$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2166CB6FA138E02F36D12C891E3A013C1FF4A2C7.cer File: 2166CB6FA138E02F36D12C891E3A013C1FF4A2C7.cer (raw, json) Hash identifier: 1e04bbGdIwsNzUrZ8ZpOWeSJKziyVnUGPMAxj4vI2XM= Subject key identifier: 21:66:CB:6F:A1:38:E0:2F:36:D1:2C:89:1E:3A:01:3C:1F:F4:A2:C7 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 16F789B7A85B1F376C54219C0BE5BBCE1A8D5F7D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/770F3EFCD88F360A0287A497E72EDCBAED30C389C0825F2CA4CC7A95C95489E9/0/2166CB6FA138E02F36D12C891E3A013C1FF4A2C7.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/770F3EFCD88F360A0287A497E72EDCBAED30C389C0825F2CA4CC7A95C95489E9/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Mon 23 Mar 2026 19:25:01 +0000 Certificate not after: Mon 22 Mar 2027 19:30:01 +0000 Subordinate resources: AS: 272142 IP: 2803:9090::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 30 Mar 2026 19:49:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:f7:89:b7:a8:5b:1f:37:6c:54:21:9c:0b:e5:bb:ce:1a:8d:5f:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Mar 23 19:25:01 2026 GMT Not After : Mar 22 19:30:01 2027 GMT Subject: CN=2166CB6FA138E02F36D12C891E3A013C1FF4A2C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:a9:c8:ed:b7:a3:ae:a0:bd:4b:1f:4c:1a:07: 2b:fa:ef:d7:25:d8:fe:cd:1d:18:ac:62:e0:a3:53: bc:09:f3:8d:9e:bc:02:f7:fb:88:b5:b1:95:fa:ca: 58:d0:b4:c3:4a:ef:00:48:98:e6:6b:87:dd:77:b0: 0e:d0:38:08:03:50:d0:c8:c9:bf:7d:f5:ba:7d:a3: 3d:a9:0e:e8:c9:f9:62:5d:09:6a:cd:8d:0c:a4:7c: ef:07:c0:93:da:59:cd:af:36:63:03:a4:9c:b5:5f: 26:00:0d:b3:7a:ab:3e:67:c9:ca:f9:72:98:a1:ee: 9d:0f:c6:61:95:41:e5:f1:c4:d7:51:c7:45:33:22: ad:ff:db:00:b8:c2:4e:56:a4:51:c1:37:8d:25:37: 8a:05:cd:ad:60:d6:48:a0:a0:7c:7f:84:fb:b6:6d: 46:61:bf:7e:44:9f:92:0a:67:5d:da:ae:b0:10:d9: b1:6d:b4:71:42:0e:7d:80:3e:db:83:a4:31:e5:3c: bf:7d:8d:a2:52:03:82:b4:80:05:3e:d9:6e:83:6b: b4:46:36:fc:2e:0b:68:31:4e:5c:13:b3:b0:b1:23: ad:68:65:6a:e4:ff:fe:1c:3c:fe:7e:5a:6f:0b:aa: a5:7f:08:f5:8c:37:40:d4:c7:d0:a3:d6:2d:67:07: f3:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 21:66:CB:6F:A1:38:E0:2F:36:D1:2C:89:1E:3A:01:3C:1F:F4:A2:C7 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/770F3EFCD88F360A0287A497E72EDCBAED30C389C0825F2CA4CC7A95C95489E9/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/770F3EFCD88F360A0287A497E72EDCBAED30C389C0825F2CA4CC7A95C95489E9/0/2166CB6FA138E02F36D12C891E3A013C1FF4A2C7.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:9090::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 272142 Signature Algorithm: sha256WithRSAEncryption 6c:5b:96:9a:e5:65:12:1f:c3:46:f8:94:b8:db:0c:d8:8e:9b: 03:f8:d1:fa:1d:a5:d4:e3:89:93:57:22:c0:5a:26:12:e5:77: 44:04:fe:31:af:4f:fa:a3:2d:29:c9:f9:6d:ea:94:d6:f5:27: e5:89:94:29:68:cb:22:a0:bb:cc:21:28:d3:e9:e6:73:c5:24: 86:30:5a:54:8e:de:fb:3a:b9:98:43:ec:2b:13:9e:1c:14:9f: 98:70:e1:78:f3:f2:23:2b:13:cd:e3:af:0c:21:d2:aa:a2:f4: bc:20:b8:82:b2:b3:a0:1d:16:a8:27:5c:3e:cc:15:7f:72:19: ec:4d:3b:27:9d:f8:de:a4:9a:8d:87:1c:fe:09:7d:4f:43:47: 69:62:7f:a8:c6:4a:90:ba:56:78:79:0a:28:47:4e:1d:90:74: 9c:bd:8b:6a:82:95:18:2a:ed:1e:ec:1e:68:f4:a4:d4:67:d2: ab:7c:d2:59:fa:91:07:86:ce:e0:a8:7e:5f:7b:39:7c:b8:d5: 1b:95:97:70:1b:6e:78:f2:f8:6f:5b:76:99:9b:54:09:c2:43: 94:b9:f8:dd:81:5c:93:51:f2:e7:2a:c0:08:60:2b:ff:00:f7: e9:2b:aa:ef:a7:8d:21:f5:d1:b0:23:2e:1f:9c:cf:90:07:80: ac:b2:78:2c -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUFveJt6hbHzdsVCGcC+W7zhqNX30wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAzMjMxOTI1MDFaFw0yNzAzMjIxOTMwMDFaMDMxMTAvBgNV BAMTKDIxNjZDQjZGQTEzOEUwMkYzNkQxMkM4OTFFM0EwMTNDMUZGNEEyQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCHqcjtt6OuoL1LH0waByv679cl 2P7NHRisYuCjU7wJ842evAL3+4i1sZX6yljQtMNK7wBImOZrh913sA7QOAgDUNDI yb999bp9oz2pDujJ+WJdCWrNjQykfO8HwJPaWc2vNmMDpJy1XyYADbN6qz5nycr5 cpih7p0PxmGVQeXxxNdRx0UzIq3/2wC4wk5WpFHBN40lN4oFza1g1kigoHx/hPu2 bUZhv35En5IKZ13arrAQ2bFttHFCDn2APtuDpDHlPL99jaJSA4K0gAU+2W6Da7RG NvwuC2gxTlwTs7CxI61oZWrk//4cPP5+Wm8LqqV/CPWMN0DUx9Cj1i1nB/O7AgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQhZstvoTjgLzbR LIkeOgE8H/SixzAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNzcwRjNFRkNEODhGMzYwQTAyODdBNDk3 RTcyRURDQkFFRDMwQzM4OUMwODI1RjJDQTRDQzdBOTVDOTU0ODlFOS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy83NzBGM0VGQ0Q4OEYzNjBBMDI4N0E0OTdFNzJFRENCQUVEMzBDMzg5QzA4 MjVGMkNBNENDN0E5NUM5NTQ4OUU5LzAvMjE2NkNCNkZBMTM4RTAyRjM2RDEyQzg5 MUUzQTAxM0MxRkY0QTJDNy5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAOQkDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEJw4wDQYJKoZIhvcNAQELBQADggEBAGxblprl ZRIfw0b4lLjbDNiOmwP40fodpdTjiZNXIsBaJhLld0QE/jGvT/qjLSnJ+W3qlNb1 J+WJlCloyyKgu8whKNPp5nPFJIYwWlSO3vs6uZhD7CsTnhwUn5hw4Xjz8iMrE83j rwwh0qqi9LwguIKys6AdFqgnXD7MFX9yGexNOyed+N6kmo2HHP4JfU9DR2lif6jG SpC6Vnh5CihHTh2QdJy9i2qClRgq7R7sHmj0pNRn0qt80ln6kQeGzuCofl97OXy4 1RuVl3Abbnjy+G9bdpmbVAnCQ5S5+N2BXJNR8ucqwAhgK/8A9+krqu+njSH10bAj Lh+cz5AHgKyyeCw= -----END CERTIFICATE-----Generated at Thu Mar 26 20:48:49 2026 by rpki-client