$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C18F84ED385BAB6702DD1D316568FB19C7EB8CED.cer File: C18F84ED385BAB6702DD1D316568FB19C7EB8CED.cer (raw, json) Hash identifier: tL+ScVvZ6dnq3fTgbRja0sVLCS17TsFYrUwEuG348/Y= Subject key identifier: C1:8F:84:ED:38:5B:AB:67:02:DD:1D:31:65:68:FB:19:C7:EB:8C:ED Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 0A7DF0DA2200C08E2E2E2C635C0A8E53C7AEBD90 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/2E4A7245C776260685F1C641F63EBD85003395FEF94EE58BDEA3984CDF1DD8BB/0/C18F84ED385BAB6702DD1D316568FB19C7EB8CED.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/2E4A7245C776260685F1C641F63EBD85003395FEF94EE58BDEA3984CDF1DD8BB/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 02:38:57 +0000 Certificate not after: Wed 27 Jan 2027 02:43:57 +0000 Subordinate resources: AS: 274155 IP: 2803:19d0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:7d:f0:da:22:00:c0:8e:2e:2e:2c:63:5c:0a:8e:53:c7:ae:bd:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 02:38:57 2026 GMT Not After : Jan 27 02:43:57 2027 GMT Subject: CN=C18F84ED385BAB6702DD1D316568FB19C7EB8CED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f3:5f:4d:77:48:5d:af:ca:b0:8e:b0:d1:37: e3:d0:6a:e4:29:7f:99:da:68:67:52:8b:87:09:12: 7c:30:55:6f:0e:13:f2:f5:59:b5:0a:e3:37:f8:f7: 00:b7:d8:0f:36:7d:3e:81:76:01:c9:34:08:04:7a: 07:fc:f5:e9:c4:e3:0b:2c:d1:95:ce:fc:29:8e:45: 78:3e:1c:9d:aa:c4:b5:26:d4:5e:4c:22:75:47:ff: 6c:09:5f:5e:e8:23:e3:58:ab:2d:9f:36:b9:84:4a: 42:1a:39:32:28:00:28:1a:43:3b:6c:1e:e2:2a:a4: 34:2b:27:54:07:50:e3:99:8d:c1:26:b0:15:a2:f5: 98:29:28:fd:96:0a:59:79:eb:90:aa:0c:44:25:62: 53:68:10:4b:d0:b4:27:9b:f6:ce:9c:cd:3e:3d:b2: 6e:5d:ba:20:b5:2a:ac:89:49:c1:cf:3e:c3:25:66: a7:ac:ad:2e:3f:5f:2c:84:6a:a2:47:27:2f:b5:88: 73:fc:8e:07:e0:38:3a:18:72:f1:3f:db:9c:cb:5f: 67:d1:60:be:c8:be:3f:dd:73:3f:6e:70:70:d9:e5: c3:34:7d:b0:f5:9a:ef:ef:42:36:01:4e:a4:d7:3e: 6f:4f:5d:bf:29:c5:ad:9e:d1:94:bf:83:56:5e:6c: 6a:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C1:8F:84:ED:38:5B:AB:67:02:DD:1D:31:65:68:FB:19:C7:EB:8C:ED X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/2E4A7245C776260685F1C641F63EBD85003395FEF94EE58BDEA3984CDF1DD8BB/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/2E4A7245C776260685F1C641F63EBD85003395FEF94EE58BDEA3984CDF1DD8BB/0/C18F84ED385BAB6702DD1D316568FB19C7EB8CED.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:19d0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 274155 Signature Algorithm: sha256WithRSAEncryption 81:a6:f1:64:00:b1:5e:e4:22:21:97:d9:33:d9:ad:b4:de:09: 02:80:14:85:64:00:e4:77:b1:2b:7d:14:10:76:aa:d5:d2:fb: 52:86:6c:b3:a2:0d:bf:f3:c8:a6:6d:2a:a8:2f:b9:89:40:11: d8:18:da:4e:a5:d7:10:48:ad:08:0d:da:e0:be:0d:60:9b:5e: 79:73:8d:bc:c8:a9:7a:fb:fa:79:9f:2e:f4:d3:77:9d:16:5f: 9a:46:2d:ca:04:e6:04:31:c1:1e:79:9c:cd:69:23:4a:88:f6: 8e:6c:d7:59:4a:6d:2b:db:75:a7:fa:13:28:85:c9:01:57:50: c8:8f:dd:39:9c:bd:a8:91:19:a5:a2:ca:63:06:25:f9:4d:14: b9:6d:cc:6b:17:f4:49:36:2d:fd:00:f6:25:a3:dd:a7:96:fd: 33:a0:5e:5b:72:f6:bf:c8:08:de:0b:b9:48:b6:ee:2f:70:74: 17:5d:b3:03:a6:fb:81:c6:dc:1d:0f:bb:9c:a2:a7:6b:e5:23: b9:17:3e:f7:46:0f:43:4d:d7:98:6c:7c:6f:d3:41:16:38:a2: 9f:ff:09:ab:04:04:a0:96:d2:00:c3:8c:a5:6d:5e:67:ef:d5: 91:5f:a8:ff:3d:17:e8:23:bf:19:83:1a:e9:99:a8:89:16:c0: f4:48:e1:27 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUCn3w2iIAwI4uLixjXAqOU8euvZAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgwMjM4NTdaFw0yNzAxMjcwMjQzNTdaMDMxMTAvBgNV BAMTKEMxOEY4NEVEMzg1QkFCNjcwMkREMUQzMTY1NjhGQjE5QzdFQjhDRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw819Nd0hdr8qwjrDRN+PQauQp f5naaGdSi4cJEnwwVW8OE/L1WbUK4zf49wC32A82fT6BdgHJNAgEegf89enE4wss 0ZXO/CmORXg+HJ2qxLUm1F5MInVH/2wJX17oI+NYqy2fNrmESkIaOTIoACgaQzts HuIqpDQrJ1QHUOOZjcEmsBWi9ZgpKP2WCll565CqDEQlYlNoEEvQtCeb9s6czT49 sm5duiC1KqyJScHPPsMlZqesrS4/XyyEaqJHJy+1iHP8jgfgODoYcvE/25zLX2fR YL7Ivj/dcz9ucHDZ5cM0fbD1mu/vQjYBTqTXPm9PXb8pxa2e0ZS/g1ZebGrhAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTBj4TtOFurZwLd HTFlaPsZx+uM7TAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMkU0QTcyNDVDNzc2MjYwNjg1RjFDNjQx RjYzRUJEODUwMDMzOTVGRUY5NEVFNThCREVBMzk4NENERjFERDhCQi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8yRTRBNzI0NUM3NzYyNjA2ODVGMUM2NDFGNjNFQkQ4NTAwMzM5NUZFRjk0 RUU1OEJERUEzOTg0Q0RGMUREOEJCLzAvQzE4Rjg0RUQzODVCQUI2NzAyREQxRDMx NjU2OEZCMTlDN0VCOENFRC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAMZ0DAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMELuswDQYJKoZIhvcNAQELBQADggEBAIGm8WQA sV7kIiGX2TPZrbTeCQKAFIVkAOR3sSt9FBB2qtXS+1KGbLOiDb/zyKZtKqgvuYlA EdgY2k6l1xBIrQgN2uC+DWCbXnlzjbzIqXr7+nmfLvTTd50WX5pGLcoE5gQxwR55 nM1pI0qI9o5s11lKbSvbdaf6EyiFyQFXUMiP3TmcvaiRGaWiymMGJflNFLltzGsX 9Ek2Lf0A9iWj3aeW/TOgXlty9r/ICN4LuUi27i9wdBddswOm+4HG3B0Pu5yip2vl I7kXPvdGD0NN15hsfG/TQRY4op//CasEBKCW0gDDjKVtXmfv1ZFfqP89F+gjvxmD GumZqIkWwPRI4Sc= -----END CERTIFICATE-----Generated at Mon Mar 2 18:09:11 2026 by rpki-client