$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C3108686EF4694A93B0B8859FE26D608C715F8C.cer File: 6C3108686EF4694A93B0B8859FE26D608C715F8C.cer (raw, json) Hash identifier: hvhXIEdjb6sJ53sYRlQkQl1QwkuWiwjp8Zy2Q5+/6mQ= Subject key identifier: 6C:31:08:68:6E:F4:69:4A:93:B0:B8:85:9F:E2:6D:60:8C:71:5F:8C Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 1EDFED31D0EEBC05C52B1030079E8D88C57DD649 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/97553F15016116BFAD4F49D099C914C58930FE6E388E0782FD14DB3316FB2AE7/0/6C3108686EF4694A93B0B8859FE26D608C715F8C.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/97553F15016116BFAD4F49D099C914C58930FE6E388E0782FD14DB3316FB2AE7/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 27 Jan 2026 22:25:06 +0000 Certificate not after: Tue 26 Jan 2027 22:30:06 +0000 Subordinate resources: AS: 274004 IP: 2803:4d0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:df:ed:31:d0:ee:bc:05:c5:2b:10:30:07:9e:8d:88:c5:7d:d6:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 27 22:25:06 2026 GMT Not After : Jan 26 22:30:06 2027 GMT Subject: CN=6C3108686EF4694A93B0B8859FE26D608C715F8C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d2:81:8d:f7:dc:92:0c:1d:dd:bd:6d:f2:32: bf:7f:3d:6f:26:5e:d6:ad:25:d6:60:53:69:d9:64: e2:d5:34:dc:d0:4d:61:4a:2f:df:fe:69:d3:9a:54: 0e:f5:30:3e:42:84:4b:a4:f7:83:aa:28:d7:d8:0a: 88:76:92:e1:20:7d:3b:5c:74:51:82:ad:e3:f0:f2: ae:39:6e:b5:43:b8:76:2a:a1:ff:67:2f:b4:c5:34: 2d:1d:bb:d9:1c:8d:68:31:7f:8f:e1:71:1a:7a:63: ef:2b:06:81:32:b7:6f:17:f5:45:46:d6:9f:1f:f5: 30:af:d4:a0:9a:0a:5d:e2:8a:ec:d5:59:f5:ec:65: 30:4c:c0:b3:e4:13:d6:48:cf:ad:f7:f8:eb:94:ce: e3:39:dd:b0:ce:cc:ef:8e:42:19:17:07:4a:b1:d9: 73:7b:7a:f8:75:be:ce:70:cc:7d:f6:98:81:4e:7d: f6:a8:8d:b2:b6:c6:d2:05:24:4f:7a:d4:9a:d7:62: 06:bf:87:cf:fc:69:4d:16:6b:26:26:37:b6:8a:3f: 98:ef:6d:a3:47:e9:58:eb:30:bf:05:e4:2f:80:6f: 7a:c7:1d:f2:c8:37:01:3b:76:eb:8a:aa:60:4d:19: 3b:92:08:bf:14:70:44:b0:f1:5e:b6:92:c6:46:8f: 0c:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 6C:31:08:68:6E:F4:69:4A:93:B0:B8:85:9F:E2:6D:60:8C:71:5F:8C X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/97553F15016116BFAD4F49D099C914C58930FE6E388E0782FD14DB3316FB2AE7/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/97553F15016116BFAD4F49D099C914C58930FE6E388E0782FD14DB3316FB2AE7/0/6C3108686EF4694A93B0B8859FE26D608C715F8C.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:4d0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 274004 Signature Algorithm: sha256WithRSAEncryption 3d:3c:ad:c8:e6:ee:4d:91:43:05:66:ec:84:9a:2a:20:15:c1: 64:cd:b2:e7:45:dc:ea:3e:51:e5:a8:24:d7:d6:96:d3:64:3e: 78:45:13:f7:44:85:59:52:8a:06:77:e8:23:8c:49:1c:56:c3: 95:30:c7:83:15:ae:f1:81:6b:90:3e:47:ce:e6:cb:7b:5f:30: 10:a0:49:68:c8:c6:21:5d:59:02:3d:f9:24:bf:1c:e5:24:10: 99:36:a5:e8:ae:45:76:82:2f:39:81:38:31:a3:fe:4b:cd:e3: cc:14:5a:6f:d8:3a:27:b5:2b:ad:a0:e6:39:4d:1e:71:b0:4f: 9c:69:ba:62:03:ee:5f:d8:d4:7d:a7:24:3a:ba:db:f1:4f:db: 7d:42:38:e7:ce:06:2c:be:23:3f:b6:8e:a5:7c:8c:a2:27:f8: 2a:23:2d:d0:4e:e1:7d:0d:c5:4d:6f:7c:63:07:53:2f:c2:0b: 58:81:af:6c:fa:2b:7e:73:4f:9c:a8:ba:ae:b6:1c:ef:75:29: 47:7c:c3:fc:83:ca:75:d8:7b:2a:15:1c:c0:f2:0e:7c:07:04: 10:8d:b6:6f:49:66:36:d0:60:43:9f:3d:dc:9c:82:3f:a0:ad: 0c:27:23:b1:bd:77:20:76:fb:1a:dc:09:0a:dc:0b:d3:44:39: 94:8d:bd:55 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUHt/tMdDuvAXFKxAwB56NiMV91kkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjcyMjI1MDZaFw0yNzAxMjYyMjMwMDZaMDMxMTAvBgNV BAMTKDZDMzEwODY4NkVGNDY5NEE5M0IwQjg4NTlGRTI2RDYwOEM3MTVGOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH0oGN99ySDB3dvW3yMr9/PW8m XtatJdZgU2nZZOLVNNzQTWFKL9/+adOaVA71MD5ChEuk94OqKNfYCoh2kuEgfTtc dFGCrePw8q45brVDuHYqof9nL7TFNC0du9kcjWgxf4/hcRp6Y+8rBoEyt28X9UVG 1p8f9TCv1KCaCl3iiuzVWfXsZTBMwLPkE9ZIz633+OuUzuM53bDOzO+OQhkXB0qx 2XN7evh1vs5wzH32mIFOffaojbK2xtIFJE961JrXYga/h8/8aU0WayYmN7aKP5jv baNH6VjrML8F5C+Ab3rHHfLINwE7duuKqmBNGTuSCL8UcESw8V62ksZGjwzxAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRsMQhobvRpSpOw uIWf4m1gjHFfjDAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvOTc1NTNGMTUwMTYxMTZCRkFENEY0OUQw OTlDOTE0QzU4OTMwRkU2RTM4OEUwNzgyRkQxNERCMzMxNkZCMkFFNy8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy85NzU1M0YxNTAxNjExNkJGQUQ0RjQ5RDA5OUM5MTRDNTg5MzBGRTZFMzg4 RTA3ODJGRDE0REIzMzE2RkIyQUU3LzAvNkMzMTA4Njg2RUY0Njk0QTkzQjBCODg1 OUZFMjZENjA4QzcxNUY4Qy5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAME0DAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMELlQwDQYJKoZIhvcNAQELBQADggEBAD08rcjm 7k2RQwVm7ISaKiAVwWTNsudF3Oo+UeWoJNfWltNkPnhFE/dEhVlSigZ36COMSRxW w5Uwx4MVrvGBa5A+R87my3tfMBCgSWjIxiFdWQI9+SS/HOUkEJk2peiuRXaCLzmB ODGj/kvN48wUWm/YOie1K62g5jlNHnGwT5xpumID7l/Y1H2nJDq62/FP231COOfO Biy+Iz+2jqV8jKIn+CojLdBO4X0NxU1vfGMHUy/CC1iBr2z6K35zT5youq62HO91 KUd8w/yDynXYeyoVHMDyDnwHBBCNtm9JZjbQYEOfPdycgj+grQwnI7G9dyB2+xrc CQrcC9NEOZSNvVU= -----END CERTIFICATE-----Generated at Mon Mar 2 15:42:47 2026 by rpki-client