$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A853EF126CD190D84D3EDE920D3FEB6D1F743E95.cer File: A853EF126CD190D84D3EDE920D3FEB6D1F743E95.cer (raw, json) Hash identifier: E/m6Dg97oWnO6NHSHulh+MWT2UawI45BTbTINUNeVg4= Subject key identifier: A8:53:EF:12:6C:D1:90:D8:4D:3E:DE:92:0D:3F:EB:6D:1F:74:3E:95 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 2EC81CDF45D7915FA4BD4CDC4E90A4202034C8 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/AAF9CA79094E7DAF6DBDA0BF637E3C9B06D2A8F23EC314067DE73B622EDFBB9E/0/A853EF126CD190D84D3EDE920D3FEB6D1F743E95.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/AAF9CA79094E7DAF6DBDA0BF637E3C9B06D2A8F23EC314067DE73B622EDFBB9E/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Mon 23 Feb 2026 19:10:01 +0000 Certificate not after: Mon 22 Feb 2027 19:15:01 +0000 Subordinate resources: AS: 274318 IP: 2803:8c30::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:c8:1c:df:45:d7:91:5f:a4:bd:4c:dc:4e:90:a4:20:20:34:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Feb 23 19:10:01 2026 GMT Not After : Feb 22 19:15:01 2027 GMT Subject: CN=A853EF126CD190D84D3EDE920D3FEB6D1F743E95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:c0:7b:1f:58:79:74:2b:b8:09:f3:1b:fe:cc: 76:e0:58:14:e0:37:96:b5:10:f6:c3:f0:d4:02:ef: 2e:51:b8:02:80:64:dd:fe:6d:b0:1b:a1:8f:cf:5b: 6a:e9:d5:01:06:ff:d0:8a:fa:b7:fd:d5:76:c0:57: 5f:e2:36:b6:76:e4:33:9c:dc:1a:a9:47:be:91:92: 8e:15:ef:75:b4:a6:6a:82:ad:bc:95:5e:9c:ed:b0: 9e:13:6d:51:e8:1e:60:de:5f:48:1b:7c:0f:9c:f4: e7:93:42:8e:2e:a0:0d:99:ef:36:b4:77:93:00:37: af:15:1f:05:8a:57:0a:f5:48:4d:48:3a:5f:24:ab: 00:68:4d:f0:d2:6d:5c:39:92:64:39:54:09:88:29: 4f:b7:11:b7:c8:81:34:22:c4:b6:e5:1a:6e:10:e7: 9d:9a:5c:91:7c:1e:7d:2b:cb:68:6d:28:a5:f1:8c: 19:0a:1d:24:83:0d:01:e0:63:8b:19:5e:0b:6c:51: 80:b3:b2:ff:11:a6:f6:c1:d6:73:67:90:4a:90:88: 7d:62:24:f3:a1:3a:dd:63:aa:ad:31:7d:bb:d2:a0: c9:e1:29:d7:38:0e:47:35:05:22:57:59:1f:ab:8c: 4b:88:ca:de:24:a3:81:22:65:b4:53:bf:5f:9a:f3: 50:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A8:53:EF:12:6C:D1:90:D8:4D:3E:DE:92:0D:3F:EB:6D:1F:74:3E:95 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/AAF9CA79094E7DAF6DBDA0BF637E3C9B06D2A8F23EC314067DE73B622EDFBB9E/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/AAF9CA79094E7DAF6DBDA0BF637E3C9B06D2A8F23EC314067DE73B622EDFBB9E/0/A853EF126CD190D84D3EDE920D3FEB6D1F743E95.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:8c30::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 274318 Signature Algorithm: sha256WithRSAEncryption 2a:1a:ee:03:9b:23:c0:80:8c:c0:51:97:2d:e9:05:bc:c1:8c: 0e:ac:c4:76:73:66:08:9e:2a:ea:7a:8d:a6:44:7c:34:31:21: e5:62:54:f9:1f:69:49:b9:79:ef:d8:f1:20:bc:80:5d:6c:0b: ed:27:b0:46:73:f8:31:b0:86:bf:12:f2:ff:59:74:0d:fa:c9: 3c:d8:db:fe:d7:3f:1a:dc:58:e4:44:68:70:9f:ff:d3:80:c7: 39:01:44:dc:63:2c:c6:cc:77:b0:a9:be:d5:48:ed:df:f6:e8: 1f:4b:25:3a:c0:d0:5b:16:50:6c:c0:a4:4f:64:c9:f8:3b:77: 01:a4:d7:be:54:1a:11:b6:1a:cf:e4:cf:0a:2a:c5:b3:fa:d1: 6e:c6:e0:b2:4a:66:c6:96:64:1b:73:8f:f7:f7:f4:02:a2:69: 27:3f:64:56:ef:4c:cc:7c:7e:27:97:a8:d2:9c:13:6e:61:a0: 6b:bc:8f:b3:b0:5f:de:a8:07:a6:30:39:55:c8:d9:cf:8c:39: 00:31:ff:88:bd:62:c0:80:fa:d2:e4:05:a2:d2:29:94:69:cc: 77:35:c9:d3:c9:f2:fd:67:92:e5:5b:13:1b:b3:60:64:fe:2a: ce:92:5e:85:a7:c2:11:10:41:e8:e7:36:31:ba:bc:3f:19:c5: 02:34:a9:67 -----BEGIN CERTIFICATE----- MIIGljCCBX6gAwIBAgITLsgc30XXkV+kvUzcTpCkICA0yDANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyhGMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2 MDU4Njc4MB4XDTI2MDIyMzE5MTAwMVoXDTI3MDIyMjE5MTUwMVowMzExMC8GA1UE AxMoQTg1M0VGMTI2Q0QxOTBEODREM0VERTkyMEQzRkVCNkQxRjc0M0U5NTCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJnAex9YeXQruAnzG/7MduBYFOA3 lrUQ9sPw1ALvLlG4AoBk3f5tsBuhj89baunVAQb/0Ir6t/3VdsBXX+I2tnbkM5zc GqlHvpGSjhXvdbSmaoKtvJVenO2wnhNtUegeYN5fSBt8D5z055NCji6gDZnvNrR3 kwA3rxUfBYpXCvVITUg6XySrAGhN8NJtXDmSZDlUCYgpT7cRt8iBNCLEtuUabhDn nZpckXwefSvLaG0opfGMGQodJIMNAeBjixleC2xRgLOy/xGm9sHWc2eQSpCIfWIk 86E63WOqrTF9u9KgyeEp1zgORzUFIldZH6uMS4jK3iSjgSJltFO/X5rzUPMCAwEA AaOCA6EwggOdMA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYEFKhT7xJs0ZDYTT7e kg0/620fdD6VMB8GA1UdIwQYMBaAFPJaG32Pet+UwN6+j+rBw7zWBYZ4MA4GA1Ud DwEB/wQEAwIBBjCBsAYDVR0fBIGoMIGlMIGioIGfoIGchoGZcnN5bmM6Ly9yZXBv c2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRkRDMzU5NERENEU1NEJBREU3 MDlBQzBEMjU1Q0YyNzlDNDc3MTZEMkU4QjNGNEQ0NURDNDYzNTU4OTlCMzZENC8w L0YyNUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY3JsMIG5 BggrBgEFBQcBAQSBrDCBqTCBpgYIKwYBBQUHMAKGgZlyc3luYzovL3JlcG9zaXRv cnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9FNUFBMUIyQzY5MEQzNEREM0E0MkUw QzAyNjhDMzIxOEVEMTU4RTE1RDI5RkNCRDBCQUI2NkI0Nzg2RDYzMkU2LzAvRjI1 QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNENjA1ODY3OC5jZXIwggFxBggr BgEFBQcBCwSCAWMwggFfMHkGCCsGAQUFBzAFhm1yc3luYzovL3JlcG9zaXRvcnku bGFjbmljLm5ldC9ycGtpL2xhY25pYy9BQUY5Q0E3OTA5NEU3REFGNkRCREEwQkY2 MzdFM0M5QjA2RDJBOEYyM0VDMzE0MDY3REU3M0I2MjJFREZCQjlFLzAvMIGmBggr BgEFBQcwCoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj bmljL0FBRjlDQTc5MDk0RTdEQUY2REJEQTBCRjYzN0UzQzlCMDZEMkE4RjIzRUMz MTQwNjdERTczQjYyMkVERkJCOUUvMC9BODUzRUYxMjZDRDE5MEQ4NEQzRURFOTIw RDNGRUI2RDFGNzQzRTk1Lm1mdDA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxh Y25pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoA4wwMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQvjjANBgkqhkiG9w0BAQsFAAOCAQEAKhruA5sj wICMwFGXLekFvMGMDqzEdnNmCJ4q6nqNpkR8NDEh5WJU+R9pSbl579jxILyAXWwL 7SewRnP4MbCGvxLy/1l0DfrJPNjb/tc/GtxY5ERocJ//04DHOQFE3GMsxsx3sKm+ 1Ujt3/boH0slOsDQWxZQbMCkT2TJ+Dt3AaTXvlQaEbYaz+TPCirFs/rRbsbgskpm xpZkG3OP9/f0AqJpJz9kVu9MzHx+J5eo0pwTbmGga7yPs7Bf3qgHpjA5VcjZz4w5 ADH/iL1iwID60uQFotIplGnMdzXJ08ny/WeS5VsTG7NgZP4qzpJehafCERBB6Oc2 Mbq8PxnFAjSpZw== -----END CERTIFICATE-----Generated at Mon Mar 2 14:05:31 2026 by rpki-client