$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8B3641D8012C1A22F326467848DB2095ED4A79F6.cer File: 8B3641D8012C1A22F326467848DB2095ED4A79F6.cer (raw, json) Hash identifier: 9YPUfK+JF5LLx+rXpwDhVLzv1r0J2a6OJylvJefgcmM= Subject key identifier: 8B:36:41:D8:01:2C:1A:22:F3:26:46:78:48:DB:20:95:ED:4A:79:F6 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 03E2AE3FD232BA6103CA2F982976B21A63298B1F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/19C3DD00728809F85D7DF48B1655259D0203299638C9CB0E43875A901ACDC45C/0/8B3641D8012C1A22F326467848DB2095ED4A79F6.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/19C3DD00728809F85D7DF48B1655259D0203299638C9CB0E43875A901ACDC45C/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Thu 29 Jan 2026 04:11:58 +0000 Certificate not after: Thu 28 Jan 2027 04:16:58 +0000 Subordinate resources: AS: 273837 IP: 2803:6950::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:e2:ae:3f:d2:32:ba:61:03:ca:2f:98:29:76:b2:1a:63:29:8b:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 29 04:11:58 2026 GMT Not After : Jan 28 04:16:58 2027 GMT Subject: CN=8B3641D8012C1A22F326467848DB2095ED4A79F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:4b:d9:64:0a:41:07:0f:9a:f4:36:dc:72:27: 78:1b:1f:32:70:5f:c4:67:b8:81:01:7c:c1:45:44: 45:0d:07:07:47:2f:56:3b:97:77:2e:59:8b:e0:f2: 0f:4d:58:04:f0:90:36:22:dd:59:94:0f:44:9a:1c: b8:5b:1f:8f:ca:bf:54:5a:7c:66:f7:a5:fc:29:d0: ff:74:54:53:8a:2c:55:1f:5a:57:f1:90:3a:93:b0: a7:84:0a:f1:f9:1d:86:35:41:b9:ad:9b:b6:a1:d0: af:d0:9b:3e:69:db:66:a8:3b:b6:bc:84:75:25:02: 7c:51:79:ec:ee:e9:aa:ad:70:39:8b:f7:79:88:ac: 0a:3d:e5:41:94:40:f5:c0:ec:b6:6f:f5:81:03:eb: a0:04:f9:88:40:5d:eb:04:16:ed:8d:1f:2a:59:80: c7:54:a3:44:aa:95:43:81:e2:1b:07:41:07:75:bc: e2:f8:99:e6:1b:d2:73:e9:d5:dd:e4:91:10:2b:ab: b8:ee:26:42:69:7f:de:e9:da:7b:ab:76:1b:f6:77: 6a:e3:74:f8:15:9c:ab:94:4b:ff:d8:42:c6:cd:b5: 09:7d:41:5d:14:46:a3:98:7f:c1:e3:31:1f:b5:f3: ae:df:42:0f:52:e3:52:8d:38:18:78:ab:87:64:3c: 1c:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8B:36:41:D8:01:2C:1A:22:F3:26:46:78:48:DB:20:95:ED:4A:79:F6 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/19C3DD00728809F85D7DF48B1655259D0203299638C9CB0E43875A901ACDC45C/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/19C3DD00728809F85D7DF48B1655259D0203299638C9CB0E43875A901ACDC45C/0/8B3641D8012C1A22F326467848DB2095ED4A79F6.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:6950::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273837 Signature Algorithm: sha256WithRSAEncryption 19:9e:74:70:ad:93:e8:42:03:d2:ce:1d:b8:05:0f:f6:b1:e0: 70:1f:4b:f3:ff:b8:30:6c:00:a1:df:dd:71:2f:b1:12:37:f9: 44:be:db:b1:7e:08:1b:60:5a:f1:cb:82:44:0e:8e:75:8d:ba: 43:91:8d:9b:4c:53:02:03:3b:b5:92:97:ab:c0:22:32:cd:9e: ef:fc:ea:8a:29:ee:7e:75:2b:93:47:80:cc:66:18:f7:be:0e: aa:b1:04:55:6d:17:a0:38:64:01:02:83:32:79:1d:8c:8e:a9: 25:29:ee:7f:01:1a:9d:4e:70:e0:9a:9d:ef:b5:26:ed:e8:74: c6:d9:97:8e:bf:09:52:57:47:65:3b:70:7d:8f:21:da:67:2e: 1e:86:32:aa:f8:f5:34:2c:60:cc:59:d7:54:4b:df:c2:5a:c4: e3:8e:53:b5:4c:db:ca:e1:2d:48:16:d2:91:c5:d2:58:c2:ed: 06:d2:e8:42:91:01:e7:fa:e2:76:87:57:bd:5d:76:85:f9:76: 70:cb:2e:ce:01:bd:51:5c:45:29:cf:70:c3:1a:09:98:d3:ad: 79:e4:a2:bb:85:9b:83:4d:e6:03:e4:5d:0c:2f:0e:ca:8e:82: e0:e6:b0:95:69:b3:d0:e3:c5:67:ce:a6:67:db:04:45:1e:34: 43:31:d4:4e -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUA+KuP9IyumEDyi+YKXayGmMpix8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjkwNDExNThaFw0yNzAxMjgwNDE2NThaMDMxMTAvBgNV BAMTKDhCMzY0MUQ4MDEyQzFBMjJGMzI2NDY3ODQ4REIyMDk1RUQ0QTc5RjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4S9lkCkEHD5r0NtxyJ3gbHzJw X8RnuIEBfMFFREUNBwdHL1Y7l3cuWYvg8g9NWATwkDYi3VmUD0SaHLhbH4/Kv1Ra fGb3pfwp0P90VFOKLFUfWlfxkDqTsKeECvH5HYY1Qbmtm7ah0K/Qmz5p22aoO7a8 hHUlAnxReezu6aqtcDmL93mIrAo95UGUQPXA7LZv9YED66AE+YhAXesEFu2NHypZ gMdUo0SqlUOB4hsHQQd1vOL4meYb0nPp1d3kkRArq7juJkJpf97p2nurdhv2d2rj dPgVnKuUS//YQsbNtQl9QV0URqOYf8HjMR+1867fQg9S41KNOBh4q4dkPBxLAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSLNkHYASwaIvMm RnhI2yCV7Up59jAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMTlDM0REMDA3Mjg4MDlGODVEN0RGNDhC MTY1NTI1OUQwMjAzMjk5NjM4QzlDQjBFNDM4NzVBOTAxQUNEQzQ1Qy8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8xOUMzREQwMDcyODgwOUY4NUQ3REY0OEIxNjU1MjU5RDAyMDMyOTk2MzhD OUNCMEU0Mzg3NUE5MDFBQ0RDNDVDLzAvOEIzNjQxRDgwMTJDMUEyMkYzMjY0Njc4 NDhEQjIwOTVFRDRBNzlGNi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKANpUDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMELa0wDQYJKoZIhvcNAQELBQADggEBABmedHCt k+hCA9LOHbgFD/ax4HAfS/P/uDBsAKHf3XEvsRI3+US+27F+CBtgWvHLgkQOjnWN ukORjZtMUwIDO7WSl6vAIjLNnu/86oop7n51K5NHgMxmGPe+DqqxBFVtF6A4ZAEC gzJ5HYyOqSUp7n8BGp1OcOCane+1Ju3odMbZl46/CVJXR2U7cH2PIdpnLh6GMqr4 9TQsYMxZ11RL38JaxOOOU7VM28rhLUgW0pHF0ljC7QbS6EKRAef64naHV71ddoX5 dnDLLs4BvVFcRSnPcMMaCZjTrXnkoruFm4NN5gPkXQwvDsqOguDmsJVps9DjxWfO pmfbBEUeNEMx1E4= -----END CERTIFICATE-----Generated at Mon Mar 2 14:31:45 2026 by rpki-client