$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A85121A914974F76B1B5E744B4D7E0944630BA68.cer File: A85121A914974F76B1B5E744B4D7E0944630BA68.cer (raw, json) Hash identifier: sVmboOQiI02ei8CWRp8qQ3s/t77dhL/VPpiu0JOVm+w= Subject key identifier: A8:51:21:A9:14:97:4F:76:B1:B5:E7:44:B4:D7:E0:94:46:30:BA:68 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 7B8F43AC0F428F560613111EED5EEC9CB43E49DD Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/2CFCC3F19661CC325C61E91B09D3EF848428EAD8D48DBF32C2C4E11B272F8B54/0/A85121A914974F76B1B5E744B4D7E0944630BA68.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/2CFCC3F19661CC325C61E91B09D3EF848428EAD8D48DBF32C2C4E11B272F8B54/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 17:07:15 +0000 Certificate not after: Wed 27 Jan 2027 17:12:15 +0000 Subordinate resources: AS: 274247 IP: 2803:b7d0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:8f:43:ac:0f:42:8f:56:06:13:11:1e:ed:5e:ec:9c:b4:3e:49:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 17:07:15 2026 GMT Not After : Jan 27 17:12:15 2027 GMT Subject: CN=A85121A914974F76B1B5E744B4D7E0944630BA68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e4:4e:cc:34:03:dc:d7:a0:e5:e5:77:46:46: 13:00:ae:71:0d:a6:8a:75:81:a1:45:c8:dc:7d:1c: 62:58:69:23:d3:6f:49:4d:53:ea:38:dd:d3:12:4a: 8e:0f:44:49:bb:a6:65:20:b7:18:73:8f:e9:00:04: 5c:79:7b:72:f2:e0:83:08:14:e4:de:8d:1b:44:55: cf:99:47:b0:82:06:16:07:4f:7a:1e:02:fa:f1:4b: f5:32:81:41:f7:54:5e:ec:8c:0d:eb:ab:32:91:2d: a7:54:2c:36:2a:21:91:17:e3:a6:f8:ba:f5:e9:b7: 0f:3f:96:b1:43:9f:34:a9:8f:5d:42:6f:37:81:42: 76:97:0e:cd:ad:ea:0b:02:be:db:5e:e1:10:3b:e7: 8d:0a:04:36:82:ff:22:4e:e9:5f:85:fb:f9:75:46: 18:98:cc:0a:4a:a4:71:41:ee:46:44:2b:5d:82:26: cb:75:00:5a:3e:f3:d7:9e:3f:56:86:e6:72:b7:ba: 72:c5:61:75:14:ea:c1:5a:45:e4:b8:17:94:02:df: 4b:68:b0:3a:54:33:dc:fa:33:cd:36:f8:ce:60:df: 2e:06:42:d5:37:98:0f:dc:5b:f6:99:3f:a3:bd:17: 54:2f:58:f6:4b:7b:84:44:81:c0:13:b6:96:39:fc: 7a:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A8:51:21:A9:14:97:4F:76:B1:B5:E7:44:B4:D7:E0:94:46:30:BA:68 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/2CFCC3F19661CC325C61E91B09D3EF848428EAD8D48DBF32C2C4E11B272F8B54/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/2CFCC3F19661CC325C61E91B09D3EF848428EAD8D48DBF32C2C4E11B272F8B54/0/A85121A914974F76B1B5E744B4D7E0944630BA68.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:b7d0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 274247 Signature Algorithm: sha256WithRSAEncryption 36:36:d6:15:de:86:a9:ad:61:ac:c4:bd:54:d1:98:53:3c:49: e2:ee:c2:4a:e8:1c:4e:4c:a9:d2:f6:ed:91:ee:e9:e5:16:16: 3b:4a:1a:fb:85:2e:3f:b1:eb:65:01:51:16:17:02:b5:12:82: 6b:53:f1:89:a3:09:59:97:1e:55:5c:77:68:4f:e9:54:5f:4f: 67:55:41:23:8e:e4:cc:8b:e5:f1:59:87:db:e1:18:5d:99:dd: af:40:7b:9e:15:0d:46:f7:d2:34:c8:5a:31:e6:ae:5c:b9:3f: b4:e5:4c:df:c2:e6:2c:05:2a:55:7f:34:7c:3d:cb:84:72:92: 1e:7a:7c:5b:ad:90:45:07:ad:ee:9e:9b:24:4d:af:1e:cb:0f: 3c:37:82:e3:9c:e4:dc:95:d6:5a:12:21:7e:af:cc:20:2f:a7: 01:c7:85:1d:ff:2d:91:09:a2:94:49:bd:1f:bb:84:95:be:2e: cf:52:de:a7:64:1f:8e:20:09:fc:9e:68:57:a5:80:f6:fc:c6: ad:c7:38:1f:57:7b:55:b8:a7:ec:c1:b2:d6:d0:a8:66:f8:f2: 0d:54:72:25:f3:f9:76:f5:d2:09:e7:51:55:78:8e:90:a8:8b: d2:60:a8:3a:f3:09:fd:d5:26:54:46:3a:55:8f:aa:75:a0:d7: e0:32:29:0c -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUe49DrA9Cj1YGExEe7V7snLQ+Sd0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgxNzA3MTVaFw0yNzAxMjcxNzEyMTVaMDMxMTAvBgNV BAMTKEE4NTEyMUE5MTQ5NzRGNzZCMUI1RTc0NEI0RDdFMDk0NDYzMEJBNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/5E7MNAPc16Dl5XdGRhMArnEN pop1gaFFyNx9HGJYaSPTb0lNU+o43dMSSo4PREm7pmUgtxhzj+kABFx5e3Ly4IMI FOTejRtEVc+ZR7CCBhYHT3oeAvrxS/UygUH3VF7sjA3rqzKRLadULDYqIZEX46b4 uvXptw8/lrFDnzSpj11CbzeBQnaXDs2t6gsCvtte4RA7540KBDaC/yJO6V+F+/l1 RhiYzApKpHFB7kZEK12CJst1AFo+89eeP1aG5nK3unLFYXUU6sFaReS4F5QC30to sDpUM9z6M802+M5g3y4GQtU3mA/cW/aZP6O9F1QvWPZLe4REgcATtpY5/HqjAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSoUSGpFJdPdrG1 50S01+CURjC6aDAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMkNGQ0MzRjE5NjYxQ0MzMjVDNjFFOTFC MDlEM0VGODQ4NDI4RUFEOEQ0OERCRjMyQzJDNEUxMUIyNzJGOEI1NC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8yQ0ZDQzNGMTk2NjFDQzMyNUM2MUU5MUIwOUQzRUY4NDg0MjhFQUQ4RDQ4 REJGMzJDMkM0RTExQjI3MkY4QjU0LzAvQTg1MTIxQTkxNDk3NEY3NkIxQjVFNzQ0 QjREN0UwOTQ0NjMwQkE2OC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAO30DAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEL0cwDQYJKoZIhvcNAQELBQADggEBADY21hXe hqmtYazEvVTRmFM8SeLuwkroHE5MqdL27ZHu6eUWFjtKGvuFLj+x62UBURYXArUS gmtT8YmjCVmXHlVcd2hP6VRfT2dVQSOO5MyL5fFZh9vhGF2Z3a9Ae54VDUb30jTI WjHmrly5P7TlTN/C5iwFKlV/NHw9y4Rykh56fFutkEUHre6emyRNrx7LDzw3guOc 5NyV1loSIX6vzCAvpwHHhR3/LZEJopRJvR+7hJW+Ls9S3qdkH44gCfyeaFelgPb8 xq3HOB9Xe1W4p+zBstbQqGb48g1UciXz+Xb10gnnUVV4jpCoi9JgqDrzCf3VJlRG OlWPqnWg1+AyKQw= -----END CERTIFICATE-----Generated at Mon Mar 2 14:43:23 2026 by rpki-client