$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A9174FB67BCF4A99D852C6D9E621E43BC9CBF8D2.cer File: A9174FB67BCF4A99D852C6D9E621E43BC9CBF8D2.cer (raw, json) Hash identifier: y77UXKGQcgNHRinUCvj8y1gtiiBenCv2znsPSA/hIqU= Subject key identifier: A9:17:4F:B6:7B:CF:4A:99:D8:52:C6:D9:E6:21:E4:3B:C9:CB:F8:D2 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 0B4B2A9A2F8059C1140D0E7445E77325357BC828 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/068FA99099377A83F1A405C8C9A75E172C1F7D41A6E81EE440ADF349816EE831/0/A9174FB67BCF4A99D852C6D9E621E43BC9CBF8D2.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/068FA99099377A83F1A405C8C9A75E172C1F7D41A6E81EE440ADF349816EE831/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 13:45:42 +0000 Certificate not after: Wed 27 Jan 2027 13:50:42 +0000 Subordinate resources: AS: 273916 IP: 2803:5b50::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 05 Mar 2026 11:41:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:4b:2a:9a:2f:80:59:c1:14:0d:0e:74:45:e7:73:25:35:7b:c8:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 13:45:42 2026 GMT Not After : Jan 27 13:50:42 2027 GMT Subject: CN=A9174FB67BCF4A99D852C6D9E621E43BC9CBF8D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:94:4d:1c:15:8f:38:95:c9:7c:f1:6d:76:4f: 00:3d:2b:1f:49:08:63:a8:8d:03:e8:a7:6b:04:86: 87:dd:ac:af:ee:83:4b:c5:cc:da:8a:f2:de:8c:7e: 3b:4d:be:db:07:bd:1b:a8:58:cc:36:7e:5e:1c:cb: c0:89:62:71:f4:6a:34:92:cf:e3:b7:80:79:1e:5e: a1:05:dc:5b:d0:69:0f:b8:02:02:c6:31:e1:eb:34: c4:5b:37:30:a1:2e:d4:84:f7:37:8c:71:6d:64:19: e1:9e:19:65:ff:ca:a4:d1:8c:b1:6a:dc:ad:77:64: 03:6d:2b:05:d7:a3:ca:a1:58:54:03:f8:d2:08:e8: 9a:8b:f3:c6:85:43:50:bf:29:82:c5:15:e6:84:3a: 09:75:e5:22:a9:57:f4:05:3d:46:f8:7c:6f:df:e1: 1e:07:d0:b0:fa:ac:f5:ae:cb:a6:7e:ef:bf:e1:1b: a0:ca:7d:da:31:d6:3b:70:a5:21:a4:89:83:80:7a: a3:a7:c9:39:f9:d6:13:87:37:d6:1b:04:3a:df:e1: 18:95:5f:8d:34:55:f4:cf:b4:c0:64:48:c9:bc:ba: 24:1b:57:e0:b0:99:62:22:ac:33:3a:d7:35:0e:af: 43:67:e9:86:54:ea:e2:34:b6:6c:7b:87:c8:93:57: 35:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A9:17:4F:B6:7B:CF:4A:99:D8:52:C6:D9:E6:21:E4:3B:C9:CB:F8:D2 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/068FA99099377A83F1A405C8C9A75E172C1F7D41A6E81EE440ADF349816EE831/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/068FA99099377A83F1A405C8C9A75E172C1F7D41A6E81EE440ADF349816EE831/0/A9174FB67BCF4A99D852C6D9E621E43BC9CBF8D2.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:5b50::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273916 Signature Algorithm: sha256WithRSAEncryption 72:b9:ef:cf:e5:45:92:f7:4b:ca:d0:47:7d:e5:87:27:04:94: 93:b0:42:d2:db:94:31:f0:02:a1:a2:93:e1:84:a5:1a:a7:48: 94:d2:93:d8:d5:c5:48:aa:fb:48:7e:6c:2f:5a:70:19:ff:4f: ce:22:f6:36:78:c1:36:4c:7a:f8:a3:ae:71:6b:d7:c7:e8:51: 73:d7:96:0b:22:ce:a9:f8:9e:13:26:c1:f6:c4:89:92:8c:5b: b2:68:79:77:46:1b:c3:e0:f2:8a:79:b6:ee:ea:1b:6a:80:89: 31:89:77:75:c7:25:ac:e9:34:69:00:06:ac:99:7f:0d:54:8a: 80:a0:69:66:7e:a5:19:0c:a8:3e:d7:d5:17:8d:23:71:a8:83: cb:ea:98:d2:de:cb:24:9b:bb:58:8a:06:91:8e:0e:bb:dd:f0: a9:07:6d:e6:45:70:43:23:d8:c2:36:05:46:10:63:05:74:2b: e8:8c:f8:13:f5:d8:ab:a7:e4:64:bc:c8:6c:fe:93:e5:27:3c: 2b:d9:b2:39:94:42:85:52:e2:1b:0a:31:3c:1a:75:b3:d6:52: c2:da:11:04:e5:d2:b4:39:49:2d:54:4e:c6:e8:5b:70:71:f2: 70:4f:5b:dc:43:ca:1d:17:b8:d9:64:7b:7b:0a:15:27:e5:19: f3:8e:d2:4c -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUC0sqmi+AWcEUDQ50RedzJTV7yCgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgxMzQ1NDJaFw0yNzAxMjcxMzUwNDJaMDMxMTAvBgNV BAMTKEE5MTc0RkI2N0JDRjRBOTlEODUyQzZEOUU2MjFFNDNCQzlDQkY4RDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCclE0cFY84lcl88W12TwA9Kx9J CGOojQPop2sEhofdrK/ug0vFzNqK8t6MfjtNvtsHvRuoWMw2fl4cy8CJYnH0ajSS z+O3gHkeXqEF3FvQaQ+4AgLGMeHrNMRbNzChLtSE9zeMcW1kGeGeGWX/yqTRjLFq 3K13ZANtKwXXo8qhWFQD+NII6JqL88aFQ1C/KYLFFeaEOgl15SKpV/QFPUb4fG/f 4R4H0LD6rPWuy6Z+77/hG6DKfdox1jtwpSGkiYOAeqOnyTn51hOHN9YbBDrf4RiV X400VfTPtMBkSMm8uiQbV+CwmWIirDM61zUOr0Nn6YZU6uI0tmx7h8iTVzWHAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSpF0+2e89KmdhS xtnmIeQ7ycv40jAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMDY4RkE5OTA5OTM3N0E4M0YxQTQwNUM4 QzlBNzVFMTcyQzFGN0Q0MUE2RTgxRUU0NDBBREYzNDk4MTZFRTgzMS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8wNjhGQTk5MDk5Mzc3QTgzRjFBNDA1QzhDOUE3NUUxNzJDMUY3RDQxQTZF ODFFRTQ0MEFERjM0OTgxNkVFODMxLzAvQTkxNzRGQjY3QkNGNEE5OUQ4NTJDNkQ5 RTYyMUU0M0JDOUNCRjhEMi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKANbUDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMELfwwDQYJKoZIhvcNAQELBQADggEBAHK578/l RZL3S8rQR33lhycElJOwQtLblDHwAqGik+GEpRqnSJTSk9jVxUiq+0h+bC9acBn/ T84i9jZ4wTZMevijrnFr18foUXPXlgsizqn4nhMmwfbEiZKMW7JoeXdGG8Pg8op5 tu7qG2qAiTGJd3XHJazpNGkABqyZfw1UioCgaWZ+pRkMqD7X1ReNI3Gog8vqmNLe yySbu1iKBpGODrvd8KkHbeZFcEMj2MI2BUYQYwV0K+iM+BP12Kun5GS8yGz+k+Un PCvZsjmUQoVS4hsKMTwadbPWUsLaEQTl0rQ5SS1UTsboW3Bx8nBPW9xDyh0XuNlk e3sKFSflGfOO0kw= -----END CERTIFICATE-----Generated at Mon Mar 2 11:25:07 2026 by rpki-client