$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer File: D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer (raw, json) Hash identifier: FcQ8Duh4ureIEZcf8mA8+Jsfyfq6g0K+xynv/9rAVz8= Subject key identifier: D3:50:3D:03:E3:D4:DF:A0:76:7F:6D:FF:3B:A7:1D:D7:B6:23:6A:FA Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 78C53586B2CEE52E63138EDCBDB05A083276402D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 27 Jan 2026 19:12:53 +0000 Certificate not after: Tue 26 Jan 2027 19:17:53 +0000 Subordinate resources: AS: 6945 IP: 168.243.0.0/16 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:c5:35:86:b2:ce:e5:2e:63:13:8e:dc:bd:b0:5a:08:32:76:40:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 27 19:12:53 2026 GMT Not After : Jan 26 19:17:53 2027 GMT Subject: CN=D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:1e:43:33:3e:83:70:96:74:be:64:f6:27:74: 3e:a9:8d:85:26:05:1a:11:fd:6a:9b:b6:1a:85:7c: 76:98:0a:26:0d:da:d4:48:9d:b2:e2:61:12:35:b7: f1:4b:cd:05:24:3c:e4:05:31:03:89:2f:6a:eb:97: 93:b3:b0:9a:9a:82:06:fe:38:ca:38:ce:e5:89:07: 46:5c:c6:9a:14:19:52:01:58:42:1d:67:76:31:5c: 98:79:90:a8:a0:48:06:5e:0a:66:7f:94:b0:b9:f9: 1e:70:75:ac:0a:6a:f2:56:df:7e:fb:ce:1c:92:64: 6b:56:22:0e:cf:50:5f:e4:5c:fc:d5:6a:1d:96:51: c5:17:2a:b8:bf:47:23:18:ab:a6:06:f5:85:09:dc: 67:31:ac:1b:8b:98:e9:3d:56:60:cd:40:f5:03:49: 67:cb:90:86:45:c7:cf:3f:79:0a:90:8b:50:0b:44: 51:e9:26:6c:e9:b1:ed:30:e6:05:b1:3b:e0:38:4a: 29:45:fc:fb:a4:60:0c:25:ae:1b:a9:e2:a2:cb:17: 5c:4d:54:b7:f2:8c:8f:17:b4:ce:90:9c:c7:e8:fa: b5:80:42:09:dd:77:d9:90:cf:d7:02:1c:4e:67:70: 89:fa:a7:9c:7a:19:87:46:5e:aa:e7:a0:96:e3:0e: a9:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D3:50:3D:03:E3:D4:DF:A0:76:7F:6D:FF:3B:A7:1D:D7:B6:23:6A:FA X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.243.0.0/16 sbgp-autonomousSysNum: critical Autonomous System Numbers: 6945 Signature Algorithm: sha256WithRSAEncryption 07:33:d4:09:5d:ea:8a:bb:3f:ee:00:44:aa:c6:af:6f:fb:7d: 1f:17:53:af:1a:df:08:c0:01:e4:b1:52:63:73:18:fa:08:32: 98:45:78:ec:4d:23:3e:64:1b:6e:2d:69:07:cd:9d:18:31:4f: 0c:6e:54:5d:ee:8c:35:24:2d:bc:8f:79:5e:31:61:a6:d0:1a: 5d:c4:b7:7f:f9:d2:76:e1:bc:43:55:7f:57:68:e0:a5:43:1c: b3:51:11:28:c6:86:d1:d7:f2:d1:30:6b:39:cd:7f:29:a8:d2: 7b:e3:17:7e:58:59:15:fa:5d:d7:6b:e3:8e:4d:9d:91:23:ba: 1f:fe:07:d8:5d:ea:09:d4:ef:8c:98:8f:a6:b6:85:fe:94:ca: cc:33:c4:73:a0:76:5c:84:f5:9c:69:5a:cc:fd:5a:bb:21:a8: f1:7f:14:5b:d5:d1:dd:55:ee:d2:fb:b5:bc:7b:a4:93:51:8b: ed:df:90:6c:11:ed:ec:7d:54:69:86:09:83:5e:44:12:f7:4d: fc:89:f8:de:98:d1:d4:ae:39:98:d1:bf:27:68:80:ee:59:d3: e5:13:ea:a6:15:5f:13:98:45:59:c5:5b:6d:5e:ff:38:70:78: 26:a5:81:17:4c:75:2b:22:5b:0c:57:32:72:55:a6:9a:c8:e1: 42:cc:16:79 -----BEGIN CERTIFICATE----- MIIGlDCCBXygAwIBAgIUeMU1hrLO5S5jE47cvbBaCDJ2QC0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjcxOTEyNTNaFw0yNzAxMjYxOTE3NTNaMDMxMTAvBgNV BAMTKEQzNTAzRDAzRTNENERGQTA3NjdGNkRGRjNCQTcxREQ3QjYyMzZBRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxHkMzPoNwlnS+ZPYndD6pjYUm BRoR/WqbthqFfHaYCiYN2tRInbLiYRI1t/FLzQUkPOQFMQOJL2rrl5OzsJqaggb+ OMo4zuWJB0ZcxpoUGVIBWEIdZ3YxXJh5kKigSAZeCmZ/lLC5+R5wdawKavJW3377 zhySZGtWIg7PUF/kXPzVah2WUcUXKri/RyMYq6YG9YUJ3GcxrBuLmOk9VmDNQPUD SWfLkIZFx88/eQqQi1ALRFHpJmzpse0w5gWxO+A4SilF/PukYAwlrhup4qLLF1xN VLfyjI8XtM6QnMfo+rWAQgndd9mQz9cCHE5ncIn6p5x6GYdGXqrnoJbjDqkvAgMB AAGjggOeMIIDmjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTTUD0D49TfoHZ/ bf87px3XtiNq+jAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMEJCMDcxRDk2RDhGQkUyQTg2OTkwOTA1 REMxN0UxOTkzNzBBNTcwNTIzNkEwMDA2NUQ2ODU2M0ZBQURCODVFNi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8wQkIwNzFEOTZEOEZCRTJBODY5OTA5MDVEQzE3RTE5OTM3MEE1NzA1MjM2 QTAwMDY1RDY4NTYzRkFBREI4NUU2LzAvRDM1MDNEMDNFM0Q0REZBMDc2N0Y2REZG M0JBNzFERDdCNjIzNkFGQS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAqPMwGQYIKwYB BQUHAQgBAf8ECjAIoAYwBAICGyEwDQYJKoZIhvcNAQELBQADggEBAAcz1Ald6oq7 P+4ARKrGr2/7fR8XU68a3wjAAeSxUmNzGPoIMphFeOxNIz5kG24taQfNnRgxTwxu VF3ujDUkLbyPeV4xYabQGl3Et3/50nbhvENVf1do4KVDHLNRESjGhtHX8tEwaznN fymo0nvjF35YWRX6Xddr445NnZEjuh/+B9hd6gnU74yYj6a2hf6UyswzxHOgdlyE 9ZxpWsz9WrshqPF/FFvV0d1V7tL7tbx7pJNRi+3fkGwR7ex9VGmGCYNeRBL3TfyJ +N6Y0dSuOZjRvydogO5Z0+UT6qYVXxOYRVnFW21e/zhweCalgRdMdSsiWwxXMnJV pprI4ULMFnk= -----END CERTIFICATE-----Generated at Mon Mar 2 15:17:27 2026 by rpki-client