$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D552FCE04D6E937F1295CCB5A621E7D738CE400.cer File: 8D552FCE04D6E937F1295CCB5A621E7D738CE400.cer (raw, json) Hash identifier: lro5LMjv5zaJbrdGTK4gqqQ8ns4TTpVtOJQnoX546OU= Subject key identifier: 8D:55:2F:CE:04:D6:E9:37:F1:29:5C:CB:5A:62:1E:7D:73:8C:E4:00 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 65B4334B6B150927FAE52C749E2ACC03621C61C5 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/A5076369485562F0193C2A7FA0C7D23C1D1FE0EA03BD28A554A8F24A1BB9DE36/0/8D552FCE04D6E937F1295CCB5A621E7D738CE400.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/A5076369485562F0193C2A7FA0C7D23C1D1FE0EA03BD28A554A8F24A1BB9DE36/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Fri 30 Jan 2026 18:10:01 +0000 Certificate not after: Fri 29 Jan 2027 18:15:01 +0000 Subordinate resources: AS: 274307 IP: 2803:6430::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:b4:33:4b:6b:15:09:27:fa:e5:2c:74:9e:2a:cc:03:62:1c:61:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 30 18:10:01 2026 GMT Not After : Jan 29 18:15:01 2027 GMT Subject: CN=8D552FCE04D6E937F1295CCB5A621E7D738CE400 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e7:25:2c:ee:f3:4b:bd:5a:73:be:e0:3c:22: 85:5a:74:84:ea:58:f1:65:38:2c:b8:6b:34:e1:85: 9f:5c:d3:29:95:a5:5d:c1:94:af:29:15:ea:7a:57: ed:b0:64:19:f1:2d:d3:9c:cf:23:6f:94:94:0f:65: 2d:ba:fd:1c:c6:7c:4f:09:9e:d5:38:64:3d:00:6a: 84:25:57:db:34:c8:42:12:af:a2:ef:1f:f0:ce:ed: 87:66:7e:92:eb:c2:1b:5f:fa:37:e4:5e:07:e8:4b: f6:ff:49:77:b3:60:75:a4:aa:c8:04:c1:87:28:21: c9:a1:1f:f5:e2:19:40:e9:b9:e0:61:e1:6e:61:23: 18:d7:4d:bf:2d:86:2e:cc:08:34:96:04:57:ca:0d: 4b:e3:d9:41:eb:47:fb:85:87:9b:0e:6e:c7:1c:29: 1c:78:6b:02:cf:1a:25:2e:0f:cd:be:64:49:4d:17: fb:79:d1:51:1f:2e:3d:42:61:68:72:eb:c9:9f:e2: 26:f9:a7:58:a1:51:d0:2d:dc:81:89:be:7c:e0:5a: 5e:ba:fe:f1:79:f0:da:50:ae:2a:63:43:2e:eb:cd: 63:5d:02:1e:a1:43:c1:70:8c:0c:e1:1b:4f:ed:2e: c8:0b:a9:3e:db:96:28:93:aa:68:c8:c9:d6:ae:ee: d3:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8D:55:2F:CE:04:D6:E9:37:F1:29:5C:CB:5A:62:1E:7D:73:8C:E4:00 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/A5076369485562F0193C2A7FA0C7D23C1D1FE0EA03BD28A554A8F24A1BB9DE36/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/A5076369485562F0193C2A7FA0C7D23C1D1FE0EA03BD28A554A8F24A1BB9DE36/0/8D552FCE04D6E937F1295CCB5A621E7D738CE400.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:6430::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 274307 Signature Algorithm: sha256WithRSAEncryption 0d:73:3c:ca:ee:b7:fc:bf:0d:53:89:d6:b7:c0:81:2c:30:ed: 74:56:8c:aa:65:1a:70:a4:97:b7:27:de:74:7a:d4:66:f3:30: 81:8f:56:91:3a:b0:59:7a:57:9c:09:07:07:09:2c:87:0f:2d: 5f:55:4e:30:74:a0:26:e8:b2:31:9e:dd:13:22:72:9e:ca:11: 89:d5:fa:da:12:d2:b0:39:94:0f:fd:fd:29:0b:80:86:ea:0a: d7:38:03:f5:c6:d2:6b:6f:85:79:77:fa:5b:59:21:51:97:7c: 01:ab:fe:52:11:a3:75:10:50:5f:38:43:f2:77:b0:3e:f5:e9: ee:bf:af:91:1d:e9:6d:e4:dc:50:69:58:2d:d4:d1:92:70:46: 8a:6b:41:94:d7:15:b8:96:c1:cb:2e:73:81:c7:12:db:ce:2a: 20:af:0a:54:73:36:e1:e0:d0:67:73:34:a5:3b:ee:a5:94:07: 80:46:a1:12:6c:42:5e:c0:40:70:d8:c7:3f:f6:47:d6:09:5c: 43:51:7d:7b:5c:e8:64:42:27:0f:6d:63:70:d7:13:8a:0e:da: d8:84:f5:d2:5d:9d:e0:fe:fe:c2:85:ce:0a:02:04:31:a6:a7: 3e:a6:38:12:b4:ea:0b:36:ce:94:e5:2c:bf:9e:7e:65:f3:91: c3:e4:45:d6 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUZbQzS2sVCSf65Sx0nirMA2IcYcUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMzAxODEwMDFaFw0yNzAxMjkxODE1MDFaMDMxMTAvBgNV BAMTKDhENTUyRkNFMDRENkU5MzdGMTI5NUNDQjVBNjIxRTdENzM4Q0U0MDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk5yUs7vNLvVpzvuA8IoVadITq WPFlOCy4azThhZ9c0ymVpV3BlK8pFep6V+2wZBnxLdOczyNvlJQPZS26/RzGfE8J ntU4ZD0AaoQlV9s0yEISr6LvH/DO7YdmfpLrwhtf+jfkXgfoS/b/SXezYHWkqsgE wYcoIcmhH/XiGUDpueBh4W5hIxjXTb8thi7MCDSWBFfKDUvj2UHrR/uFh5sObscc KRx4awLPGiUuD82+ZElNF/t50VEfLj1CYWhy68mf4ib5p1ihUdAt3IGJvnzgWl66 /vF58NpQripjQy7rzWNdAh6hQ8FwjAzhG0/tLsgLqT7bliiTqmjIydau7tONAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSNVS/OBNbpN/Ep XMtaYh59c4zkADAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQTUwNzYzNjk0ODU1NjJGMDE5M0MyQTdG QTBDN0QyM0MxRDFGRTBFQTAzQkQyOEE1NTRBOEYyNEExQkI5REUzNi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9BNTA3NjM2OTQ4NTU2MkYwMTkzQzJBN0ZBMEM3RDIzQzFEMUZFMEVBMDNC RDI4QTU1NEE4RjI0QTFCQjlERTM2LzAvOEQ1NTJGQ0UwNEQ2RTkzN0YxMjk1Q0NC NUE2MjFFN0Q3MzhDRTQwMC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKANkMDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEL4MwDQYJKoZIhvcNAQELBQADggEBAA1zPMru t/y/DVOJ1rfAgSww7XRWjKplGnCkl7cn3nR61GbzMIGPVpE6sFl6V5wJBwcJLIcP LV9VTjB0oCbosjGe3RMicp7KEYnV+toS0rA5lA/9/SkLgIbqCtc4A/XG0mtvhXl3 +ltZIVGXfAGr/lIRo3UQUF84Q/J3sD716e6/r5Ed6W3k3FBpWC3U0ZJwRoprQZTX FbiWwcsuc4HHEtvOKiCvClRzNuHg0GdzNKU77qWUB4BGoRJsQl7AQHDYxz/2R9YJ XENRfXtc6GRCJw9tY3DXE4oO2tiE9dJdneD+/sKFzgoCBDGmpz6mOBK06gs2zpTl LL+efmXzkcPkRdY= -----END CERTIFICATE-----Generated at Mon Mar 2 21:21:25 2026 by rpki-client