$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/86C24568CB44048FC6A26BDF0F8E2B9E90B59F87.cer File: 86C24568CB44048FC6A26BDF0F8E2B9E90B59F87.cer (raw, json) Hash identifier: Ruta4pY/snz4RUGiWrJlLPTEGxnwXNCfAUVwTO8WO+o= Subject key identifier: 86:C2:45:68:CB:44:04:8F:C6:A2:6B:DF:0F:8E:2B:9E:90:B5:9F:87 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 2EC3F0FB765A9218B92A8EEDAAC8D1A27194A3D2 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/51705880D19D025583FA5ED2125794B769CF55B817CA21DC79D1B2F3CE48CA50/0/86C24568CB44048FC6A26BDF0F8E2B9E90B59F87.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/51705880D19D025583FA5ED2125794B769CF55B817CA21DC79D1B2F3CE48CA50/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 27 Jan 2026 20:10:48 +0000 Certificate not after: Tue 26 Jan 2027 20:15:48 +0000 Subordinate resources: AS: 272813 IP: 2803:8490::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 05 Mar 2026 11:41:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:c3:f0:fb:76:5a:92:18:b9:2a:8e:ed:aa:c8:d1:a2:71:94:a3:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 27 20:10:48 2026 GMT Not After : Jan 26 20:15:48 2027 GMT Subject: CN=86C24568CB44048FC6A26BDF0F8E2B9E90B59F87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:0e:8e:a9:0c:29:bd:55:d1:01:c8:be:46:92: da:b9:fe:d4:03:dc:3f:7b:c8:f6:28:cb:a9:0f:af: a4:60:66:5f:e7:58:d5:c7:33:45:af:f1:83:f1:e5: 15:43:69:39:40:3e:3f:83:c9:49:cf:e1:d0:30:09: 41:b2:dd:b3:76:08:eb:d0:9a:c5:af:3f:b2:40:a7: 9d:98:fa:29:8c:b0:aa:d5:df:e0:23:e9:e7:bf:59: 06:19:2b:d7:e2:16:be:9f:6b:e3:d6:bf:e8:64:7a: f7:6c:eb:1e:7c:55:7f:47:fa:5a:64:17:dd:95:f8: 34:c2:02:d4:95:78:94:70:d7:8b:bb:b0:8a:f8:f7: 36:5e:ff:4d:05:79:bf:8f:46:e4:d7:be:31:2d:7d: 8a:29:13:21:7b:21:ef:d7:28:39:8e:91:39:13:cc: 49:ac:c0:d1:0f:92:9a:c1:6f:7c:7c:4c:39:d5:f9: 41:0a:a6:a8:75:4c:f1:b4:42:18:75:74:45:a1:12: a5:14:a2:91:46:cd:20:37:1b:8d:75:62:5b:0d:aa: eb:20:19:16:f7:4e:e3:97:1e:ce:85:69:eb:c7:21: 07:4d:3c:f7:69:30:2a:3a:91:1b:e0:04:93:43:1c: b6:85:ad:b8:8c:c9:ce:99:89:2b:4a:0a:47:27:2e: 70:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 86:C2:45:68:CB:44:04:8F:C6:A2:6B:DF:0F:8E:2B:9E:90:B5:9F:87 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/51705880D19D025583FA5ED2125794B769CF55B817CA21DC79D1B2F3CE48CA50/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/51705880D19D025583FA5ED2125794B769CF55B817CA21DC79D1B2F3CE48CA50/0/86C24568CB44048FC6A26BDF0F8E2B9E90B59F87.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:8490::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 272813 Signature Algorithm: sha256WithRSAEncryption 1a:da:e9:4f:d3:eb:93:f1:db:9c:a8:ef:bb:a3:30:43:c0:e1: 0c:31:f3:88:68:98:d2:bf:e1:6f:25:65:bc:f1:25:d4:78:10: 1c:1a:4c:37:be:bb:d0:f6:cb:b0:3c:16:28:43:cf:1b:9f:23: 66:ee:a2:86:bf:37:cd:76:e5:7f:7d:ac:fd:c9:72:92:9a:59: 29:a1:a4:ab:b0:73:2b:3e:ac:6e:7d:da:ed:76:4f:a0:a6:fd: 6b:8d:95:bf:10:d8:7f:ec:e1:ca:31:75:d3:de:5d:0d:ef:19: cf:59:b5:6d:67:89:dd:e2:c8:2f:ca:cb:f6:92:b1:5b:a3:9d: 21:e7:79:25:a8:5e:89:ca:62:ec:3e:fd:7b:23:a9:67:bc:2d: 84:8e:96:96:21:25:b6:3a:c3:4f:aa:5e:d6:33:b2:df:51:ce: 3e:e1:7a:68:5a:36:e5:e5:03:de:26:d0:31:a6:c6:f6:e6:c1: 30:01:ec:2a:81:53:c1:1a:3d:41:5a:c7:55:8f:29:de:84:94: 8f:a3:a0:bd:1a:2d:58:5c:d5:28:f8:95:37:0c:52:7c:d1:f2: e3:31:25:55:e8:07:d2:ad:d4:6a:4f:b2:b8:fd:73:e5:ef:59: 58:2f:c0:ed:24:16:79:31:e2:71:ec:c2:85:b6:9a:10:06:9a: 05:f3:4f:1b -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIULsPw+3Zakhi5Ko7tqsjRonGUo9IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjcyMDEwNDhaFw0yNzAxMjYyMDE1NDhaMDMxMTAvBgNV BAMTKDg2QzI0NTY4Q0I0NDA0OEZDNkEyNkJERjBGOEUyQjlFOTBCNTlGODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6Do6pDCm9VdEByL5Gktq5/tQD 3D97yPYoy6kPr6RgZl/nWNXHM0Wv8YPx5RVDaTlAPj+DyUnP4dAwCUGy3bN2COvQ msWvP7JAp52Y+imMsKrV3+Aj6ee/WQYZK9fiFr6fa+PWv+hkevds6x58VX9H+lpk F92V+DTCAtSVeJRw14u7sIr49zZe/00Feb+PRuTXvjEtfYopEyF7Ie/XKDmOkTkT zEmswNEPkprBb3x8TDnV+UEKpqh1TPG0Qhh1dEWhEqUUopFGzSA3G411YlsNqusg GRb3TuOXHs6FaevHIQdNPPdpMCo6kRvgBJNDHLaFrbiMyc6ZiStKCkcnLnA1AgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSGwkVoy0QEj8ai a98PjiuekLWfhzAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNTE3MDU4ODBEMTlEMDI1NTgzRkE1RUQy MTI1Nzk0Qjc2OUNGNTVCODE3Q0EyMURDNzlEMUIyRjNDRTQ4Q0E1MC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy81MTcwNTg4MEQxOUQwMjU1ODNGQTVFRDIxMjU3OTRCNzY5Q0Y1NUI4MTdD QTIxREM3OUQxQjJGM0NFNDhDQTUwLzAvODZDMjQ1NjhDQjQ0MDQ4RkM2QTI2QkRG MEY4RTJCOUU5MEI1OUY4Ny5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAOEkDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEKa0wDQYJKoZIhvcNAQELBQADggEBABra6U/T 65Px25yo77ujMEPA4Qwx84homNK/4W8lZbzxJdR4EBwaTDe+u9D2y7A8FihDzxuf I2buooa/N8125X99rP3JcpKaWSmhpKuwcys+rG592u12T6Cm/WuNlb8Q2H/s4cox ddPeXQ3vGc9ZtW1nid3iyC/Ky/aSsVujnSHneSWoXonKYuw+/XsjqWe8LYSOlpYh JbY6w0+qXtYzst9Rzj7hemhaNuXlA94m0DGmxvbmwTAB7CqBU8EaPUFax1WPKd6E lI+joL0aLVhc1Sj4lTcMUnzR8uMxJVXoB9Kt1GpPsrj9c+XvWVgvwO0kFnkx4nHs woW2mhAGmgXzTxs= -----END CERTIFICATE-----Generated at Mon Mar 2 13:38:52 2026 by rpki-client