1a:50:90:b6:46: 1e:c7:96:ba:27:78:61:14:0c:17:89:4b:4e:bc:91:4d:32:5f: 81:a0:74:dc -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUckJPQspsF+cun54QkHl3mvRT8NswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjkwMjM1MzFaFw0yNzAxMjgwMjQwMzFaMDMxMTAvBgNV BAMTKDZCMzhCOEM1M0VDMUM5OEY3MzYzNjU1RjYyRjFBRDZDQzdFNjcxN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBVKPjWuZRCD4tTJP1I4Ouy4co vDoOqzVYqSlL+EZtOVpcUtCcdgRnkjOVDqTGff3dYXmI69GRhhpt4AkgV+JJ+C47 MQ6dR8f9IN9uAb9K8W8hHQrIJ1R/m99/DXDxT9wI9K7xDer/FGjCYPQNXXAE6rvj UIvBUaJCajVvyzJRzS0H+vV8jLeAhHOq58+YjL38Y5g7Tn0dO/7WOlFyyylbd2nI RS4krxMC7PYqpXwb2/v7ljPc44A0MrchK9PcsEeMgeRcCWBDkjfpp10m4XExe/z3 OKP9Kr2NSPmzj2YGRF8p/te+LL3LbPn2h+YoGZtn9RjDoPh3ccnpTXp7Lsf3AgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRrOLjFPsHJj3Nj ZV9i8a1sx+ZxfTAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQ0E5RDcwMUIxMjQxQTc3MzA4NzJFNURC NzIxOUQzODMxMEU4NEZEQjkwRUNENjYxRkE5QjQwOUYxRDFCRjE0OS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9DQTlENzAxQjEyNDFBNzczMDg3MkU1REI3MjE5RDM4MzEwRTg0RkRCOTBF Q0Q2NjFGQTlCNDA5RjFEMUJGMTQ5LzAvNkIzOEI4QzUzRUMxQzk4RjczNjM2NTVG NjJGMUFENkNDN0U2NzE3RC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAN+0DAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMELsswDQYJKoZIhvcNAQELBQADggEBADBwY/Of 6MehlJIiV1LT+rGhkk3vVnfRkWwGY9bojrOyLj2fVSwJUy3D33kgjO2RJBiS0Xrx 42ODdK12MXIyljLSuNluQgZcFMjVq1zLAB2gYr4/Kj9ZGm8HyDnOhDt5Wux4vHtw uDD3MwVP2Qi3Trq6GVv0aTOc0RlET7EIhSUF42xdc3rl4IhhZKPXcoCrk9t5Qgbs uaPB3o3/RRLPjbfNiiDtGC3SkjOLqsMr+3VOB/OXIMdj6C6LF2OPkc5VEM5lgcrR LPDKz2qTnp7TywNDb6CCKuSkXFkJp6/ooSg4qsNhfVAaUJC2Rh7HlroneGEUDBeJ S068kU0yX4GgdNw= -----END CERTIFICATE-----Generated at Mon Mar 2 11:23:23 2026 by rpki-client