$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AAFB3DDEDB0282CB7B21DA6834EF3EE2E7C7FBB8.cer File: AAFB3DDEDB0282CB7B21DA6834EF3EE2E7C7FBB8.cer (raw, json) Hash identifier: /xHIE9TqQji81A9c0Dl16/8jofe9zeugN3Ud+Tb7vN8= Subject key identifier: AA:FB:3D:DE:DB:02:82:CB:7B:21:DA:68:34:EF:3E:E2:E7:C7:FB:B8 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 2A4C67D8EF4226EE93D669EA6398DC9339C7A3B7 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/B92584D7BC3D4771873A5738407D0E73C75895AD05A186B107060CA5AEC1B1BC/0/AAFB3DDEDB0282CB7B21DA6834EF3EE2E7C7FBB8.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/B92584D7BC3D4771873A5738407D0E73C75895AD05A186B107060CA5AEC1B1BC/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Thu 29 Jan 2026 01:46:41 +0000 Certificate not after: Thu 28 Jan 2027 01:51:41 +0000 Subordinate resources: AS: 270128 IP: 2806:408::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 05 Mar 2026 11:41:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:4c:67:d8:ef:42:26:ee:93:d6:69:ea:63:98:dc:93:39:c7:a3:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 29 01:46:41 2026 GMT Not After : Jan 28 01:51:41 2027 GMT Subject: CN=AAFB3DDEDB0282CB7B21DA6834EF3EE2E7C7FBB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:10:f2:88:cc:20:4e:d3:96:9c:be:34:07:d2: ef:27:d6:8a:df:c2:5e:a0:3e:82:b5:dc:76:ba:43: de:d4:05:8d:bd:e1:41:89:11:66:dd:3e:43:6f:01: 0b:43:e2:ee:c9:76:eb:5d:13:e6:dc:d1:45:da:e2: d9:73:a9:18:d9:9b:3c:08:4f:99:89:7d:35:7d:c3: 11:f1:f3:74:70:c7:98:8e:4d:e2:91:78:a5:14:9b: 74:c1:ab:d5:d3:6c:4c:9f:30:ab:75:17:4f:41:f1: a9:06:9e:a6:b6:4c:09:b4:6c:e1:9c:ba:6a:3b:00: 31:2e:e7:ee:63:38:85:73:9e:53:61:53:cb:f6:ed: fd:e7:8d:23:2a:bc:b3:59:c1:29:1b:0e:62:b4:78: 07:55:54:3c:78:f8:00:d3:41:85:80:c5:68:ad:9b: 75:8f:cc:e8:2b:19:58:ea:01:bb:19:a3:1e:54:6c: a1:97:85:55:ee:cd:2a:4d:2b:05:af:a0:e1:11:e2: 83:3c:5f:68:ed:e4:68:26:17:b2:c8:b8:a8:a7:6d: d0:58:f8:65:dc:f5:2c:de:80:b2:78:18:34:56:e9: fd:7d:4b:a7:fd:90:62:ba:7f:05:73:05:6a:f8:e8: 98:16:3f:e4:f1:9b:29:3d:fb:10:5b:6b:3d:80:54: c5:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AA:FB:3D:DE:DB:02:82:CB:7B:21:DA:68:34:EF:3E:E2:E7:C7:FB:B8 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/B92584D7BC3D4771873A5738407D0E73C75895AD05A186B107060CA5AEC1B1BC/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/B92584D7BC3D4771873A5738407D0E73C75895AD05A186B107060CA5AEC1B1BC/0/AAFB3DDEDB0282CB7B21DA6834EF3EE2E7C7FBB8.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2806:408::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 270128 Signature Algorithm: sha256WithRSAEncryption 03:64:78:a6:a7:74:20:6d:4b:77:d0:84:9e:87:fe:15:ee:16: 03:46:a3:64:33:56:65:b1:dc:73:b0:7f:21:81:34:03:e3:e1: 13:63:84:b9:05:a3:dd:f1:27:6a:bf:2b:7c:47:c9:39:7c:76: c8:e2:80:d7:e8:1d:94:60:7d:4e:6e:7b:0c:31:3e:6c:be:7f: 55:d0:25:14:58:e4:92:0d:f0:a6:88:44:b4:bf:fe:9d:1e:9e: 4e:e1:7a:6d:dc:a2:99:54:bd:d7:48:19:56:4c:79:6d:66:29: 62:ad:04:38:2d:fd:f4:98:7f:f0:ec:d8:c8:f8:4b:d8:2c:16: f9:e3:53:e9:79:11:0c:be:66:e2:a4:70:ce:bc:dc:af:84:89: 00:fe:0e:ee:c4:fe:a2:17:f1:35:12:fa:67:04:48:0e:c9:d9: e9:d9:35:3e:f5:cf:9d:e9:64:82:5b:0a:3c:b2:a6:4e:41:07: e6:fb:41:ac:7f:07:b3:11:e9:10:7c:f1:fc:81:17:15:23:11: 89:ac:6d:a4:b9:83:44:73:b4:6d:ff:e1:94:32:9a:82:0e:1a: a1:81:64:ca:d1:11:b8:2d:d7:ce:f3:9d:69:ee:e4:8d:cd:42: 4c:3b:01:c5:6a:d3:20:fe:6b:ea:cd:f6:ee:aa:51:16:57:31: e6:55:16:84 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUKkxn2O9CJu6T1mnqY5jckznHo7cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjkwMTQ2NDFaFw0yNzAxMjgwMTUxNDFaMDMxMTAvBgNV BAMTKEFBRkIzRERFREIwMjgyQ0I3QjIxREE2ODM0RUYzRUUyRTdDN0ZCQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIEPKIzCBO05acvjQH0u8n1orf wl6gPoK13Ha6Q97UBY294UGJEWbdPkNvAQtD4u7JdutdE+bc0UXa4tlzqRjZmzwI T5mJfTV9wxHx83Rwx5iOTeKReKUUm3TBq9XTbEyfMKt1F09B8akGnqa2TAm0bOGc umo7ADEu5+5jOIVznlNhU8v27f3njSMqvLNZwSkbDmK0eAdVVDx4+ADTQYWAxWit m3WPzOgrGVjqAbsZox5UbKGXhVXuzSpNKwWvoOER4oM8X2jt5GgmF7LIuKinbdBY +GXc9SzegLJ4GDRW6f19S6f9kGK6fwVzBWr46JgWP+Txmyk9+xBbaz2AVMWNAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSq+z3e2wKCy3sh 2mg07z7i58f7uDAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQjkyNTg0RDdCQzNENDc3MTg3M0E1NzM4 NDA3RDBFNzNDNzU4OTVBRDA1QTE4NkIxMDcwNjBDQTVBRUMxQjFCQy8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9COTI1ODREN0JDM0Q0NzcxODczQTU3Mzg0MDdEMEU3M0M3NTg5NUFEMDVB MTg2QjEwNzA2MENBNUFFQzFCMUJDLzAvQUFGQjNEREVEQjAyODJDQjdCMjFEQTY4 MzRFRjNFRTJFN0M3RkJCOC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAYECDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEHzAwDQYJKoZIhvcNAQELBQADggEBAANkeKan dCBtS3fQhJ6H/hXuFgNGo2QzVmWx3HOwfyGBNAPj4RNjhLkFo93xJ2q/K3xHyTl8 dsjigNfoHZRgfU5uewwxPmy+f1XQJRRY5JIN8KaIRLS//p0enk7hem3coplUvddI GVZMeW1mKWKtBDgt/fSYf/Ds2Mj4S9gsFvnjU+l5EQy+ZuKkcM683K+EiQD+Du7E /qIX8TUS+mcESA7J2enZNT71z53pZIJbCjyypk5BB+b7Qax/B7MR6RB88fyBFxUj EYmsbaS5g0RztG3/4ZQymoIOGqGBZMrREbgt187znWnu5I3NQkw7AcVq0yD+a+rN 9u6qURZXMeZVFoQ= -----END CERTIFICATE-----Generated at Mon Mar 2 10:42:21 2026 by rpki-client