$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F9E3A6648F81266CD6DA7358BAE5124A5D0B1D5F.cer File: F9E3A6648F81266CD6DA7358BAE5124A5D0B1D5F.cer (raw, json) Hash identifier: x4G8OGi+GpljmPm0McfX1DxUJutsHLxHsN8kLaVYVPc= Subject key identifier: F9:E3:A6:64:8F:81:26:6C:D6:DA:73:58:BA:E5:12:4A:5D:0B:1D:5F Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 3995775FFE061F817506DC71A5145CD61BC04CB4 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/D5ECFDE3BE0207378B72D84A0BBC13A3B339A2F1D1051D391E86FB8DBCF982FC/0/F9E3A6648F81266CD6DA7358BAE5124A5D0B1D5F.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/D5ECFDE3BE0207378B72D84A0BBC13A3B339A2F1D1051D391E86FB8DBCF982FC/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Mon 09 Feb 2026 15:40:01 +0000 Certificate not after: Mon 08 Feb 2027 15:45:01 +0000 Subordinate resources: AS: 273270 IP: 2806:445::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 05 Mar 2026 11:41:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:95:77:5f:fe:06:1f:81:75:06:dc:71:a5:14:5c:d6:1b:c0:4c:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Feb 9 15:40:01 2026 GMT Not After : Feb 8 15:45:01 2027 GMT Subject: CN=F9E3A6648F81266CD6DA7358BAE5124A5D0B1D5F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:24:22:0b:7e:37:ec:dc:16:4c:31:72:ef:3e: 70:05:7f:52:e4:91:63:62:ad:69:7f:cb:df:53:08: 8e:16:c3:bb:fa:aa:2f:fe:7b:c5:6c:ce:df:53:56: d3:43:a0:2c:01:72:ec:f3:5c:cb:17:84:b3:42:dc: 59:70:44:1e:90:c8:83:e1:f7:25:7d:7e:cf:19:eb: 05:df:18:69:49:39:3f:d8:ba:9a:b5:67:ec:d2:8b: b7:b8:74:39:b4:52:52:c5:65:fe:41:28:bd:09:45: 62:22:cb:80:78:96:d5:e0:ea:6e:a5:1d:3d:d9:de: b9:9c:02:98:9f:ee:72:96:ac:bc:75:3f:0f:72:0e: f1:4c:ef:16:c5:ae:e3:90:2f:3b:22:f1:fe:1f:6b: d1:bd:2f:85:f6:c3:98:46:f9:59:ba:ff:86:42:51: 3f:b4:e0:df:dd:fa:2d:e6:3d:fa:f5:dd:1f:66:10: 65:ca:be:af:3f:e8:5e:f7:58:3e:a0:e3:3b:b6:b6: cd:4f:69:e5:e4:3e:4e:12:d4:0e:3c:47:73:de:ae: 76:68:14:3f:dc:2b:ee:09:f3:36:8a:d1:ae:e4:54: 95:4c:87:02:95:30:c8:5d:dc:b7:41:e4:0a:ce:2a: fb:86:15:11:16:86:a4:76:c1:67:fa:1c:54:d1:d1: 93:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F9:E3:A6:64:8F:81:26:6C:D6:DA:73:58:BA:E5:12:4A:5D:0B:1D:5F X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/D5ECFDE3BE0207378B72D84A0BBC13A3B339A2F1D1051D391E86FB8DBCF982FC/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/D5ECFDE3BE0207378B72D84A0BBC13A3B339A2F1D1051D391E86FB8DBCF982FC/0/F9E3A6648F81266CD6DA7358BAE5124A5D0B1D5F.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2806:445::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273270 Signature Algorithm: sha256WithRSAEncryption 34:33:cb:2a:fe:6d:41:ab:c8:71:b6:14:8c:f8:e3:1a:a0:5a: 4b:f5:b1:89:1c:16:2e:17:66:88:de:09:f2:cb:29:3b:78:a2: 3f:05:64:32:1b:00:4c:04:35:73:cf:7d:00:29:e0:36:7e:e2: 7e:de:92:e2:17:f3:a2:c2:c7:25:c4:d4:fb:9e:5d:5f:48:0e: 65:c5:81:56:ab:dc:e9:84:6e:1f:a2:37:12:0b:e4:f6:f6:a4: 2e:e7:06:90:61:43:74:f9:be:a5:bb:e1:5a:82:57:ef:19:83: 92:c6:ed:2f:47:a3:70:06:e1:80:c4:d0:3b:7a:a7:a7:2b:33: d0:16:67:bf:29:91:a7:91:36:08:1b:b7:ed:39:1c:37:de:7b: 3b:3b:98:bb:3e:1d:6b:2e:87:82:66:67:c3:59:b3:d4:d5:df: 60:ec:ba:c0:ec:b3:ef:18:13:a6:5a:45:e4:93:05:e1:ba:23: 7a:c8:3d:3d:cf:67:5f:ee:26:92:e3:b7:99:2f:37:7b:ad:f5: 9e:77:cd:80:ff:a4:d0:10:4a:5b:2d:2b:82:58:c1:70:eb:9e: df:dd:18:e2:4c:74:1d:06:a5:e4:f0:87:5b:2d:34:1c:48:ee: 7c:7e:85:22:f6:bd:41:51:5c:ce:95:91:7b:fa:23:75:39:93: d7:7b:43:09 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUOZV3X/4GH4F1BtxxpRRc1hvATLQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAyMDkxNTQwMDFaFw0yNzAyMDgxNTQ1MDFaMDMxMTAvBgNV BAMTKEY5RTNBNjY0OEY4MTI2NkNENkRBNzM1OEJBRTUxMjRBNUQwQjFENUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuJCILfjfs3BZMMXLvPnAFf1Lk kWNirWl/y99TCI4Ww7v6qi/+e8Vszt9TVtNDoCwBcuzzXMsXhLNC3FlwRB6QyIPh 9yV9fs8Z6wXfGGlJOT/Yupq1Z+zSi7e4dDm0UlLFZf5BKL0JRWIiy4B4ltXg6m6l HT3Z3rmcApif7nKWrLx1Pw9yDvFM7xbFruOQLzsi8f4fa9G9L4X2w5hG+Vm6/4ZC UT+04N/d+i3mPfr13R9mEGXKvq8/6F73WD6g4zu2ts1PaeXkPk4S1A48R3PernZo FD/cK+4J8zaK0a7kVJVMhwKVMMhd3LdB5ArOKvuGFREWhqR2wWf6HFTR0ZORAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT546Zkj4EmbNba c1i65RJKXQsdXzAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRDVFQ0ZERTNCRTAyMDczNzhCNzJEODRB MEJCQzEzQTNCMzM5QTJGMUQxMDUxRDM5MUU4NkZCOERCQ0Y5ODJGQy8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9ENUVDRkRFM0JFMDIwNzM3OEI3MkQ4NEEwQkJDMTNBM0IzMzlBMkYxRDEw NTFEMzkxRTg2RkI4REJDRjk4MkZDLzAvRjlFM0E2NjQ4RjgxMjY2Q0Q2REE3MzU4 QkFFNTEyNEE1RDBCMUQ1Ri5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAYERTAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEK3YwDQYJKoZIhvcNAQELBQADggEBADQzyyr+ bUGryHG2FIz44xqgWkv1sYkcFi4XZojeCfLLKTt4oj8FZDIbAEwENXPPfQAp4DZ+ 4n7ekuIX86LCxyXE1PueXV9IDmXFgVar3OmEbh+iNxIL5Pb2pC7nBpBhQ3T5vqW7 4VqCV+8Zg5LG7S9Ho3AG4YDE0Dt6p6crM9AWZ78pkaeRNggbt+05HDfeezs7mLs+ HWsuh4JmZ8NZs9TV32DsusDss+8YE6ZaReSTBeG6I3rIPT3PZ1/uJpLjt5kvN3ut 9Z53zYD/pNAQSlstK4JYwXDrnt/dGOJMdB0GpeTwh1stNBxI7nx+hSL2vUFRXM6V kXv6I3U5k9d7Qwk= -----END CERTIFICATE-----Generated at Mon Mar 2 11:43:46 2026 by rpki-client