$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BB53203F85A93FA4B10F62E703E81BB2C18359E2.cer File: BB53203F85A93FA4B10F62E703E81BB2C18359E2.cer (raw, json) Hash identifier: e0vwQnVnLBbHwp+w6Ln5M1FPE0g3w7m1IxWrnyeb4fA= Subject key identifier: BB:53:20:3F:85:A9:3F:A4:B1:0F:62:E7:03:E8:1B:B2:C1:83:59:E2 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 322D65714E00CF9C15C4A55FD71E21EDAC8C5845 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/FD3218F870B4B8DE4EC71F8AE931B06444BAA737A4F7606003C125CFA549403F/0/BB53203F85A93FA4B10F62E703E81BB2C18359E2.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/FD3218F870B4B8DE4EC71F8AE931B06444BAA737A4F7606003C125CFA549403F/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Sat 28 Mar 2026 14:35:01 +0000 Certificate not after: Sat 27 Mar 2027 14:40:01 +0000 Subordinate resources: AS: 272853 IP: 2803:4290::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 22 Apr 2026 04:33:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:2d:65:71:4e:00:cf:9c:15:c4:a5:5f:d7:1e:21:ed:ac:8c:58:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Mar 28 14:35:01 2026 GMT Not After : Mar 27 14:40:01 2027 GMT Subject: CN=BB53203F85A93FA4B10F62E703E81BB2C18359E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a7:d1:f3:87:50:3f:b1:fa:ee:d0:59:b4:59: dd:3b:85:57:cc:14:c8:ee:22:9b:1d:a3:bc:20:bb: ae:9a:33:b7:61:7e:db:df:e1:17:d2:b7:92:8a:8b: cb:6b:f8:70:c0:3b:b2:bf:2d:a7:94:a8:64:54:44: 27:5e:3d:71:e2:6e:a8:8c:ba:61:82:6a:0c:80:c3: 04:44:72:d6:3c:de:21:af:7b:c0:2a:ee:dc:5d:7f: 11:c5:58:8d:99:d4:c1:2c:61:37:01:9a:c8:f8:87: c7:a1:d5:bf:9e:81:2e:1b:c8:0b:f1:ad:fc:f3:bf: 40:d2:2d:59:ec:8f:b4:d9:16:fd:66:72:92:8d:0c: 33:f7:25:3d:5e:b4:35:1b:93:11:6d:10:b8:4f:ba: e1:b5:10:76:96:97:bf:7e:0e:96:3d:c2:21:c8:ca: 5b:96:33:66:f8:c7:40:ba:5d:01:50:58:87:d5:e4: 8c:b8:fe:9c:ef:70:55:4c:17:da:99:d3:7e:e2:28: ac:e4:e0:48:8a:91:b4:64:ad:c2:ba:84:bd:ca:7c: 67:c0:a0:be:8f:f8:a4:8c:d5:c4:6f:4e:8c:a7:8d: bb:0f:fe:87:a3:e3:41:ba:90:d1:74:b4:8c:cd:29: 38:33:ae:75:f5:9c:5f:cc:84:84:f0:4d:53:98:b8: 24:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BB:53:20:3F:85:A9:3F:A4:B1:0F:62:E7:03:E8:1B:B2:C1:83:59:E2 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/FD3218F870B4B8DE4EC71F8AE931B06444BAA737A4F7606003C125CFA549403F/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/FD3218F870B4B8DE4EC71F8AE931B06444BAA737A4F7606003C125CFA549403F/0/BB53203F85A93FA4B10F62E703E81BB2C18359E2.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:4290::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 272853 Signature Algorithm: sha256WithRSAEncryption 5c:50:e0:90:73:ab:37:fb:ad:0d:18:d6:8a:d4:11:96:be:cd: 8d:d3:d4:84:1d:c4:8f:a9:40:3a:ad:96:3b:ae:35:73:e1:2e: 98:ce:75:66:d9:f0:c0:7a:84:cb:78:b4:6d:53:0c:d5:e1:fd: 01:a4:f7:e8:34:1a:74:a1:2f:aa:49:c2:5b:27:38:49:82:f5: 26:3d:32:c7:a9:b8:16:c2:e1:21:db:b5:99:ce:41:b1:1f:05: c8:8f:51:91:53:e2:08:8e:59:4d:cb:07:65:f9:36:a9:7d:a4: cc:2d:d7:b1:96:4e:24:f7:13:c1:40:e7:48:41:0f:03:81:18: 51:77:a3:ad:db:5e:07:b2:46:5c:d6:dc:c8:71:e9:81:73:a0: 74:04:60:94:53:28:e9:9c:14:d8:b3:2b:7c:59:f1:b3:17:f9: d6:c8:d7:cd:18:21:4b:17:36:8d:df:b7:53:6a:e8:6f:13:7a: d5:a3:02:7f:fb:4a:9c:23:fb:d5:eb:21:78:ca:15:cf:d8:c0: f9:dd:ae:47:a5:51:e9:a4:60:a2:b5:0c:8f:b6:f7:e9:8b:c7: 57:44:a4:cb:ea:8f:e8:dd:ac:d2:c9:f3:27:bc:be:47:6e:ea: 02:53:46:a5:6d:16:57:76:3a:8c:1e:2a:65:ef:47:b8:75:84: 5f:49:ef:8b -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUMi1lcU4Az5wVxKVf1x4h7ayMWEUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAzMjgxNDM1MDFaFw0yNzAzMjcxNDQwMDFaMDMxMTAvBgNV BAMTKEJCNTMyMDNGODVBOTNGQTRCMTBGNjJFNzAzRTgxQkIyQzE4MzU5RTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAp9Hzh1A/sfru0Fm0Wd07hVfM FMjuIpsdo7wgu66aM7dhftvf4RfSt5KKi8tr+HDAO7K/LaeUqGRURCdePXHibqiM umGCagyAwwREctY83iGve8Aq7txdfxHFWI2Z1MEsYTcBmsj4h8eh1b+egS4byAvx rfzzv0DSLVnsj7TZFv1mcpKNDDP3JT1etDUbkxFtELhPuuG1EHaWl79+DpY9wiHI yluWM2b4x0C6XQFQWIfV5Iy4/pzvcFVMF9qZ037iKKzk4EiKkbRkrcK6hL3KfGfA oL6P+KSM1cRvToynjbsP/oej40G6kNF0tIzNKTgzrnX1nF/MhITwTVOYuCQ3AgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS7UyA/hak/pLEP YucD6BuywYNZ4jAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRkQzMjE4Rjg3MEI0QjhERTRFQzcxRjhB RTkzMUIwNjQ0NEJBQTczN0E0Rjc2MDYwMDNDMTI1Q0ZBNTQ5NDAzRi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9GRDMyMThGODcwQjRCOERFNEVDNzFGOEFFOTMxQjA2NDQ0QkFBNzM3QTRG NzYwNjAwM0MxMjVDRkE1NDk0MDNGLzAvQkI1MzIwM0Y4NUE5M0ZBNEIxMEY2MkU3 MDNFODFCQjJDMTgzNTlFMi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKANCkDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEKdUwDQYJKoZIhvcNAQELBQADggEBAFxQ4JBz qzf7rQ0Y1orUEZa+zY3T1IQdxI+pQDqtljuuNXPhLpjOdWbZ8MB6hMt4tG1TDNXh /QGk9+g0GnShL6pJwlsnOEmC9SY9MsepuBbC4SHbtZnOQbEfBciPUZFT4giOWU3L B2X5Nql9pMwt17GWTiT3E8FA50hBDwOBGFF3o63bXgeyRlzW3Mhx6YFzoHQEYJRT KOmcFNizK3xZ8bMX+dbI180YIUsXNo3ft1Nq6G8TetWjAn/7Spwj+9XrIXjKFc/Y wPndrkelUemkYKK1DI+29+mLx1dEpMvqj+jdrNLJ8ye8vkdu6gJTRqVtFld2Oowe KmXvR7h1hF9J74s= -----END CERTIFICATE-----Generated at Fri Apr 17 20:39:13 2026 by rpki-client