$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B91EC19BAC531E9CD82F3D8F0D2BBCFBE4150BB0.cer File: B91EC19BAC531E9CD82F3D8F0D2BBCFBE4150BB0.cer (raw, json) Hash identifier: 4V6VsSvdXPsFVC2kSXkZlSYN+36dKHX/zVmzLGrAzzo= Subject key identifier: B9:1E:C1:9B:AC:53:1E:9C:D8:2F:3D:8F:0D:2B:BC:FB:E4:15:0B:B0 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 2985556CEAD60071FB71177E3FE34938BBC39507 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/5EE425D54DBA8F17F86A6AE7E5B166B0D6C638DB617D16DC2ECD22ED73BAC767/0/B91EC19BAC531E9CD82F3D8F0D2BBCFBE4150BB0.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/5EE425D54DBA8F17F86A6AE7E5B166B0D6C638DB617D16DC2ECD22ED73BAC767/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 22:19:15 +0000 Certificate not after: Wed 27 Jan 2027 22:24:15 +0000 Subordinate resources: AS: 273064 IP: 2801:1f9::/44 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:85:55:6c:ea:d6:00:71:fb:71:17:7e:3f:e3:49:38:bb:c3:95:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 22:19:15 2026 GMT Not After : Jan 27 22:24:15 2027 GMT Subject: CN=B91EC19BAC531E9CD82F3D8F0D2BBCFBE4150BB0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:99:3a:45:f4:09:ce:1e:88:f2:63:e8:a5:3c: 2a:5a:7a:c3:47:d8:83:df:f6:37:29:3e:44:d7:e4: 83:31:d8:f1:24:46:ac:4e:4d:87:ae:61:9f:8c:6b: 92:07:45:27:db:cd:e1:b6:e2:58:96:c8:10:41:19: e3:54:e6:f9:df:ff:01:8a:fb:ab:28:c6:40:ba:02: b6:58:0c:8b:1a:c0:72:32:fc:34:8b:d8:93:e3:ed: 2d:03:b5:fb:ca:25:1a:06:79:48:cf:05:5f:6d:66: 6e:cf:b0:b1:71:01:08:ad:58:d2:e9:1a:de:3d:3e: 86:3c:21:31:b2:14:9e:b9:15:92:11:78:e6:4c:d0: 18:c0:46:1c:9b:f1:d6:1d:4a:99:ba:81:17:0a:44: ce:22:2b:96:1f:6d:ca:c4:44:a0:3e:a5:e8:95:3f: 15:b2:5d:75:4b:66:5e:50:00:a8:46:4d:32:24:1b: 03:c0:17:c9:a4:5a:88:dc:b7:b9:6d:c5:77:be:84: 46:06:b7:30:8c:e5:73:dd:ff:02:c4:ea:ba:69:97: e2:76:b3:51:90:dc:cc:b9:56:ff:91:a4:c1:65:35: 16:a7:03:f7:13:7e:97:6f:ce:61:ac:4e:42:34:39: c5:16:40:7a:c0:d3:32:e6:c1:19:55:62:e5:26:60: c6:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B9:1E:C1:9B:AC:53:1E:9C:D8:2F:3D:8F:0D:2B:BC:FB:E4:15:0B:B0 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/5EE425D54DBA8F17F86A6AE7E5B166B0D6C638DB617D16DC2ECD22ED73BAC767/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/5EE425D54DBA8F17F86A6AE7E5B166B0D6C638DB617D16DC2ECD22ED73BAC767/0/B91EC19BAC531E9CD82F3D8F0D2BBCFBE4150BB0.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2801:1f9::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273064 Signature Algorithm: sha256WithRSAEncryption 33:35:b5:97:7a:2a:76:da:17:3c:26:5a:21:a2:8e:34:d0:49: e3:1a:24:14:69:a8:76:f4:75:30:33:54:c3:a3:9e:63:46:b0: f6:70:79:39:3b:a3:3d:1c:a6:20:33:45:cd:f4:48:70:63:67: 9c:8b:1d:bc:54:a3:35:0f:09:29:8a:f1:63:00:ce:3f:fe:32: 78:ae:e9:f0:25:09:ce:18:b1:08:5f:e0:21:23:79:1d:e1:fd: 58:16:f5:ab:13:71:11:e1:79:e3:1b:8a:ee:f0:e6:e6:e8:ff: e9:01:f7:a1:9b:ca:d8:00:d8:0c:25:c5:9e:d6:64:e2:4b:84: 6f:33:32:12:16:8c:fa:5a:cd:88:92:66:d4:ff:ed:27:22:63: 2e:9a:dd:5e:a3:dd:0e:75:3d:94:47:fc:33:26:35:3f:86:51: dd:eb:a5:6b:ea:f2:37:e0:77:51:71:e0:84:75:ea:ae:2f:93: b9:64:79:c7:82:bb:fa:2f:eb:7b:29:1b:31:3f:50:63:de:b7: 15:ca:f5:19:3b:9c:85:be:f2:1e:75:3f:74:bc:75:7d:3e:15: 87:a4:c9:25:09:e9:ef:0f:34:15:fe:de:92:4f:88:54:99:f5: 7a:0e:e6:5b:65:72:d8:ae:87:30:87:1e:0b:8e:3e:c2:60:31: eb:31:24:2d -----BEGIN CERTIFICATE----- MIIGmTCCBYGgAwIBAgIUKYVVbOrWAHH7cRd+P+NJOLvDlQcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgyMjE5MTVaFw0yNzAxMjcyMjI0MTVaMDMxMTAvBgNV BAMTKEI5MUVDMTlCQUM1MzFFOUNEODJGM0Q4RjBEMkJCQ0ZCRTQxNTBCQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTmTpF9AnOHojyY+ilPCpaesNH 2IPf9jcpPkTX5IMx2PEkRqxOTYeuYZ+Ma5IHRSfbzeG24liWyBBBGeNU5vnf/wGK +6soxkC6ArZYDIsawHIy/DSL2JPj7S0DtfvKJRoGeUjPBV9tZm7PsLFxAQitWNLp Gt49PoY8ITGyFJ65FZIReOZM0BjARhyb8dYdSpm6gRcKRM4iK5YfbcrERKA+peiV PxWyXXVLZl5QAKhGTTIkGwPAF8mkWojct7ltxXe+hEYGtzCM5XPd/wLE6rppl+J2 s1GQ3My5Vv+RpMFlNRanA/cTfpdvzmGsTkI0OcUWQHrA0zLmwRlVYuUmYMZ5AgMB AAGjggOjMIIDnzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS5HsGbrFMenNgv PY8NK7z75BULsDAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNUVFNDI1RDU0REJBOEYxN0Y4NkE2QUU3 RTVCMTY2QjBENkM2MzhEQjYxN0QxNkRDMkVDRDIyRUQ3M0JBQzc2Ny8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy81RUU0MjVENTREQkE4RjE3Rjg2QTZBRTdFNUIxNjZCMEQ2QzYzOERCNjE3 RDE2REMyRUNEMjJFRDczQkFDNzY3LzAvQjkxRUMxOUJBQzUzMUU5Q0Q4MkYzRDhG MEQyQkJDRkJFNDE1MEJCMC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKAEB+QAAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwQqqDANBgkqhkiG9w0BAQsFAAOCAQEAMzW1 l3oqdtoXPCZaIaKONNBJ4xokFGmodvR1MDNUw6OeY0aw9nB5OTujPRymIDNFzfRI cGNnnIsdvFSjNQ8JKYrxYwDOP/4yeK7p8CUJzhixCF/gISN5HeH9WBb1qxNxEeF5 4xuK7vDm5uj/6QH3oZvK2ADYDCXFntZk4kuEbzMyEhaM+lrNiJJm1P/tJyJjLprd XqPdDnU9lEf8MyY1P4ZR3eula+ryN+B3UXHghHXqri+TuWR5x4K7+i/reykbMT9Q Y963Fcr1GTuchb7yHnU/dLx1fT4Vh6TJJQnp7w80Ff7ekk+IVJn1eg7mW2Vy2K6H MIceC44+wmAx6zEkLQ== -----END CERTIFICATE-----Generated at Mon Mar 2 17:08:16 2026 by rpki-client