$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B2341A9BA6CDDF80348BDB6A9D64C5174CA0DBA.cer File: 9B2341A9BA6CDDF80348BDB6A9D64C5174CA0DBA.cer (raw, json) Hash identifier: Hizf03GWpax1T4OW4UG8s87iFX+G08jP0+yFrZuzwbA= Subject key identifier: 9B:23:41:A9:BA:6C:DD:F8:03:48:BD:B6:A9:D6:4C:51:74:CA:0D:BA Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 6E2E2B6E89FB2ECD2F12DE30D29E205DBB4F465F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/8E3770139554AA650D75D39E5CD56557A9D9233145BBD2AC7FC35A8BC1347AD5/0/9B2341A9BA6CDDF80348BDB6A9D64C5174CA0DBA.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/8E3770139554AA650D75D39E5CD56557A9D9233145BBD2AC7FC35A8BC1347AD5/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Fri 27 Mar 2026 19:55:01 +0000 Certificate not after: Fri 26 Mar 2027 20:00:01 +0000 Subordinate resources: AS: 274060 IP: 2803:b2d0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Apr 2026 12:20:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:2e:2b:6e:89:fb:2e:cd:2f:12:de:30:d2:9e:20:5d:bb:4f:46:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Mar 27 19:55:01 2026 GMT Not After : Mar 26 20:00:01 2027 GMT Subject: CN=9B2341A9BA6CDDF80348BDB6A9D64C5174CA0DBA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:36:c3:ad:21:46:77:83:0f:2d:35:56:ac:0a: a2:9f:b9:a2:a5:69:76:df:9d:03:a1:bb:cc:93:3a: 69:d5:d9:f9:9c:91:10:1e:37:60:64:f8:12:01:07: c3:d0:23:3d:b2:e8:e8:5a:d4:04:31:f3:4f:06:68: d1:1a:bf:98:e1:46:2c:f4:27:0b:3d:65:83:86:fc: 4b:1e:4a:47:81:d8:a6:61:25:43:57:4e:bd:cd:70: 08:7a:a8:d5:65:1f:ee:64:ce:57:16:7d:8e:c1:2a: c2:6e:fe:28:9a:6c:55:ae:c9:b4:ce:ed:73:a7:96: 55:fc:e6:77:db:3a:ba:5c:3a:e1:8c:75:dd:0d:da: 5a:b1:2a:41:d0:75:99:ed:c6:5b:38:74:e2:be:37: 42:be:da:04:19:d8:67:75:a5:af:a8:d0:5d:fa:8e: c4:74:ea:45:b5:55:38:71:a0:0f:02:98:77:a3:71: 13:ff:fe:32:75:8c:c5:42:6a:db:e4:de:70:61:4a: 81:b5:dc:d6:15:7f:38:31:b0:37:1b:5a:19:1b:5d: 23:be:65:a0:51:36:25:56:b0:35:71:60:27:19:39: 95:f5:d3:c9:82:7a:eb:3f:a6:c5:02:f8:4a:7f:4b: 44:ac:5f:8d:8c:48:53:ec:f2:a1:e0:5a:61:32:84: 4f:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9B:23:41:A9:BA:6C:DD:F8:03:48:BD:B6:A9:D6:4C:51:74:CA:0D:BA X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/8E3770139554AA650D75D39E5CD56557A9D9233145BBD2AC7FC35A8BC1347AD5/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/8E3770139554AA650D75D39E5CD56557A9D9233145BBD2AC7FC35A8BC1347AD5/0/9B2341A9BA6CDDF80348BDB6A9D64C5174CA0DBA.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:b2d0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 274060 Signature Algorithm: sha256WithRSAEncryption 32:fa:e1:f4:af:c0:22:07:82:be:88:e2:06:81:be:f1:53:07: 6f:b0:ba:ac:c5:e4:b8:df:60:ed:87:ac:cb:28:3a:07:5a:d4: 2f:70:cd:14:81:d7:c6:33:47:45:50:9d:ed:a3:59:88:0e:c0: f2:08:aa:a1:6e:f5:b4:ae:95:f7:b9:7b:9e:df:eb:aa:c2:ea: 22:9c:5e:e4:1e:72:21:8a:e0:cb:ac:0e:b5:be:46:33:44:f8: 91:a6:02:60:de:ad:80:a6:9f:9c:91:77:62:48:cd:00:1c:99: b4:dd:df:2c:d5:61:c4:4c:0c:44:ec:b9:b9:61:e4:79:15:2a: 78:7c:3c:cd:62:ab:c9:f9:56:6f:21:dd:ba:82:01:8d:80:5e: af:95:f8:5f:4c:e9:74:f7:9b:3f:43:f4:87:be:37:16:76:4f: 42:07:c2:d3:59:5f:a5:33:ae:8d:c2:7c:54:a7:55:b1:53:84: ea:1a:65:1b:91:9b:3c:66:5d:e4:44:61:53:20:28:60:80:ad: 84:97:7a:95:aa:66:24:55:ab:46:e9:db:6b:d4:51:b1:e3:87: eb:5a:19:a4:f5:86:01:ba:0f:ab:42:9a:33:b1:e8:5d:bc:49: e3:16:64:88:5b:0d:51:c7:23:a5:9e:ab:c1:8f:ef:4e:03:c9: d3:12:d0:95 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUbi4rbon7Ls0vEt4w0p4gXbtPRl8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAzMjcxOTU1MDFaFw0yNzAzMjYyMDAwMDFaMDMxMTAvBgNV BAMTKDlCMjM0MUE5QkE2Q0RERjgwMzQ4QkRCNkE5RDY0QzUxNzRDQTBEQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLNsOtIUZ3gw8tNVasCqKfuaKl aXbfnQOhu8yTOmnV2fmckRAeN2Bk+BIBB8PQIz2y6Oha1AQx808GaNEav5jhRiz0 Jws9ZYOG/EseSkeB2KZhJUNXTr3NcAh6qNVlH+5kzlcWfY7BKsJu/iiabFWuybTO 7XOnllX85nfbOrpcOuGMdd0N2lqxKkHQdZntxls4dOK+N0K+2gQZ2Gd1pa+o0F36 jsR06kW1VThxoA8CmHejcRP//jJ1jMVCatvk3nBhSoG13NYVfzgxsDcbWhkbXSO+ ZaBRNiVWsDVxYCcZOZX108mCeus/psUC+Ep/S0SsX42MSFPs8qHgWmEyhE9FAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSbI0Gpumzd+ANI vbap1kxRdMoNujAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvOEUzNzcwMTM5NTU0QUE2NTBENzVEMzlF NUNENTY1NTdBOUQ5MjMzMTQ1QkJEMkFDN0ZDMzVBOEJDMTM0N0FENS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy84RTM3NzAxMzk1NTRBQTY1MEQ3NUQzOUU1Q0Q1NjU1N0E5RDkyMzMxNDVC QkQyQUM3RkMzNUE4QkMxMzQ3QUQ1LzAvOUIyMzQxQTlCQTZDRERGODAzNDhCREI2 QTlENjRDNTE3NENBMERCQS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAOy0DAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMELowwDQYJKoZIhvcNAQELBQADggEBADL64fSv wCIHgr6I4gaBvvFTB2+wuqzF5LjfYO2HrMsoOgda1C9wzRSB18YzR0VQne2jWYgO wPIIqqFu9bSulfe5e57f66rC6iKcXuQeciGK4MusDrW+RjNE+JGmAmDerYCmn5yR d2JIzQAcmbTd3yzVYcRMDETsublh5HkVKnh8PM1iq8n5Vm8h3bqCAY2AXq+V+F9M 6XT3mz9D9Ie+NxZ2T0IHwtNZX6Uzro3CfFSnVbFThOoaZRuRmzxmXeREYVMgKGCA rYSXepWqZiRVq0bp22vUUbHjh+taGaT1hgG6D6tCmjOx6F28SeMWZIhbDVHHI6We q8GP704DydMS0JU= -----END CERTIFICATE-----Generated at Fri Apr 17 15:44:30 2026 by rpki-client