$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/856E3A36CF2E7B4FC53C8A40A608EC358539F14D.cer File: 856E3A36CF2E7B4FC53C8A40A608EC358539F14D.cer (raw, json) Hash identifier: LMSvjMtRmYpzamLBS4t/IxNd6P7aMC1mN6XmMaTFyLQ= Subject key identifier: 85:6E:3A:36:CF:2E:7B:4F:C5:3C:8A:40:A6:08:EC:35:85:39:F1:4D Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 5371BCB3F61DF5D1ACEA4661BD9C48428F417E6B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/D7371F3C45EBE09A1E5E4A07CC27B4A09D1437C331687FCA660D4A7BDF34D096/0/856E3A36CF2E7B4FC53C8A40A608EC358539F14D.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/D7371F3C45EBE09A1E5E4A07CC27B4A09D1437C331687FCA660D4A7BDF34D096/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 27 Jan 2026 23:08:56 +0000 Certificate not after: Tue 26 Jan 2027 23:13:56 +0000 Subordinate resources: AS: 274200 IP: 2803:3d0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 05 Mar 2026 11:41:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:71:bc:b3:f6:1d:f5:d1:ac:ea:46:61:bd:9c:48:42:8f:41:7e:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 27 23:08:56 2026 GMT Not After : Jan 26 23:13:56 2027 GMT Subject: CN=856E3A36CF2E7B4FC53C8A40A608EC358539F14D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:84:23:7e:54:c2:7a:f3:36:7e:dd:35:f6:69: e8:a9:d6:7e:f1:32:76:b7:72:be:65:fe:3e:d0:73: f0:dc:9d:8d:bd:af:30:c8:d8:6b:37:65:3b:e7:ac: a1:58:b7:35:93:15:a4:bb:6c:6f:99:fb:25:38:b5: eb:cf:d7:fc:2b:6e:8a:85:12:de:6f:49:7f:ec:3f: e8:b7:61:82:5b:bc:3f:37:a1:ea:58:f9:b4:be:0e: b5:65:07:da:67:6f:3b:5c:58:a1:ae:5a:8b:7b:de: db:b4:d8:89:26:fa:b4:74:59:e2:de:d0:c2:e6:ce: 80:32:0e:54:5f:cf:b2:0b:53:b3:8f:7b:2e:f8:04: 80:3f:6d:83:2a:77:bf:c6:94:0e:ac:8e:43:9b:20: 5f:08:9b:f3:65:9d:26:df:85:53:5e:f2:87:1b:85: f2:d0:ea:51:88:e9:22:5d:0f:77:1b:22:00:f3:ad: 24:91:bc:24:4b:af:4c:8d:4f:bf:2f:98:95:2f:1c: 83:b0:b6:a4:19:f3:1a:f0:93:26:30:fb:55:85:53: 77:67:ee:76:ae:2f:ae:dc:c5:9e:ab:bb:52:b4:ab: 88:83:0d:2e:97:f2:72:96:1c:3e:ad:88:93:f9:94: 8d:96:d0:b2:b6:e7:f5:78:d0:cd:29:ea:dc:dd:c8: 7a:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 85:6E:3A:36:CF:2E:7B:4F:C5:3C:8A:40:A6:08:EC:35:85:39:F1:4D X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/D7371F3C45EBE09A1E5E4A07CC27B4A09D1437C331687FCA660D4A7BDF34D096/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/D7371F3C45EBE09A1E5E4A07CC27B4A09D1437C331687FCA660D4A7BDF34D096/0/856E3A36CF2E7B4FC53C8A40A608EC358539F14D.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:3d0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 274200 Signature Algorithm: sha256WithRSAEncryption 39:8b:b7:2e:56:53:af:d5:a2:54:ed:d5:97:90:73:a7:77:ba: ff:b9:00:bd:19:d3:7a:98:42:d9:9c:5c:c6:62:31:f7:77:b1: 81:55:9b:c2:89:52:cb:b6:43:06:2e:30:92:9b:e5:57:5e:64: b8:14:74:2f:3d:c2:01:3e:f6:52:4f:d1:96:a3:66:a1:3d:fb: 09:27:c8:9c:25:6b:24:e8:16:49:99:ba:40:10:ae:97:f2:39: bd:47:95:cb:e3:e3:ed:92:c4:3f:d4:b4:09:37:92:14:b1:d6: a9:a2:23:a9:30:3a:9e:65:62:c6:29:61:1a:80:20:5a:76:cb: ed:20:e9:7e:09:45:46:c1:f2:78:13:13:5f:2b:bd:47:d0:44: 88:51:31:8a:55:a2:90:da:68:6b:ec:fe:5a:e7:eb:d8:14:ca: 00:e6:fa:29:1b:fd:e3:1c:87:18:36:84:84:6e:62:b3:c1:68: fc:9d:b7:ee:12:90:26:fc:0a:79:c3:89:05:9b:c2:9f:db:23: 8b:ed:64:ea:a4:13:6b:ad:5e:57:25:52:4e:fb:02:d6:cb:6d: b0:05:53:09:be:31:a6:c7:b6:5d:a9:90:5c:7c:0d:94:10:e6: 61:bb:c4:87:5a:15:98:4d:97:40:86:e0:f6:64:65:d6:0b:55: ca:fd:6a:a5 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUU3G8s/Yd9dGs6kZhvZxIQo9BfmswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjcyMzA4NTZaFw0yNzAxMjYyMzEzNTZaMDMxMTAvBgNV BAMTKDg1NkUzQTM2Q0YyRTdCNEZDNTNDOEE0MEE2MDhFQzM1ODUzOUYxNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJhCN+VMJ68zZ+3TX2aeip1n7x Mna3cr5l/j7Qc/DcnY29rzDI2Gs3ZTvnrKFYtzWTFaS7bG+Z+yU4tevP1/wrboqF Et5vSX/sP+i3YYJbvD83oepY+bS+DrVlB9pnbztcWKGuWot73tu02Ikm+rR0WeLe 0MLmzoAyDlRfz7ILU7OPey74BIA/bYMqd7/GlA6sjkObIF8Im/NlnSbfhVNe8ocb hfLQ6lGI6SJdD3cbIgDzrSSRvCRLr0yNT78vmJUvHIOwtqQZ8xrwkyYw+1WFU3dn 7nauL67cxZ6ru1K0q4iDDS6X8nKWHD6tiJP5lI2W0LK25/V40M0p6tzdyHoBAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSFbjo2zy57T8U8 ikCmCOw1hTnxTTAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRDczNzFGM0M0NUVCRTA5QTFFNUU0QTA3 Q0MyN0I0QTA5RDE0MzdDMzMxNjg3RkNBNjYwRDRBN0JERjM0RDA5Ni8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9ENzM3MUYzQzQ1RUJFMDlBMUU1RTRBMDdDQzI3QjRBMDlEMTQzN0MzMzE2 ODdGQ0E2NjBENEE3QkRGMzREMDk2LzAvODU2RTNBMzZDRjJFN0I0RkM1M0M4QTQw QTYwOEVDMzU4NTM5RjE0RC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAMD0DAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMELxgwDQYJKoZIhvcNAQELBQADggEBADmLty5W U6/VolTt1ZeQc6d3uv+5AL0Z03qYQtmcXMZiMfd3sYFVm8KJUsu2QwYuMJKb5Vde ZLgUdC89wgE+9lJP0ZajZqE9+wknyJwlayToFkmZukAQrpfyOb1Hlcvj4+2SxD/U tAk3khSx1qmiI6kwOp5lYsYpYRqAIFp2y+0g6X4JRUbB8ngTE18rvUfQRIhRMYpV opDaaGvs/lrn69gUygDm+ikb/eMchxg2hIRuYrPBaPydt+4SkCb8CnnDiQWbwp/b I4vtZOqkE2utXlclUk77AtbLbbAFUwm+MabHtl2pkFx8DZQQ5mG7xIdaFZhNl0CG 4PZkZdYLVcr9aqU= -----END CERTIFICATE-----Generated at Mon Mar 2 10:23:59 2026 by rpki-client