$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D13DA981D2AB4A09FB017D899B24125D3FD57AF2.cer File: D13DA981D2AB4A09FB017D899B24125D3FD57AF2.cer (raw, json) Hash identifier: a0tpgoaIBwD3mVPTxbbot6ppfpYbm4kMqg6Uu4Q9Bmw= Subject key identifier: D1:3D:A9:81:D2:AB:4A:09:FB:01:7D:89:9B:24:12:5D:3F:D5:7A:F2 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 0485B85F3BCEEB6BACCFE9597337CF3F85CCB74F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/939692FCBA2CBFEC64CB9594463B43E1D89DE4C453690BA02D1AFF801AB84162/0/D13DA981D2AB4A09FB017D899B24125D3FD57AF2.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/939692FCBA2CBFEC64CB9594463B43E1D89DE4C453690BA02D1AFF801AB84162/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Thu 29 Jan 2026 03:07:16 +0000 Certificate not after: Thu 28 Jan 2027 03:12:16 +0000 Subordinate resources: AS: 273983 IP: 2803:88d0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 05 Mar 2026 11:41:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:85:b8:5f:3b:ce:eb:6b:ac:cf:e9:59:73:37:cf:3f:85:cc:b7:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 29 03:07:16 2026 GMT Not After : Jan 28 03:12:16 2027 GMT Subject: CN=D13DA981D2AB4A09FB017D899B24125D3FD57AF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:fd:35:5d:ff:1f:81:9d:c4:92:0d:fe:4c:3c: 33:d6:57:e1:e2:5f:bf:a7:11:ea:0e:c9:80:04:30: 97:a3:c4:7c:e7:da:f5:57:f7:d9:5d:0f:85:0f:fc: 7a:2f:f6:bf:04:54:25:f7:98:1f:6b:7e:fa:cd:0b: 87:f9:d9:d2:f9:66:e9:ed:b9:9c:65:3d:26:f1:4c: 77:84:08:10:f7:0a:91:ec:d7:0c:8e:d5:38:45:98: 95:f0:fc:56:4b:88:80:69:7c:29:9a:89:90:4a:2f: 44:f9:a7:52:08:ad:62:89:fc:5d:bb:38:8d:84:2f: a6:ae:cb:79:db:12:7c:f4:0c:9a:8f:4a:0b:c4:a5: 45:82:b0:84:e9:c0:f1:7d:44:78:18:45:a4:2f:f8: 42:55:97:07:b4:8b:f4:c2:cf:36:94:d7:b3:fe:46: 30:e8:30:a0:6b:bf:6a:6e:be:d7:6a:31:f6:62:0a: 9d:89:75:2c:05:a8:c4:04:7f:fe:83:76:6c:00:ef: 62:43:c6:33:83:82:98:28:6f:fb:99:2d:bc:f3:d0: 97:c5:2b:16:a7:59:e4:7c:1d:71:9c:18:f3:97:32: 34:3a:89:5f:b1:56:8f:78:c8:c4:1d:9f:1b:aa:cd: 80:70:bf:7b:e8:b1:ef:cf:f5:3c:33:11:71:5a:52: 4d:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D1:3D:A9:81:D2:AB:4A:09:FB:01:7D:89:9B:24:12:5D:3F:D5:7A:F2 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/939692FCBA2CBFEC64CB9594463B43E1D89DE4C453690BA02D1AFF801AB84162/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/939692FCBA2CBFEC64CB9594463B43E1D89DE4C453690BA02D1AFF801AB84162/0/D13DA981D2AB4A09FB017D899B24125D3FD57AF2.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:88d0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273983 Signature Algorithm: sha256WithRSAEncryption 17:01:4c:ed:4d:c8:08:0b:82:f0:b8:08:f7:b8:24:0e:01:c4: e8:7c:c7:36:41:3f:a7:0e:8d:00:c8:d3:5a:4e:3a:9b:ee:6a: e6:ba:c6:ac:bd:38:6f:f4:24:75:51:d0:e4:20:1b:6e:42:ac: f3:6b:19:74:f6:48:a6:59:1e:46:9c:8e:0a:84:22:c9:d7:bb: b6:ec:ab:b1:24:10:d3:55:7d:40:b9:f8:36:8b:f6:9d:a3:6d: 40:15:b3:d0:c0:49:f9:b1:bf:08:e1:71:96:50:3e:81:f5:d2: 36:84:2b:6c:eb:b1:03:4a:9b:ce:19:9c:e4:60:82:76:9f:3e: 36:65:37:b9:09:64:1e:c4:95:9e:c8:e1:04:a7:47:1d:16:1e: 1b:0c:6f:1e:20:a3:56:53:d8:39:85:8e:54:b8:47:21:30:27: b8:5c:af:6c:9c:b5:7c:8d:d7:17:34:ac:58:e5:0f:14:0b:1a: 52:4e:11:4f:74:95:47:f1:3b:22:cb:a0:ca:7f:49:10:02:20: c8:1f:e2:49:cd:71:e4:35:f2:1a:b5:9a:83:d0:eb:1f:18:16: a5:fa:4d:e8:e6:c3:61:39:da:26:9b:2c:03:ce:0f:e1:1f:a1: 64:c7:ac:5b:6a:11:e5:f7:14:73:0c:aa:88:47:f6:dd:4c:40: d8:da:fa:5f -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUBIW4XzvO62usz+lZczfPP4XMt08wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjkwMzA3MTZaFw0yNzAxMjgwMzEyMTZaMDMxMTAvBgNV BAMTKEQxM0RBOTgxRDJBQjRBMDlGQjAxN0Q4OTlCMjQxMjVEM0ZENTdBRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF/TVd/x+BncSSDf5MPDPWV+Hi X7+nEeoOyYAEMJejxHzn2vVX99ldD4UP/Hov9r8EVCX3mB9rfvrNC4f52dL5Zunt uZxlPSbxTHeECBD3CpHs1wyO1ThFmJXw/FZLiIBpfCmaiZBKL0T5p1IIrWKJ/F27 OI2EL6auy3nbEnz0DJqPSgvEpUWCsITpwPF9RHgYRaQv+EJVlwe0i/TCzzaU17P+ RjDoMKBrv2puvtdqMfZiCp2JdSwFqMQEf/6DdmwA72JDxjODgpgob/uZLbzz0JfF KxanWeR8HXGcGPOXMjQ6iV+xVo94yMQdnxuqzYBwv3vose/P9TwzEXFaUk2jAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTRPamB0qtKCfsB fYmbJBJdP9V68jAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvOTM5NjkyRkNCQTJDQkZFQzY0Q0I5NTk0 NDYzQjQzRTFEODlERTRDNDUzNjkwQkEwMkQxQUZGODAxQUI4NDE2Mi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy85Mzk2OTJGQ0JBMkNCRkVDNjRDQjk1OTQ0NjNCNDNFMUQ4OURFNEM0NTM2 OTBCQTAyRDFBRkY4MDFBQjg0MTYyLzAvRDEzREE5ODFEMkFCNEEwOUZCMDE3RDg5 OUIyNDEyNUQzRkQ1N0FGMi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAOI0DAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMELj8wDQYJKoZIhvcNAQELBQADggEBABcBTO1N yAgLgvC4CPe4JA4BxOh8xzZBP6cOjQDI01pOOpvuaua6xqy9OG/0JHVR0OQgG25C rPNrGXT2SKZZHkacjgqEIsnXu7bsq7EkENNVfUC5+DaL9p2jbUAVs9DASfmxvwjh cZZQPoH10jaEK2zrsQNKm84ZnORggnafPjZlN7kJZB7ElZ7I4QSnRx0WHhsMbx4g o1ZT2DmFjlS4RyEwJ7hcr2yctXyN1xc0rFjlDxQLGlJOEU90lUfxOyLLoMp/SRAC IMgf4knNceQ18hq1moPQ6x8YFqX6Tejmw2E52iabLAPOD+EfoWTHrFtqEeX3FHMM qohH9t1MQNja+l8= -----END CERTIFICATE-----Generated at Mon Mar 2 11:18:21 2026 by rpki-client