$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC840F3E35D08891C5154292CD13CB45B1DC30E5.cer File: BC840F3E35D08891C5154292CD13CB45B1DC30E5.cer (raw, json) Hash identifier: bG3lt6Y6loz0hRBRg8zs36JtMito/Hn+Qd5U0K2vobQ= Subject key identifier: BC:84:0F:3E:35:D0:88:91:C5:15:42:92:CD:13:CB:45:B1:DC:30:E5 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 4A7BB15F2F695042D30132CF761382B9B5D9F3B4 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/06F4E83DB4C81A9642F6CC88022E38C211CBC04B185520DBA09DD6031AEEF6FE/0/BC840F3E35D08891C5154292CD13CB45B1DC30E5.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/06F4E83DB4C81A9642F6CC88022E38C211CBC04B185520DBA09DD6031AEEF6FE/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 27 Jan 2026 21:57:44 +0000 Certificate not after: Tue 26 Jan 2027 22:02:44 +0000 Subordinate resources: AS: 272101 IP: 2803:6710::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 05 Mar 2026 11:41:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:7b:b1:5f:2f:69:50:42:d3:01:32:cf:76:13:82:b9:b5:d9:f3:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 27 21:57:44 2026 GMT Not After : Jan 26 22:02:44 2027 GMT Subject: CN=BC840F3E35D08891C5154292CD13CB45B1DC30E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:22:a9:5e:e7:1f:79:18:f7:eb:2e:f7:0f:fd: 92:8f:9d:29:3d:ed:62:c0:fa:e7:bf:1e:f5:cd:3a: b2:f6:41:a7:4e:81:0c:7d:45:00:16:ea:21:80:7e: a6:83:80:c4:9f:35:67:6d:7a:3e:49:b8:37:21:56: f7:8d:ef:42:6e:3c:b0:3c:67:4f:61:99:ba:d5:fb: 81:51:20:e9:a8:e9:88:77:bd:3d:9a:71:44:2a:d0: 93:26:19:ba:a9:9f:0c:e6:d0:7c:6d:5b:42:a9:8f: fe:8a:ff:07:30:97:da:76:1f:ea:c9:c7:81:d0:95: bc:58:38:1c:a4:27:ba:90:62:ed:0b:18:89:af:4b: 1c:af:9d:17:2a:51:23:f4:b3:bb:a3:65:76:cb:21: 26:74:fc:a6:8e:ca:8e:da:48:52:97:48:19:9b:8f: 22:4e:ae:8d:c5:15:9b:cc:98:0a:1d:fa:f2:4b:bb: 2a:ca:51:e0:4f:42:5f:99:ed:3f:bd:d6:78:7e:8e: 5e:23:cd:48:65:73:2d:e5:34:ce:de:2a:52:ef:23: e6:e0:2e:9d:9f:91:27:38:db:35:38:88:73:a9:63: c4:0c:52:98:6c:91:2c:8f:c5:81:08:24:e6:21:d4: 0c:55:d0:49:9d:39:0b:46:9f:9e:5b:84:5a:60:b3: 05:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BC:84:0F:3E:35:D0:88:91:C5:15:42:92:CD:13:CB:45:B1:DC:30:E5 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/06F4E83DB4C81A9642F6CC88022E38C211CBC04B185520DBA09DD6031AEEF6FE/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/06F4E83DB4C81A9642F6CC88022E38C211CBC04B185520DBA09DD6031AEEF6FE/0/BC840F3E35D08891C5154292CD13CB45B1DC30E5.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:6710::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 272101 Signature Algorithm: sha256WithRSAEncryption 1d:d6:67:12:d3:1d:a5:85:13:47:2e:d5:07:37:e9:93:28:af: 5e:fd:ad:bb:72:3f:25:3e:41:03:2a:65:30:cb:bf:f8:8e:5d: 32:2d:d5:28:0f:03:fa:cb:1f:5b:1e:73:fa:8d:50:7c:2b:1e: db:f0:ae:e9:46:22:91:51:9c:0c:46:08:c5:d5:66:17:27:e2: e7:98:3e:bb:ab:d3:ab:d7:d3:b2:44:8b:07:58:3e:90:58:a0: c6:40:cb:16:22:8b:63:89:30:65:9b:01:91:df:46:5f:f5:ea: 75:60:40:8a:38:85:90:1b:bc:f0:ae:a2:9b:e2:86:3e:53:0d: d0:36:74:24:a1:0d:15:c3:ce:f2:83:f6:14:82:ec:dc:4f:42: 42:69:43:5f:3f:47:4d:1c:8e:b2:09:b6:7e:e0:14:15:86:da: 94:ec:76:52:b6:8b:26:55:4b:5d:21:3e:41:2a:20:26:d0:73: c9:67:ed:1f:83:c9:3d:7d:c4:7c:ce:0b:02:f8:3f:31:f7:f6: 14:40:de:cc:47:9f:d5:62:0a:3f:78:d8:46:8c:dd:95:f4:ba: c8:0e:c9:70:28:0c:38:08:96:1a:c8:33:eb:a0:45:f9:6c:aa: 24:44:1e:05:a6:51:d5:3f:df:f0:c6:ae:ef:d7:9e:5f:78:ca: c0:e5:f8:e1 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUSnuxXy9pUELTATLPdhOCubXZ87QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjcyMTU3NDRaFw0yNzAxMjYyMjAyNDRaMDMxMTAvBgNV BAMTKEJDODQwRjNFMzVEMDg4OTFDNTE1NDI5MkNEMTNDQjQ1QjFEQzMwRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEIqle5x95GPfrLvcP/ZKPnSk9 7WLA+ue/HvXNOrL2QadOgQx9RQAW6iGAfqaDgMSfNWdtej5JuDchVveN70JuPLA8 Z09hmbrV+4FRIOmo6Yh3vT2acUQq0JMmGbqpnwzm0HxtW0Kpj/6K/wcwl9p2H+rJ x4HQlbxYOBykJ7qQYu0LGImvSxyvnRcqUSP0s7ujZXbLISZ0/KaOyo7aSFKXSBmb jyJOro3FFZvMmAod+vJLuyrKUeBPQl+Z7T+91nh+jl4jzUhlcy3lNM7eKlLvI+bg Lp2fkSc42zU4iHOpY8QMUphskSyPxYEIJOYh1AxV0EmdOQtGn55bhFpgswWxAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS8hA8+NdCIkcUV QpLNE8tFsdww5TAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMDZGNEU4M0RCNEM4MUE5NjQyRjZDQzg4 MDIyRTM4QzIxMUNCQzA0QjE4NTUyMERCQTA5REQ2MDMxQUVFRjZGRS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8wNkY0RTgzREI0QzgxQTk2NDJGNkNDODgwMjJFMzhDMjExQ0JDMDRCMTg1 NTIwREJBMDlERDYwMzFBRUVGNkZFLzAvQkM4NDBGM0UzNUQwODg5MUM1MTU0Mjky Q0QxM0NCNDVCMURDMzBFNS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKANnEDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEJuUwDQYJKoZIhvcNAQELBQADggEBAB3WZxLT HaWFE0cu1Qc36ZMor179rbtyPyU+QQMqZTDLv/iOXTIt1SgPA/rLH1sec/qNUHwr HtvwrulGIpFRnAxGCMXVZhcn4ueYPrur06vX07JEiwdYPpBYoMZAyxYii2OJMGWb AZHfRl/16nVgQIo4hZAbvPCuopvihj5TDdA2dCShDRXDzvKD9hSC7NxPQkJpQ18/ R00cjrIJtn7gFBWG2pTsdlK2iyZVS10hPkEqICbQc8ln7R+DyT19xHzOCwL4PzH3 9hRA3sxHn9ViCj942EaM3ZX0usgOyXAoDDgIlhrIM+ugRflsqiREHgWmUdU/3/DG ru/Xnl94ysDl+OE= -----END CERTIFICATE-----Generated at Mon Mar 2 13:06:51 2026 by rpki-client