$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E765BDCFEE344BDD3C7BC95D0ABCFE91DEB963D4.cer File: E765BDCFEE344BDD3C7BC95D0ABCFE91DEB963D4.cer (raw, json) Hash identifier: XH+sdCiP4T/1gtoP01dkXrdfXkjsKZ2FKyXUfUaSx8U= Subject key identifier: E7:65:BD:CF:EE:34:4B:DD:3C:7B:C9:5D:0A:BC:FE:91:DE:B9:63:D4 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 1245C0C13B6498189F517F3B376E1D2ED879CDF7 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/B38B1CDB02DDB01165A25034C32EE09D88E03352CB974E468944870E3C037206/0/E765BDCFEE344BDD3C7BC95D0ABCFE91DEB963D4.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/B38B1CDB02DDB01165A25034C32EE09D88E03352CB974E468944870E3C037206/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 07:13:32 +0000 Certificate not after: Wed 27 Jan 2027 07:18:32 +0000 Subordinate resources: AS: 273255 IP: 2806:439::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:45:c0:c1:3b:64:98:18:9f:51:7f:3b:37:6e:1d:2e:d8:79:cd:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 07:13:32 2026 GMT Not After : Jan 27 07:18:32 2027 GMT Subject: CN=E765BDCFEE344BDD3C7BC95D0ABCFE91DEB963D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:09:7d:f2:e4:25:64:09:bb:11:35:26:49:31: a1:76:4a:8c:19:42:b6:9c:4d:02:4d:e8:17:5c:e0: bc:25:88:5e:e4:c3:19:8e:68:10:15:16:46:14:34: 55:f0:e2:c8:fc:c1:8a:11:47:9f:a5:31:57:40:2a: 93:50:e9:56:af:87:76:ef:e3:fc:3a:d7:36:9c:61: 49:95:7a:8d:15:18:fa:f6:2b:af:4d:3e:f2:99:cc: 30:22:a3:08:53:49:f4:ab:cc:6d:9c:d0:35:75:6b: 2d:8c:8f:2d:dd:47:be:7b:98:36:7a:df:30:95:8b: ad:67:08:1e:bd:1d:27:44:16:07:4a:69:17:2c:26: e4:e0:8a:79:83:3a:15:35:fd:19:7b:d3:bb:78:cf: 84:01:9e:4c:8e:e0:8c:b4:50:d3:c0:72:56:d5:8e: 1e:60:e9:d2:f7:d2:cd:a6:08:76:e1:b2:eb:a5:4b: d4:d4:e5:77:0c:7c:b3:46:59:16:35:6a:82:c8:43: a0:96:75:cc:66:c1:64:da:f7:14:ba:e0:67:44:e1: b4:0c:74:4a:63:c2:41:c8:9f:fd:9a:35:e7:de:e5: 78:8f:7d:82:eb:b0:cd:bd:fd:7e:c0:a9:54:a1:37: a1:61:73:4d:e3:a3:6a:cb:3d:11:07:0b:5f:1f:9e: 46:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E7:65:BD:CF:EE:34:4B:DD:3C:7B:C9:5D:0A:BC:FE:91:DE:B9:63:D4 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/B38B1CDB02DDB01165A25034C32EE09D88E03352CB974E468944870E3C037206/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/B38B1CDB02DDB01165A25034C32EE09D88E03352CB974E468944870E3C037206/0/E765BDCFEE344BDD3C7BC95D0ABCFE91DEB963D4.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2806:439::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273255 Signature Algorithm: sha256WithRSAEncryption 7c:ab:8d:01:f5:dd:a4:62:12:f0:aa:78:ac:3c:e3:e6:1d:28: 4e:44:95:54:64:ca:8d:66:c6:f4:f5:77:8c:6d:b3:f7:5c:5c: 23:2a:a7:86:9b:de:fd:3a:7e:78:39:81:0e:18:89:63:87:7c: 44:9e:1d:63:2a:68:4a:1c:8b:87:ea:d3:cf:d2:84:b1:bd:ed: 73:56:82:97:89:df:a9:4f:aa:03:90:cb:f3:7f:a9:4c:ea:1b: cf:e1:ef:62:9c:ee:09:14:b3:f0:95:6e:99:b1:23:01:e9:c8: 69:0d:5a:d1:22:93:aa:d0:26:86:43:1f:d1:21:39:22:b2:90: 75:d9:dc:69:f3:05:66:02:30:0e:45:c1:40:d2:41:bb:67:2a: 0f:31:d0:16:72:8d:ec:db:a3:3b:53:a3:0f:4f:80:33:fc:7a: f9:46:02:d7:4f:ed:bf:0f:40:5f:1d:15:87:41:9a:be:90:b5: 27:17:0b:2f:d2:bf:a5:8f:a3:6f:c3:fe:36:a7:9f:e0:73:6a: 34:59:c6:85:9a:6f:20:9a:f0:95:fd:56:62:62:e9:1e:3d:9d: 96:3f:82:d0:34:d2:b8:cc:ce:18:5d:90:e2:95:70:56:ad:bc: b1:41:a1:07:08:54:88:60:d6:2b:f6:44:b9:37:87:70:0b:68: 1a:db:c7:e9 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUEkXAwTtkmBifUX87N24dLth5zfcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgwNzEzMzJaFw0yNzAxMjcwNzE4MzJaMDMxMTAvBgNV BAMTKEU3NjVCRENGRUUzNDRCREQzQzdCQzk1RDBBQkNGRTkxREVCOTYzRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeCX3y5CVkCbsRNSZJMaF2SowZ QracTQJN6Bdc4LwliF7kwxmOaBAVFkYUNFXw4sj8wYoRR5+lMVdAKpNQ6Vavh3bv 4/w61zacYUmVeo0VGPr2K69NPvKZzDAiowhTSfSrzG2c0DV1ay2Mjy3dR757mDZ6 3zCVi61nCB69HSdEFgdKaRcsJuTginmDOhU1/Rl707t4z4QBnkyO4Iy0UNPAclbV jh5g6dL30s2mCHbhsuulS9TU5XcMfLNGWRY1aoLIQ6CWdcxmwWTa9xS64GdE4bQM dEpjwkHIn/2aNefe5XiPfYLrsM29/X7AqVShN6Fhc03jo2rLPREHC18fnkbRAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTnZb3P7jRL3Tx7 yV0KvP6R3rlj1DAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQjM4QjFDREIwMkREQjAxMTY1QTI1MDM0 QzMyRUUwOUQ4OEUwMzM1MkNCOTc0RTQ2ODk0NDg3MEUzQzAzNzIwNi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9CMzhCMUNEQjAyRERCMDExNjVBMjUwMzRDMzJFRTA5RDg4RTAzMzUyQ0I5 NzRFNDY4OTQ0ODcwRTNDMDM3MjA2LzAvRTc2NUJEQ0ZFRTM0NEJERDNDN0JDOTVE MEFCQ0ZFOTFERUI5NjNENC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAYEOTAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEK2cwDQYJKoZIhvcNAQELBQADggEBAHyrjQH1 3aRiEvCqeKw84+YdKE5ElVRkyo1mxvT1d4xts/dcXCMqp4ab3v06fng5gQ4YiWOH fESeHWMqaEoci4fq08/ShLG97XNWgpeJ36lPqgOQy/N/qUzqG8/h72Kc7gkUs/CV bpmxIwHpyGkNWtEik6rQJoZDH9EhOSKykHXZ3GnzBWYCMA5FwUDSQbtnKg8x0BZy jezboztTow9PgDP8evlGAtdP7b8PQF8dFYdBmr6QtScXCy/Sv6WPo2/D/jann+Bz ajRZxoWabyCa8JX9VmJi6R49nZY/gtA00rjMzhhdkOKVcFatvLFBoQcIVIhg1iv2 RLk3h3ALaBrbx+k= -----END CERTIFICATE-----Generated at Mon Mar 2 16:44:32 2026 by rpki-client