$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C292FA15A747FB9B20CD2854518A05B78927EA7.cer File: 6C292FA15A747FB9B20CD2854518A05B78927EA7.cer (raw, json) Hash identifier: ZrmI6jThlGKC2xt2EnqGDdAeOohHUYsJCs4Al4YnVz8= Subject key identifier: 6C:29:2F:A1:5A:74:7F:B9:B2:0C:D2:85:45:18:A0:5B:78:92:7E:A7 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 4E9A4811B667CB7DC0CA2A975530D9EDE9EAACE2 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/DAF1F507FA9E14DBBF19B703283DC6100BE2C9F1F9D599C1684D3FC5DED76F2D/0/6C292FA15A747FB9B20CD2854518A05B78927EA7.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/DAF1F507FA9E14DBBF19B703283DC6100BE2C9F1F9D599C1684D3FC5DED76F2D/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 08:29:44 +0000 Certificate not after: Wed 27 Jan 2027 08:34:44 +0000 Subordinate resources: AS: 274217 IP: 2803:bd0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:9a:48:11:b6:67:cb:7d:c0:ca:2a:97:55:30:d9:ed:e9:ea:ac:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 08:29:44 2026 GMT Not After : Jan 27 08:34:44 2027 GMT Subject: CN=6C292FA15A747FB9B20CD2854518A05B78927EA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:cb:a9:68:20:e9:68:d0:e5:86:98:52:51:ff: b8:72:0a:8f:5b:cb:df:cd:1e:59:63:58:ea:f6:7f: 4b:cb:df:6f:a9:3b:6b:6d:85:d1:e4:ad:dc:17:7b: b3:88:41:21:05:49:bb:6c:90:de:48:ca:a5:c9:26: ce:08:fe:b0:f5:19:10:a3:88:54:d0:49:89:b6:6d: 07:7b:8a:c3:25:60:12:c3:f8:a4:26:47:91:af:7e: 8f:72:3a:88:50:0b:aa:60:a4:bf:f9:e5:6c:71:12: fd:0b:77:de:ac:64:f8:fe:11:76:e7:22:44:d2:6a: 0f:92:c4:d4:14:d0:86:75:c2:fb:2e:2f:3a:a5:df: 8e:00:5e:68:3d:28:4e:12:6f:e2:97:b6:ee:00:c9: f5:6b:2e:3e:a4:fa:ca:ab:00:e1:cb:07:a2:8d:08: 22:36:d5:4c:1e:2d:f8:fc:22:ad:5e:c0:a5:cf:15: 19:a3:5c:55:f4:e0:ce:31:fc:f8:e7:cc:72:dc:37: 46:cd:e5:a7:7a:03:38:a5:a1:29:c0:de:fa:bd:75: 59:64:27:83:8b:32:88:f9:b1:e4:05:83:38:8c:67: b1:c1:52:d1:ce:56:16:22:a5:3b:28:8a:96:95:87: 7c:46:e3:85:88:5d:6f:fd:ec:17:a7:99:91:04:54: 38:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 6C:29:2F:A1:5A:74:7F:B9:B2:0C:D2:85:45:18:A0:5B:78:92:7E:A7 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/DAF1F507FA9E14DBBF19B703283DC6100BE2C9F1F9D599C1684D3FC5DED76F2D/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/DAF1F507FA9E14DBBF19B703283DC6100BE2C9F1F9D599C1684D3FC5DED76F2D/0/6C292FA15A747FB9B20CD2854518A05B78927EA7.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:bd0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 274217 Signature Algorithm: sha256WithRSAEncryption 4a:31:6c:8e:61:37:b9:77:2a:7e:b0:cc:09:75:f6:d4:9e:44: 22:51:da:37:68:b7:92:5b:03:da:1d:b7:d2:13:18:73:ed:7a: 54:89:24:68:e6:d9:0a:1a:3b:e7:25:6e:19:f9:7d:f4:1c:9c: 41:f0:54:2b:0a:90:26:b5:6b:a6:58:e2:84:78:87:e6:f1:90: 7c:1b:73:e3:1c:b8:f8:25:d9:a3:c7:02:7e:86:02:06:8c:d0: 40:c3:94:60:86:6e:22:fb:63:94:92:9f:59:89:61:56:65:e8: 1e:43:25:bb:f7:73:c7:42:4d:f5:aa:1d:0d:e5:3c:14:42:18: 5b:f8:c0:05:7a:36:80:ed:26:2c:21:6a:fc:d5:da:1e:6d:0c: 39:4d:d7:5c:a0:ad:e0:77:3f:b2:8e:7b:e9:c4:19:57:9d:25: 9a:d0:cb:b3:39:50:80:e8:38:c4:b0:4a:a9:13:8b:aa:61:a8: 56:0c:59:35:58:87:5c:34:f2:fe:4c:7e:df:61:55:4b:ae:aa: 84:9d:dd:d5:a8:9d:4f:2e:00:e4:7a:68:e5:59:45:5c:f1:7a: fd:60:95:60:d8:57:9f:31:fb:f5:25:52:7b:cd:0a:a9:17:46: 82:28:0b:ad:cb:10:03:fc:5c:10:8e:81:a3:a8:e0:17:bf:e8: 21:b0:c3:55 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUTppIEbZny33AyiqXVTDZ7enqrOIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgwODI5NDRaFw0yNzAxMjcwODM0NDRaMDMxMTAvBgNV BAMTKDZDMjkyRkExNUE3NDdGQjlCMjBDRDI4NTQ1MThBMDVCNzg5MjdFQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMy6loIOlo0OWGmFJR/7hyCo9b y9/NHlljWOr2f0vL32+pO2tthdHkrdwXe7OIQSEFSbtskN5IyqXJJs4I/rD1GRCj iFTQSYm2bQd7isMlYBLD+KQmR5Gvfo9yOohQC6pgpL/55WxxEv0Ld96sZPj+EXbn IkTSag+SxNQU0IZ1wvsuLzql344AXmg9KE4Sb+KXtu4AyfVrLj6k+sqrAOHLB6KN CCI21UweLfj8Iq1ewKXPFRmjXFX04M4x/PjnzHLcN0bN5ad6AziloSnA3vq9dVlk J4OLMoj5seQFgziMZ7HBUtHOVhYipTsoipaVh3xG44WIXW/97BenmZEEVDhlAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRsKS+hWnR/ubIM 0oVFGKBbeJJ+pzAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvREFGMUY1MDdGQTlFMTREQkJGMTlCNzAz MjgzREM2MTAwQkUyQzlGMUY5RDU5OUMxNjg0RDNGQzVERUQ3NkYyRC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9EQUYxRjUwN0ZBOUUxNERCQkYxOUI3MDMyODNEQzYxMDBCRTJDOUYxRjlE NTk5QzE2ODREM0ZDNURFRDc2RjJELzAvNkMyOTJGQTE1QTc0N0ZCOUIyMENEMjg1 NDUxOEEwNUI3ODkyN0VBNy5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAML0DAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMELykwDQYJKoZIhvcNAQELBQADggEBAEoxbI5h N7l3Kn6wzAl19tSeRCJR2jdot5JbA9odt9ITGHPtelSJJGjm2QoaO+clbhn5ffQc nEHwVCsKkCa1a6ZY4oR4h+bxkHwbc+McuPgl2aPHAn6GAgaM0EDDlGCGbiL7Y5SS n1mJYVZl6B5DJbv3c8dCTfWqHQ3lPBRCGFv4wAV6NoDtJiwhavzV2h5tDDlN11yg reB3P7KOe+nEGVedJZrQy7M5UIDoOMSwSqkTi6phqFYMWTVYh1w08v5Mft9hVUuu qoSd3dWonU8uAOR6aOVZRVzxev1glWDYV58x+/UlUnvNCqkXRoIoC63LEAP8XBCO gaOo4Be/6CGww1U= -----END CERTIFICATE-----Generated at Mon Mar 2 15:58:02 2026 by rpki-client