$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F4EB3AB2FD2A99C25806C4CE2DBBD9A0C74BBB08.cer File: F4EB3AB2FD2A99C25806C4CE2DBBD9A0C74BBB08.cer (raw, json) Hash identifier: eWnbmv21dKngk0rj4TIKZVvf0+iRVhT/ScksCQzd0sA= Subject key identifier: F4:EB:3A:B2:FD:2A:99:C2:58:06:C4:CE:2D:BB:D9:A0:C7:4B:BB:08 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 5517D67CFEE7882E7617CDE7F93DCC1730F7F0E2 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/9B211BBF32D81587A8F9195D83A828523CF2B2720DCCD4FB2168168AD458AF49/0/F4EB3AB2FD2A99C25806C4CE2DBBD9A0C74BBB08.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/9B211BBF32D81587A8F9195D83A828523CF2B2720DCCD4FB2168168AD458AF49/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 15:15:57 +0000 Certificate not after: Wed 27 Jan 2027 15:20:57 +0000 Subordinate resources: AS: 272066 IP: 2803:5310::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 05 Mar 2026 11:41:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:17:d6:7c:fe:e7:88:2e:76:17:cd:e7:f9:3d:cc:17:30:f7:f0:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 15:15:57 2026 GMT Not After : Jan 27 15:20:57 2027 GMT Subject: CN=F4EB3AB2FD2A99C25806C4CE2DBBD9A0C74BBB08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:53:9e:e5:8e:58:7e:1d:83:5c:3a:cf:e1:0a: 41:94:46:c5:51:08:1f:1c:c1:3d:4f:70:b7:8f:0b: 3c:e2:7c:00:d2:0f:f7:6a:d6:b9:aa:d1:ee:66:bc: ba:04:bf:90:b4:7d:15:2f:f3:a9:f7:00:eb:89:ba: 16:c9:af:53:eb:af:60:aa:f4:09:98:54:8d:c5:fd: 99:1a:0e:6c:74:8e:f2:fe:ee:d3:1b:7e:4d:e4:d1: 45:d3:7f:7d:67:ff:e3:b3:3e:17:39:09:e6:04:1a: d5:87:c6:35:d1:fb:8a:d1:b2:ee:26:e7:80:5b:c6: 6c:16:06:86:9a:65:8e:9b:ab:b0:f2:7f:2b:08:c3: c0:d0:24:89:8e:95:09:36:d9:d0:4e:6a:9f:df:f8: 0b:4d:98:b2:10:02:e2:38:ad:db:de:ad:fb:c4:6b: e6:ef:74:25:d6:5d:5a:ab:d9:6e:e5:3c:fd:84:7c: 8b:a2:e7:b4:36:be:76:0e:7c:d1:0d:83:97:18:bd: 31:19:4f:48:99:22:8e:6d:32:90:cb:e2:c1:e3:c8: 54:2f:f0:02:32:21:fe:70:9e:81:e2:8f:a3:73:24: 24:30:df:13:68:09:85:6c:c9:54:56:3d:4f:50:47: 80:36:0a:bf:fe:fa:06:bd:bc:d5:0d:13:02:07:3c: 28:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F4:EB:3A:B2:FD:2A:99:C2:58:06:C4:CE:2D:BB:D9:A0:C7:4B:BB:08 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/9B211BBF32D81587A8F9195D83A828523CF2B2720DCCD4FB2168168AD458AF49/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/9B211BBF32D81587A8F9195D83A828523CF2B2720DCCD4FB2168168AD458AF49/0/F4EB3AB2FD2A99C25806C4CE2DBBD9A0C74BBB08.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:5310::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 272066 Signature Algorithm: sha256WithRSAEncryption 09:69:94:dd:bf:28:69:34:51:7c:fe:90:4b:a0:a4:fe:0a:94: 6c:0f:d4:ab:fc:7d:57:83:a5:a3:1b:75:23:06:5a:87:ec:d8: 54:90:dc:f3:0a:72:fe:69:4f:20:43:29:48:db:b8:90:3e:9b: 55:2e:13:c3:f2:55:75:89:ea:0b:92:35:0e:57:7c:48:27:93: 1b:1b:a6:55:29:cf:a8:6c:7d:87:ab:08:66:a6:d7:f6:3c:0c: 51:17:35:7a:b0:58:0c:93:c9:b6:72:10:79:b3:ba:fb:bc:89: 40:9a:a0:cf:95:b2:c9:f7:63:36:35:6d:11:a2:ef:a1:3c:e8: d6:e1:0c:28:99:e8:9c:b7:91:89:53:6c:1c:d4:51:aa:5f:07: b2:a6:21:78:6e:cb:61:76:ee:70:76:4c:b4:71:f6:51:b9:79: 05:c1:4a:30:7e:64:72:1e:0b:78:f7:6a:fb:62:c7:2b:3e:5b: b5:ef:fa:97:85:04:e2:20:ee:3d:2d:7a:19:ae:24:68:a2:58: 5f:23:50:1a:f5:57:1d:43:d2:9b:c5:9b:52:64:8c:df:a4:f5: 9d:3f:e9:37:06:7e:33:9a:28:25:2b:70:ec:fd:a5:3f:67:fc: 88:53:fa:4d:46:9f:97:93:3b:d3:51:02:95:20:d3:b1:fe:49: da:3e:ad:eb -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUVRfWfP7niC52F83n+T3MFzD38OIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgxNTE1NTdaFw0yNzAxMjcxNTIwNTdaMDMxMTAvBgNV BAMTKEY0RUIzQUIyRkQyQTk5QzI1ODA2QzRDRTJEQkJEOUEwQzc0QkJCMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRU57ljlh+HYNcOs/hCkGURsVR CB8cwT1PcLePCzzifADSD/dq1rmq0e5mvLoEv5C0fRUv86n3AOuJuhbJr1Prr2Cq 9AmYVI3F/ZkaDmx0jvL+7tMbfk3k0UXTf31n/+OzPhc5CeYEGtWHxjXR+4rRsu4m 54BbxmwWBoaaZY6bq7DyfysIw8DQJImOlQk22dBOap/f+AtNmLIQAuI4rdverfvE a+bvdCXWXVqr2W7lPP2EfIui57Q2vnYOfNENg5cYvTEZT0iZIo5tMpDL4sHjyFQv 8AIyIf5wnoHij6NzJCQw3xNoCYVsyVRWPU9QR4A2Cr/++ga9vNUNEwIHPChRAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT06zqy/SqZwlgG xM4tu9mgx0u7CDAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvOUIyMTFCQkYzMkQ4MTU4N0E4RjkxOTVE ODNBODI4NTIzQ0YyQjI3MjBEQ0NENEZCMjE2ODE2OEFENDU4QUY0OS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy85QjIxMUJCRjMyRDgxNTg3QThGOTE5NUQ4M0E4Mjg1MjNDRjJCMjcyMERD Q0Q0RkIyMTY4MTY4QUQ0NThBRjQ5LzAvRjRFQjNBQjJGRDJBOTlDMjU4MDZDNENF MkRCQkQ5QTBDNzRCQkIwOC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKANTEDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEJsIwDQYJKoZIhvcNAQELBQADggEBAAlplN2/ KGk0UXz+kEugpP4KlGwP1Kv8fVeDpaMbdSMGWofs2FSQ3PMKcv5pTyBDKUjbuJA+ m1UuE8PyVXWJ6guSNQ5XfEgnkxsbplUpz6hsfYerCGam1/Y8DFEXNXqwWAyTybZy EHmzuvu8iUCaoM+Vssn3YzY1bRGi76E86NbhDCiZ6Jy3kYlTbBzUUapfB7KmIXhu y2F27nB2TLRx9lG5eQXBSjB+ZHIeC3j3avtixys+W7Xv+peFBOIg7j0tehmuJGii WF8jUBr1Vx1D0pvFm1JkjN+k9Z0/6TcGfjOaKCUrcOz9pT9n/IhT+k1Gn5eTO9NR ApUg07H+Sdo+res= -----END CERTIFICATE-----Generated at Mon Mar 2 11:18:12 2026 by rpki-client