$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E085F1A465DAF831D1169F1537328A32B5EE9BAB.cer File: E085F1A465DAF831D1169F1537328A32B5EE9BAB.cer (raw, json) Hash identifier: rekgSlG/oSEzrvsxKifC0eU50XY1IMhaoj6VzKD6Tbs= Subject key identifier: E0:85:F1:A4:65:DA:F8:31:D1:16:9F:15:37:32:8A:32:B5:EE:9B:AB Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 098A766C1AEFFFE6D0C763B9E20CC54E6D45513D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/FD3112AC1ACCA9CCE184F87864604C95B98A573F3B3E1C2E1BB52AD87E439874/0/E085F1A465DAF831D1169F1537328A32B5EE9BAB.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/FD3112AC1ACCA9CCE184F87864604C95B98A573F3B3E1C2E1BB52AD87E439874/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 27 Jan 2026 18:17:09 +0000 Certificate not after: Tue 26 Jan 2027 18:22:09 +0000 Subordinate resources: AS: 269902 IP: 2801:192::/40 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:8a:76:6c:1a:ef:ff:e6:d0:c7:63:b9:e2:0c:c5:4e:6d:45:51:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 27 18:17:09 2026 GMT Not After : Jan 26 18:22:09 2027 GMT Subject: CN=E085F1A465DAF831D1169F1537328A32B5EE9BAB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:09:6a:b3:cf:8e:02:2e:81:13:72:e2:8b:87: 56:9a:b2:17:0c:e3:b9:ca:b9:a6:45:45:84:bf:32: 98:0c:39:ad:e8:95:e7:85:85:e1:73:80:6d:a2:96: b7:d3:3a:22:6b:0b:3c:3b:98:3d:a5:40:ff:90:87: 96:e9:54:ca:74:48:9b:58:63:ba:3f:ba:6c:b4:67: 2d:07:95:69:8a:c9:17:45:0a:ec:97:e6:ba:8e:ad: 79:b5:3c:3e:7f:e3:8c:2b:1a:40:7f:e9:2f:63:b3: da:09:1d:c5:c6:62:50:54:0c:36:4e:13:f9:6d:99: 61:a4:77:61:a5:a0:f0:00:6c:6d:22:24:a7:88:c6: e3:52:7d:a7:1a:01:12:09:94:4e:0b:86:d0:d2:1a: d4:05:b2:33:cb:85:7b:a8:8f:88:6f:7b:25:22:23: a3:bb:a2:6f:f1:59:a1:22:cd:03:34:ef:25:e3:ac: d7:cb:71:6a:b8:7e:6d:5a:14:88:c5:f4:77:13:20: 49:43:ec:64:3c:7a:6f:b6:0c:ab:9e:6d:4c:33:07: 50:83:71:3e:8b:67:fb:09:2b:7a:0e:65:dd:a1:a1: 6e:2b:cf:99:f0:df:28:cd:94:ed:35:2e:06:90:19: 4a:e4:d1:e1:36:d6:20:6b:c6:55:df:5e:08:64:06: 04:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E0:85:F1:A4:65:DA:F8:31:D1:16:9F:15:37:32:8A:32:B5:EE:9B:AB X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/FD3112AC1ACCA9CCE184F87864604C95B98A573F3B3E1C2E1BB52AD87E439874/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/FD3112AC1ACCA9CCE184F87864604C95B98A573F3B3E1C2E1BB52AD87E439874/0/E085F1A465DAF831D1169F1537328A32B5EE9BAB.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2801:192::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 269902 Signature Algorithm: sha256WithRSAEncryption 64:b6:ab:50:13:19:8b:49:40:24:c4:68:74:67:9a:36:a2:76: 67:25:d0:ef:07:cf:87:7c:c4:69:00:bc:f1:14:08:e9:c2:4b: 6c:80:15:1f:d3:67:f3:0f:55:86:1c:df:4f:ce:31:e0:a5:df: 99:15:5c:d8:1d:76:12:e8:02:f5:64:cc:71:e5:93:08:87:26: dd:37:b0:32:59:5e:f0:89:57:01:a7:7a:ec:af:d3:cf:2f:5f: f9:96:f1:ef:fd:a1:fe:fd:15:5e:65:22:f4:f0:78:dd:70:01: 09:94:d6:63:dd:3b:72:f4:90:3a:c5:95:9d:26:d6:c9:d2:d7: 91:59:e5:12:6f:7b:d3:3b:cf:a6:3d:67:7e:58:52:04:04:08: f1:92:93:83:4a:9c:aa:cb:3f:a8:5b:a0:14:38:68:12:64:c6: bd:6c:41:d3:2b:d4:d4:69:ce:f7:c3:a1:ce:bf:64:e3:cb:2d: b9:3c:44:79:e1:e1:ab:ad:f1:14:b4:7b:12:ac:be:aa:91:d4: 51:6c:b2:ec:3b:75:aa:1a:0e:91:22:d8:da:d2:92:1b:21:23: 6c:f8:8b:b4:6e:9d:fb:16:a2:f5:58:38:26:1c:89:9b:3d:f6: 5e:e6:fc:26:a9:0f:70:81:df:58:7f:17:3d:47:d0:01:6a:bc: fc:8c:de:a7 -----BEGIN CERTIFICATE----- MIIGmDCCBYCgAwIBAgIUCYp2bBrv/+bQx2O54gzFTm1FUT0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjcxODE3MDlaFw0yNzAxMjYxODIyMDlaMDMxMTAvBgNV BAMTKEUwODVGMUE0NjVEQUY4MzFEMTE2OUYxNTM3MzI4QTMyQjVFRTlCQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVCWqzz44CLoETcuKLh1aashcM 47nKuaZFRYS/MpgMOa3oleeFheFzgG2ilrfTOiJrCzw7mD2lQP+Qh5bpVMp0SJtY Y7o/umy0Zy0HlWmKyRdFCuyX5rqOrXm1PD5/44wrGkB/6S9js9oJHcXGYlBUDDZO E/ltmWGkd2GloPAAbG0iJKeIxuNSfacaARIJlE4LhtDSGtQFsjPLhXuoj4hveyUi I6O7om/xWaEizQM07yXjrNfLcWq4fm1aFIjF9HcTIElD7GQ8em+2DKuebUwzB1CD cT6LZ/sJK3oOZd2hoW4rz5nw3yjNlO01LgaQGUrk0eE21iBrxlXfXghkBgRrAgMB AAGjggOiMIIDnjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTghfGkZdr4MdEW nxU3Mooyte6bqzAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRkQzMTEyQUMxQUNDQTlDQ0UxODRGODc4 NjQ2MDRDOTVCOThBNTczRjNCM0UxQzJFMUJCNTJBRDg3RTQzOTg3NC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9GRDMxMTJBQzFBQ0NBOUNDRTE4NEY4Nzg2NDYwNEM5NUI5OEE1NzNGM0Iz RTFDMkUxQkI1MkFEODdFNDM5ODc0LzAvRTA4NUYxQTQ2NURBRjgzMUQxMTY5RjE1 MzczMjhBMzJCNUVFOUJBQi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKAEBkgAwGgYI KwYBBQUHAQgBAf8ECzAJoAcwBQIDBB5OMA0GCSqGSIb3DQEBCwUAA4IBAQBktqtQ ExmLSUAkxGh0Z5o2onZnJdDvB8+HfMRpALzxFAjpwktsgBUf02fzD1WGHN9PzjHg pd+ZFVzYHXYS6AL1ZMxx5ZMIhybdN7AyWV7wiVcBp3rsr9PPL1/5lvHv/aH+/RVe ZSL08HjdcAEJlNZj3Tty9JA6xZWdJtbJ0teRWeUSb3vTO8+mPWd+WFIEBAjxkpOD Spyqyz+oW6AUOGgSZMa9bEHTK9TUac73w6HOv2Tjyy25PER54eGrrfEUtHsSrL6q kdRRbLLsO3WqGg6RItja0pIbISNs+Iu0bp37FqL1WDgmHImbPfZe5vwmqQ9wgd9Y fxc9R9ABarz8jN6n -----END CERTIFICATE-----Generated at Mon Mar 2 22:49:01 2026 by rpki-client