$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C0E0D0DEF1C33AEC93DCFCE63167599D8B41F62D.cer File: C0E0D0DEF1C33AEC93DCFCE63167599D8B41F62D.cer (raw, json) Hash identifier: SGVsrZDkoM0InQsH/ZtXXJlMksWuyHx6xndb9euQK2s= Subject key identifier: C0:E0:D0:DE:F1:C3:3A:EC:93:DC:FC:E6:31:67:59:9D:8B:41:F6:2D Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 6944FDB046DD9F51656B7DA82387F23008A24067 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/B8CEE1426D2EFF8CB25D0998C6B729429F2267048347B5CF3943765F28B0190D/0/C0E0D0DEF1C33AEC93DCFCE63167599D8B41F62D.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/B8CEE1426D2EFF8CB25D0998C6B729429F2267048347B5CF3943765F28B0190D/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 03:35:19 +0000 Certificate not after: Wed 27 Jan 2027 03:40:19 +0000 Subordinate resources: AS: 274189 IP: 2803:add0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 05 Mar 2026 11:41:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:44:fd:b0:46:dd:9f:51:65:6b:7d:a8:23:87:f2:30:08:a2:40:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 03:35:19 2026 GMT Not After : Jan 27 03:40:19 2027 GMT Subject: CN=C0E0D0DEF1C33AEC93DCFCE63167599D8B41F62D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:0c:83:cf:7c:9c:3f:d0:bc:b9:6b:d8:63:d7: d8:e2:ce:48:7f:f3:99:45:4d:1a:7b:70:e9:9a:07: 33:81:88:b8:58:ab:a6:ef:12:bb:4f:c9:fb:ec:e0: 4c:c9:b2:f4:e2:bb:a7:07:3d:34:30:e4:63:e7:25: f3:d9:40:e8:97:ba:33:d1:ad:13:41:91:01:08:c6: e3:a8:81:62:57:4c:1e:3f:c0:34:36:27:51:50:05: 55:fe:4a:5f:c8:1b:91:ff:d2:c3:80:3a:08:ec:7a: 1a:d7:48:e0:b9:a2:6a:30:1b:a0:e3:e7:fb:83:57: 0d:0a:32:cc:95:21:84:b4:9f:07:1f:3d:a6:fe:20: 53:5b:1e:fd:61:d5:e5:e8:b4:47:55:66:72:87:88: ef:05:c9:49:82:97:25:40:ca:86:68:b6:cd:f9:e6: a1:a9:a0:ca:4e:5d:5e:68:a8:c0:a4:05:a8:a9:97: c3:7a:85:6f:d5:7a:c1:4d:d7:82:49:94:99:d8:83: 28:c0:27:7d:49:f3:85:fb:e1:10:b7:47:e2:94:f4: 5f:81:87:67:49:89:57:62:68:0c:78:86:08:ff:00: 41:72:61:a9:e5:cb:b5:11:a7:72:41:cc:19:09:b4: 06:7d:b3:3f:95:e1:98:04:26:fc:dd:79:41:e1:f2: 05:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C0:E0:D0:DE:F1:C3:3A:EC:93:DC:FC:E6:31:67:59:9D:8B:41:F6:2D X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/B8CEE1426D2EFF8CB25D0998C6B729429F2267048347B5CF3943765F28B0190D/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/B8CEE1426D2EFF8CB25D0998C6B729429F2267048347B5CF3943765F28B0190D/0/C0E0D0DEF1C33AEC93DCFCE63167599D8B41F62D.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:add0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 274189 Signature Algorithm: sha256WithRSAEncryption 84:99:2e:a7:11:8d:3f:61:25:41:55:e5:4e:98:58:bf:3d:ec: d1:f5:8d:7f:17:27:b6:af:5e:54:dd:48:13:ce:0d:7a:83:52: cb:33:06:80:e2:24:e6:af:cb:f2:32:f2:0f:f0:7e:a5:ed:53: 9e:26:1c:da:59:d0:28:5c:5e:b5:8c:32:0f:62:31:ac:2d:63: e0:9e:b1:20:b8:67:49:4b:6f:0d:94:e8:2b:1d:a3:d8:ea:d4: 36:23:17:5f:45:62:21:93:50:05:00:3e:c4:04:dd:34:a8:08: 1c:54:d7:9d:72:55:d3:8e:21:83:d0:bc:5a:ac:8d:5f:03:08: ff:aa:af:40:cb:02:1f:32:a8:53:0c:65:6c:9d:5f:4f:5b:b5: 4d:7a:93:ad:e9:7d:c9:87:e7:c6:dd:00:4d:a3:83:67:a4:fc: ad:d9:d7:87:9e:cc:ee:37:22:c6:b0:f9:6c:c7:d3:cc:82:cc: 3d:e7:38:da:38:95:4f:c2:fd:76:00:89:be:e7:0e:12:11:67: 81:47:4d:19:34:e9:aa:ba:ac:3d:af:11:1a:da:8d:8c:22:2e: 23:69:c4:51:cd:5c:66:f0:0b:c5:ba:c5:d9:88:e4:d7:da:18: 47:91:39:24:a3:c4:a1:ef:09:52:35:34:08:be:6d:ff:e9:06: 04:2f:3b:12 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUaUT9sEbdn1Fla32oI4fyMAiiQGcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgwMzM1MTlaFw0yNzAxMjcwMzQwMTlaMDMxMTAvBgNV BAMTKEMwRTBEMERFRjFDMzNBRUM5M0RDRkNFNjMxNjc1OTlEOEI0MUY2MkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8DIPPfJw/0Ly5a9hj19jizkh/ 85lFTRp7cOmaBzOBiLhYq6bvErtPyfvs4EzJsvTiu6cHPTQw5GPnJfPZQOiXujPR rRNBkQEIxuOogWJXTB4/wDQ2J1FQBVX+Sl/IG5H/0sOAOgjsehrXSOC5omowG6Dj 5/uDVw0KMsyVIYS0nwcfPab+IFNbHv1h1eXotEdVZnKHiO8FyUmClyVAyoZots35 5qGpoMpOXV5oqMCkBaipl8N6hW/VesFN14JJlJnYgyjAJ31J84X74RC3R+KU9F+B h2dJiVdiaAx4hgj/AEFyYanly7URp3JBzBkJtAZ9sz+V4ZgEJvzdeUHh8gW7AgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTA4NDe8cM67JPc /OYxZ1mdi0H2LTAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQjhDRUUxNDI2RDJFRkY4Q0IyNUQwOTk4 QzZCNzI5NDI5RjIyNjcwNDgzNDdCNUNGMzk0Mzc2NUYyOEIwMTkwRC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9COENFRTE0MjZEMkVGRjhDQjI1RDA5OThDNkI3Mjk0MjlGMjI2NzA0ODM0 N0I1Q0YzOTQzNzY1RjI4QjAxOTBELzAvQzBFMEQwREVGMUMzM0FFQzkzRENGQ0U2 MzE2NzU5OUQ4QjQxRjYyRC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAOt0DAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMELw0wDQYJKoZIhvcNAQELBQADggEBAISZLqcR jT9hJUFV5U6YWL897NH1jX8XJ7avXlTdSBPODXqDUsszBoDiJOavy/Iy8g/wfqXt U54mHNpZ0ChcXrWMMg9iMawtY+CesSC4Z0lLbw2U6Csdo9jq1DYjF19FYiGTUAUA PsQE3TSoCBxU151yVdOOIYPQvFqsjV8DCP+qr0DLAh8yqFMMZWydX09btU16k63p fcmH58bdAE2jg2ek/K3Z14eezO43Isaw+WzH08yCzD3nONo4lU/C/XYAib7nDhIR Z4FHTRk06aq6rD2vERrajYwiLiNpxFHNXGbwC8W6xdmI5NfaGEeROSSjxKHvCVI1 NAi+bf/pBgQvOxI= -----END CERTIFICATE-----Generated at Mon Mar 2 10:43:30 2026 by rpki-client