$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9ADA3825527F2867E852AD89F0950D61C687D5A.cer File: B9ADA3825527F2867E852AD89F0950D61C687D5A.cer (raw, json) Hash identifier: +KDPbJo9Nu3uZFXwFrG8iuXiM+0manLRXEdTrdIUHEs= Subject key identifier: B9:AD:A3:82:55:27:F2:86:7E:85:2A:D8:9F:09:50:D6:1C:68:7D:5A Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 7DA62C21A6C9E8BD3009E021A1C45527EF146621 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/A6468F353AD30CAFAF43E79C59C2109C4CB114698106A51FC29BE1ECACBF969D/0/B9ADA3825527F2867E852AD89F0950D61C687D5A.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/A6468F353AD30CAFAF43E79C59C2109C4CB114698106A51FC29BE1ECACBF969D/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Sat 07 Mar 2026 20:15:01 +0000 Certificate not after: Sat 06 Mar 2027 20:20:01 +0000 Subordinate resources: AS: 274853 IP: 2803:a230::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 19 Mar 2026 05:02:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:a6:2c:21:a6:c9:e8:bd:30:09:e0:21:a1:c4:55:27:ef:14:66:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Mar 7 20:15:01 2026 GMT Not After : Mar 6 20:20:01 2027 GMT Subject: CN=B9ADA3825527F2867E852AD89F0950D61C687D5A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:09:cc:ca:53:6c:b8:12:13:d5:7c:60:77:1b: 7a:92:85:b7:54:b3:f3:56:b8:5b:f3:21:f8:59:4b: d6:eb:b8:a9:ef:01:53:65:6f:a7:e8:a6:62:e4:9c: bf:75:ee:a4:ef:75:15:fe:4c:3b:3b:d5:5a:63:0a: 68:b9:54:70:6f:f7:46:cb:71:3d:86:98:c2:75:a6: ab:15:23:0a:f5:b4:a7:bb:f1:f7:26:2d:c1:02:a0: 33:b5:33:8c:d0:d3:33:4e:e9:4e:2b:82:49:bf:2a: de:91:98:16:ef:d2:5c:33:af:70:dc:46:b6:0f:7b: 8b:b1:04:c4:23:70:f2:ff:bd:d1:48:02:a5:7a:7a: 45:99:86:24:ee:43:86:aa:f3:d2:2f:7f:96:b1:4f: 71:4c:c8:1d:2b:86:f3:95:a5:0f:79:b1:ce:dd:62: 80:c8:85:dd:24:19:ff:82:21:21:fc:39:96:e1:fb: bd:32:e9:01:23:75:aa:4e:0e:85:79:78:58:71:4f: 56:0b:fb:b0:31:8c:cc:1b:5a:1a:f0:11:67:2e:27: db:31:ae:35:b4:15:bf:19:54:f0:c2:71:fc:38:eb: ac:08:ca:84:a0:2b:94:ac:68:5f:2c:3b:99:d8:63: a8:47:f1:15:0b:b5:43:fb:5e:35:4a:85:ff:1f:d9: c3:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B9:AD:A3:82:55:27:F2:86:7E:85:2A:D8:9F:09:50:D6:1C:68:7D:5A X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/A6468F353AD30CAFAF43E79C59C2109C4CB114698106A51FC29BE1ECACBF969D/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/A6468F353AD30CAFAF43E79C59C2109C4CB114698106A51FC29BE1ECACBF969D/0/B9ADA3825527F2867E852AD89F0950D61C687D5A.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:a230::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 274853 Signature Algorithm: sha256WithRSAEncryption 63:8c:81:6e:d1:d7:fc:b8:95:99:12:2f:50:55:c6:da:00:40: c6:dc:f4:95:04:05:74:37:09:97:f3:ea:fa:a7:0a:47:9e:c6: 46:ce:54:b0:95:38:5f:e6:ec:86:54:11:d1:35:92:7a:68:84: 95:d0:14:9c:bc:e3:59:3e:65:52:04:42:63:05:e5:3a:8b:40: 6e:86:77:f4:07:a4:ac:7f:f2:d0:ab:6a:08:5e:2c:4e:2d:01: 75:48:dd:63:2e:1d:b8:6f:1d:37:5f:7a:03:59:14:34:bf:ff: d4:a9:1f:cc:ed:8e:be:e7:01:a0:39:b1:f3:50:bc:fa:0f:dc: 31:35:10:46:3c:98:59:93:83:4f:d2:dd:ac:e0:5c:07:54:26: 22:65:36:6c:e9:87:7b:69:6f:fa:ab:9f:55:20:0d:e3:98:7a: d9:ac:13:86:8f:12:59:ba:ca:57:f1:61:ba:42:ef:85:8d:9e: ec:fe:66:56:96:e8:a4:8d:22:68:f7:c6:55:c5:bb:99:46:3b: 67:21:2b:4e:e0:52:d4:18:2d:b6:c9:65:a4:90:0b:34:d4:ee: 07:c4:fa:d4:1f:e1:39:90:6a:c2:8e:80:41:be:27:a7:eb:87: 40:d2:0e:10:d5:81:12:71:58:4a:ed:7f:20:15:8a:0e:29:5a: 28:c9:5e:63 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUfaYsIabJ6L0wCeAhocRVJ+8UZiEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAzMDcyMDE1MDFaFw0yNzAzMDYyMDIwMDFaMDMxMTAvBgNV BAMTKEI5QURBMzgyNTUyN0YyODY3RTg1MkFEODlGMDk1MEQ2MUM2ODdENUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGCczKU2y4EhPVfGB3G3qShbdU s/NWuFvzIfhZS9bruKnvAVNlb6fopmLknL917qTvdRX+TDs71VpjCmi5VHBv90bL cT2GmMJ1pqsVIwr1tKe78fcmLcECoDO1M4zQ0zNO6U4rgkm/Kt6RmBbv0lwzr3Dc RrYPe4uxBMQjcPL/vdFIAqV6ekWZhiTuQ4aq89Ivf5axT3FMyB0rhvOVpQ95sc7d YoDIhd0kGf+CISH8OZbh+70y6QEjdapODoV5eFhxT1YL+7AxjMwbWhrwEWcuJ9sx rjW0Fb8ZVPDCcfw466wIyoSgK5SsaF8sO5nYY6hH8RULtUP7XjVKhf8f2cPhAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS5raOCVSfyhn6F KtifCVDWHGh9WjAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQTY0NjhGMzUzQUQzMENBRkFGNDNFNzlD NTlDMjEwOUM0Q0IxMTQ2OTgxMDZBNTFGQzI5QkUxRUNBQ0JGOTY5RC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9BNjQ2OEYzNTNBRDMwQ0FGQUY0M0U3OUM1OUMyMTA5QzRDQjExNDY5ODEw NkE1MUZDMjlCRTFFQ0FDQkY5NjlELzAvQjlBREEzODI1NTI3RjI4NjdFODUyQUQ4 OUYwOTUwRDYxQzY4N0Q1QS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAOiMDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEMaUwDQYJKoZIhvcNAQELBQADggEBAGOMgW7R 1/y4lZkSL1BVxtoAQMbc9JUEBXQ3CZfz6vqnCkeexkbOVLCVOF/m7IZUEdE1knpo hJXQFJy841k+ZVIEQmMF5TqLQG6Gd/QHpKx/8tCragheLE4tAXVI3WMuHbhvHTdf egNZFDS//9SpH8ztjr7nAaA5sfNQvPoP3DE1EEY8mFmTg0/S3azgXAdUJiJlNmzp h3tpb/qrn1UgDeOYetmsE4aPElm6ylfxYbpC74WNnuz+ZlaW6KSNImj3xlXFu5lG O2chK07gUtQYLbbJZaSQCzTU7gfE+tQf4TmQasKOgEG+J6frh0DSDhDVgRJxWErt fyAVig4pWijJXmM= -----END CERTIFICATE-----Generated at Mon Mar 16 01:55:34 2026 by rpki-client