$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D196F50BF4C5E8C8C8F6D6A756E4001CCBC71ACE.cer File: D196F50BF4C5E8C8C8F6D6A756E4001CCBC71ACE.cer (raw, json) Hash identifier: erLM4d/PD+pEOoPuqfw5JV16tRiV2Sk1SbJw/mqHUQc= Subject key identifier: D1:96:F5:0B:F4:C5:E8:C8:C8:F6:D6:A7:56:E4:00:1C:CB:C7:1A:CE Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 7089A0643CDBE287DF58A7463DAD6D124A09D07E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/DB1AD68115239E04434A464D37574DBD1BCED2D33D41C15455EADC2A923128AE/0/D196F50BF4C5E8C8C8F6D6A756E4001CCBC71ACE.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/DB1AD68115239E04434A464D37574DBD1BCED2D33D41C15455EADC2A923128AE/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 12:08:15 +0000 Certificate not after: Wed 27 Jan 2027 12:13:15 +0000 Subordinate resources: AS: 273158 IP: 2803:c250::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 05 Mar 2026 11:41:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:89:a0:64:3c:db:e2:87:df:58:a7:46:3d:ad:6d:12:4a:09:d0:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 12:08:15 2026 GMT Not After : Jan 27 12:13:15 2027 GMT Subject: CN=D196F50BF4C5E8C8C8F6D6A756E4001CCBC71ACE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:bd:9a:22:62:06:c5:18:90:c0:00:e4:b2:1d: 48:56:55:dd:9f:40:3d:ac:53:08:18:f5:4e:f8:dc: 9f:b6:15:1f:5b:d3:a8:c6:03:6f:70:4f:dc:a7:a5: 6e:4a:59:03:22:18:61:5c:07:b4:e0:17:15:67:bd: 5e:03:34:11:d2:39:b3:a7:51:02:92:0a:2c:4e:89: 6a:a8:72:77:34:1d:56:85:95:06:59:3a:a8:12:8d: 6d:d3:09:39:0d:05:d9:95:9c:ed:13:fe:93:a6:55: a8:c8:c0:b5:28:c0:77:28:ba:0e:8e:43:0a:73:a1: 5b:e2:89:fa:f0:fe:b0:e2:fa:a7:cb:80:61:94:5d: b6:da:80:2f:50:ea:58:eb:89:f9:2d:e3:eb:de:68: 40:7f:31:fb:f8:75:05:f7:96:59:7c:94:f2:9c:19: 02:56:8e:81:be:57:1c:77:8f:7c:c6:dc:fa:1e:3b: ec:e8:96:4a:e7:55:0b:ca:e0:c9:c2:0f:d8:f0:fc: 9b:fc:a3:5d:10:a3:91:2d:84:48:6c:f0:bb:96:f1: 4a:82:65:02:c4:e9:ca:52:ed:28:33:b4:21:b9:d4: fc:65:a9:1d:5c:7e:22:85:a5:6b:a4:be:d8:37:57: 0f:3c:1d:60:63:3c:f6:38:d3:85:3d:f7:fc:c1:60: 5d:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D1:96:F5:0B:F4:C5:E8:C8:C8:F6:D6:A7:56:E4:00:1C:CB:C7:1A:CE X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/DB1AD68115239E04434A464D37574DBD1BCED2D33D41C15455EADC2A923128AE/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/DB1AD68115239E04434A464D37574DBD1BCED2D33D41C15455EADC2A923128AE/0/D196F50BF4C5E8C8C8F6D6A756E4001CCBC71ACE.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:c250::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273158 Signature Algorithm: sha256WithRSAEncryption 31:b4:c2:56:b9:e9:cb:52:8c:d7:e2:65:2c:7e:45:d7:72:2c: c2:e6:53:fa:80:39:e8:e6:fb:19:b5:2e:35:a3:d3:5f:a1:a4: d6:ad:68:71:da:8a:0a:7c:57:e4:d4:ae:72:ff:d8:3c:92:73: 34:40:d1:04:d6:7c:ac:a8:59:19:09:8f:c5:1e:97:8e:90:15: 4a:90:63:f5:99:b2:77:2b:f3:8b:ad:db:24:db:a5:12:a5:b5: a9:e8:ad:21:8a:a3:b2:a2:60:45:2f:dc:e5:37:8e:3c:5d:71: d4:de:b8:5a:c2:18:c7:ce:c4:bb:b5:86:f8:19:06:c7:30:eb: 15:5b:04:06:33:4b:69:a4:f9:82:cb:e7:66:c3:25:5f:0d:5a: 66:6f:e7:b9:b4:4b:6e:af:d6:e2:66:33:29:e1:f9:5e:b8:6e: 5a:0b:76:3a:cb:a9:55:d1:48:77:f4:e6:d3:05:14:cf:7f:00: b9:f5:f9:79:06:f6:1a:8d:f4:33:34:62:68:03:97:27:c1:86: 60:21:d9:aa:89:61:96:d2:6d:5f:6b:15:85:91:21:f6:04:38: 39:96:8c:cd:e7:28:49:39:7b:7b:2d:fe:6e:85:b2:28:04:40: ad:a4:c8:53:1e:7c:ba:05:e9:45:11:d3:cd:8d:ec:64:61:13: f8:3b:63:4d -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUcImgZDzb4offWKdGPa1tEkoJ0H4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgxMjA4MTVaFw0yNzAxMjcxMjEzMTVaMDMxMTAvBgNV BAMTKEQxOTZGNTBCRjRDNUU4QzhDOEY2RDZBNzU2RTQwMDFDQ0JDNzFBQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCvZoiYgbFGJDAAOSyHUhWVd2f QD2sUwgY9U743J+2FR9b06jGA29wT9ynpW5KWQMiGGFcB7TgFxVnvV4DNBHSObOn UQKSCixOiWqocnc0HVaFlQZZOqgSjW3TCTkNBdmVnO0T/pOmVajIwLUowHcoug6O QwpzoVviifrw/rDi+qfLgGGUXbbagC9Q6ljrifkt4+veaEB/Mfv4dQX3lll8lPKc GQJWjoG+Vxx3j3zG3PoeO+zolkrnVQvK4MnCD9jw/Jv8o10Qo5EthEhs8LuW8UqC ZQLE6cpS7SgztCG51PxlqR1cfiKFpWukvtg3Vw88HWBjPPY404U99/zBYF0XAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTRlvUL9MXoyMj2 1qdW5AAcy8cazjAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvREIxQUQ2ODExNTIzOUUwNDQzNEE0NjRE Mzc1NzREQkQxQkNFRDJEMzNENDFDMTU0NTVFQURDMkE5MjMxMjhBRS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9EQjFBRDY4MTE1MjM5RTA0NDM0QTQ2NEQzNzU3NERCRDFCQ0VEMkQzM0Q0 MUMxNTQ1NUVBREMyQTkyMzEyOEFFLzAvRDE5NkY1MEJGNEM1RThDOEM4RjZENkE3 NTZFNDAwMUNDQkM3MUFDRS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAPCUDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEKwYwDQYJKoZIhvcNAQELBQADggEBADG0wla5 6ctSjNfiZSx+RddyLMLmU/qAOejm+xm1LjWj01+hpNataHHaigp8V+TUrnL/2DyS czRA0QTWfKyoWRkJj8Uel46QFUqQY/WZsncr84ut2yTbpRKltanorSGKo7KiYEUv 3OU3jjxdcdTeuFrCGMfOxLu1hvgZBscw6xVbBAYzS2mk+YLL52bDJV8NWmZv57m0 S26v1uJmMynh+V64bloLdjrLqVXRSHf05tMFFM9/ALn1+XkG9hqN9DM0YmgDlyfB hmAh2aqJYZbSbV9rFYWRIfYEODmWjM3nKEk5e3st/m6FsigEQK2kyFMefLoF6UUR 082N7GRhE/g7Y00= -----END CERTIFICATE-----Generated at Mon Mar 2 12:28:49 2026 by rpki-client