$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FFADE6BC8929ED07E6D2869DBC4658ADEF12F0B5.cer File: FFADE6BC8929ED07E6D2869DBC4658ADEF12F0B5.cer (raw, json) Hash identifier: 33d9PHb8NJnH1Q0o3J4IPu9SWRQpGY1mtl5RWki+BS8= Subject key identifier: FF:AD:E6:BC:89:29:ED:07:E6:D2:86:9D:BC:46:58:AD:EF:12:F0:B5 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 0A893ED1DD0EB02BBF25DC9463EF0FB2EB09FB0A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/096DDA0A410984D00AE3F8B9A452CB623D16EA5DBD961BD1EF7A829FC4F5FD92/0/FFADE6BC8929ED07E6D2869DBC4658ADEF12F0B5.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/096DDA0A410984D00AE3F8B9A452CB623D16EA5DBD961BD1EF7A829FC4F5FD92/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 15:41:20 +0000 Certificate not after: Wed 27 Jan 2027 15:46:20 +0000 Subordinate resources: AS: 273299 IP: 2806:452::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 05 Mar 2026 11:41:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:89:3e:d1:dd:0e:b0:2b:bf:25:dc:94:63:ef:0f:b2:eb:09:fb:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 15:41:20 2026 GMT Not After : Jan 27 15:46:20 2027 GMT Subject: CN=FFADE6BC8929ED07E6D2869DBC4658ADEF12F0B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:2b:ad:2e:a7:be:38:09:4e:80:c6:b9:ec:c9: e4:1c:ee:4a:be:c7:8b:3e:93:fa:fe:e7:48:44:89: 47:4e:6f:2c:59:f4:56:f1:db:e0:49:d5:ae:a5:e5: ed:e1:14:7e:73:bc:01:d7:70:f0:68:8c:10:ac:00: 3c:43:92:f2:61:1e:c0:44:3c:a0:ca:7b:c2:f4:8e: 7e:e8:65:72:97:0b:bb:76:65:73:3b:55:e1:fb:82: 9e:c8:ed:4b:33:87:11:92:a4:55:8a:d7:d8:0d:2e: 30:06:7b:fd:1b:5f:01:72:7a:48:b1:9f:a0:53:17: 38:e1:2a:2d:a8:13:58:ed:78:1e:4e:14:a0:56:df: 4d:b9:95:af:f9:2d:33:ed:5c:d7:8e:af:c8:06:6e: 5e:d8:0d:f2:ff:25:ab:15:5f:10:53:9a:86:ed:53: e6:c0:af:b9:ea:4f:03:8c:6d:1c:71:9c:28:7b:7f: a0:43:84:b2:fc:a6:35:96:45:86:7e:aa:47:f4:1c: 1f:ef:7b:2c:17:ad:8f:16:85:2f:d1:07:95:55:e5: aa:c1:ed:98:09:b5:0c:18:3f:06:f9:a6:c3:96:d8: c8:62:1e:1b:31:28:27:e7:a2:87:e3:6d:0f:2c:05: 08:16:34:7a:bf:f0:c9:6c:13:14:8b:0a:ee:b1:43: 26:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FF:AD:E6:BC:89:29:ED:07:E6:D2:86:9D:BC:46:58:AD:EF:12:F0:B5 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/096DDA0A410984D00AE3F8B9A452CB623D16EA5DBD961BD1EF7A829FC4F5FD92/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/096DDA0A410984D00AE3F8B9A452CB623D16EA5DBD961BD1EF7A829FC4F5FD92/0/FFADE6BC8929ED07E6D2869DBC4658ADEF12F0B5.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2806:452::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273299 Signature Algorithm: sha256WithRSAEncryption 0d:1e:cd:0f:5b:8d:4c:7c:b6:74:76:35:19:e6:55:48:0d:3a: e5:53:18:8a:9e:3b:ea:4d:89:e7:b6:e3:6e:ae:c6:a1:98:f2: c0:a5:43:52:28:b8:c2:64:04:f4:53:85:b6:60:1f:03:47:c5: b7:65:16:79:07:18:d9:02:d4:28:b3:a4:5d:9c:af:f8:c0:d8: 05:77:9d:04:33:4c:90:5a:15:f9:b5:33:bc:b8:d6:68:d8:e8: ad:da:93:e2:c8:29:90:6a:65:e5:a8:fe:87:9b:90:80:f9:d4: 1d:db:64:10:cf:0f:3b:a2:16:3e:ce:ca:8a:b4:93:7e:80:7b: 54:10:02:24:85:50:0c:b7:a0:0c:64:2a:ed:49:db:45:5a:90: 9c:eb:dd:70:10:68:f2:31:65:45:01:3a:96:e4:59:18:14:1c: ce:c9:f9:cf:a5:ba:28:f0:2d:f3:5e:4d:80:da:e2:52:32:d5: d3:83:21:5d:c8:78:ef:bf:79:6e:01:da:44:66:18:b7:4b:25: 0f:5f:89:1d:e1:60:6b:8e:d3:70:ec:eb:30:9c:f3:d2:44:72: ab:d4:c3:6c:44:92:d5:ca:d3:f1:8e:ac:0d:85:27:39:b9:57: 7e:f3:a7:67:0b:e4:26:2a:11:98:20:b2:14:58:92:53:18:c6: 77:81:45:3e -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUCok+0d0OsCu/JdyUY+8PsusJ+wowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgxNTQxMjBaFw0yNzAxMjcxNTQ2MjBaMDMxMTAvBgNV BAMTKEZGQURFNkJDODkyOUVEMDdFNkQyODY5REJDNDY1OEFERUYxMkYwQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBK60up744CU6AxrnsyeQc7kq+ x4s+k/r+50hEiUdObyxZ9Fbx2+BJ1a6l5e3hFH5zvAHXcPBojBCsADxDkvJhHsBE PKDKe8L0jn7oZXKXC7t2ZXM7VeH7gp7I7UszhxGSpFWK19gNLjAGe/0bXwFyekix n6BTFzjhKi2oE1jteB5OFKBW3025la/5LTPtXNeOr8gGbl7YDfL/JasVXxBTmobt U+bAr7nqTwOMbRxxnCh7f6BDhLL8pjWWRYZ+qkf0HB/veywXrY8WhS/RB5VV5arB 7ZgJtQwYPwb5psOW2MhiHhsxKCfnoofjbQ8sBQgWNHq/8MlsExSLCu6xQybxAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT/rea8iSntB+bS hp28Rlit7xLwtTAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMDk2RERBMEE0MTA5ODREMDBBRTNGOEI5 QTQ1MkNCNjIzRDE2RUE1REJEOTYxQkQxRUY3QTgyOUZDNEY1RkQ5Mi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8wOTZEREEwQTQxMDk4NEQwMEFFM0Y4QjlBNDUyQ0I2MjNEMTZFQTVEQkQ5 NjFCRDFFRjdBODI5RkM0RjVGRDkyLzAvRkZBREU2QkM4OTI5RUQwN0U2RDI4NjlE QkM0NjU4QURFRjEyRjBCNS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAYEUjAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEK5MwDQYJKoZIhvcNAQELBQADggEBAA0ezQ9b jUx8tnR2NRnmVUgNOuVTGIqeO+pNiee2426uxqGY8sClQ1IouMJkBPRThbZgHwNH xbdlFnkHGNkC1CizpF2cr/jA2AV3nQQzTJBaFfm1M7y41mjY6K3ak+LIKZBqZeWo /oebkID51B3bZBDPDzuiFj7Oyoq0k36Ae1QQAiSFUAy3oAxkKu1J20VakJzr3XAQ aPIxZUUBOpbkWRgUHM7J+c+luijwLfNeTYDa4lIy1dODIV3IeO+/eW4B2kRmGLdL JQ9fiR3hYGuO03Ds6zCc89JEcqvUw2xEktXK0/GOrA2FJzm5V37zp2cL5CYqEZgg shRYklMYxneBRT4= -----END CERTIFICATE-----Generated at Mon Mar 2 11:18:25 2026 by rpki-client