$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B1D38A21A37D42822334BA9B9056AB322DA797A.cer File: 7B1D38A21A37D42822334BA9B9056AB322DA797A.cer (raw, json) Hash identifier: rkCnYjMY1P4dYqI8iP4YXmUVPnuP9CJa+J4f/9QoTgQ= Subject key identifier: 7B:1D:38:A2:1A:37:D4:28:22:33:4B:A9:B9:05:6A:B3:22:DA:79:7A Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 037DF6C5E43626499B698DFD768D8601B2864B67 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/523983565EED654095D90FDE6A87C0EBDCD45783151F0E77059B1DB5F83E53E1/0/7B1D38A21A37D42822334BA9B9056AB322DA797A.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/523983565EED654095D90FDE6A87C0EBDCD45783151F0E77059B1DB5F83E53E1/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 24 Feb 2026 14:45:01 +0000 Certificate not after: Tue 23 Feb 2027 14:50:01 +0000 Subordinate resources: AS: 274326 IP: 2803:ec30::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:7d:f6:c5:e4:36:26:49:9b:69:8d:fd:76:8d:86:01:b2:86:4b:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Feb 24 14:45:01 2026 GMT Not After : Feb 23 14:50:01 2027 GMT Subject: CN=7B1D38A21A37D42822334BA9B9056AB322DA797A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:5b:05:e8:b5:a5:f3:2a:17:26:fd:4d:2a:16: 72:6e:ef:ed:00:87:d2:5b:15:b0:33:b7:a1:88:2d: 8d:a5:d9:b7:9f:3d:c9:f6:3d:87:2c:bf:fc:9a:07: 03:49:5c:47:ee:99:9d:fc:33:70:8a:0b:37:cb:bd: c0:ce:ba:e6:bd:19:9a:28:cf:34:75:53:10:e9:15: 48:f5:a6:42:d4:56:4c:3d:d1:2f:0b:a7:b6:72:fa: db:a1:7e:4e:c8:cc:ca:03:fc:aa:40:49:0a:c7:69: 64:72:13:d6:e4:6b:e1:dc:99:35:52:c3:ed:00:2c: d9:57:6f:04:ae:ae:fd:aa:82:70:5d:fa:4a:c5:e9: 1f:f2:5e:d8:bf:3a:ed:2c:aa:3c:ae:9e:92:cc:03: a9:46:1c:5f:9c:cc:8f:d9:bf:1c:ad:d0:23:b4:7e: 4d:92:e7:bf:1f:a4:2e:a6:91:a3:63:f7:61:da:40: d3:de:47:a7:b5:cc:b1:9d:22:b4:9e:c2:19:8a:a2: ed:26:8d:1f:14:68:d3:75:a9:bc:ac:30:4a:da:a0: 7f:82:a1:2b:fb:c4:c9:a3:7b:e7:a0:a4:79:54:d0: af:39:9b:b3:1c:71:62:09:43:d1:72:39:3a:a1:f9: 87:63:1d:6b:51:15:30:46:ad:41:1b:b6:bd:3e:a1: 99:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7B:1D:38:A2:1A:37:D4:28:22:33:4B:A9:B9:05:6A:B3:22:DA:79:7A X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/523983565EED654095D90FDE6A87C0EBDCD45783151F0E77059B1DB5F83E53E1/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/523983565EED654095D90FDE6A87C0EBDCD45783151F0E77059B1DB5F83E53E1/0/7B1D38A21A37D42822334BA9B9056AB322DA797A.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:ec30::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 274326 Signature Algorithm: sha256WithRSAEncryption 2b:20:c7:fc:ec:b9:eb:eb:ec:10:7b:ec:ee:11:7b:06:02:73: 10:18:e2:2f:9b:01:71:d5:b1:41:bd:38:1b:b1:31:f2:53:77: 57:7e:d2:3e:c0:bf:82:56:62:0c:0b:03:e2:22:75:43:0d:63: db:5e:ef:fd:32:06:ca:b3:5c:e6:9a:a9:d1:9b:10:bd:3f:5a: 16:71:f6:8a:35:1f:88:e5:28:eb:fe:f1:98:13:44:35:ad:87: 00:27:79:df:ce:9e:99:30:d2:93:97:67:d3:d7:e9:0e:51:e6: 9a:0b:78:bc:43:ff:c0:85:e7:84:ae:54:89:1f:85:2d:82:25: 37:18:ad:e7:55:9e:39:7a:d7:a3:f2:5b:c0:8d:4b:18:9f:73: d7:d6:d2:eb:c9:3a:76:ac:a2:ed:d2:b7:e9:e5:8e:d4:2d:28: 7f:9c:96:32:27:df:40:87:4f:00:b6:f4:be:7b:2c:29:81:e6: 63:91:90:1f:ea:a8:70:f2:cf:2e:8c:40:4e:43:9e:09:bb:7c: 2d:d6:e6:a9:a1:15:6d:f4:dd:93:1f:eb:6d:7c:ce:fe:db:8a: 05:d6:91:c5:74:ec:b7:06:f6:85:23:90:10:94:82:24:4a:f5: a7:a8:fa:34:66:12:f8:78:19:a8:07:ea:20:49:1a:e7:63:ea: 4e:9e:8b:0d -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUA332xeQ2JkmbaY39do2GAbKGS2cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAyMjQxNDQ1MDFaFw0yNzAyMjMxNDUwMDFaMDMxMTAvBgNV BAMTKDdCMUQzOEEyMUEzN0Q0MjgyMjMzNEJBOUI5MDU2QUIzMjJEQTc5N0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9WwXotaXzKhcm/U0qFnJu7+0A h9JbFbAzt6GILY2l2befPcn2PYcsv/yaBwNJXEfumZ38M3CKCzfLvcDOuua9GZoo zzR1UxDpFUj1pkLUVkw90S8Lp7Zy+tuhfk7IzMoD/KpASQrHaWRyE9bka+HcmTVS w+0ALNlXbwSurv2qgnBd+krF6R/yXti/Ou0sqjyunpLMA6lGHF+czI/Zvxyt0CO0 fk2S578fpC6mkaNj92HaQNPeR6e1zLGdIrSewhmKou0mjR8UaNN1qbysMEraoH+C oSv7xMmje+egpHlU0K85m7MccWIJQ9FyOTqh+YdjHWtRFTBGrUEbtr0+oZkBAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR7HTiiGjfUKCIz S6m5BWqzItp5ejAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNTIzOTgzNTY1RUVENjU0MDk1RDkwRkRF NkE4N0MwRUJEQ0Q0NTc4MzE1MUYwRTc3MDU5QjFEQjVGODNFNTNFMS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy81MjM5ODM1NjVFRUQ2NTQwOTVEOTBGREU2QTg3QzBFQkRDRDQ1NzgzMTUx RjBFNzcwNTlCMURCNUY4M0U1M0UxLzAvN0IxRDM4QTIxQTM3RDQyODIyMzM0QkE5 QjkwNTZBQjMyMkRBNzk3QS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAPsMDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEL5YwDQYJKoZIhvcNAQELBQADggEBACsgx/zs uevr7BB77O4RewYCcxAY4i+bAXHVsUG9OBuxMfJTd1d+0j7Av4JWYgwLA+IidUMN Y9te7/0yBsqzXOaaqdGbEL0/WhZx9oo1H4jlKOv+8ZgTRDWthwAned/Onpkw0pOX Z9PX6Q5R5poLeLxD/8CF54SuVIkfhS2CJTcYredVnjl616PyW8CNSxifc9fW0uvJ Onasou3St+nljtQtKH+cljIn30CHTwC29L57LCmB5mORkB/qqHDyzy6MQE5Dngm7 fC3W5qmhFW303ZMf6218zv7bigXWkcV07LcG9oUjkBCUgiRK9aeo+jRmEvh4GagH 6iBJGudj6k6eiw0= -----END CERTIFICATE-----Generated at Mon Mar 2 14:25:32 2026 by rpki-client