$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29591D131A7FFB5CA72F55D75A98CE32A3B3EA35.cer File: 29591D131A7FFB5CA72F55D75A98CE32A3B3EA35.cer (raw, json) Hash identifier: QurrYeeJk18s62AEuVKNFwfeYpssOuX8nG9ZqIV5qSw= Subject key identifier: 29:59:1D:13:1A:7F:FB:5C:A7:2F:55:D7:5A:98:CE:32:A3:B3:EA:35 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 33D3ABD120F2FECA9CBAEA7D76D7AE6979F1761D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/539A4706DE19AC6EB623D2528C9AF84C1093BA37114481D82B2D188ECE2ABBC1/0/29591D131A7FFB5CA72F55D75A98CE32A3B3EA35.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/539A4706DE19AC6EB623D2528C9AF84C1093BA37114481D82B2D188ECE2ABBC1/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 14:40:20 +0000 Certificate not after: Wed 27 Jan 2027 14:45:20 +0000 Subordinate resources: AS: 273021 IP: 2803:9390::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 22 Feb 2026 23:49:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:d3:ab:d1:20:f2:fe:ca:9c:ba:ea:7d:76:d7:ae:69:79:f1:76:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 14:40:20 2026 GMT Not After : Jan 27 14:45:20 2027 GMT Subject: CN=29591D131A7FFB5CA72F55D75A98CE32A3B3EA35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b4:cd:35:20:27:2d:d9:26:3a:7f:bf:83:fc: 77:46:13:bd:25:0a:47:05:8e:b3:ac:2d:f9:cf:a9: 24:6f:5f:b2:97:98:b6:85:38:fb:97:a4:29:5f:a8: 49:c9:7f:6c:ec:16:60:00:29:99:03:d0:9f:6c:6b: 2a:11:26:b5:3b:e7:10:56:a6:94:e1:2a:07:75:fa: 3b:5a:a9:59:a5:39:4e:b6:57:c8:08:2e:ea:96:77: 51:34:a4:e7:3c:95:1e:68:0b:76:76:8d:6e:57:87: 48:c6:dc:54:87:39:e0:ee:86:ab:a3:72:03:34:ec: 89:74:05:68:e5:64:4a:0f:83:03:c2:1f:e0:03:d4: 9c:83:d7:68:4b:01:f6:e4:15:0f:fc:66:a0:4c:fe: f3:bd:ac:74:51:3c:34:dc:b5:0a:58:37:fc:aa:58: de:f3:6b:af:2e:fd:ba:65:d9:d8:ad:a9:5a:e8:46: 3d:31:17:3f:b6:d0:1b:61:6f:31:8f:7a:4a:ab:d4: de:fe:36:55:f3:b0:2e:d0:25:8e:a7:ad:80:96:01: 05:df:d1:8f:ef:78:87:74:19:db:d7:39:f7:42:d4: 35:cc:16:bc:79:de:38:52:13:46:77:af:78:14:1c: b3:5e:6d:e6:dc:44:a3:df:f5:d4:9d:c5:d8:0c:61: 74:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 29:59:1D:13:1A:7F:FB:5C:A7:2F:55:D7:5A:98:CE:32:A3:B3:EA:35 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/539A4706DE19AC6EB623D2528C9AF84C1093BA37114481D82B2D188ECE2ABBC1/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/539A4706DE19AC6EB623D2528C9AF84C1093BA37114481D82B2D188ECE2ABBC1/0/29591D131A7FFB5CA72F55D75A98CE32A3B3EA35.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:9390::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273021 Signature Algorithm: sha256WithRSAEncryption 73:11:8b:c5:51:0e:00:83:40:98:a2:b6:c3:f4:ca:a0:f6:4c: 70:e4:91:d5:0d:bb:ef:b2:f6:33:da:e2:ca:e3:ec:fc:ba:88: 09:20:44:e4:68:2d:4b:ea:d5:3a:dd:18:dd:59:bb:3c:b6:c5: 51:c5:8e:ca:b5:ec:93:be:e0:5e:f0:4a:71:cb:98:75:68:80: ea:5b:fb:03:85:cb:20:2f:11:fe:2d:fa:50:59:17:95:6e:62: 49:c2:40:85:4a:ca:0a:dc:c4:62:9f:a4:bb:db:41:a2:12:65: 6a:ff:70:dc:da:86:e3:19:60:1f:49:71:c3:78:28:a8:a1:e1: 92:31:35:d5:77:bc:e2:e2:ec:2a:db:cb:60:3b:0f:63:0d:d1: 29:c1:47:01:77:1d:24:7b:63:ec:29:f4:2c:b1:c3:d0:f3:cf: 50:14:cc:fd:1d:4e:6c:5f:7d:c3:fa:b2:c6:ab:ef:24:31:a9: 0c:bc:e6:4d:4c:16:8e:b2:59:db:f6:40:6f:3e:70:e7:df:75: 75:81:06:f3:de:c9:ea:53:e3:75:59:a8:e0:70:62:e9:6a:63: a2:43:4c:5a:d5:44:c8:c6:70:8a:65:47:cf:af:88:dd:28:7b: 0d:fe:0f:a0:4c:d4:e3:1c:be:08:36:24:38:42:40:78:cf:8e: fb:a4:62:10 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUM9Or0SDy/sqcuup9dteuaXnxdh0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgxNDQwMjBaFw0yNzAxMjcxNDQ1MjBaMDMxMTAvBgNV BAMTKDI5NTkxRDEzMUE3RkZCNUNBNzJGNTVENzVBOThDRTMyQTNCM0VBMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCutM01ICct2SY6f7+D/HdGE70l CkcFjrOsLfnPqSRvX7KXmLaFOPuXpClfqEnJf2zsFmAAKZkD0J9sayoRJrU75xBW ppThKgd1+jtaqVmlOU62V8gILuqWd1E0pOc8lR5oC3Z2jW5Xh0jG3FSHOeDuhquj cgM07Il0BWjlZEoPgwPCH+AD1JyD12hLAfbkFQ/8ZqBM/vO9rHRRPDTctQpYN/yq WN7za68u/bpl2ditqVroRj0xFz+20BthbzGPekqr1N7+NlXzsC7QJY6nrYCWAQXf 0Y/veId0GdvXOfdC1DXMFrx53jhSE0Z3r3gUHLNebebcRKPf9dSdxdgMYXSXAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQpWR0TGn/7XKcv VddamM4yo7PqNTAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNTM5QTQ3MDZERTE5QUM2RUI2MjNEMjUy OEM5QUY4NEMxMDkzQkEzNzExNDQ4MUQ4MkIyRDE4OEVDRTJBQkJDMS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy81MzlBNDcwNkRFMTlBQzZFQjYyM0QyNTI4QzlBRjg0QzEwOTNCQTM3MTE0 NDgxRDgyQjJEMTg4RUNFMkFCQkMxLzAvMjk1OTFEMTMxQTdGRkI1Q0E3MkY1NUQ3 NUE5OENFMzJBM0IzRUEzNS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAOTkDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEKn0wDQYJKoZIhvcNAQELBQADggEBAHMRi8VR DgCDQJiitsP0yqD2THDkkdUNu++y9jPa4srj7Py6iAkgRORoLUvq1TrdGN1Zuzy2 xVHFjsq17JO+4F7wSnHLmHVogOpb+wOFyyAvEf4t+lBZF5VuYknCQIVKygrcxGKf pLvbQaISZWr/cNzahuMZYB9JccN4KKih4ZIxNdV3vOLi7Crby2A7D2MN0SnBRwF3 HSR7Y+wp9Cyxw9Dzz1AUzP0dTmxffcP6ssar7yQxqQy85k1MFo6yWdv2QG8+cOff dXWBBvPeyepT43VZqOBwYulqY6JDTFrVRMjGcIplR8+viN0oew3+D6BM1OMcvgg2 JDhCQHjPjvukYhA= -----END CERTIFICATE-----Generated at Thu Feb 19 12:54:50 2026 by rpki-client