$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7938B496814F39A0FC92DBE553CFB27FAC82ABE3.cer File: 7938B496814F39A0FC92DBE553CFB27FAC82ABE3.cer (raw, json) Hash identifier: VYVsUOq+rGISGiJW8JP7EW1tPAlqcWHYKhXIpTh//8Q= Subject key identifier: 79:38:B4:96:81:4F:39:A0:FC:92:DB:E5:53:CF:B2:7F:AC:82:AB:E3 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 043CFA69695372CF469728B7134057341C2E6E91 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/8C8697EFC04B866144D37542D1F6928568FCE681E3446C3908D9FCECB0395DFF/0/7938B496814F39A0FC92DBE553CFB27FAC82ABE3.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/8C8697EFC04B866144D37542D1F6928568FCE681E3446C3908D9FCECB0395DFF/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Thu 29 Jan 2026 00:25:01 +0000 Certificate not after: Thu 28 Jan 2027 00:30:01 +0000 Subordinate resources: AS: 273885 IP: 2803:35d0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 05 Mar 2026 11:41:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:3c:fa:69:69:53:72:cf:46:97:28:b7:13:40:57:34:1c:2e:6e:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 29 00:25:01 2026 GMT Not After : Jan 28 00:30:01 2027 GMT Subject: CN=7938B496814F39A0FC92DBE553CFB27FAC82ABE3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:4c:e0:87:10:d6:9a:c7:87:95:c3:81:ab:02: fc:18:b1:cb:a0:29:ac:d1:2f:22:02:c3:2e:91:60: ae:c4:1f:13:f8:62:b9:11:81:56:c2:c3:90:e2:66: ec:b2:9b:30:6a:8f:61:c3:50:1e:f7:11:9f:9c:86: 8a:66:1d:13:9b:7c:01:52:dc:dd:10:1e:ea:64:2b: 00:5c:3c:09:2a:97:de:cf:b8:65:95:01:45:d9:fb: 1e:53:67:78:e0:82:25:2d:49:05:86:2a:6f:24:e7: 3f:d1:28:66:5c:cd:da:d0:95:0a:03:e1:e0:e8:0d: 20:09:49:2a:42:8c:25:6d:7e:76:99:c5:18:54:07: a8:5b:2d:4a:b4:be:0c:5e:7c:65:ca:c2:dc:a1:fe: 05:a7:23:1e:d1:f3:d1:e1:b2:33:97:c5:98:23:49: 8f:d0:03:be:da:8f:e3:a5:65:da:83:89:8a:d0:75: ed:3e:16:d3:70:cc:19:95:07:05:83:52:85:91:2e: 52:1a:8f:39:17:ae:8c:2d:f3:63:98:74:13:ef:77: f3:e6:94:8e:e7:23:1f:15:f2:fd:ef:35:6a:3e:9a: f8:cb:72:cf:55:87:82:61:b9:1f:b8:dc:bd:e4:68: 36:7b:e9:7f:61:fe:67:ea:0a:43:74:30:92:8d:07: e4:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 79:38:B4:96:81:4F:39:A0:FC:92:DB:E5:53:CF:B2:7F:AC:82:AB:E3 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/8C8697EFC04B866144D37542D1F6928568FCE681E3446C3908D9FCECB0395DFF/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/8C8697EFC04B866144D37542D1F6928568FCE681E3446C3908D9FCECB0395DFF/0/7938B496814F39A0FC92DBE553CFB27FAC82ABE3.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:35d0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273885 Signature Algorithm: sha256WithRSAEncryption 8d:3b:c2:db:cd:cc:ec:68:74:66:96:f8:2c:98:33:7b:d6:01: 41:84:bd:3f:c8:6a:5e:02:af:75:22:40:65:49:e9:ea:0b:a1: fa:1d:3e:7a:0f:61:37:f0:86:48:15:88:ca:1b:34:48:0e:3a: b3:bc:8a:65:29:94:e3:81:f9:eb:23:fe:69:05:44:2d:66:9e: 23:d2:6b:e1:2f:92:d3:34:5a:5f:cd:a2:70:5d:6c:2c:54:c2: 81:9c:99:9b:5b:41:80:e9:b3:3a:15:6e:da:05:ed:94:2b:b3: 8f:9e:f1:4a:c7:97:0f:fd:d9:3f:0e:d5:3b:4a:75:ee:86:b5: b0:71:45:b9:e1:60:45:ec:d3:29:e2:02:10:02:5c:ab:73:4d: eb:b6:7a:0c:db:3d:1d:6d:4d:69:27:38:7d:8d:ac:e7:b6:ca: 8d:48:82:70:e5:05:94:2f:d9:65:c4:40:be:98:d3:98:e0:c5: f5:81:e2:01:e5:d5:fc:62:5e:cd:fa:ef:c5:6e:4c:a9:66:ab: 1d:60:fb:61:a9:73:57:84:a3:8b:24:dd:1e:7f:c1:86:2d:f1: 85:3c:02:7a:82:3b:69:e0:26:40:58:c5:80:8f:72:0a:f8:04: 3e:cc:d2:e9:8b:40:63:31:d9:94:25:48:2b:af:05:28:ca:94: 5e:db:38:50 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUBDz6aWlTcs9Glyi3E0BXNBwubpEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjkwMDI1MDFaFw0yNzAxMjgwMDMwMDFaMDMxMTAvBgNV BAMTKDc5MzhCNDk2ODE0RjM5QTBGQzkyREJFNTUzQ0ZCMjdGQUM4MkFCRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuTOCHENaax4eVw4GrAvwYscug KazRLyICwy6RYK7EHxP4YrkRgVbCw5DiZuyymzBqj2HDUB73EZ+chopmHRObfAFS 3N0QHupkKwBcPAkql97PuGWVAUXZ+x5TZ3jggiUtSQWGKm8k5z/RKGZczdrQlQoD 4eDoDSAJSSpCjCVtfnaZxRhUB6hbLUq0vgxefGXKwtyh/gWnIx7R89HhsjOXxZgj SY/QA77aj+OlZdqDiYrQde0+FtNwzBmVBwWDUoWRLlIajzkXrowt82OYdBPvd/Pm lI7nIx8V8v3vNWo+mvjLcs9Vh4JhuR+43L3kaDZ76X9h/mfqCkN0MJKNB+RNAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR5OLSWgU85oPyS 2+VTz7J/rIKr4zAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvOEM4Njk3RUZDMDRCODY2MTQ0RDM3NTQy RDFGNjkyODU2OEZDRTY4MUUzNDQ2QzM5MDhEOUZDRUNCMDM5NURGRi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy84Qzg2OTdFRkMwNEI4NjYxNDREMzc1NDJEMUY2OTI4NTY4RkNFNjgxRTM0 NDZDMzkwOEQ5RkNFQ0IwMzk1REZGLzAvNzkzOEI0OTY4MTRGMzlBMEZDOTJEQkU1 NTNDRkIyN0ZBQzgyQUJFMy5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAM10DAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMELd0wDQYJKoZIhvcNAQELBQADggEBAI07wtvN zOxodGaW+CyYM3vWAUGEvT/Ial4Cr3UiQGVJ6eoLofodPnoPYTfwhkgViMobNEgO OrO8imUplOOB+esj/mkFRC1mniPSa+EvktM0Wl/NonBdbCxUwoGcmZtbQYDpszoV btoF7ZQrs4+e8UrHlw/92T8O1TtKde6GtbBxRbnhYEXs0yniAhACXKtzTeu2egzb PR1tTWknOH2NrOe2yo1IgnDlBZQv2WXEQL6Y05jgxfWB4gHl1fxiXs3678VuTKlm qx1g+2Gpc1eEo4sk3R5/wYYt8YU8AnqCO2ngJkBYxYCPcgr4BD7M0umLQGMx2ZQl SCuvBSjKlF7bOFA= -----END CERTIFICATE-----Generated at Mon Mar 2 13:56:29 2026 by rpki-client