$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC6B5D05D2BEA8105B053586A2A58351BF8BA685.cer File: DC6B5D05D2BEA8105B053586A2A58351BF8BA685.cer (raw, json) Hash identifier: rf3CpN9jYPP1WtU6gHect8waJA0IGdYePG5uyaURYuw= Subject key identifier: DC:6B:5D:05:D2:BE:A8:10:5B:05:35:86:A2:A5:83:51:BF:8B:A6:85 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 7EC5ADBA840B3BF4AD17ECE9A46E44F5E802424C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/726832AD3DC115306D40816E48D71279691397BC328729DFC45F3227D582CD6E/0/DC6B5D05D2BEA8105B053586A2A58351BF8BA685.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/726832AD3DC115306D40816E48D71279691397BC328729DFC45F3227D582CD6E/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 08:09:20 +0000 Certificate not after: Wed 27 Jan 2027 08:14:20 +0000 Subordinate resources: AS: 274240 IP: 2803:17d0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:c5:ad:ba:84:0b:3b:f4:ad:17:ec:e9:a4:6e:44:f5:e8:02:42:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 08:09:20 2026 GMT Not After : Jan 27 08:14:20 2027 GMT Subject: CN=DC6B5D05D2BEA8105B053586A2A58351BF8BA685 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:03:8b:b3:d4:ca:9e:43:ca:13:7b:92:5a:a5: a3:c6:93:6c:ae:ac:95:fb:2d:4b:74:43:2a:48:ed: a7:6b:fd:67:7b:98:9c:31:2b:86:ee:ca:b3:0a:2b: 6d:a3:c0:41:15:14:c9:fd:f7:43:dc:8a:3e:c0:16: d1:1c:fe:b2:ab:69:6c:05:67:22:2f:61:4b:c4:b0: 27:40:b2:af:16:51:5a:0d:b3:b2:65:a1:d3:67:81: 58:e5:13:f4:86:d4:a3:a4:cb:f7:75:47:2b:58:59: d1:07:a8:88:28:46:ca:97:ba:f9:99:01:70:77:70: 8e:ee:c0:f2:55:11:c9:dd:bf:71:5e:f9:9e:8b:2c: c2:41:e2:60:c3:dd:9c:e0:0d:16:25:49:06:af:84: f4:e9:55:aa:6e:3c:7b:3d:7a:36:13:0b:ec:10:71: 3d:14:cb:0d:50:7f:c0:f2:a6:e5:50:1c:08:d3:15: e1:63:b7:0b:31:57:d2:f2:c1:a5:96:0f:3e:2e:8b: 3a:f8:18:1a:36:e2:6f:80:a3:ad:77:e4:e6:5c:22: da:db:49:13:ad:8c:21:80:d7:fd:93:dc:d7:ae:d3: fd:6e:9d:83:69:ae:bc:3b:c2:09:bb:22:50:84:02: c3:34:1a:a3:e7:94:1d:a8:3c:e5:cd:0a:21:ea:f5: bb:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DC:6B:5D:05:D2:BE:A8:10:5B:05:35:86:A2:A5:83:51:BF:8B:A6:85 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/726832AD3DC115306D40816E48D71279691397BC328729DFC45F3227D582CD6E/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/726832AD3DC115306D40816E48D71279691397BC328729DFC45F3227D582CD6E/0/DC6B5D05D2BEA8105B053586A2A58351BF8BA685.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:17d0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 274240 Signature Algorithm: sha256WithRSAEncryption 2f:96:7c:9a:ec:63:e5:b1:2f:ee:26:57:64:98:c4:a5:95:6a: 03:d4:76:56:d8:23:f8:57:27:ae:cf:2f:e5:bf:76:3f:80:1a: 31:64:b7:8a:43:c6:44:48:e1:a4:c2:4c:7e:15:f0:60:3f:26: b8:67:f3:56:9b:6b:c0:c9:43:aa:39:01:15:8d:4c:a7:8c:45: 19:2d:93:60:f0:e4:49:94:54:9d:e9:7d:61:c6:14:df:c6:23: 84:38:68:fe:1d:72:8b:8e:da:b2:f1:ed:a7:e0:10:b4:d3:24: 7f:9f:0c:74:24:da:28:89:19:fc:b5:f1:b5:76:ed:3a:ae:19: 0e:03:6b:ed:f6:29:14:b4:c1:9e:b1:19:95:09:d7:83:db:be: 88:5c:70:85:dd:75:eb:83:d6:d4:93:34:da:d6:fc:95:b8:f2: 84:78:f4:fb:e7:0f:c2:01:4a:46:e8:ec:e5:8e:1d:50:34:c7: 45:85:1e:f4:bd:5d:c5:8e:ee:4d:67:1a:2b:15:39:f7:0f:b4: 63:bc:28:ae:77:3c:15:bd:27:30:f8:39:66:d8:8f:6a:81:91: 76:94:33:6b:df:eb:b4:ac:86:a9:f3:d8:e4:dd:72:ec:ef:7a: d3:03:c2:1d:26:68:64:eb:12:eb:98:4e:b8:65:39:33:11:74: f0:2f:bd:fe -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUfsWtuoQLO/StF+zppG5E9egCQkwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgwODA5MjBaFw0yNzAxMjcwODE0MjBaMDMxMTAvBgNV BAMTKERDNkI1RDA1RDJCRUE4MTA1QjA1MzU4NkEyQTU4MzUxQkY4QkE2ODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqA4uz1MqeQ8oTe5JapaPGk2yu rJX7LUt0QypI7adr/Wd7mJwxK4buyrMKK22jwEEVFMn990Pcij7AFtEc/rKraWwF ZyIvYUvEsCdAsq8WUVoNs7JlodNngVjlE/SG1KOky/d1RytYWdEHqIgoRsqXuvmZ AXB3cI7uwPJVEcndv3Fe+Z6LLMJB4mDD3ZzgDRYlSQavhPTpVapuPHs9ejYTC+wQ cT0Uyw1Qf8DypuVQHAjTFeFjtwsxV9LywaWWDz4uizr4GBo24m+Ao6135OZcItrb SROtjCGA1/2T3Neu0/1unYNprrw7wgm7IlCEAsM0GqPnlB2oPOXNCiHq9buNAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTca10F0r6oEFsF NYaipYNRv4umhTAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNzI2ODMyQUQzREMxMTUzMDZENDA4MTZF NDhENzEyNzk2OTEzOTdCQzMyODcyOURGQzQ1RjMyMjdENTgyQ0Q2RS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy83MjY4MzJBRDNEQzExNTMwNkQ0MDgxNkU0OEQ3MTI3OTY5MTM5N0JDMzI4 NzI5REZDNDVGMzIyN0Q1ODJDRDZFLzAvREM2QjVEMDVEMkJFQTgxMDVCMDUzNTg2 QTJBNTgzNTFCRjhCQTY4NS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAMX0DAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEL0AwDQYJKoZIhvcNAQELBQADggEBAC+WfJrs Y+WxL+4mV2SYxKWVagPUdlbYI/hXJ67PL+W/dj+AGjFkt4pDxkRI4aTCTH4V8GA/ Jrhn81aba8DJQ6o5ARWNTKeMRRktk2Dw5EmUVJ3pfWHGFN/GI4Q4aP4dcouO2rLx 7afgELTTJH+fDHQk2iiJGfy18bV27TquGQ4Da+32KRS0wZ6xGZUJ14PbvohccIXd deuD1tSTNNrW/JW48oR49PvnD8IBSkbo7OWOHVA0x0WFHvS9XcWO7k1nGisVOfcP tGO8KK53PBW9JzD4OWbYj2qBkXaUM2vf67Sshqnz2OTdcuzvetMDwh0maGTrEuuY TrhlOTMRdPAvvf4= -----END CERTIFICATE-----Generated at Mon Mar 2 14:47:47 2026 by rpki-client