$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78422FE700CC22ABDCCBDAF93B7E0055549FE121.cer File: 78422FE700CC22ABDCCBDAF93B7E0055549FE121.cer (raw, json) Hash identifier: K0tZbCO9OggKt15n/zzxxPhV+hf+rAWyoe0eXU9NIkk= Subject key identifier: 78:42:2F:E7:00:CC:22:AB:DC:CB:DA:F9:3B:7E:00:55:54:9F:E1:21 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 2A0F20DF2A24F3D44E804E5A58A0E70C38231635 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/A4A59D73A010A2BBC5587B2B1673C4DA7137707DDE7FBE6FEC43F6FE20604E43/0/78422FE700CC22ABDCCBDAF93B7E0055549FE121.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/A4A59D73A010A2BBC5587B2B1673C4DA7137707DDE7FBE6FEC43F6FE20604E43/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 21:04:58 +0000 Certificate not after: Wed 27 Jan 2027 21:09:58 +0000 Subordinate resources: AS: 271982 IP: 2803:fe10::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 05 Mar 2026 11:41:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:0f:20:df:2a:24:f3:d4:4e:80:4e:5a:58:a0:e7:0c:38:23:16:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 21:04:58 2026 GMT Not After : Jan 27 21:09:58 2027 GMT Subject: CN=78422FE700CC22ABDCCBDAF93B7E0055549FE121 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:48:c8:d8:26:39:72:72:39:ff:8a:5f:c4:f0: 73:2e:02:6d:29:e7:bb:82:44:c7:33:69:65:5f:4a: 78:2b:49:9f:3a:c2:32:03:1e:65:00:5d:9a:07:5f: 5f:b1:9f:a1:f2:8a:78:1b:bd:74:67:f0:67:86:5e: 21:dc:49:e2:5d:98:6b:d3:34:c8:03:be:9f:bb:01: 42:49:04:c2:d0:c5:04:b7:28:48:71:6b:cc:10:44: 67:7a:79:47:ee:99:bf:8d:d7:d2:5d:c3:02:d0:af: 00:53:8f:b5:c3:7e:5d:bd:dc:33:8b:45:93:41:d4: fc:08:ac:5d:5e:a4:23:2e:c3:d7:03:d2:36:54:5f: 82:b8:f3:3d:ab:d1:14:9c:90:df:ea:8e:19:e2:9d: a7:27:3d:e7:a0:23:d1:b7:90:ed:26:be:b7:29:5d: f7:da:a9:17:1a:10:1f:5f:0e:dd:29:29:eb:7f:62: 6c:3c:05:9e:ab:66:47:23:d2:44:81:d0:d4:22:de: 0e:cb:22:9b:f2:4d:4a:19:49:5d:38:eb:f8:bd:a8: 38:41:90:65:e2:78:5b:04:90:ee:94:e0:aa:5a:5e: 35:d9:34:1e:ea:f2:e5:00:8f:68:dd:c3:ac:fd:66: 6b:ab:45:70:af:8c:bc:53:e8:cb:4c:90:27:69:a8: 70:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 78:42:2F:E7:00:CC:22:AB:DC:CB:DA:F9:3B:7E:00:55:54:9F:E1:21 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/A4A59D73A010A2BBC5587B2B1673C4DA7137707DDE7FBE6FEC43F6FE20604E43/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/A4A59D73A010A2BBC5587B2B1673C4DA7137707DDE7FBE6FEC43F6FE20604E43/0/78422FE700CC22ABDCCBDAF93B7E0055549FE121.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:fe10::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 271982 Signature Algorithm: sha256WithRSAEncryption 4f:8b:40:27:27:f7:e8:d4:45:99:94:67:e8:cd:b2:d9:01:6b: 98:35:24:e8:62:38:64:e1:01:d1:6c:25:94:c5:08:96:79:5a: a4:ef:1c:99:1f:e8:b9:75:a4:98:86:e5:5a:1a:13:a9:07:3f: 1d:2a:e8:f4:97:33:12:35:33:0e:bd:ba:a1:ce:a6:e9:c3:70: 9f:29:90:c8:08:bc:0e:b4:1f:39:0c:02:ac:2c:9a:ed:c2:2c: 03:16:76:fe:1d:4a:76:93:31:c1:0d:30:46:c5:39:aa:4b:b3: ac:3b:98:51:cf:36:cf:dc:0e:18:47:57:b3:0c:65:95:46:49: 24:51:4e:f9:08:fe:d5:19:30:bb:51:04:bf:d1:4d:92:e2:53: 85:95:e9:5d:97:5c:35:73:92:3a:88:91:44:97:39:e9:1c:cb: 4e:f6:4b:0f:64:a2:a5:7d:3d:f5:c3:64:e7:b9:80:a3:00:e3: bd:93:43:22:2e:26:69:f6:26:cd:51:ad:30:95:5b:80:c7:53: ed:f8:f3:7f:16:42:a3:62:00:9f:a3:34:95:85:56:10:b1:07: 74:59:70:d1:7d:1b:7e:62:8d:02:86:69:e6:11:31:3e:64:fe: c6:2c:4a:95:e1:53:c3:5e:13:6d:d8:91:f3:85:f3:80:60:87: d9:8c:c4:bc -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUKg8g3yok89ROgE5aWKDnDDgjFjUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgyMTA0NThaFw0yNzAxMjcyMTA5NThaMDMxMTAvBgNV BAMTKDc4NDIyRkU3MDBDQzIyQUJEQ0NCREFGOTNCN0UwMDU1NTQ5RkUxMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0SMjYJjlycjn/il/E8HMuAm0p 57uCRMczaWVfSngrSZ86wjIDHmUAXZoHX1+xn6HyingbvXRn8GeGXiHcSeJdmGvT NMgDvp+7AUJJBMLQxQS3KEhxa8wQRGd6eUfumb+N19JdwwLQrwBTj7XDfl293DOL RZNB1PwIrF1epCMuw9cD0jZUX4K48z2r0RSckN/qjhninacnPeegI9G3kO0mvrcp XffaqRcaEB9fDt0pKet/Ymw8BZ6rZkcj0kSB0NQi3g7LIpvyTUoZSV046/i9qDhB kGXieFsEkO6U4KpaXjXZNB7q8uUAj2jdw6z9ZmurRXCvjLxT6MtMkCdpqHAJAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR4Qi/nAMwiq9zL 2vk7fgBVVJ/hITAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQTRBNTlENzNBMDEwQTJCQkM1NTg3QjJC MTY3M0M0REE3MTM3NzA3RERFN0ZCRTZGRUM0M0Y2RkUyMDYwNEU0My8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9BNEE1OUQ3M0EwMTBBMkJCQzU1ODdCMkIxNjczQzREQTcxMzc3MDdEREU3 RkJFNkZFQzQzRjZGRTIwNjA0RTQzLzAvNzg0MjJGRTcwMENDMjJBQkRDQ0JEQUY5 M0I3RTAwNTU1NDlGRTEyMS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAP+EDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEJm4wDQYJKoZIhvcNAQELBQADggEBAE+LQCcn 9+jURZmUZ+jNstkBa5g1JOhiOGThAdFsJZTFCJZ5WqTvHJkf6Ll1pJiG5VoaE6kH Px0q6PSXMxI1Mw69uqHOpunDcJ8pkMgIvA60HzkMAqwsmu3CLAMWdv4dSnaTMcEN MEbFOapLs6w7mFHPNs/cDhhHV7MMZZVGSSRRTvkI/tUZMLtRBL/RTZLiU4WV6V2X XDVzkjqIkUSXOekcy072Sw9koqV9PfXDZOe5gKMA472TQyIuJmn2Js1RrTCVW4DH U+34838WQqNiAJ+jNJWFVhCxB3RZcNF9G35ijQKGaeYRMT5k/sYsSpXhU8NeE23Y kfOF84Bgh9mMxLw= -----END CERTIFICATE-----Generated at Mon Mar 2 10:43:35 2026 by rpki-client