$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7CE0B5EEC29BA1C780323983BD400D7B0F3D4448.cer File: 7CE0B5EEC29BA1C780323983BD400D7B0F3D4448.cer (raw, json) Hash identifier: L2cAbi3495f7brPQgnmzlpMm2fbcDpYTvP3LQ0NuE5E= Subject key identifier: 7C:E0:B5:EE:C2:9B:A1:C7:80:32:39:83:BD:40:0D:7B:0F:3D:44:48 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 0F3A94C001AADD351578D5967F034791013F3BF7 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/18D4080CF948EE39B30D7A54C8D6C9E3A382AEB78188C8AD6A679A29C6DE5B84/0/7CE0B5EEC29BA1C780323983BD400D7B0F3D4448.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/18D4080CF948EE39B30D7A54C8D6C9E3A382AEB78188C8AD6A679A29C6DE5B84/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 27 Jan 2026 18:58:35 +0000 Certificate not after: Tue 26 Jan 2027 19:03:35 +0000 Subordinate resources: AS: 273828 IP: 2803:b150::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 05 Mar 2026 11:41:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:3a:94:c0:01:aa:dd:35:15:78:d5:96:7f:03:47:91:01:3f:3b:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 27 18:58:35 2026 GMT Not After : Jan 26 19:03:35 2027 GMT Subject: CN=7CE0B5EEC29BA1C780323983BD400D7B0F3D4448 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b0:fc:2f:b8:9f:2b:0e:25:ca:0b:59:8f:1d: e8:1b:f6:ba:60:d9:83:63:e2:56:6a:b6:7e:df:a1: e1:ea:92:61:d3:bd:39:ca:8b:6d:db:f0:86:99:9b: f0:51:ef:ce:e8:50:50:58:76:16:82:fa:3b:eb:ff: f8:d0:7c:ea:3e:fd:8a:dc:b3:ee:bb:ff:1f:62:61: 09:18:b1:7e:d7:f9:5f:2e:41:7a:bc:ea:9c:c2:70: 70:7b:19:f2:d2:38:22:12:5e:7a:a1:50:f7:08:d9: 34:1d:ec:4d:00:14:3f:35:98:9a:2e:cb:2c:f2:28: 48:fe:f6:a2:86:af:44:e8:c4:22:40:1e:31:9a:b6: 44:c1:4a:1f:33:e1:be:40:b8:64:e7:9d:49:dd:42: d6:07:fa:3c:dc:0a:a6:7c:16:1d:91:bf:16:c0:51: ba:d7:fe:1d:8a:3e:a6:91:fb:aa:56:ff:4d:79:3f: 90:08:31:fb:c7:10:c4:c0:a1:2a:90:2b:57:7a:12: 3f:a0:b9:1b:bc:47:a7:b1:d6:2a:f7:1b:40:14:90: 81:64:8c:65:43:3e:89:d0:7b:68:93:84:29:9a:64: 49:a3:b4:00:95:6e:2b:b4:a8:f4:b3:69:35:09:0c: 09:11:ef:ad:ad:b3:e7:78:7f:93:b6:fb:c2:c9:18: a3:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7C:E0:B5:EE:C2:9B:A1:C7:80:32:39:83:BD:40:0D:7B:0F:3D:44:48 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/18D4080CF948EE39B30D7A54C8D6C9E3A382AEB78188C8AD6A679A29C6DE5B84/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/18D4080CF948EE39B30D7A54C8D6C9E3A382AEB78188C8AD6A679A29C6DE5B84/0/7CE0B5EEC29BA1C780323983BD400D7B0F3D4448.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:b150::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273828 Signature Algorithm: sha256WithRSAEncryption 20:fc:51:c4:fa:82:b2:92:17:e9:c3:13:4b:d5:d1:ee:92:f4: 0c:75:0b:a9:6b:0a:0f:2d:dd:e9:53:89:f1:1d:91:dd:11:a2: 71:44:f1:2c:6a:ba:ea:d6:78:d7:36:cf:ae:43:c1:0b:ab:b6: 77:33:74:65:49:0b:ea:6e:26:17:2c:a3:87:ab:89:5f:4a:77: 55:a3:cd:7f:d3:59:38:58:a6:61:07:7f:d4:f5:1c:27:ee:76: ff:5e:e8:16:96:40:84:fa:33:05:a5:a0:f5:80:f8:44:2a:c9: 45:63:35:02:bf:bf:94:6d:b4:46:5d:09:6e:a3:45:58:b2:3e: 9d:3a:88:e9:3b:a2:d1:42:e0:13:0b:56:22:89:7c:66:24:98: 0e:40:28:f9:ce:8a:7e:5b:66:72:ff:43:38:03:a3:0c:98:e0: b8:16:94:f3:38:95:ed:17:84:2b:fe:d3:8b:82:a1:16:c2:db: e6:48:a0:88:23:b0:0c:65:f6:12:da:cb:b7:18:2d:f0:78:7f: 51:36:a8:04:d2:86:1f:d2:43:35:49:25:2e:aa:a3:44:45:8b: 15:4a:05:8d:d9:23:72:92:ce:da:99:34:17:65:e8:f5:24:b0: 21:df:81:70:aa:4a:07:f1:b4:b9:a8:25:f9:3a:bf:0b:de:28: 50:b1:de:5b -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUDzqUwAGq3TUVeNWWfwNHkQE/O/cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjcxODU4MzVaFw0yNzAxMjYxOTAzMzVaMDMxMTAvBgNV BAMTKDdDRTBCNUVFQzI5QkExQzc4MDMyMzk4M0JENDAwRDdCMEYzRDQ0NDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpsPwvuJ8rDiXKC1mPHegb9rpg 2YNj4lZqtn7foeHqkmHTvTnKi23b8IaZm/BR787oUFBYdhaC+jvr//jQfOo+/Yrc s+67/x9iYQkYsX7X+V8uQXq86pzCcHB7GfLSOCISXnqhUPcI2TQd7E0AFD81mJou yyzyKEj+9qKGr0ToxCJAHjGatkTBSh8z4b5AuGTnnUndQtYH+jzcCqZ8Fh2RvxbA UbrX/h2KPqaR+6pW/015P5AIMfvHEMTAoSqQK1d6Ej+guRu8R6ex1ir3G0AUkIFk jGVDPonQe2iThCmaZEmjtACVbiu0qPSzaTUJDAkR762ts+d4f5O2+8LJGKPLAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR84LXuwpuhx4Ay OYO9QA17Dz1ESDAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMThENDA4MENGOTQ4RUUzOUIzMEQ3QTU0 QzhENkM5RTNBMzgyQUVCNzgxODhDOEFENkE2NzlBMjlDNkRFNUI4NC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8xOEQ0MDgwQ0Y5NDhFRTM5QjMwRDdBNTRDOEQ2QzlFM0EzODJBRUI3ODE4 OEM4QUQ2QTY3OUEyOUM2REU1Qjg0LzAvN0NFMEI1RUVDMjlCQTFDNzgwMzIzOTgz QkQ0MDBEN0IwRjNENDQ0OC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAOxUDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMELaQwDQYJKoZIhvcNAQELBQADggEBACD8UcT6 grKSF+nDE0vV0e6S9Ax1C6lrCg8t3elTifEdkd0RonFE8SxquurWeNc2z65DwQur tnczdGVJC+puJhcso4eriV9Kd1WjzX/TWThYpmEHf9T1HCfudv9e6BaWQIT6MwWl oPWA+EQqyUVjNQK/v5RttEZdCW6jRViyPp06iOk7otFC4BMLViKJfGYkmA5AKPnO in5bZnL/QzgDowyY4LgWlPM4le0XhCv+04uCoRbC2+ZIoIgjsAxl9hLay7cYLfB4 f1E2qATShh/SQzVJJS6qo0RFixVKBY3ZI3KSztqZNBdl6PUksCHfgXCqSgfxtLmo Jfk6vwveKFCx3ls= -----END CERTIFICATE-----Generated at Mon Mar 2 13:35:46 2026 by rpki-client