$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D98287006D2FBD07F5FE58AB71F813860B063D05.cer File: D98287006D2FBD07F5FE58AB71F813860B063D05.cer (raw, json) Hash identifier: Jv5AVN3Ncn+RLTrneWHXbaTHXoi0NUzJyqRvwl6OJUE= Subject key identifier: D9:82:87:00:6D:2F:BD:07:F5:FE:58:AB:71:F8:13:86:0B:06:3D:05 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 4F05FAB6D1B40A95218852F8A430B03902696BDE Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/267BD1EEB8C803BA941EFB3CDDBEDAAFB1C33A595E2192064EBDC7A947D8852C/0/D98287006D2FBD07F5FE58AB71F813860B063D05.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/267BD1EEB8C803BA941EFB3CDDBEDAAFB1C33A595E2192064EBDC7A947D8852C/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 04 Mar 2026 21:00:01 +0000 Certificate not after: Wed 03 Mar 2027 21:05:01 +0000 Subordinate resources: AS: 274325 IP: 2803:6c30::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 19 Mar 2026 05:02:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:05:fa:b6:d1:b4:0a:95:21:88:52:f8:a4:30:b0:39:02:69:6b:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Mar 4 21:00:01 2026 GMT Not After : Mar 3 21:05:01 2027 GMT Subject: CN=D98287006D2FBD07F5FE58AB71F813860B063D05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ca:d1:1c:99:c5:7d:a4:44:99:a0:79:a9:94: a5:92:e4:e4:c9:f7:a9:e7:32:9a:d1:bc:b9:b0:03: 98:38:fb:56:6c:95:a8:ce:46:dc:9d:1a:4c:70:2e: 20:1a:fb:b9:a0:36:86:83:88:54:6b:4b:fd:52:38: e7:e3:86:c5:ae:7f:a9:53:f9:d4:54:f4:bc:a2:c9: e1:5a:aa:e7:92:ae:0f:e8:9e:2f:26:96:45:c8:ad: 49:4b:94:78:a3:d4:a8:fc:3f:32:f8:64:f4:00:bc: 8d:e6:e9:a0:89:31:5c:c0:c8:5d:6b:66:3a:5d:85: e6:8f:7a:d9:2c:ae:02:21:1f:aa:75:f5:c5:69:98: 5b:81:ba:72:c8:65:81:21:a8:41:f6:a9:fc:fe:4c: 48:77:7e:84:86:4a:20:36:fb:ce:cd:fc:89:3a:df: d9:07:2b:82:e8:23:52:ac:26:95:9a:d2:1c:09:a5: 87:e3:8a:a0:30:50:eb:8a:a8:a5:18:bf:99:e5:d8: 09:b1:5e:73:7f:9e:9e:b0:aa:9e:82:cb:71:ed:c2: 2e:38:72:9d:b9:31:49:fb:0b:be:e5:42:64:ec:32: a8:f2:79:67:aa:6b:ab:b2:b7:bf:01:d3:10:03:85: fa:a9:89:d0:23:b6:81:80:71:b7:b1:a4:f7:5b:fe: 8b:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D9:82:87:00:6D:2F:BD:07:F5:FE:58:AB:71:F8:13:86:0B:06:3D:05 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/267BD1EEB8C803BA941EFB3CDDBEDAAFB1C33A595E2192064EBDC7A947D8852C/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/267BD1EEB8C803BA941EFB3CDDBEDAAFB1C33A595E2192064EBDC7A947D8852C/0/D98287006D2FBD07F5FE58AB71F813860B063D05.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:6c30::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 274325 Signature Algorithm: sha256WithRSAEncryption 83:ab:9d:04:bc:2f:25:52:e6:57:a9:2f:34:c0:7c:8b:2d:f4: c9:75:12:77:b0:ae:fc:45:a3:47:2d:c7:6f:b8:a2:09:5b:af: 83:4b:b2:c4:13:35:99:a3:b8:1e:c0:b9:4a:4b:3e:27:3e:46: 84:7d:2a:87:3e:d5:b1:0e:38:bb:00:82:15:b1:bc:67:d7:7e: 2c:3f:1b:aa:ac:52:96:be:d2:d1:34:ca:0e:80:cb:8d:e3:9b: a2:9c:34:00:8f:62:e4:68:fa:c4:05:15:5e:f6:9c:e4:cb:fc: 3a:41:b5:7b:0d:01:49:97:b4:57:98:e8:6a:67:db:13:c7:a4: 22:be:72:f5:f5:d7:76:b5:d3:8b:b4:7a:95:85:af:f9:4a:1a: cc:2d:97:ae:b9:1a:24:34:32:c6:b3:ec:aa:7d:53:00:28:bb: 29:b5:cb:33:e9:5f:21:2a:da:b9:e9:4e:ed:fe:3a:44:e9:d6: 1a:76:3f:82:5d:67:4d:82:69:5d:78:5b:6d:4c:e7:bc:9c:81: 6f:d9:81:ea:f9:5b:57:a5:67:87:34:c9:01:c7:69:f1:c9:4d: 6b:19:78:39:96:42:63:eb:67:4b:a5:1a:23:0b:e1:84:01:65: a4:ab:ed:75:6c:02:8f:0e:7f:e6:25:52:39:84:1d:c3:31:f3: 93:7b:22:48 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUTwX6ttG0CpUhiFL4pDCwOQJpa94wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAzMDQyMTAwMDFaFw0yNzAzMDMyMTA1MDFaMDMxMTAvBgNV BAMTKEQ5ODI4NzAwNkQyRkJEMDdGNUZFNThBQjcxRjgxMzg2MEIwNjNEMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoytEcmcV9pESZoHmplKWS5OTJ 96nnMprRvLmwA5g4+1ZslajORtydGkxwLiAa+7mgNoaDiFRrS/1SOOfjhsWuf6lT +dRU9LyiyeFaqueSrg/oni8mlkXIrUlLlHij1Kj8PzL4ZPQAvI3m6aCJMVzAyF1r ZjpdheaPetksrgIhH6p19cVpmFuBunLIZYEhqEH2qfz+TEh3foSGSiA2+87N/Ik6 39kHK4LoI1KsJpWa0hwJpYfjiqAwUOuKqKUYv5nl2AmxXnN/np6wqp6Cy3Htwi44 cp25MUn7C77lQmTsMqjyeWeqa6uyt78B0xADhfqpidAjtoGAcbexpPdb/os3AgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTZgocAbS+9B/X+ WKtx+BOGCwY9BTAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMjY3QkQxRUVCOEM4MDNCQTk0MUVGQjND RERCRURBQUZCMUMzM0E1OTVFMjE5MjA2NEVCREM3QTk0N0Q4ODUyQy8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8yNjdCRDFFRUI4QzgwM0JBOTQxRUZCM0NEREJFREFBRkIxQzMzQTU5NUUy MTkyMDY0RUJEQzdBOTQ3RDg4NTJDLzAvRDk4Mjg3MDA2RDJGQkQwN0Y1RkU1OEFC NzFGODEzODYwQjA2M0QwNS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKANsMDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEL5UwDQYJKoZIhvcNAQELBQADggEBAIOrnQS8 LyVS5lepLzTAfIst9Ml1EnewrvxFo0ctx2+4oglbr4NLssQTNZmjuB7AuUpLPic+ RoR9Koc+1bEOOLsAghWxvGfXfiw/G6qsUpa+0tE0yg6Ay43jm6KcNACPYuRo+sQF FV72nOTL/DpBtXsNAUmXtFeY6Gpn2xPHpCK+cvX113a104u0epWFr/lKGswtl665 GiQ0Msaz7Kp9UwAouym1yzPpXyEq2rnpTu3+OkTp1hp2P4JdZ02CaV14W21M57yc gW/Zger5W1elZ4c0yQHHafHJTWsZeDmWQmPrZ0ulGiML4YQBZaSr7XVsAo8Of+Yl UjmEHcMx85N7Ikg= -----END CERTIFICATE-----Generated at Mon Mar 16 01:55:34 2026 by rpki-client