$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/72B53BA6E0BEF80076D9A16F66DA927965BC5585.cer File: 72B53BA6E0BEF80076D9A16F66DA927965BC5585.cer (raw, json) Hash identifier: U9scKfyxzaTgOfxcDYx3+TVokpqmu5t02p5fiJdMUM4= Subject key identifier: 72:B5:3B:A6:E0:BE:F8:00:76:D9:A1:6F:66:DA:92:79:65:BC:55:85 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 36DF3D56FBB9B0FFD9E1A8CCA89606A915D1CB5F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/5208EA4E8F019B8A55E7B5D3B5675FB5C0B070440DED2C5E9F74CB49F979D48F/0/72B53BA6E0BEF80076D9A16F66DA927965BC5585.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/5208EA4E8F019B8A55E7B5D3B5675FB5C0B070440DED2C5E9F74CB49F979D48F/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 05:42:15 +0000 Certificate not after: Wed 27 Jan 2027 05:47:15 +0000 Subordinate resources: AS: 273057 IP: 2803:4790::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:df:3d:56:fb:b9:b0:ff:d9:e1:a8:cc:a8:96:06:a9:15:d1:cb:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 05:42:15 2026 GMT Not After : Jan 27 05:47:15 2027 GMT Subject: CN=72B53BA6E0BEF80076D9A16F66DA927965BC5585 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:45:ea:dc:e9:bf:c5:8f:e5:89:2c:e6:95:77: 37:99:63:82:4a:81:27:6b:df:fa:96:59:5c:84:d3: d0:21:cb:9a:fc:cb:73:43:ed:ec:d6:d9:4f:48:10: 8a:56:f0:a7:63:1a:3c:51:65:d1:91:f1:f9:15:00: 1d:95:81:d1:7e:4a:56:45:97:18:b5:81:6e:40:fc: ab:c5:48:8a:6d:d0:f3:ef:10:db:53:a1:47:b7:31: 5b:20:8b:68:36:3a:8b:e1:2e:af:a3:1c:23:5a:8c: cc:d1:c2:9f:68:66:a1:c2:15:92:61:ca:7a:cd:78: 48:4f:88:eb:51:17:d9:e9:0a:63:c1:b0:9c:e3:70: fa:9b:ca:01:e8:60:e7:6d:21:ce:cb:c5:5d:e7:c1: 55:1f:45:f5:56:d6:ba:d2:9f:e1:a1:72:9b:98:e0: f4:fa:f0:7d:22:7c:f2:9a:60:46:11:e5:76:ba:88: 25:31:c9:dd:71:b2:a8:90:2f:47:bc:0e:ac:34:a7: 93:4d:be:93:f4:f0:5b:35:a2:e3:63:94:b0:5d:a8: 20:95:81:95:49:d2:9b:6d:fe:b8:71:0f:4e:cf:b9: d1:6b:cb:b2:0b:31:ad:5a:93:d8:ac:d9:1d:f0:81: 8e:0a:21:8d:6a:77:0c:2c:60:9d:b6:44:91:97:40: ea:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 72:B5:3B:A6:E0:BE:F8:00:76:D9:A1:6F:66:DA:92:79:65:BC:55:85 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/5208EA4E8F019B8A55E7B5D3B5675FB5C0B070440DED2C5E9F74CB49F979D48F/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/5208EA4E8F019B8A55E7B5D3B5675FB5C0B070440DED2C5E9F74CB49F979D48F/0/72B53BA6E0BEF80076D9A16F66DA927965BC5585.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:4790::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273057 Signature Algorithm: sha256WithRSAEncryption 23:a0:e0:5f:98:60:54:72:57:93:d4:7d:5f:6f:d7:e4:6b:1f: da:20:c9:e5:71:36:06:2a:ed:3d:70:9b:77:fd:ec:63:7e:17: 57:a1:f0:d0:bc:49:f3:37:e8:7d:3e:81:8e:d3:fc:b4:46:07: bc:e8:ab:52:12:84:32:b4:b9:07:ed:a7:0a:00:66:98:46:d3: bf:8d:73:2d:09:5c:1d:91:66:a1:e7:fd:93:55:17:f8:b0:15: d3:a7:68:ce:1f:77:b4:50:ff:57:c9:13:6b:8c:35:76:64:b2: 33:e7:33:84:cd:63:2d:dc:be:b8:0c:f5:ac:2b:d9:15:c9:40: 0f:93:d1:9b:c6:34:a8:63:db:04:3c:38:49:5c:08:5b:9d:6c: ed:73:79:2e:87:88:4c:ce:77:76:a3:5c:1d:b8:be:68:5b:75: bc:51:98:03:d5:23:95:b2:cc:6b:92:66:46:4f:c9:f4:19:bf: 02:a5:a6:90:38:50:40:81:ca:f6:76:6d:22:fe:07:77:c1:be: c4:64:34:f2:8a:19:e8:7c:6f:64:51:94:bc:51:1c:09:5f:61: 29:27:82:55:17:3d:1c:9c:42:9b:59:89:3c:47:01:e0:4c:4c: 6e:7b:52:93:5a:74:6f:78:e9:63:63:da:5c:fb:c7:ff:b8:53: c8:10:21:13 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUNt89Vvu5sP/Z4ajMqJYGqRXRy18wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgwNTQyMTVaFw0yNzAxMjcwNTQ3MTVaMDMxMTAvBgNV BAMTKDcyQjUzQkE2RTBCRUY4MDA3NkQ5QTE2RjY2REE5Mjc5NjVCQzU1ODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpRerc6b/Fj+WJLOaVdzeZY4JK gSdr3/qWWVyE09Ahy5r8y3ND7ezW2U9IEIpW8KdjGjxRZdGR8fkVAB2VgdF+SlZF lxi1gW5A/KvFSIpt0PPvENtToUe3MVsgi2g2OovhLq+jHCNajMzRwp9oZqHCFZJh ynrNeEhPiOtRF9npCmPBsJzjcPqbygHoYOdtIc7LxV3nwVUfRfVW1rrSn+GhcpuY 4PT68H0ifPKaYEYR5Xa6iCUxyd1xsqiQL0e8Dqw0p5NNvpP08Fs1ouNjlLBdqCCV gZVJ0ptt/rhxD07PudFry7ILMa1ak9is2R3wgY4KIY1qdwwsYJ22RJGXQOoFAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRytTum4L74AHbZ oW9m2pJ5ZbxVhTAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNTIwOEVBNEU4RjAxOUI4QTU1RTdCNUQz QjU2NzVGQjVDMEIwNzA0NDBERUQyQzVFOUY3NENCNDlGOTc5RDQ4Ri8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy81MjA4RUE0RThGMDE5QjhBNTVFN0I1RDNCNTY3NUZCNUMwQjA3MDQ0MERF RDJDNUU5Rjc0Q0I0OUY5NzlENDhGLzAvNzJCNTNCQTZFMEJFRjgwMDc2RDlBMTZG NjZEQTkyNzk2NUJDNTU4NS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKANHkDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEKqEwDQYJKoZIhvcNAQELBQADggEBACOg4F+Y YFRyV5PUfV9v1+RrH9ogyeVxNgYq7T1wm3f97GN+F1eh8NC8SfM36H0+gY7T/LRG B7zoq1IShDK0uQftpwoAZphG07+Ncy0JXB2RZqHn/ZNVF/iwFdOnaM4fd7RQ/1fJ E2uMNXZksjPnM4TNYy3cvrgM9awr2RXJQA+T0ZvGNKhj2wQ8OElcCFudbO1zeS6H iEzOd3ajXB24vmhbdbxRmAPVI5WyzGuSZkZPyfQZvwKlppA4UECByvZ2bSL+B3fB vsRkNPKKGeh8b2RRlLxRHAlfYSknglUXPRycQptZiTxHAeBMTG57UpNadG946WNj 2lz7x/+4U8gQIRM= -----END CERTIFICATE-----Generated at Mon Mar 2 15:42:34 2026 by rpki-client