$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BE11DC902A11374D255BCF14105B08B7CBA0B69A.cer File: BE11DC902A11374D255BCF14105B08B7CBA0B69A.cer (raw, json) Hash identifier: xu1skP8m5RIGYQFBqvKeNqyCPdU/vfQ3nMeMrII2HrU= Subject key identifier: BE:11:DC:90:2A:11:37:4D:25:5B:CF:14:10:5B:08:B7:CB:A0:B6:9A Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 76A01065B01BD4BA27452F01EDC32622B9717017 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/24C52B9B79BC4671ECC497889151B32B039A37195C094FA20346B8790EE9D431/0/BE11DC902A11374D255BCF14105B08B7CBA0B69A.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/24C52B9B79BC4671ECC497889151B32B039A37195C094FA20346B8790EE9D431/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 27 Jan 2026 18:51:03 +0000 Certificate not after: Tue 26 Jan 2027 18:56:03 +0000 Subordinate resources: AS: 273231 IP: 2803:de50::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 05 Mar 2026 11:41:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:a0:10:65:b0:1b:d4:ba:27:45:2f:01:ed:c3:26:22:b9:71:70:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 27 18:51:03 2026 GMT Not After : Jan 26 18:56:03 2027 GMT Subject: CN=BE11DC902A11374D255BCF14105B08B7CBA0B69A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:2f:88:49:2a:9c:dd:a1:5c:b0:2f:09:75:42: da:00:56:7d:d6:a0:38:3c:c4:37:34:81:6a:ac:4a: 52:b0:62:75:71:59:42:79:16:f8:ac:0f:88:a3:1d: 51:d7:0d:49:6b:8a:82:e4:0d:31:fa:37:78:1c:1c: 5b:d6:b9:00:5b:1f:28:f2:3d:d1:14:55:e1:59:e2: 86:da:85:7e:95:32:ed:ae:0d:ea:ab:b3:fd:be:59: fd:88:a0:f6:a1:c7:62:f3:8b:91:92:d6:14:f7:f3: c9:64:34:7c:58:ec:9b:96:d5:1d:32:f3:48:48:ce: 3c:47:76:b6:f4:7a:1a:a2:ba:e3:22:52:ad:10:61: 83:cc:03:57:36:24:ff:ed:a5:d4:43:32:70:6c:71: bd:e2:81:c8:35:f1:a4:f5:66:5e:45:1b:fc:79:7f: 47:28:31:0a:60:b6:85:02:9c:6a:32:73:62:a8:06: 89:f6:fb:4e:c3:44:9b:9e:99:a6:7c:1e:da:c2:bf: 84:3e:02:57:d3:fa:c7:08:b3:45:39:23:4a:bc:2c: 78:51:9f:87:4e:dd:24:16:f2:20:67:dc:93:24:5a: 42:42:51:77:63:d1:57:0f:70:8c:8c:70:25:56:a5: 80:9e:f2:62:18:a8:a2:fc:b9:f0:7d:4f:7c:8f:72: 02:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BE:11:DC:90:2A:11:37:4D:25:5B:CF:14:10:5B:08:B7:CB:A0:B6:9A X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/24C52B9B79BC4671ECC497889151B32B039A37195C094FA20346B8790EE9D431/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/24C52B9B79BC4671ECC497889151B32B039A37195C094FA20346B8790EE9D431/0/BE11DC902A11374D255BCF14105B08B7CBA0B69A.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:de50::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273231 Signature Algorithm: sha256WithRSAEncryption 19:ed:8e:90:ed:df:f8:d9:e6:a2:09:0e:dd:02:ba:0d:94:80: 0e:93:0d:51:5a:d6:3e:3b:aa:89:c8:2e:e7:73:b0:ce:fc:5d: a3:ef:23:be:a0:f2:f7:3c:f1:07:11:3d:ae:42:1b:2a:c8:2f: 0d:6f:23:9a:0b:64:08:7f:1d:0f:f2:bd:15:59:78:45:3f:39: f7:49:f4:bb:86:df:88:e5:0d:de:e3:1e:3b:a7:d9:6f:a7:1d: 43:5f:ce:bc:5c:d8:18:53:a5:a1:be:0a:d1:b8:dd:6d:8f:22: 2e:2f:68:7f:b4:53:15:3f:e4:9a:d2:3d:0f:a0:4a:25:e8:59: 04:82:6c:f8:a0:1c:db:09:39:72:ac:a6:7c:7e:8e:12:58:95: 57:f3:68:b1:0f:19:6a:bc:13:83:d3:2f:65:e9:c1:35:54:ae: 7b:55:8d:ff:1f:70:47:66:42:59:46:42:b3:33:46:38:ee:91: 9a:7d:bc:5a:8b:7c:01:39:c3:23:e2:37:04:b3:9e:47:cd:c4: 3c:bb:78:14:93:c5:5a:3d:c6:49:3a:e0:c7:73:d6:e0:a5:4d: d4:bd:f3:1f:90:89:cf:39:dd:e7:4a:49:3c:3c:17:04:d6:eb: 4d:e9:f7:88:71:ff:ae:31:96:53:dc:23:51:14:a7:f9:03:01: 8f:db:03:ca -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUdqAQZbAb1LonRS8B7cMmIrlxcBcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjcxODUxMDNaFw0yNzAxMjYxODU2MDNaMDMxMTAvBgNV BAMTKEJFMTFEQzkwMkExMTM3NEQyNTVCQ0YxNDEwNUIwOEI3Q0JBMEI2OUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5L4hJKpzdoVywLwl1QtoAVn3W oDg8xDc0gWqsSlKwYnVxWUJ5FvisD4ijHVHXDUlrioLkDTH6N3gcHFvWuQBbHyjy PdEUVeFZ4obahX6VMu2uDeqrs/2+Wf2IoPahx2Lzi5GS1hT388lkNHxY7JuW1R0y 80hIzjxHdrb0ehqiuuMiUq0QYYPMA1c2JP/tpdRDMnBscb3igcg18aT1Zl5FG/x5 f0coMQpgtoUCnGoyc2KoBon2+07DRJuemaZ8HtrCv4Q+AlfT+scIs0U5I0q8LHhR n4dO3SQW8iBn3JMkWkJCUXdj0VcPcIyMcCVWpYCe8mIYqKL8ufB9T3yPcgKxAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS+EdyQKhE3TSVb zxQQWwi3y6C2mjAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMjRDNTJCOUI3OUJDNDY3MUVDQzQ5Nzg4 OTE1MUIzMkIwMzlBMzcxOTVDMDk0RkEyMDM0NkI4NzkwRUU5RDQzMS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8yNEM1MkI5Qjc5QkM0NjcxRUNDNDk3ODg5MTUxQjMyQjAzOUEzNzE5NUMw OTRGQTIwMzQ2Qjg3OTBFRTlENDMxLzAvQkUxMURDOTAyQTExMzc0RDI1NUJDRjE0 MTA1QjA4QjdDQkEwQjY5QS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAPeUDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEK08wDQYJKoZIhvcNAQELBQADggEBABntjpDt 3/jZ5qIJDt0Cug2UgA6TDVFa1j47qonILudzsM78XaPvI76g8vc88QcRPa5CGyrI Lw1vI5oLZAh/HQ/yvRVZeEU/OfdJ9LuG34jlDd7jHjun2W+nHUNfzrxc2BhTpaG+ CtG43W2PIi4vaH+0UxU/5JrSPQ+gSiXoWQSCbPigHNsJOXKspnx+jhJYlVfzaLEP GWq8E4PTL2XpwTVUrntVjf8fcEdmQllGQrMzRjjukZp9vFqLfAE5wyPiNwSznkfN xDy7eBSTxVo9xkk64Mdz1uClTdS98x+Qic853edKSTw8FwTW603p94hx/64xllPc I1EUp/kDAY/bA8o= -----END CERTIFICATE-----Generated at Mon Mar 2 13:40:48 2026 by rpki-client