$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E97E37E90E2004FF865CAD09871B6A3D5AB4AC6D.cer File: E97E37E90E2004FF865CAD09871B6A3D5AB4AC6D.cer (raw, json) Hash identifier: 77GgvzaAbDX4/xsB0M5q7vdh+XSnuuBc1Df5ZrPF9EI= Subject key identifier: E9:7E:37:E9:0E:20:04:FF:86:5C:AD:09:87:1B:6A:3D:5A:B4:AC:6D Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 5F5D8012DE6EDFA7670DE373C838BD6052E454F1 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/D50B444A47220AB9DB443F5014580ADFEAF36B28D96B80BB3A17705049BF6D5A/0/E97E37E90E2004FF865CAD09871B6A3D5AB4AC6D.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/D50B444A47220AB9DB443F5014580ADFEAF36B28D96B80BB3A17705049BF6D5A/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 04:17:11 +0000 Certificate not after: Wed 27 Jan 2027 04:22:11 +0000 Subordinate resources: AS: 274129 IP: 2803:21d0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 05 Mar 2026 11:41:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:5d:80:12:de:6e:df:a7:67:0d:e3:73:c8:38:bd:60:52:e4:54:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 04:17:11 2026 GMT Not After : Jan 27 04:22:11 2027 GMT Subject: CN=E97E37E90E2004FF865CAD09871B6A3D5AB4AC6D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b4:bd:d4:79:d4:cc:19:2c:c9:78:aa:6c:8b: d9:f8:a0:3c:9d:48:84:9f:cc:77:f6:3c:3b:87:cc: 7f:7d:e3:dd:45:51:8e:87:a8:5f:60:0d:1b:27:18: 33:94:d2:36:eb:a9:aa:78:2e:59:39:86:32:24:0d: e4:12:25:a6:70:8e:cb:9d:bf:72:93:a4:97:39:05: 8d:62:ba:df:f5:78:89:af:2d:5f:90:25:08:9a:fe: 5c:24:da:75:f0:0b:25:53:43:10:f4:d2:da:76:1f: f5:59:9a:f7:8a:48:5a:90:84:07:d5:3f:a3:9b:ec: 97:b8:1d:75:99:97:c9:dc:2f:45:39:43:8e:4a:b6: 7f:6c:1a:e5:cd:53:fd:fa:28:e1:b7:a0:93:f3:31: 10:33:fa:ac:1d:f5:7c:43:45:08:89:74:df:80:1f: 0b:0b:6d:af:f1:3f:36:1f:b9:ad:ac:6e:54:fa:63: 21:cd:4f:00:bb:b4:d7:d2:87:c0:c8:6a:30:d9:e7: f3:31:62:9c:5c:a2:7e:a9:01:60:4a:13:40:23:b3: 87:ca:94:5f:5c:fd:0c:47:f3:49:a5:28:f5:af:32: c6:2e:10:e3:1d:75:8a:1e:8f:4c:40:5b:19:43:e8: 4f:b7:0a:5b:87:9a:b9:1d:fd:86:03:64:0c:48:bc: 55:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E9:7E:37:E9:0E:20:04:FF:86:5C:AD:09:87:1B:6A:3D:5A:B4:AC:6D X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/D50B444A47220AB9DB443F5014580ADFEAF36B28D96B80BB3A17705049BF6D5A/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/D50B444A47220AB9DB443F5014580ADFEAF36B28D96B80BB3A17705049BF6D5A/0/E97E37E90E2004FF865CAD09871B6A3D5AB4AC6D.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:21d0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 274129 Signature Algorithm: sha256WithRSAEncryption 77:46:1a:5f:17:15:a7:1f:c7:bb:d2:41:1f:49:0b:56:39:4c: 9c:3f:32:26:b1:75:ee:01:04:d4:d0:8a:a4:35:89:40:e8:bd: 18:33:12:a7:2f:11:7f:82:5c:af:c4:b9:00:cc:b3:1c:0a:e3: ad:e2:69:df:65:4f:26:0a:75:66:14:6c:79:cd:e1:5b:6f:12: 13:d8:b4:fe:c5:65:b6:08:34:cf:e4:da:6e:73:2d:5f:cc:3a: 37:8c:3d:c2:74:d3:e4:a6:c2:7b:a1:c1:26:4b:8f:6d:20:55: 0c:6b:b3:2e:50:0b:57:ae:03:24:35:30:96:0d:3b:33:58:91: c1:21:2a:52:18:99:09:dd:a9:09:bd:e3:d1:9b:4b:76:cd:8f: b1:a8:02:8c:0f:37:29:f6:8b:fa:53:d8:22:32:d2:ad:86:1e: cc:bc:fb:7a:0c:13:d4:22:13:c7:24:e6:e7:cb:8b:74:df:e2: f0:b5:0d:6c:01:90:f3:df:80:fc:bc:c5:39:8e:57:dd:ce:c8: 07:22:37:fc:72:4c:4b:95:30:ab:f4:71:23:18:49:29:14:f1: 3e:87:11:e0:4a:55:cc:1e:ad:4f:b0:38:8d:d6:de:6b:b8:a2: 10:d7:52:2d:b1:b4:94:48:70:6a:d6:e5:4c:6f:ce:f6:13:64: 5e:66:8b:fe -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUX12AEt5u36dnDeNzyDi9YFLkVPEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgwNDE3MTFaFw0yNzAxMjcwNDIyMTFaMDMxMTAvBgNV BAMTKEU5N0UzN0U5MEUyMDA0RkY4NjVDQUQwOTg3MUI2QTNENUFCNEFDNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLtL3UedTMGSzJeKpsi9n4oDyd SISfzHf2PDuHzH99491FUY6HqF9gDRsnGDOU0jbrqap4Llk5hjIkDeQSJaZwjsud v3KTpJc5BY1iut/1eImvLV+QJQia/lwk2nXwCyVTQxD00tp2H/VZmveKSFqQhAfV P6Ob7Je4HXWZl8ncL0U5Q45Ktn9sGuXNU/36KOG3oJPzMRAz+qwd9XxDRQiJdN+A HwsLba/xPzYfua2sblT6YyHNTwC7tNfSh8DIajDZ5/MxYpxcon6pAWBKE0Ajs4fK lF9c/QxH80mlKPWvMsYuEOMddYoej0xAWxlD6E+3CluHmrkd/YYDZAxIvFWnAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTpfjfpDiAE/4Zc rQmHG2o9WrSsbTAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRDUwQjQ0NEE0NzIyMEFCOURCNDQzRjUw MTQ1ODBBREZFQUYzNkIyOEQ5NkI4MEJCM0ExNzcwNTA0OUJGNkQ1QS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9ENTBCNDQ0QTQ3MjIwQUI5REI0NDNGNTAxNDU4MEFERkVBRjM2QjI4RDk2 QjgwQkIzQTE3NzA1MDQ5QkY2RDVBLzAvRTk3RTM3RTkwRTIwMDRGRjg2NUNBRDA5 ODcxQjZBM0Q1QUI0QUM2RC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAMh0DAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMELtEwDQYJKoZIhvcNAQELBQADggEBAHdGGl8X Facfx7vSQR9JC1Y5TJw/Miaxde4BBNTQiqQ1iUDovRgzEqcvEX+CXK/EuQDMsxwK 463iad9lTyYKdWYUbHnN4VtvEhPYtP7FZbYINM/k2m5zLV/MOjeMPcJ00+Smwnuh wSZLj20gVQxrsy5QC1euAyQ1MJYNOzNYkcEhKlIYmQndqQm949GbS3bNj7GoAowP Nyn2i/pT2CIy0q2GHsy8+3oME9QiE8ck5ufLi3Tf4vC1DWwBkPPfgPy8xTmOV93O yAciN/xyTEuVMKv0cSMYSSkU8T6HEeBKVcwerU+wOI3W3mu4ohDXUi2xtJRIcGrW 5UxvzvYTZF5mi/4= -----END CERTIFICATE-----Generated at Mon Mar 2 13:26:11 2026 by rpki-client