$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5359D5652EB8B1C42FF1914CA8586A67AE35A163.cer File: 5359D5652EB8B1C42FF1914CA8586A67AE35A163.cer (raw, json) Hash identifier: 43FxlbfAcWVlQRi7mLlHXRKEgHJiCN1zBRGY5nb7Huo= Subject key identifier: 53:59:D5:65:2E:B8:B1:C4:2F:F1:91:4C:A8:58:6A:67:AE:35:A1:63 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 302FAD825C842EC82A970365CED1B2EEADFCDF19 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/2BE879972F4E90E8FDCB6500D36E6A4A9FF77B0274706A399C0923D38FFEF25B/0/5359D5652EB8B1C42FF1914CA8586A67AE35A163.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/2BE879972F4E90E8FDCB6500D36E6A4A9FF77B0274706A399C0923D38FFEF25B/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 10:08:23 +0000 Certificate not after: Wed 27 Jan 2027 10:13:23 +0000 Subordinate resources: AS: 273143 IP: 2803:ac50::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 01 Mar 2026 13:51:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:2f:ad:82:5c:84:2e:c8:2a:97:03:65:ce:d1:b2:ee:ad:fc:df:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 10:08:23 2026 GMT Not After : Jan 27 10:13:23 2027 GMT Subject: CN=5359D5652EB8B1C42FF1914CA8586A67AE35A163 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a8:d4:fc:9e:44:6d:92:8a:01:e9:5d:6c:cc: 48:6e:6a:71:7d:0e:c1:83:0d:33:ca:53:34:c9:97: e4:e5:8b:56:bc:80:25:a1:bc:f3:82:7a:3c:18:ee: 40:8d:e5:6b:97:e1:8e:9a:43:f4:71:2f:2e:e7:76: 63:eb:be:c0:b2:78:66:a6:85:f9:61:5f:d6:ff:90: a4:1b:d8:0b:40:8e:48:f0:f8:64:5c:e7:07:ce:0a: 6d:ba:8e:31:16:10:f1:89:9f:70:22:21:3c:91:89: 15:b9:06:14:b3:ef:5d:30:d1:74:1d:18:23:10:1b: 8a:6d:10:fc:37:76:d2:54:0c:d1:0c:2d:12:e8:93: 6b:f7:1d:23:8a:05:cd:91:1c:f2:05:2c:e5:1c:4f: 90:41:f7:f6:bc:e4:f8:3d:e4:5f:83:f3:72:dc:c1: 81:b2:8b:62:f3:03:69:b8:e1:38:a2:9e:83:0a:83: 05:2c:80:59:da:5a:f6:e4:bb:53:5e:42:7e:11:f8: 83:bb:db:69:0b:2e:fa:5a:67:98:0b:30:c8:a8:51: 6b:6e:cf:7b:06:29:7b:d9:fd:9f:6a:ba:45:30:63: 06:0e:28:60:5f:3e:3d:c7:dd:cf:47:b5:57:09:a6: 1a:d2:a5:d2:39:00:49:cb:04:d5:15:3d:a1:fb:22: e2:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 53:59:D5:65:2E:B8:B1:C4:2F:F1:91:4C:A8:58:6A:67:AE:35:A1:63 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/2BE879972F4E90E8FDCB6500D36E6A4A9FF77B0274706A399C0923D38FFEF25B/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/2BE879972F4E90E8FDCB6500D36E6A4A9FF77B0274706A399C0923D38FFEF25B/0/5359D5652EB8B1C42FF1914CA8586A67AE35A163.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:ac50::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273143 Signature Algorithm: sha256WithRSAEncryption 80:75:bf:29:4a:ea:a7:a1:81:bf:0b:c2:87:93:5b:d3:ec:0c: 27:85:48:78:45:7f:d2:2c:0e:e5:a1:1b:a3:9a:fb:61:a2:93: 89:eb:00:d2:d1:44:5a:fd:1e:52:05:7a:ff:e8:d8:ea:a6:77: 07:88:80:99:78:5e:31:5c:55:48:7e:9a:16:fd:77:22:07:cf: 82:66:10:33:ed:87:86:76:ef:9c:d6:4f:a8:ce:a5:8b:10:57: 87:ef:04:f1:e8:ac:07:cc:0c:43:87:e3:74:1a:a0:67:09:2c: 57:06:cc:e7:a0:c6:92:9a:2d:a1:db:e5:24:94:b2:b1:62:39: d8:3f:d9:b3:e4:df:79:ca:ee:bf:fe:26:12:78:3e:01:fc:1c: 98:30:02:1d:8c:28:42:4b:28:97:00:3b:fa:1d:38:f9:b7:5e: 21:25:ad:39:25:8b:f7:81:4f:80:0f:82:d3:30:78:a3:ff:5d: 16:cf:9c:49:f2:5e:f7:a1:64:ff:99:6e:ff:e7:b8:81:24:6d: 40:ec:2a:b6:50:91:4b:ec:f5:95:cc:c8:a9:84:a1:3e:04:7f: 1e:44:b1:f5:90:6a:48:39:37:88:91:95:96:67:8b:3a:6d:7a: 66:cc:ab:ed:c7:56:96:96:b1:00:5e:19:d5:7e:9b:62:6c:ea: a0:0d:cc:30 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUMC+tglyELsgqlwNlztGy7q383xkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgxMDA4MjNaFw0yNzAxMjcxMDEzMjNaMDMxMTAvBgNV BAMTKDUzNTlENTY1MkVCOEIxQzQyRkYxOTE0Q0E4NTg2QTY3QUUzNUExNjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1qNT8nkRtkooB6V1szEhuanF9 DsGDDTPKUzTJl+Tli1a8gCWhvPOCejwY7kCN5WuX4Y6aQ/RxLy7ndmPrvsCyeGam hflhX9b/kKQb2AtAjkjw+GRc5wfOCm26jjEWEPGJn3AiITyRiRW5BhSz710w0XQd GCMQG4ptEPw3dtJUDNEMLRLok2v3HSOKBc2RHPIFLOUcT5BB9/a85Pg95F+D83Lc wYGyi2LzA2m44TiinoMKgwUsgFnaWvbku1NeQn4R+IO722kLLvpaZ5gLMMioUWtu z3sGKXvZ/Z9qukUwYwYOKGBfPj3H3c9HtVcJphrSpdI5AEnLBNUVPaH7IuLJAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRTWdVlLrixxC/x kUyoWGpnrjWhYzAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMkJFODc5OTcyRjRFOTBFOEZEQ0I2NTAw RDM2RTZBNEE5RkY3N0IwMjc0NzA2QTM5OUMwOTIzRDM4RkZFRjI1Qi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8yQkU4Nzk5NzJGNEU5MEU4RkRDQjY1MDBEMzZFNkE0QTlGRjc3QjAyNzQ3 MDZBMzk5QzA5MjNEMzhGRkVGMjVCLzAvNTM1OUQ1NjUyRUI4QjFDNDJGRjE5MTRD QTg1ODZBNjdBRTM1QTE2My5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAOsUDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEKvcwDQYJKoZIhvcNAQELBQADggEBAIB1vylK 6qehgb8LwoeTW9PsDCeFSHhFf9IsDuWhG6Oa+2Gik4nrANLRRFr9HlIFev/o2Oqm dweIgJl4XjFcVUh+mhb9dyIHz4JmEDPth4Z275zWT6jOpYsQV4fvBPHorAfMDEOH 43QaoGcJLFcGzOegxpKaLaHb5SSUsrFiOdg/2bPk33nK7r/+JhJ4PgH8HJgwAh2M KEJLKJcAO/odOPm3XiElrTkli/eBT4APgtMweKP/XRbPnEnyXvehZP+Zbv/nuIEk bUDsKrZQkUvs9ZXMyKmEoT4Efx5EsfWQakg5N4iRlZZnizptembMq+3HVpaWsQBe GdV+m2Js6qANzDA= -----END CERTIFICATE-----Generated at Thu Feb 26 16:40:04 2026 by rpki-client