$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC26A95A8D493E8519177437FA89CC286F0FAEE6.cer File: EC26A95A8D493E8519177437FA89CC286F0FAEE6.cer (raw, json) Hash identifier: x6xaq6AJ4S61drDraM+R58umYk5pNCbHxpmN9l7elnM= Subject key identifier: EC:26:A9:5A:8D:49:3E:85:19:17:74:37:FA:89:CC:28:6F:0F:AE:E6 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 48AED51C6770C011B960500A4E1B56AC1F8D06B1 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/E7081B9E47DB575C38A1C838D2672BB603A0097FA730421F332BA47EF2055C5E/0/EC26A95A8D493E8519177437FA89CC286F0FAEE6.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/E7081B9E47DB575C38A1C838D2672BB603A0097FA730421F332BA47EF2055C5E/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 15:46:55 +0000 Certificate not after: Wed 27 Jan 2027 15:51:55 +0000 Subordinate resources: AS: 274031 IP: 2803:1cd0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:ae:d5:1c:67:70:c0:11:b9:60:50:0a:4e:1b:56:ac:1f:8d:06:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 15:46:55 2026 GMT Not After : Jan 27 15:51:55 2027 GMT Subject: CN=EC26A95A8D493E8519177437FA89CC286F0FAEE6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:4d:09:d6:00:fa:47:d4:c7:7f:e9:1d:0f:6c: 46:b8:53:ae:15:ab:e8:ce:fa:77:59:d3:a9:c3:e1: 04:48:27:86:ea:6f:96:5e:ab:4b:17:e5:a1:83:d3: f9:93:b7:5e:28:f7:c3:2e:0e:c5:bc:92:f8:92:6d: 15:a2:fd:c9:a5:9b:84:ed:45:d0:08:81:d1:36:5b: 6b:ab:f8:34:44:bb:17:43:01:e8:d9:17:bd:19:61: a4:85:cc:73:cf:9b:a8:64:77:88:cc:70:61:10:d8: 4f:34:b9:e7:9b:d9:2c:0f:45:b5:b3:eb:f6:0d:25: 81:87:ed:a7:11:1e:0d:ac:f8:67:b2:55:17:73:a8: ee:38:18:1b:a0:4a:d2:b1:71:b8:48:ef:c2:46:df: 3b:e9:7c:4c:5e:3d:aa:aa:7e:85:10:78:41:ec:fb: 35:19:69:46:c1:4e:19:01:84:11:6b:a2:50:2b:c6: c1:5d:1c:11:40:83:ce:28:7e:d8:a8:8e:d9:8e:ad: cd:30:6c:36:60:6f:1c:6e:ec:3d:16:cd:91:46:82: ee:0b:77:46:4e:42:11:39:7d:34:97:61:b4:1d:f2: 9a:1d:32:57:33:82:91:ea:fa:71:f5:a4:67:b1:9f: d7:c4:02:7b:d2:a9:55:a5:bb:9e:b0:2a:d3:b0:55: d3:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: EC:26:A9:5A:8D:49:3E:85:19:17:74:37:FA:89:CC:28:6F:0F:AE:E6 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/E7081B9E47DB575C38A1C838D2672BB603A0097FA730421F332BA47EF2055C5E/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/E7081B9E47DB575C38A1C838D2672BB603A0097FA730421F332BA47EF2055C5E/0/EC26A95A8D493E8519177437FA89CC286F0FAEE6.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:1cd0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 274031 Signature Algorithm: sha256WithRSAEncryption 41:48:2b:57:75:fd:d5:18:0c:11:87:48:1c:a4:93:aa:b0:79: 68:98:ed:98:45:82:46:53:ff:ff:88:e4:a6:d9:62:6a:c7:f2: f8:7f:9e:f5:8a:f2:3b:3c:7c:02:04:d4:d4:ef:6d:8b:41:9f: 11:84:18:3d:85:34:c3:e5:92:ab:83:bf:0d:77:63:ac:f8:26: 0c:33:6d:96:f8:fe:63:87:83:d7:3a:e6:0d:9c:2c:bc:be:c8: 5c:24:4d:71:73:c3:8f:ed:1a:37:74:ca:07:86:78:25:8e:60: 16:89:e5:3a:be:71:35:70:29:e0:72:1c:59:fd:37:31:c7:1b: 21:1e:60:66:65:a8:d7:08:3d:cc:6c:e7:97:6e:bd:56:b4:6a: ad:87:3f:c4:53:3c:4e:f5:2e:07:2f:8e:ff:9a:a0:3e:55:ef: f1:40:0d:84:eb:66:ec:08:5d:1e:8f:47:88:78:8e:08:29:4d: 0b:01:f9:f2:1f:42:52:67:26:a3:de:62:e2:99:85:7b:8b:94: 27:ef:3b:a8:86:bf:28:c5:96:21:95:96:c5:49:7f:08:1c:d1: 62:ff:c0:cb:02:6b:1d:4d:51:fe:9e:60:c0:44:2e:c3:70:54: 0e:9b:77:55:86:e0:ec:70:48:a1:96:91:40:be:9d:6d:72:78: 0b:9f:a4:81 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUSK7VHGdwwBG5YFAKThtWrB+NBrEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgxNTQ2NTVaFw0yNzAxMjcxNTUxNTVaMDMxMTAvBgNV BAMTKEVDMjZBOTVBOEQ0OTNFODUxOTE3NzQzN0ZBODlDQzI4NkYwRkFFRTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuTQnWAPpH1Md/6R0PbEa4U64V q+jO+ndZ06nD4QRIJ4bqb5Zeq0sX5aGD0/mTt14o98MuDsW8kviSbRWi/cmlm4Tt RdAIgdE2W2ur+DREuxdDAejZF70ZYaSFzHPPm6hkd4jMcGEQ2E80ueeb2SwPRbWz 6/YNJYGH7acRHg2s+GeyVRdzqO44GBugStKxcbhI78JG3zvpfExePaqqfoUQeEHs +zUZaUbBThkBhBFrolArxsFdHBFAg84oftiojtmOrc0wbDZgbxxu7D0WzZFGgu4L d0ZOQhE5fTSXYbQd8podMlczgpHq+nH1pGexn9fEAnvSqVWlu56wKtOwVdP5AgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTsJqlajUk+hRkX dDf6icwobw+u5jAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTcwODFCOUU0N0RCNTc1QzM4QTFDODM4 RDI2NzJCQjYwM0EwMDk3RkE3MzA0MjFGMzMyQkE0N0VGMjA1NUM1RS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9FNzA4MUI5RTQ3REI1NzVDMzhBMUM4MzhEMjY3MkJCNjAzQTAwOTdGQTcz MDQyMUYzMzJCQTQ3RUYyMDU1QzVFLzAvRUMyNkE5NUE4RDQ5M0U4NTE5MTc3NDM3 RkE4OUNDMjg2RjBGQUVFNi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAMc0DAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMELm8wDQYJKoZIhvcNAQELBQADggEBAEFIK1d1 /dUYDBGHSBykk6qweWiY7ZhFgkZT//+I5KbZYmrH8vh/nvWK8js8fAIE1NTvbYtB nxGEGD2FNMPlkquDvw13Y6z4JgwzbZb4/mOHg9c65g2cLLy+yFwkTXFzw4/tGjd0 ygeGeCWOYBaJ5Tq+cTVwKeByHFn9NzHHGyEeYGZlqNcIPcxs55duvVa0aq2HP8RT PE71Lgcvjv+aoD5V7/FADYTrZuwIXR6PR4h4jggpTQsB+fIfQlJnJqPeYuKZhXuL lCfvO6iGvyjFliGVlsVJfwgc0WL/wMsCax1NUf6eYMBELsNwVA6bd1WG4OxwSKGW kUC+nW1yeAufpIE= -----END CERTIFICATE-----Generated at Mon Mar 2 15:03:11 2026 by rpki-client