$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD.cer File: D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD.cer (raw, json) Hash identifier: 01mPUfFFkgqv4XPGSjrZcNqZ+xxjDz+HmKrjfR5O3pU= Subject key identifier: D4:3E:AD:E5:B8:CD:6D:CD:80:F7:0F:D4:6A:6D:1B:F4:C7:50:DC:BD Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 0DD1152E9EC06E3F0E44004A97CE75137CC0B708 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/D74CA2E530D5D876513430983AA42BBE8EFEB06912539DB7D2B8DECFEA516219/0/D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/D74CA2E530D5D876513430983AA42BBE8EFEB06912539DB7D2B8DECFEA516219/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 15:52:41 +0000 Certificate not after: Wed 27 Jan 2027 15:57:41 +0000 Subordinate resources: AS: 273167 IP: 2803:d250::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:d1:15:2e:9e:c0:6e:3f:0e:44:00:4a:97:ce:75:13:7c:c0:b7:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 15:52:41 2026 GMT Not After : Jan 27 15:57:41 2027 GMT Subject: CN=D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:4d:d9:4d:c0:84:14:ed:8e:5b:eb:36:4b:f5: e3:2e:a1:09:c8:a6:91:5d:96:ae:35:f7:e1:f0:e7: 5f:4b:f3:5e:b4:c4:8e:ce:91:e5:70:af:6f:bc:89: ad:6a:0a:87:d6:e5:fa:05:ee:72:a6:0a:06:22:7f: 1e:4c:d6:11:71:72:d5:33:63:2d:f8:a2:64:c8:a5: 12:68:1e:5c:49:07:44:61:b6:6f:ef:ac:52:dc:0b: 5a:b3:13:60:9f:ce:69:cb:30:65:14:80:64:71:b1: 40:1a:31:08:6e:ce:45:09:f0:a2:5d:7b:1d:f1:c1: fa:ad:6f:95:4c:77:25:c0:04:b2:c9:82:1b:b2:04: b6:17:61:08:bf:80:36:2e:d3:68:2c:8a:d8:58:1e: 3a:a3:63:0d:88:5c:a2:58:19:13:9b:72:d6:4c:5d: 0d:0e:f3:98:af:cc:1e:aa:ad:f1:58:52:d3:34:f2: 94:f9:34:d7:fc:35:41:34:e2:a3:17:c6:17:ae:ac: c8:82:58:53:d2:b9:c2:45:7d:8d:4e:57:0f:fd:f6: c9:e4:d8:48:c0:19:76:95:d6:51:60:83:70:47:31: 6d:66:b9:05:9b:74:b9:db:ce:cf:60:4c:ed:c2:3f: d7:44:c4:99:e5:a8:b4:f5:4e:aa:b8:de:06:11:96: 8c:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D4:3E:AD:E5:B8:CD:6D:CD:80:F7:0F:D4:6A:6D:1B:F4:C7:50:DC:BD X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/D74CA2E530D5D876513430983AA42BBE8EFEB06912539DB7D2B8DECFEA516219/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/D74CA2E530D5D876513430983AA42BBE8EFEB06912539DB7D2B8DECFEA516219/0/D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:d250::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273167 Signature Algorithm: sha256WithRSAEncryption 14:32:1e:7e:eb:85:fd:ca:36:56:4a:80:0d:fc:46:31:86:9c: 20:fb:4c:0d:ff:df:2b:71:8c:cf:c7:87:21:9d:de:0d:72:46: 03:c1:c2:34:88:b2:08:6e:db:df:f9:f1:42:7f:23:3c:71:9c: a7:31:dd:0f:0b:fc:02:15:ca:80:49:e5:ba:7b:89:d5:aa:f0: 71:c4:76:2b:ec:b3:c2:89:22:06:a8:a7:65:de:ab:fa:6f:8e: 9b:4c:f2:bd:4a:d5:2e:d4:90:6a:02:b3:93:ea:2f:85:fe:42: a4:4b:b6:c8:ef:00:20:c3:58:8d:c5:80:b9:6d:54:6b:61:ac: 0b:bc:64:3b:e6:79:57:c1:2c:b1:7d:f3:f5:a1:4f:d3:1a:9c: d7:77:50:db:c7:0f:17:6e:62:2d:0e:f8:10:70:d8:e0:71:2e: ff:16:29:b0:89:e5:61:20:9e:db:0d:d8:47:d3:51:e4:f1:66: 74:3b:09:7f:5d:b3:90:c9:a1:8c:db:d7:a4:44:58:f3:ca:67: c7:d5:a7:23:ad:5a:06:d7:65:1c:f1:14:4a:ea:1a:38:46:c9: 3f:46:98:6a:73:cb:c8:c9:7f:68:7a:0c:55:9d:b2:5f:48:47: e3:ba:5e:0a:fe:8e:d9:be:a8:d8:06:02:f0:ae:15:66:dd:b7: ff:df:3b:7f -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUDdEVLp7Abj8ORABKl851E3zAtwgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgxNTUyNDFaFw0yNzAxMjcxNTU3NDFaMDMxMTAvBgNV BAMTKEQ0M0VBREU1QjhDRDZEQ0Q4MEY3MEZENDZBNkQxQkY0Qzc1MERDQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmTdlNwIQU7Y5b6zZL9eMuoQnI ppFdlq419+Hw519L8160xI7OkeVwr2+8ia1qCofW5foF7nKmCgYifx5M1hFxctUz Yy34omTIpRJoHlxJB0Rhtm/vrFLcC1qzE2CfzmnLMGUUgGRxsUAaMQhuzkUJ8KJd ex3xwfqtb5VMdyXABLLJghuyBLYXYQi/gDYu02gsithYHjqjYw2IXKJYGRObctZM XQ0O85ivzB6qrfFYUtM08pT5NNf8NUE04qMXxheurMiCWFPSucJFfY1OVw/99snk 2EjAGXaV1lFgg3BHMW1muQWbdLnbzs9gTO3CP9dExJnlqLT1Tqq43gYRloylAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTUPq3luM1tzYD3 D9RqbRv0x1DcvTAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRDc0Q0EyRTUzMEQ1RDg3NjUxMzQzMDk4 M0FBNDJCQkU4RUZFQjA2OTEyNTM5REI3RDJCOERFQ0ZFQTUxNjIxOS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9ENzRDQTJFNTMwRDVEODc2NTEzNDMwOTgzQUE0MkJCRThFRkVCMDY5MTI1 MzlEQjdEMkI4REVDRkVBNTE2MjE5LzAvRDQzRUFERTVCOENENkRDRDgwRjcwRkQ0 NkE2RDFCRjRDNzUwRENCRC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAPSUDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEKw8wDQYJKoZIhvcNAQELBQADggEBABQyHn7r hf3KNlZKgA38RjGGnCD7TA3/3ytxjM/HhyGd3g1yRgPBwjSIsghu29/58UJ/Izxx nKcx3Q8L/AIVyoBJ5bp7idWq8HHEdivss8KJIgaop2Xeq/pvjptM8r1K1S7UkGoC s5PqL4X+QqRLtsjvACDDWI3FgLltVGthrAu8ZDvmeVfBLLF98/WhT9ManNd3UNvH DxduYi0O+BBw2OBxLv8WKbCJ5WEgntsN2EfTUeTxZnQ7CX9ds5DJoYzb16REWPPK Z8fVpyOtWgbXZRzxFErqGjhGyT9GmGpzy8jJf2h6DFWdsl9IR+O6Xgr+jtm+qNgG AvCuFWbdt//fO38= -----END CERTIFICATE-----Generated at Mon Mar 2 17:08:03 2026 by rpki-client