$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D2C016FE4F874EDFEEAC13022606926426A0F2E.cer File: 1D2C016FE4F874EDFEEAC13022606926426A0F2E.cer (raw, json) Hash identifier: EvUVvPV1rpBwWUAeLg1UdOH4fJQplxOk6b6zdSJRI+g= Subject key identifier: 1D:2C:01:6F:E4:F8:74:ED:FE:EA:C1:30:22:60:69:26:42:6A:0F:2E Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 0BE07F87D56682929CCDC9FBF7969D391B228BCF Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/303F051D68EAC7CE5BD67AA90E97CBF534B826581E080F07486D69F9CD0B749B/0/1D2C016FE4F874EDFEEAC13022606926426A0F2E.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/303F051D68EAC7CE5BD67AA90E97CBF534B826581E080F07486D69F9CD0B749B/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 24 Mar 2026 20:40:02 +0000 Certificate not after: Tue 23 Mar 2027 20:45:02 +0000 Subordinate resources: AS: 273963 IP: 2803:40d0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 29 Mar 2026 13:37:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:e0:7f:87:d5:66:82:92:9c:cd:c9:fb:f7:96:9d:39:1b:22:8b:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Mar 24 20:40:02 2026 GMT Not After : Mar 23 20:45:02 2027 GMT Subject: CN=1D2C016FE4F874EDFEEAC13022606926426A0F2E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:93:7d:9a:2e:b8:ec:6c:82:54:c7:65:59:21: 8b:33:fb:51:84:98:1b:66:18:3e:c4:74:f3:40:81: db:0c:b2:ba:f8:18:3e:0f:95:56:0a:48:b3:a1:6d: 99:e2:ca:3f:84:5d:c6:b5:12:2f:c9:e8:e2:0e:25: 75:ca:70:05:84:bb:f9:4d:83:ca:3e:dd:e4:bc:6f: df:d4:74:af:51:c5:ea:3e:6d:8b:3c:dd:98:dd:e5: 39:b5:d9:f2:22:eb:a1:36:25:dc:51:41:5a:50:94: 36:0a:d7:7d:04:46:9c:37:d9:79:87:69:a5:87:d0: 0e:4d:2e:6f:85:cc:ca:4b:67:2b:a4:72:61:40:e7: e2:1e:2c:a1:68:3d:e5:23:e3:8e:c4:3b:ce:da:3f: 65:28:dc:89:c7:98:00:6c:5a:f7:52:79:7d:15:81: 6b:bf:50:94:17:22:96:ea:35:c1:25:83:59:31:cb: ef:40:5c:d5:da:d0:0e:7b:69:f6:2d:4b:e7:a2:2c: 5c:cf:2e:a3:03:4c:77:b7:c0:e1:df:e6:19:7e:18: 44:b6:d8:57:6c:4f:96:58:1d:02:27:37:56:f2:f0: 22:28:f9:1e:55:25:5e:ff:ca:4c:55:26:29:36:71: 29:91:68:91:0e:3a:ff:57:e4:e9:07:e9:8c:6f:bb: a6:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1D:2C:01:6F:E4:F8:74:ED:FE:EA:C1:30:22:60:69:26:42:6A:0F:2E X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/303F051D68EAC7CE5BD67AA90E97CBF534B826581E080F07486D69F9CD0B749B/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/303F051D68EAC7CE5BD67AA90E97CBF534B826581E080F07486D69F9CD0B749B/0/1D2C016FE4F874EDFEEAC13022606926426A0F2E.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:40d0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273963 Signature Algorithm: sha256WithRSAEncryption 31:f5:ec:80:81:ef:c6:35:e0:98:6f:c2:25:e5:cb:9e:db:df: a5:61:57:bd:24:b0:33:e7:21:8d:a2:bf:d8:f8:b2:45:72:4e: 27:35:0e:95:b1:f4:c3:65:59:e8:12:27:2f:87:69:13:e1:c9: 7d:7e:dc:ee:cb:2c:c9:61:37:48:4b:2d:e3:f7:43:64:c9:59: ab:b9:33:a2:00:36:13:4e:7d:d9:0d:53:88:cc:47:09:6a:88: a5:c8:d9:6f:fe:27:a5:f3:09:e7:89:4b:0f:c6:a9:a4:6e:48: 00:24:57:51:32:9c:ed:2c:b4:88:6a:7d:8f:c2:92:1e:15:f4: 16:00:b2:9b:5b:c9:53:c5:ea:1d:ef:8c:3f:f8:94:65:b7:a0: 75:36:27:10:b1:8c:32:48:eb:44:3f:e5:95:6c:80:bc:f6:8e: b5:79:5e:52:55:06:6e:ac:68:46:0a:50:cc:df:f1:b5:e4:0c: 42:e1:96:4a:3a:51:79:d1:e3:9b:c8:83:1b:cb:97:2e:22:23: 9e:3c:ea:20:45:f6:bb:16:c9:2c:0d:f4:87:6c:7d:06:c3:c7: ef:5e:33:09:72:4c:e1:77:32:71:ed:9a:1d:11:27:ea:d8:55: 73:96:f0:c7:f0:3a:23:f0:0f:b9:3b:5f:fd:67:5b:bc:06:23: 9a:02:32:cd -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUC+B/h9VmgpKczcn795adORsii88wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAzMjQyMDQwMDJaFw0yNzAzMjMyMDQ1MDJaMDMxMTAvBgNV BAMTKDFEMkMwMTZGRTRGODc0RURGRUVBQzEzMDIyNjA2OTI2NDI2QTBGMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqk32aLrjsbIJUx2VZIYsz+1GE mBtmGD7EdPNAgdsMsrr4GD4PlVYKSLOhbZniyj+EXca1Ei/J6OIOJXXKcAWEu/lN g8o+3eS8b9/UdK9Rxeo+bYs83Zjd5Tm12fIi66E2JdxRQVpQlDYK130ERpw32XmH aaWH0A5NLm+FzMpLZyukcmFA5+IeLKFoPeUj447EO87aP2Uo3InHmABsWvdSeX0V gWu/UJQXIpbqNcElg1kxy+9AXNXa0A57afYtS+eiLFzPLqMDTHe3wOHf5hl+GES2 2FdsT5ZYHQInN1by8CIo+R5VJV7/ykxVJik2cSmRaJEOOv9X5OkH6Yxvu6ZrAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQdLAFv5Ph07f7q wTAiYGkmQmoPLjAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMzAzRjA1MUQ2OEVBQzdDRTVCRDY3QUE5 MEU5N0NCRjUzNEI4MjY1ODFFMDgwRjA3NDg2RDY5RjlDRDBCNzQ5Qi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8zMDNGMDUxRDY4RUFDN0NFNUJENjdBQTkwRTk3Q0JGNTM0QjgyNjU4MUUw ODBGMDc0ODZENjlGOUNEMEI3NDlCLzAvMUQyQzAxNkZFNEY4NzRFREZFRUFDMTMw MjI2MDY5MjY0MjZBMEYyRS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKANA0DAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMELiswDQYJKoZIhvcNAQELBQADggEBADH17ICB 78Y14JhvwiXly57b36VhV70ksDPnIY2iv9j4skVyTic1DpWx9MNlWegSJy+HaRPh yX1+3O7LLMlhN0hLLeP3Q2TJWau5M6IANhNOfdkNU4jMRwlqiKXI2W/+J6XzCeeJ Sw/GqaRuSAAkV1EynO0stIhqfY/Ckh4V9BYAsptbyVPF6h3vjD/4lGW3oHU2JxCx jDJI60Q/5ZVsgLz2jrV5XlJVBm6saEYKUMzf8bXkDELhlko6UXnR45vIgxvLly4i I5486iBF9rsWySwN9IdsfQbDx+9eMwlyTOF3MnHtmh0RJ+rYVXOW8MfwOiPwD7k7 X/1nW7wGI5oCMs0= -----END CERTIFICATE-----Generated at Thu Mar 26 02:23:12 2026 by rpki-client