$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85E8329CBFB72C73936DE19616620415214EDD8A.cer File: 85E8329CBFB72C73936DE19616620415214EDD8A.cer (raw, json) Hash identifier: 3UwSOdf5XabQEeh8fJJ4nwzjcNUHqy/0tQiYCu83smQ= Subject key identifier: 85:E8:32:9C:BF:B7:2C:73:93:6D:E1:96:16:62:04:15:21:4E:DD:8A Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 416795B8982DAE82674C79F9358545C31DFFE592 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/58FFE40F3167FFF6A31CE6E9E4FCDE8F2D51B8BFF895CE2D6215C29B73FC1DC8/0/85E8329CBFB72C73936DE19616620415214EDD8A.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/58FFE40F3167FFF6A31CE6E9E4FCDE8F2D51B8BFF895CE2D6215C29B73FC1DC8/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 07:31:37 +0000 Certificate not after: Wed 27 Jan 2027 07:36:37 +0000 Subordinate resources: AS: 266849 AS: 269971 IP: 2803:2a0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:67:95:b8:98:2d:ae:82:67:4c:79:f9:35:85:45:c3:1d:ff:e5:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 07:31:37 2026 GMT Not After : Jan 27 07:36:37 2027 GMT Subject: CN=85E8329CBFB72C73936DE19616620415214EDD8A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:3a:e7:91:12:c7:79:95:3b:fc:fe:d3:02:0d: 50:9a:ee:7a:8f:a6:af:d7:a2:44:f8:bc:c5:17:14: 4e:b0:05:70:8a:cb:f6:90:a1:82:7d:52:21:21:d9: c9:11:ab:95:9d:95:a8:6a:ae:43:da:9d:d3:54:3a: a7:0f:44:cf:25:d8:24:ff:d4:6b:9b:27:41:e8:b6: 99:cd:6d:69:94:d0:45:75:ce:3d:4c:62:17:72:e2: 50:c5:b9:52:53:02:11:1b:38:b3:7f:88:c3:87:5e: 0b:65:80:fe:78:a2:ba:a6:67:09:66:2a:9d:52:a0: cd:4b:c6:27:f3:bf:fd:87:c5:d0:d4:d6:44:c9:f1: 54:5e:4c:0c:16:0d:25:ce:11:72:e1:54:74:d3:18: a1:bc:8f:b0:02:36:a3:af:b4:7f:5c:c0:0e:1c:e8: 7a:ea:78:c1:89:58:f8:c0:a8:8e:85:74:10:09:5e: 0d:61:1d:46:99:20:1c:a8:52:8a:81:3d:1b:5d:ec: 31:c1:ee:9c:da:48:59:8a:87:ac:6e:72:bd:8c:97: 9b:06:81:cb:e6:a4:70:a1:37:1a:71:d5:aa:4c:02: d9:c3:6b:ba:07:ea:7f:72:50:df:75:37:4e:94:f7: c0:64:1a:3c:a7:d6:b5:ca:7b:27:02:3f:dc:99:60: 77:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 85:E8:32:9C:BF:B7:2C:73:93:6D:E1:96:16:62:04:15:21:4E:DD:8A X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/58FFE40F3167FFF6A31CE6E9E4FCDE8F2D51B8BFF895CE2D6215C29B73FC1DC8/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/58FFE40F3167FFF6A31CE6E9E4FCDE8F2D51B8BFF895CE2D6215C29B73FC1DC8/0/85E8329CBFB72C73936DE19616620415214EDD8A.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:2a0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266849 269971 Signature Algorithm: sha256WithRSAEncryption 35:55:0b:c4:32:7c:76:ac:ac:f2:04:22:d3:90:68:e6:b9:2c: 06:5b:16:31:ff:8c:3b:37:45:e9:49:c6:85:d5:16:14:8d:5c: 39:0d:40:a6:35:6d:fd:17:dd:f3:a2:6a:81:99:bb:4e:ec:b2: 33:a7:a7:a0:77:1f:45:77:b6:d3:99:5b:6d:3f:0a:3b:d9:c5: 54:7c:61:7d:f5:d7:6d:ee:a0:1a:56:07:d0:06:76:eb:50:f9: 12:f4:b4:13:cc:ef:8f:34:43:99:db:aa:94:5c:69:54:49:5b: ca:5b:9d:30:9c:2c:52:d7:bb:c4:63:db:f8:d1:95:cf:44:1c: 15:0f:26:f1:b0:0c:74:83:cb:53:22:39:98:68:28:eb:e2:a9: c0:01:8e:ff:c3:8d:c0:b3:eb:f3:65:d1:3e:26:49:18:cd:28: 48:b4:55:bf:2b:9f:8c:3d:66:40:97:de:c1:a4:d6:c9:6b:bd: e4:5f:c2:77:d0:f3:a9:fe:dd:4c:5f:f7:02:ee:62:29:1c:2d: 8a:2e:20:36:50:c2:39:13:28:af:b4:e0:ca:29:20:bd:64:6d: 5a:72:2e:e6:c6:23:c5:fc:95:f9:cc:63:b6:d3:13:fa:a4:61: be:61:0a:8f:19:78:c9:1e:c9:ad:09:62:ad:61:18:a7:f9:ef: 5d:13:52:5f -----BEGIN CERTIFICATE----- MIIGnDCCBYSgAwIBAgIUQWeVuJgtroJnTHn5NYVFwx3/5ZIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgwNzMxMzdaFw0yNzAxMjcwNzM2MzdaMDMxMTAvBgNV BAMTKDg1RTgzMjlDQkZCNzJDNzM5MzZERTE5NjE2NjIwNDE1MjE0RUREOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgOueREsd5lTv8/tMCDVCa7nqP pq/XokT4vMUXFE6wBXCKy/aQoYJ9UiEh2ckRq5WdlahqrkPandNUOqcPRM8l2CT/ 1GubJ0HotpnNbWmU0EV1zj1MYhdy4lDFuVJTAhEbOLN/iMOHXgtlgP54orqmZwlm Kp1SoM1Lxifzv/2HxdDU1kTJ8VReTAwWDSXOEXLhVHTTGKG8j7ACNqOvtH9cwA4c 6HrqeMGJWPjAqI6FdBAJXg1hHUaZIByoUoqBPRtd7DHB7pzaSFmKh6xucr2Ml5sG gcvmpHChNxpx1apMAtnDa7oH6n9yUN91N06U98BkGjyn1rXKeycCP9yZYHfDAgMB AAGjggOmMIIDojAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSF6DKcv7csc5Nt 4ZYWYgQVIU7dijAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNThGRkU0MEYzMTY3RkZGNkEzMUNFNkU5 RTRGQ0RFOEYyRDUxQjhCRkY4OTVDRTJENjIxNUMyOUI3M0ZDMURDOC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy81OEZGRTQwRjMxNjdGRkY2QTMxQ0U2RTlFNEZDREU4RjJENTFCOEJGRjg5 NUNFMkQ2MjE1QzI5QjczRkMxREM4LzAvODVFODMyOUNCRkI3MkM3MzkzNkRFMTk2 MTY2MjA0MTUyMTRFREQ4QS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAMCoDAfBggr BgEFBQcBCAEB/wQQMA6gDDAKAgMEEmECAwQekzANBgkqhkiG9w0BAQsFAAOCAQEA NVULxDJ8dqys8gQi05Bo5rksBlsWMf+MOzdF6UnGhdUWFI1cOQ1ApjVt/Rfd86Jq gZm7TuyyM6enoHcfRXe205lbbT8KO9nFVHxhffXXbe6gGlYH0AZ261D5EvS0E8zv jzRDmduqlFxpVElbyludMJwsUte7xGPb+NGVz0QcFQ8m8bAMdIPLUyI5mGgo6+Kp wAGO/8ONwLPr82XRPiZJGM0oSLRVvyufjD1mQJfewaTWyWu95F/Cd9Dzqf7dTF/3 Au5iKRwtii4gNlDCORMor7TgyikgvWRtWnIu5sYjxfyV+cxjttMT+qRhvmEKjxl4 yR7JrQlirWEYp/nvXRNSXw== -----END CERTIFICATE-----Generated at Mon Mar 2 18:09:59 2026 by rpki-client