$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F8D2895F468C3C97A67EC29230C3641FB8C84F08.cer File: F8D2895F468C3C97A67EC29230C3641FB8C84F08.cer (raw, json) Hash identifier: AvMPMAuplAcAX4Kuat9HggpXQVng+JGMlgfEhK7T6xo= Subject key identifier: F8:D2:89:5F:46:8C:3C:97:A6:7E:C2:92:30:C3:64:1F:B8:C8:4F:08 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 64CACEDAFF2E300802532A7A1357687C0748C280 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/6B2D55AC0055812A507290BE49EAC0AF6A691C782E83FCFCE61B0CB357D2ED82/0/F8D2895F468C3C97A67EC29230C3641FB8C84F08.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/6B2D55AC0055812A507290BE49EAC0AF6A691C782E83FCFCE61B0CB357D2ED82/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 17:57:20 +0000 Certificate not after: Wed 27 Jan 2027 18:02:20 +0000 Subordinate resources: AS: 273009 IP: 2803:7d90::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:ca:ce:da:ff:2e:30:08:02:53:2a:7a:13:57:68:7c:07:48:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 17:57:20 2026 GMT Not After : Jan 27 18:02:20 2027 GMT Subject: CN=F8D2895F468C3C97A67EC29230C3641FB8C84F08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ae:e4:86:d0:c3:d8:c6:8e:06:7a:d8:6c:14: a3:bc:f6:82:03:ac:16:a0:3d:03:e4:d9:80:54:35: 50:76:fa:18:ae:5e:a7:a0:a6:1d:14:dc:29:68:c1: 23:b8:f4:c4:3b:5a:e1:25:b5:8d:7c:62:2e:2d:e3: 59:87:53:7e:34:54:61:29:91:7c:55:92:62:45:1f: b7:66:cf:a5:21:d8:01:42:99:d6:07:82:fe:8b:94: b1:db:06:8c:4b:ef:cb:a8:29:c8:f6:73:d9:1c:06: 88:dc:46:ce:67:b4:fd:d6:ad:84:35:80:15:c5:3d: c4:48:4f:10:1c:6f:29:48:18:ba:54:7d:e1:3f:19: f7:be:ac:10:5c:ca:d9:cc:69:cc:3d:56:67:20:2d: 3b:5b:07:2d:25:2b:3f:14:a8:ba:f8:69:ad:e4:13: 67:63:e6:2a:20:cf:71:05:d2:f8:2a:00:3c:87:5f: 12:48:c4:f0:3a:27:ec:b2:6a:f9:14:eb:6a:57:a5: 7c:f5:20:40:1b:a1:42:dd:42:e0:63:6e:8f:4e:dc: 44:2c:a2:80:36:80:ec:18:2a:ee:bb:85:01:d7:4f: 5f:9d:d6:25:4b:30:46:b6:bc:a9:66:28:86:c5:e2: ac:b0:04:64:b6:90:eb:21:c6:4e:58:7e:56:af:b5: 83:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F8:D2:89:5F:46:8C:3C:97:A6:7E:C2:92:30:C3:64:1F:B8:C8:4F:08 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6B2D55AC0055812A507290BE49EAC0AF6A691C782E83FCFCE61B0CB357D2ED82/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6B2D55AC0055812A507290BE49EAC0AF6A691C782E83FCFCE61B0CB357D2ED82/0/F8D2895F468C3C97A67EC29230C3641FB8C84F08.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:7d90::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273009 Signature Algorithm: sha256WithRSAEncryption 12:9c:e7:06:35:d2:93:31:bf:6b:a6:ab:50:cf:c2:ab:e1:c8: 27:26:3c:95:9a:cf:34:bc:f5:7a:d0:96:8c:ee:d2:5f:66:ac: 28:05:ad:e9:32:3b:9c:14:8f:a3:57:14:dd:85:f8:c0:3e:4e: 95:ec:80:d4:3b:eb:ed:d1:c5:ec:ac:19:a3:1d:42:91:a8:dc: 5e:d5:ff:3b:c5:81:3b:5c:6d:11:1a:db:30:98:43:02:e4:e7: 80:ee:a7:b7:6b:8c:64:82:4a:18:2b:d0:7d:da:9c:b4:39:a8: f6:49:da:2b:26:ad:ce:b4:a1:7d:3a:c8:57:ea:23:05:03:d7: 39:81:cc:b4:86:f0:70:c9:15:b0:ed:d5:6f:bd:18:67:38:71: f5:a0:a9:78:2e:a8:2f:d1:91:86:aa:d4:52:bb:61:89:c3:04: 03:57:02:56:0e:5c:60:3d:aa:e4:79:34:ad:7d:72:80:b6:73: 59:f0:82:dd:f8:b1:c1:32:86:71:7d:c0:ec:f7:5e:c2:fa:df: c9:a0:17:6f:7a:b1:11:42:28:e0:af:33:b0:c2:6c:16:b8:d7: d3:c0:4e:ee:f0:d1:ad:88:1e:3a:dc:cb:97:a6:87:7c:90:95: c7:74:6d:b5:80:5c:5e:36:8d:bf:f2:1f:d9:82:64:f6:ea:5f: d2:4b:1a:e5 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUZMrO2v8uMAgCUyp6E1dofAdIwoAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgxNzU3MjBaFw0yNzAxMjcxODAyMjBaMDMxMTAvBgNV BAMTKEY4RDI4OTVGNDY4QzNDOTdBNjdFQzI5MjMwQzM2NDFGQjhDODRGMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbruSG0MPYxo4GethsFKO89oID rBagPQPk2YBUNVB2+hiuXqegph0U3ClowSO49MQ7WuEltY18Yi4t41mHU340VGEp kXxVkmJFH7dmz6Uh2AFCmdYHgv6LlLHbBoxL78uoKcj2c9kcBojcRs5ntP3WrYQ1 gBXFPcRITxAcbylIGLpUfeE/Gfe+rBBcytnMacw9VmcgLTtbBy0lKz8UqLr4aa3k E2dj5iogz3EF0vgqADyHXxJIxPA6J+yyavkU62pXpXz1IEAboULdQuBjbo9O3EQs ooA2gOwYKu67hQHXT1+d1iVLMEa2vKlmKIbF4qywBGS2kOshxk5YflavtYN7AgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT40olfRow8l6Z+ wpIww2QfuMhPCDAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNkIyRDU1QUMwMDU1ODEyQTUwNzI5MEJF NDlFQUMwQUY2QTY5MUM3ODJFODNGQ0ZDRTYxQjBDQjM1N0QyRUQ4Mi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy82QjJENTVBQzAwNTU4MTJBNTA3MjkwQkU0OUVBQzBBRjZBNjkxQzc4MkU4 M0ZDRkNFNjFCMENCMzU3RDJFRDgyLzAvRjhEMjg5NUY0NjhDM0M5N0E2N0VDMjky MzBDMzY0MUZCOEM4NEYwOC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAN9kDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEKnEwDQYJKoZIhvcNAQELBQADggEBABKc5wY1 0pMxv2umq1DPwqvhyCcmPJWazzS89XrQlozu0l9mrCgFrekyO5wUj6NXFN2F+MA+ TpXsgNQ76+3RxeysGaMdQpGo3F7V/zvFgTtcbREa2zCYQwLk54Dup7drjGSCShgr 0H3anLQ5qPZJ2ismrc60oX06yFfqIwUD1zmBzLSG8HDJFbDt1W+9GGc4cfWgqXgu qC/RkYaq1FK7YYnDBANXAlYOXGA9quR5NK19coC2c1nwgt34scEyhnF9wOz3XsL6 38mgF296sRFCKOCvM7DCbBa419PATu7w0a2IHjrcy5emh3yQlcd0bbWAXF42jb/y H9mCZPbqX9JLGuU= -----END CERTIFICATE-----Generated at Mon Mar 2 17:12:06 2026 by rpki-client