$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E215E5E3473A1E794C08DAFA463F4D95CCA75773.cer File: E215E5E3473A1E794C08DAFA463F4D95CCA75773.cer (raw, json) Hash identifier: J0eiBXQnSADh4JgFzkLTpgyflE2qLWJ7fqaIjFT+C+M= Subject key identifier: E2:15:E5:E3:47:3A:1E:79:4C:08:DA:FA:46:3F:4D:95:CC:A7:57:73 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 012220D8AC2395CFFCCD84D0C658C48563EDA54A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/85719D4526B55CDE66ACE5D716188AF8EDA7E0F2A84DA15F549B03BC5438B7A0/0/E215E5E3473A1E794C08DAFA463F4D95CCA75773.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/85719D4526B55CDE66ACE5D716188AF8EDA7E0F2A84DA15F549B03BC5438B7A0/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 06:53:21 +0000 Certificate not after: Wed 27 Jan 2027 06:58:21 +0000 Subordinate resources: AS: 274195 IP: 2803:ddd0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 05 Mar 2026 11:41:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:22:20:d8:ac:23:95:cf:fc:cd:84:d0:c6:58:c4:85:63:ed:a5:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 06:53:21 2026 GMT Not After : Jan 27 06:58:21 2027 GMT Subject: CN=E215E5E3473A1E794C08DAFA463F4D95CCA75773 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:07:d3:b4:cd:37:81:23:32:4b:a5:79:6c:ce: 0e:60:88:f6:be:90:e8:57:84:99:9f:84:04:38:cd: 33:9e:e1:62:50:c6:31:a7:7e:8f:ac:72:8c:1b:d1: 4f:9f:4f:09:43:47:b2:6f:3f:25:e6:0c:36:34:65: 98:3a:0f:2f:a2:3c:0a:92:1a:94:2d:87:4e:81:c9: 37:62:7c:d3:50:94:b5:ab:9a:21:31:11:14:6b:7f: de:53:12:be:09:83:77:ce:ca:5c:44:3d:38:25:c5: 12:92:69:0d:62:20:f1:88:d5:12:e0:5b:5e:64:7d: e4:62:20:ec:b6:53:ac:af:ce:44:b9:ea:55:c4:ab: b5:4a:2f:9d:7c:93:21:53:71:1e:0c:c9:f3:3a:a7: 76:81:fe:11:97:a4:55:32:da:18:73:c2:66:5b:5d: a3:88:c4:52:9f:9e:72:9c:fa:88:cf:b3:b2:ad:40: 50:3c:3f:b9:21:3e:55:c3:0c:d4:79:7f:ff:2c:56: 65:82:e0:ee:55:db:12:8d:a6:fc:4a:37:75:82:81: d6:e7:3d:79:c9:bb:17:81:72:6d:39:6b:9c:bc:c5: f8:8f:7e:61:63:ac:18:b9:42:9d:c6:c8:bd:73:9f: 52:db:43:80:ee:66:ed:a1:0a:c2:0f:b5:01:6a:c2: 59:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E2:15:E5:E3:47:3A:1E:79:4C:08:DA:FA:46:3F:4D:95:CC:A7:57:73 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/85719D4526B55CDE66ACE5D716188AF8EDA7E0F2A84DA15F549B03BC5438B7A0/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/85719D4526B55CDE66ACE5D716188AF8EDA7E0F2A84DA15F549B03BC5438B7A0/0/E215E5E3473A1E794C08DAFA463F4D95CCA75773.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:ddd0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 274195 Signature Algorithm: sha256WithRSAEncryption 75:8d:d5:68:5c:9b:b3:66:62:22:a6:53:e5:fc:8e:67:d6:ec: 25:2c:98:c9:66:6d:b8:a9:55:a0:e3:83:6a:d4:48:ae:64:b4: 09:ec:4f:a6:17:e9:ad:3d:43:03:32:7a:dd:9e:61:4b:9b:91: eb:c3:f0:86:3f:26:26:d7:c0:57:15:85:6e:70:57:fa:62:fc: 75:86:e8:75:89:1f:f0:dc:de:62:1d:34:c4:d6:ef:ec:d3:da: 38:b2:ea:c0:45:8c:50:cc:ba:b7:1f:94:df:3c:53:75:33:3e: c0:37:71:f5:b5:23:38:23:dd:c4:58:d6:cb:2a:7b:4b:63:f8: 10:29:12:57:7a:5e:b2:7b:7b:78:3a:5c:1a:10:c2:af:13:9e: 85:34:6d:71:68:a0:70:b6:34:39:01:58:bb:a4:c1:8f:ab:12: b0:14:7a:79:65:06:52:97:2c:1f:d9:2d:5d:f2:f3:2b:6c:f3: 49:73:37:1b:5c:2e:5a:9e:b5:67:74:24:01:6e:2c:6e:d0:92: 67:02:16:a3:d2:d4:d5:21:36:0a:29:d8:0f:2b:5a:bc:f7:55: cb:a5:b7:c5:93:7c:5a:c5:81:83:e3:58:15:29:b0:5b:73:4b: c5:33:8c:0a:c6:79:48:13:1d:73:2f:cd:40:98:c9:36:9a:66: 0d:d1:8d:2d -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUASIg2Kwjlc/8zYTQxljEhWPtpUowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgwNjUzMjFaFw0yNzAxMjcwNjU4MjFaMDMxMTAvBgNV BAMTKEUyMTVFNUUzNDczQTFFNzk0QzA4REFGQTQ2M0Y0RDk1Q0NBNzU3NzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWB9O0zTeBIzJLpXlszg5giPa+ kOhXhJmfhAQ4zTOe4WJQxjGnfo+scowb0U+fTwlDR7JvPyXmDDY0ZZg6Dy+iPAqS GpQth06ByTdifNNQlLWrmiExERRrf95TEr4Jg3fOylxEPTglxRKSaQ1iIPGI1RLg W15kfeRiIOy2U6yvzkS56lXEq7VKL518kyFTcR4MyfM6p3aB/hGXpFUy2hhzwmZb XaOIxFKfnnKc+ojPs7KtQFA8P7khPlXDDNR5f/8sVmWC4O5V2xKNpvxKN3WCgdbn PXnJuxeBcm05a5y8xfiPfmFjrBi5Qp3GyL1zn1LbQ4DuZu2hCsIPtQFqwlnJAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTiFeXjRzoeeUwI 2vpGP02VzKdXczAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvODU3MTlENDUyNkI1NUNERTY2QUNFNUQ3 MTYxODhBRjhFREE3RTBGMkE4NERBMTVGNTQ5QjAzQkM1NDM4QjdBMC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy84NTcxOUQ0NTI2QjU1Q0RFNjZBQ0U1RDcxNjE4OEFGOEVEQTdFMEYyQTg0 REExNUY1NDlCMDNCQzU0MzhCN0EwLzAvRTIxNUU1RTM0NzNBMUU3OTRDMDhEQUZB NDYzRjREOTVDQ0E3NTc3My5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAPd0DAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMELxMwDQYJKoZIhvcNAQELBQADggEBAHWN1Whc m7NmYiKmU+X8jmfW7CUsmMlmbbipVaDjg2rUSK5ktAnsT6YX6a09QwMyet2eYUub kevD8IY/JibXwFcVhW5wV/pi/HWG6HWJH/Dc3mIdNMTW7+zT2jiy6sBFjFDMurcf lN88U3UzPsA3cfW1Izgj3cRY1ssqe0tj+BApEld6XrJ7e3g6XBoQwq8TnoU0bXFo oHC2NDkBWLukwY+rErAUenllBlKXLB/ZLV3y8yts80lzNxtcLlqetWd0JAFuLG7Q kmcCFqPS1NUhNgop2A8rWrz3Vcult8WTfFrFgYPjWBUpsFtzS8UzjArGeUgTHXMv zUCYyTaaZg3RjS0= -----END CERTIFICATE-----Generated at Mon Mar 2 13:20:09 2026 by rpki-client