$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7CD1DD417D4984BBAA3B202F8815F2B8E6F9FFA.cer File: D7CD1DD417D4984BBAA3B202F8815F2B8E6F9FFA.cer (raw, json) Hash identifier: Ob18d6Mgo68jxAkVXAsQERA9Zc1V5YypQf3YtbXTwzc= Subject key identifier: D7:CD:1D:D4:17:D4:98:4B:BA:A3:B2:02:F8:81:5F:2B:8E:6F:9F:FA Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 5D477375B6A3A94D9E376EC8E464124D00B41B12 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/8488B76BE88430924D65B4F45A4A9CE1DB6B37DB371F3BB62C522C3AB4302CE2/0/D7CD1DD417D4984BBAA3B202F8815F2B8E6F9FFA.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/8488B76BE88430924D65B4F45A4A9CE1DB6B37DB371F3BB62C522C3AB4302CE2/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 01:01:47 +0000 Certificate not after: Wed 27 Jan 2027 01:06:47 +0000 Subordinate resources: AS: 272934 IP: 2801:1e:d800::/48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:47:73:75:b6:a3:a9:4d:9e:37:6e:c8:e4:64:12:4d:00:b4:1b:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 01:01:47 2026 GMT Not After : Jan 27 01:06:47 2027 GMT Subject: CN=D7CD1DD417D4984BBAA3B202F8815F2B8E6F9FFA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:10:28:55:2d:66:55:aa:38:f6:ee:9d:49:f5: 95:f7:f4:8d:cb:03:19:4f:d1:2a:72:8d:fa:7a:8e: 07:73:b0:f8:9c:cd:c3:1d:8a:72:30:f7:86:28:e0: c9:fe:39:e8:e5:ed:da:e6:06:15:03:61:3a:d5:ee: b5:5f:44:de:d6:39:90:0d:3b:cf:ba:f4:44:e4:50: 68:4d:1b:2a:8b:d9:00:52:d8:49:a7:08:89:df:01: 74:d0:a5:9d:48:3f:e9:52:2f:c6:9c:45:36:11:6c: 9f:fa:63:f3:2d:18:ce:e0:eb:55:3f:06:f5:37:f0: 00:f9:cc:da:9d:c5:b0:5d:1c:39:ae:0f:15:64:ae: af:21:b4:2f:0c:06:af:b7:47:7a:be:75:2c:1f:ec: bc:9f:ed:df:4e:82:07:67:66:e6:74:9e:47:d3:cc: b8:59:49:a0:94:c6:80:57:d7:69:9b:12:c7:f3:99: b9:f2:34:e8:33:46:ae:9a:97:0b:2e:e8:83:62:39: dd:fc:ae:2e:5c:6e:13:c8:2e:fe:9c:84:a6:98:4b: 17:be:67:64:9f:a4:8c:20:7b:47:0a:bb:d2:88:f3: e2:f4:e1:45:7f:9f:d0:df:53:09:00:f2:ee:23:15: 78:72:e7:f1:f4:4b:6c:28:69:b4:f0:e1:0f:ce:2e: e1:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D7:CD:1D:D4:17:D4:98:4B:BA:A3:B2:02:F8:81:5F:2B:8E:6F:9F:FA X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/8488B76BE88430924D65B4F45A4A9CE1DB6B37DB371F3BB62C522C3AB4302CE2/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/8488B76BE88430924D65B4F45A4A9CE1DB6B37DB371F3BB62C522C3AB4302CE2/0/D7CD1DD417D4984BBAA3B202F8815F2B8E6F9FFA.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2801:1e:d800::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 272934 Signature Algorithm: sha256WithRSAEncryption 3f:52:1b:d8:d0:b3:83:53:28:8a:5e:b6:86:9e:7f:67:5e:12: be:0e:ea:fd:6f:15:75:be:65:4a:eb:32:fa:01:be:be:0e:98: d9:ac:f8:82:09:20:f4:29:a5:39:1e:a9:ce:97:c9:a9:d7:fb: 03:35:9a:3a:20:75:d8:63:94:57:92:cd:ac:81:87:92:08:72: 0e:9a:57:36:30:06:e6:dd:cd:05:eb:86:06:09:08:5b:b0:63: a3:80:4f:61:8e:a7:51:78:ee:f6:c5:7c:7c:f9:20:5a:eb:51: 8c:21:6a:f4:4f:06:f2:32:83:ab:54:93:6a:81:e6:c6:f4:96: 99:e0:6c:2b:d2:07:6c:92:78:26:f3:3d:d0:a7:81:7b:1d:a7: ee:6e:28:e8:41:e6:ee:83:27:2f:67:44:74:fe:a2:f6:1f:6e: c0:e5:94:e9:b3:d4:76:c3:e0:55:33:8e:58:c6:8c:9f:3b:10: 8f:05:1a:3c:6f:6a:33:c6:7a:e5:9b:4c:2e:2f:e7:f4:b5:e8: cf:91:bd:ac:b5:2c:e4:dd:d2:3c:b1:49:2c:4c:f0:1b:2f:4d: 8d:15:a6:fe:19:e6:8f:30:13:1c:e1:89:3d:05:63:a5:94:a6: 17:75:6d:c4:b4:5d:43:88:7f:a3:e2:06:b1:16:5b:67:3b:9e: 4d:89:a2:13 -----BEGIN CERTIFICATE----- MIIGmTCCBYGgAwIBAgIUXUdzdbajqU2eN27I5GQSTQC0GxIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgwMTAxNDdaFw0yNzAxMjcwMTA2NDdaMDMxMTAvBgNV BAMTKEQ3Q0QxREQ0MTdENDk4NEJCQUEzQjIwMkY4ODE1RjJCOEU2RjlGRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuEChVLWZVqjj27p1J9ZX39I3L AxlP0Spyjfp6jgdzsPiczcMdinIw94Yo4Mn+Oejl7drmBhUDYTrV7rVfRN7WOZAN O8+69ETkUGhNGyqL2QBS2EmnCInfAXTQpZ1IP+lSL8acRTYRbJ/6Y/MtGM7g61U/ BvU38AD5zNqdxbBdHDmuDxVkrq8htC8MBq+3R3q+dSwf7Lyf7d9OggdnZuZ0nkfT zLhZSaCUxoBX12mbEsfzmbnyNOgzRq6alwsu6INiOd38ri5cbhPILv6chKaYSxe+ Z2SfpIwge0cKu9KI8+L04UV/n9DfUwkA8u4jFXhy5/H0S2woabTw4Q/OLuE3AgMB AAGjggOjMIIDnzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTXzR3UF9SYS7qj sgL4gV8rjm+f+jAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvODQ4OEI3NkJFODg0MzA5MjRENjVCNEY0 NUE0QTlDRTFEQjZCMzdEQjM3MUYzQkI2MkM1MjJDM0FCNDMwMkNFMi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy84NDg4Qjc2QkU4ODQzMDkyNEQ2NUI0RjQ1QTRBOUNFMURCNkIzN0RCMzcx RjNCQjYyQzUyMkMzQUI0MzAyQ0UyLzAvRDdDRDFERDQxN0Q0OTg0QkJBQTNCMjAy Rjg4MTVGMkI4RTZGOUZGQS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKAEAHtgAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwQqJjANBgkqhkiG9w0BAQsFAAOCAQEAP1Ib 2NCzg1Moil62hp5/Z14Svg7q/W8Vdb5lSusy+gG+vg6Y2az4ggkg9CmlOR6pzpfJ qdf7AzWaOiB12GOUV5LNrIGHkghyDppXNjAG5t3NBeuGBgkIW7Bjo4BPYY6nUXju 9sV8fPkgWutRjCFq9E8G8jKDq1STaoHmxvSWmeBsK9IHbJJ4JvM90KeBex2n7m4o 6EHm7oMnL2dEdP6i9h9uwOWU6bPUdsPgVTOOWMaMnzsQjwUaPG9qM8Z65ZtMLi/n 9LXoz5G9rLUs5N3SPLFJLEzwGy9NjRWm/hnmjzATHOGJPQVjpZSmF3VtxLRdQ4h/ o+IGsRZbZzueTYmiEw== -----END CERTIFICATE-----Generated at Mon Mar 2 16:50:25 2026 by rpki-client