$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/851A27F805C8E6EFE6A6D49D588B7CD5D60D7BB5.cer File: 851A27F805C8E6EFE6A6D49D588B7CD5D60D7BB5.cer (raw, json) Hash identifier: 8ZzV7qhu6Ap2POs/Dlae04xANzNhn9gEPrAy9a2JS44= Subject key identifier: 85:1A:27:F8:05:C8:E6:EF:E6:A6:D4:9D:58:8B:7C:D5:D6:0D:7B:B5 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 3CA89972B79DC73EC73C6AD1445788DFB370E0A4 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/4C2B74007E0DAA96B6980F8C6C1C9C009F2A0AF77F26C6CD193D409DBE82064F/0/851A27F805C8E6EFE6A6D49D588B7CD5D60D7BB5.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/4C2B74007E0DAA96B6980F8C6C1C9C009F2A0AF77F26C6CD193D409DBE82064F/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 21 Apr 2026 16:40:03 +0000 Certificate not after: Tue 20 Apr 2027 16:45:03 +0000 Subordinate resources: AS: 274319 IP: 2803:4c30::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 04 May 2026 10:13:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:a8:99:72:b7:9d:c7:3e:c7:3c:6a:d1:44:57:88:df:b3:70:e0:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Apr 21 16:40:03 2026 GMT Not After : Apr 20 16:45:03 2027 GMT Subject: CN=851A27F805C8E6EFE6A6D49D588B7CD5D60D7BB5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:4d:32:a1:ea:c6:66:fe:11:0d:f3:c0:73:0a: 04:b9:93:66:7b:0f:b8:55:bc:6b:96:c9:24:13:81: c0:32:57:8e:f3:35:e9:f2:05:9f:f4:f7:91:29:d8: f6:61:4f:73:2d:31:29:0f:02:8d:71:fb:fe:d5:2f: af:70:2a:4c:fe:28:cc:18:7e:03:ec:eb:a7:98:97: fa:6c:b5:36:81:42:f5:92:5a:58:69:c8:6b:4e:ea: 07:93:07:49:04:55:25:35:b0:10:02:66:5a:43:08: aa:e3:36:3e:c7:f5:fc:5a:d3:7e:9c:32:2d:0f:6f: 48:ce:73:5b:de:72:91:bc:38:6c:8e:14:89:6b:4c: 66:0d:3d:1a:fa:a3:c9:28:10:b5:25:bc:43:f5:bc: 05:76:d0:e8:73:26:53:26:68:17:b9:44:ee:5d:96: 4e:55:46:4d:18:be:21:6c:b7:6d:7e:d4:e9:60:28: ac:18:17:18:2d:cb:6f:1a:39:73:36:87:d9:8a:3b: 7a:0c:d4:a2:73:6a:ff:63:f5:53:4c:bd:d2:ff:61: 8e:8f:b3:ea:73:dd:7b:15:b1:c9:e4:24:4a:7d:ca: ac:2e:51:47:1a:da:72:e5:42:ea:eb:35:d9:6f:7d: 1f:d7:bd:f3:e5:de:04:27:06:13:70:02:53:bd:36: 0e:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 85:1A:27:F8:05:C8:E6:EF:E6:A6:D4:9D:58:8B:7C:D5:D6:0D:7B:B5 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/4C2B74007E0DAA96B6980F8C6C1C9C009F2A0AF77F26C6CD193D409DBE82064F/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/4C2B74007E0DAA96B6980F8C6C1C9C009F2A0AF77F26C6CD193D409DBE82064F/0/851A27F805C8E6EFE6A6D49D588B7CD5D60D7BB5.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:4c30::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 274319 Signature Algorithm: sha256WithRSAEncryption 6c:82:20:60:53:cd:70:62:15:fa:35:36:53:5a:9f:53:ec:e3: 55:20:e6:74:97:9f:b2:2d:cf:61:b4:cc:46:6f:7a:8b:6c:2e: ba:9b:ee:7c:93:d8:8a:46:7b:6b:8a:d9:79:a5:09:a9:96:e7: ee:1f:d2:51:37:89:06:2a:f2:ac:38:61:e7:1c:a0:0d:e0:12: b6:1d:64:79:b5:b2:a2:e3:5c:10:c7:d7:04:39:1b:d2:be:4c: 83:b5:64:6d:81:45:9b:43:47:f7:c2:20:fd:0e:4b:19:a1:54: b7:7a:48:27:f5:63:8c:94:18:ab:5a:c6:3e:e0:c7:91:5a:9f: da:4c:4a:45:99:8f:bd:94:32:cf:76:33:4e:ab:0e:89:2c:0c: 61:c2:cc:79:25:1c:ad:9b:6f:9c:6d:3c:d2:62:2d:58:5b:45: 59:bd:c6:4f:97:17:06:54:2d:62:4b:0a:e2:99:e7:f4:af:b2: 16:e0:38:e7:db:c3:92:85:c9:52:7d:99:f3:07:2c:43:18:0c: 69:aa:96:db:a3:d6:4e:b7:87:18:eb:9f:0c:f6:da:8c:74:f2: 75:a1:f7:ef:1b:33:df:3c:3a:b4:79:79:68:75:c9:4e:62:84: 3f:63:04:b8:3f:28:2b:e3:3e:91:f4:9b:e9:4b:45:d6:06:ad: ce:62:84:3a -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUPKiZcredxz7HPGrRRFeI37Nw4KQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjA0MjExNjQwMDNaFw0yNzA0MjAxNjQ1MDNaMDMxMTAvBgNV BAMTKDg1MUEyN0Y4MDVDOEU2RUZFNkE2RDQ5RDU4OEI3Q0Q1RDYwRDdCQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiTTKh6sZm/hEN88BzCgS5k2Z7 D7hVvGuWySQTgcAyV47zNenyBZ/095Ep2PZhT3MtMSkPAo1x+/7VL69wKkz+KMwY fgPs66eYl/pstTaBQvWSWlhpyGtO6geTB0kEVSU1sBACZlpDCKrjNj7H9fxa036c Mi0Pb0jOc1vecpG8OGyOFIlrTGYNPRr6o8koELUlvEP1vAV20OhzJlMmaBe5RO5d lk5VRk0YviFst21+1OlgKKwYFxgty28aOXM2h9mKO3oM1KJzav9j9VNMvdL/YY6P s+pz3XsVscnkJEp9yqwuUUca2nLlQurrNdlvfR/XvfPl3gQnBhNwAlO9Ng73AgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSFGif4Bcjm7+am 1J1Yi3zV1g17tTAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNEMyQjc0MDA3RTBEQUE5NkI2OTgwRjhD NkMxQzlDMDA5RjJBMEFGNzdGMjZDNkNEMTkzRDQwOURCRTgyMDY0Ri8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80QzJCNzQwMDdFMERBQTk2QjY5ODBGOEM2QzFDOUMwMDlGMkEwQUY3N0Yy NkM2Q0QxOTNENDA5REJFODIwNjRGLzAvODUxQTI3RjgwNUM4RTZFRkU2QTZENDlE NTg4QjdDRDVENjBEN0JCNS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKANMMDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEL48wDQYJKoZIhvcNAQELBQADggEBAGyCIGBT zXBiFfo1NlNan1Ps41Ug5nSXn7Itz2G0zEZveotsLrqb7nyT2IpGe2uK2XmlCamW 5+4f0lE3iQYq8qw4YeccoA3gErYdZHm1sqLjXBDH1wQ5G9K+TIO1ZG2BRZtDR/fC IP0OSxmhVLd6SCf1Y4yUGKtaxj7gx5Fan9pMSkWZj72UMs92M06rDoksDGHCzHkl HK2bb5xtPNJiLVhbRVm9xk+XFwZULWJLCuKZ5/SvshbgOOfbw5KFyVJ9mfMHLEMY DGmqltuj1k63hxjrnwz22ox08nWh9+8bM988OrR5eWh1yU5ihD9jBLg/KCvjPpH0 m+lLRdYGrc5ihDo= -----END CERTIFICATE-----Generated at Thu Apr 30 04:54:28 2026 by rpki-client