$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F14B752BDD95C05C00A4F586E5817068B49A668.cer File: 8F14B752BDD95C05C00A4F586E5817068B49A668.cer (raw, json) Hash identifier: QqRYg86hXAMoP6iOvpuLMRj1PSiiGp3ADc+se+AXFAE= Subject key identifier: 8F:14:B7:52:BD:D9:5C:05:C0:0A:4F:58:6E:58:17:06:8B:49:A6:68 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 23B6336ABFB77781FC8C20F8899CE6DEC94919B7 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/ADC4AFE1B2E1CC8833F65DC08EC241EBFC13056B2E0966E3D3EC485E27DF9898/0/8F14B752BDD95C05C00A4F586E5817068B49A668.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/ADC4AFE1B2E1CC8833F65DC08EC241EBFC13056B2E0966E3D3EC485E27DF9898/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 12:45:54 +0000 Certificate not after: Wed 27 Jan 2027 12:50:54 +0000 Subordinate resources: AS: 274146 IP: 2803:89d0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:b6:33:6a:bf:b7:77:81:fc:8c:20:f8:89:9c:e6:de:c9:49:19:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 12:45:54 2026 GMT Not After : Jan 27 12:50:54 2027 GMT Subject: CN=8F14B752BDD95C05C00A4F586E5817068B49A668 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e2:dc:9c:dd:d4:7b:9c:59:56:d1:6f:4c:84: 5b:a0:ae:eb:f9:e7:62:b7:69:da:4a:36:3d:01:ed: 72:31:11:70:61:7b:ac:53:3d:58:61:ab:1a:e7:ad: 46:60:e8:0c:34:74:7d:c9:9e:77:c5:eb:96:e9:ef: 8d:54:a1:bf:04:b6:90:f5:56:76:a9:ec:b0:c3:a7: 79:b2:90:bf:44:e1:c6:92:cd:f7:83:21:28:e2:9e: e3:1b:77:cd:41:24:b0:6b:e5:d4:a5:61:df:0e:cf: 2a:97:7d:59:93:79:3c:a8:3e:fb:49:bd:a1:51:0e: 22:1e:4e:0d:63:9c:e5:48:e4:26:a1:c5:58:0a:0f: f5:a0:15:a3:fa:44:f5:d2:09:5d:25:01:e6:6a:b2: d1:2f:5c:d8:a3:23:84:b6:29:ef:b0:d1:63:6c:be: 4a:4c:6a:fa:b5:c3:5b:3a:74:70:f5:91:23:b6:5b: b1:27:4f:04:8c:c5:37:e6:87:52:93:10:d6:71:81: 1a:c9:c5:cb:6b:26:44:67:7e:84:c0:38:93:67:33: 5e:c4:ca:24:54:be:b1:eb:0d:97:47:ea:44:ea:e7: 60:56:56:3c:50:86:c3:9e:d0:1c:e7:d7:ab:ab:62: ec:a7:9d:5e:e6:92:5a:e0:bf:46:af:ba:49:e8:6a: e6:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8F:14:B7:52:BD:D9:5C:05:C0:0A:4F:58:6E:58:17:06:8B:49:A6:68 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/ADC4AFE1B2E1CC8833F65DC08EC241EBFC13056B2E0966E3D3EC485E27DF9898/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/ADC4AFE1B2E1CC8833F65DC08EC241EBFC13056B2E0966E3D3EC485E27DF9898/0/8F14B752BDD95C05C00A4F586E5817068B49A668.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:89d0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 274146 Signature Algorithm: sha256WithRSAEncryption 34:e5:55:60:b3:41:75:78:47:24:48:79:b8:36:22:e6:0a:52: 88:26:3a:2e:9d:a7:28:b8:c7:3c:40:b0:6b:e7:e7:02:89:73: 2f:18:77:4f:6a:b8:86:90:91:5a:45:c0:84:88:07:b6:6f:7f: 23:6f:e2:cf:5e:89:d3:6c:18:15:34:c4:ec:11:b1:c5:ef:fa: 68:c7:63:29:ca:4f:4f:4c:1c:dc:81:16:d6:e8:d2:38:e8:72: 1e:c0:a6:f4:e9:c6:d0:ed:1e:e7:e2:d7:52:22:07:b3:ea:8a: 23:cc:b5:f0:de:11:f1:80:a6:5d:53:02:f6:3c:67:63:f8:43: 9a:7b:d7:5f:72:5d:3d:4e:f8:fa:4f:06:31:66:17:16:94:22: 40:a5:44:07:3f:b0:cf:5d:6c:c9:0f:f1:c6:5e:bf:d5:05:3d: c2:cb:b8:9a:21:02:13:3b:47:79:88:a9:06:b3:59:a2:f2:96: 8d:7e:5c:34:40:ec:38:ca:84:02:2e:f4:2e:89:a2:fd:ad:18: ac:43:31:51:33:7e:fb:17:fd:6d:04:59:05:27:94:bf:f8:da: fa:38:d8:16:e6:8d:aa:91:08:b6:65:2c:46:d1:3b:1d:e5:61: 2c:c0:18:93:a8:86:aa:85:a5:e6:07:6c:dc:48:02:56:20:eb: a2:3b:de:c0 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUI7Yzar+3d4H8jCD4iZzm3slJGbcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgxMjQ1NTRaFw0yNzAxMjcxMjUwNTRaMDMxMTAvBgNV BAMTKDhGMTRCNzUyQkREOTVDMDVDMDBBNEY1ODZFNTgxNzA2OEI0OUE2NjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+4tyc3dR7nFlW0W9MhFugruv5 52K3adpKNj0B7XIxEXBhe6xTPVhhqxrnrUZg6Aw0dH3JnnfF65bp741Uob8EtpD1 Vnap7LDDp3mykL9E4caSzfeDISjinuMbd81BJLBr5dSlYd8OzyqXfVmTeTyoPvtJ vaFRDiIeTg1jnOVI5CahxVgKD/WgFaP6RPXSCV0lAeZqstEvXNijI4S2Ke+w0WNs vkpMavq1w1s6dHD1kSO2W7EnTwSMxTfmh1KTENZxgRrJxctrJkRnfoTAOJNnM17E yiRUvrHrDZdH6kTq52BWVjxQhsOe0Bzn16urYuynnV7mklrgv0avuknoauZRAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSPFLdSvdlcBcAK T1huWBcGi0mmaDAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQURDNEFGRTFCMkUxQ0M4ODMzRjY1REMw OEVDMjQxRUJGQzEzMDU2QjJFMDk2NkUzRDNFQzQ4NUUyN0RGOTg5OC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9BREM0QUZFMUIyRTFDQzg4MzNGNjVEQzA4RUMyNDFFQkZDMTMwNTZCMkUw OTY2RTNEM0VDNDg1RTI3REY5ODk4LzAvOEYxNEI3NTJCREQ5NUMwNUMwMEE0RjU4 NkU1ODE3MDY4QjQ5QTY2OC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAOJ0DAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMELuIwDQYJKoZIhvcNAQELBQADggEBADTlVWCz QXV4RyRIebg2IuYKUogmOi6dpyi4xzxAsGvn5wKJcy8Yd09quIaQkVpFwISIB7Zv fyNv4s9eidNsGBU0xOwRscXv+mjHYynKT09MHNyBFtbo0jjoch7ApvTpxtDtHufi 11IiB7PqiiPMtfDeEfGApl1TAvY8Z2P4Q5p7119yXT1O+PpPBjFmFxaUIkClRAc/ sM9dbMkP8cZev9UFPcLLuJohAhM7R3mIqQazWaLylo1+XDRA7DjKhAIu9C6Jov2t GKxDMVEzfvsX/W0EWQUnlL/42vo42BbmjaqRCLZlLEbROx3lYSzAGJOohqqFpeYH bNxIAlYg66I73sA= -----END CERTIFICATE-----Generated at Mon Mar 2 22:48:17 2026 by rpki-client