$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B26AB9E8E8410FB48008ECDE6D9DB82F839A19A.cer File: 2B26AB9E8E8410FB48008ECDE6D9DB82F839A19A.cer (raw, json) Hash identifier: mz0tvQtqiRLVzIXg/VKoW4HLEtzfGiRWxfg9q5XmD4I= Subject key identifier: 2B:26:AB:9E:8E:84:10:FB:48:00:8E:CD:E6:D9:DB:82:F8:39:A1:9A Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 401A7AF55FA41FEAE49A260B3AE79EFA51D1716C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/2BCC11B3F870493CA5D5E7398BF2C894F554B5EEEB25B92B9B755B5BFE073D25/0/2B26AB9E8E8410FB48008ECDE6D9DB82F839A19A.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/2BCC11B3F870493CA5D5E7398BF2C894F554B5EEEB25B92B9B755B5BFE073D25/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 18 Mar 2026 15:55:02 +0000 Certificate not after: Wed 17 Mar 2027 16:00:02 +0000 Subordinate resources: AS: 274250 IP: 2803:fd0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 29 Mar 2026 17:17:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:1a:7a:f5:5f:a4:1f:ea:e4:9a:26:0b:3a:e7:9e:fa:51:d1:71:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Mar 18 15:55:02 2026 GMT Not After : Mar 17 16:00:02 2027 GMT Subject: CN=2B26AB9E8E8410FB48008ECDE6D9DB82F839A19A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ac:35:9d:86:8a:63:3c:aa:a4:83:48:8e:d0: 58:c1:03:02:49:90:31:f7:99:52:6f:8b:59:17:9d: fd:65:14:9e:6a:b1:48:ea:23:2d:af:7d:9a:ca:af: 17:11:76:6f:8c:94:4c:c8:44:53:b0:0b:f8:e0:2c: e7:73:c0:ba:fe:93:3a:96:e0:99:14:52:e8:27:67: a7:22:fc:ef:27:c0:69:85:de:1e:08:fb:2b:96:12: 7d:26:92:00:3a:8a:7d:6d:51:c8:87:c1:54:6f:c1: cc:2e:4b:46:69:f8:2a:a7:bf:2d:d8:50:f7:4e:1d: ee:13:e6:ee:23:b7:e2:6e:7b:99:50:7a:c6:57:5c: a0:10:bc:84:ab:1a:0f:7b:5d:6c:0f:2a:3d:6e:a8: 0e:78:53:e1:6a:65:91:e9:6b:e2:2b:84:25:b2:67: 8b:0a:bd:df:e0:7c:81:26:f1:2b:d2:51:6f:d0:9d: 8d:33:7a:39:97:90:f8:d9:91:4b:2b:81:65:89:d4: fb:a3:a9:1c:be:5b:b7:2e:6d:68:48:ac:bc:8c:00: 3d:eb:db:75:29:d2:52:70:0a:58:80:f6:a3:bd:4c: 0d:61:ea:c9:06:f7:76:ac:67:44:c6:d2:cc:51:b6: de:b4:84:f8:c4:16:ed:4a:76:64:70:9e:7b:4c:23: a5:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2B:26:AB:9E:8E:84:10:FB:48:00:8E:CD:E6:D9:DB:82:F8:39:A1:9A X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/2BCC11B3F870493CA5D5E7398BF2C894F554B5EEEB25B92B9B755B5BFE073D25/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/2BCC11B3F870493CA5D5E7398BF2C894F554B5EEEB25B92B9B755B5BFE073D25/0/2B26AB9E8E8410FB48008ECDE6D9DB82F839A19A.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:fd0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 274250 Signature Algorithm: sha256WithRSAEncryption 66:d3:75:6c:f9:ae:81:ed:6d:0d:cb:78:fd:b8:0b:17:55:72: 3b:2d:da:a7:9a:2f:2e:2a:2a:cd:83:b4:b1:0a:21:62:6f:aa: 65:e3:2d:f4:04:25:ee:bf:13:7d:c5:82:97:af:19:fb:8b:7f: 8f:0e:df:1c:0a:5c:ea:ce:a1:1d:0b:e6:43:0b:81:57:3d:9f: 33:d5:d8:86:a5:84:e4:21:42:7e:ce:e6:aa:ba:86:94:be:36: ab:68:b2:52:f2:e4:db:0a:66:53:62:78:5d:d8:e8:63:80:96: ed:ee:b2:36:c6:f6:cd:d2:99:00:4b:15:5f:1d:21:ba:4a:ec: f4:d8:93:b4:fd:90:35:14:0c:7a:33:4b:86:c8:22:1c:28:73: 6c:3c:ac:e3:29:89:8b:dd:42:f3:8f:78:50:41:86:f9:26:1d: 7a:6a:5e:e8:7c:51:ae:2b:29:a7:88:59:5c:3e:72:85:24:bd: 66:8b:db:ce:4c:ea:c1:b7:1a:80:ab:9f:1f:37:7a:e9:5a:85: 91:bd:6c:7a:03:23:80:40:96:48:f6:b2:e7:f9:99:25:58:f7: e1:04:70:0c:4e:ef:35:ae:67:92:f5:42:a4:1d:c8:8a:75:3f: 6c:94:2f:79:ee:97:df:a6:1d:06:5f:35:77:db:c6:49:15:26: 48:94:68:38 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUQBp69V+kH+rkmiYLOuee+lHRcWwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAzMTgxNTU1MDJaFw0yNzAzMTcxNjAwMDJaMDMxMTAvBgNV BAMTKDJCMjZBQjlFOEU4NDEwRkI0ODAwOEVDREU2RDlEQjgyRjgzOUExOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDArDWdhopjPKqkg0iO0FjBAwJJ kDH3mVJvi1kXnf1lFJ5qsUjqIy2vfZrKrxcRdm+MlEzIRFOwC/jgLOdzwLr+kzqW 4JkUUugnZ6ci/O8nwGmF3h4I+yuWEn0mkgA6in1tUciHwVRvwcwuS0Zp+Cqnvy3Y UPdOHe4T5u4jt+Jue5lQesZXXKAQvISrGg97XWwPKj1uqA54U+FqZZHpa+IrhCWy Z4sKvd/gfIEm8SvSUW/QnY0zejmXkPjZkUsrgWWJ1PujqRy+W7cubWhIrLyMAD3r 23Up0lJwCliA9qO9TA1h6skG93asZ0TG0sxRtt60hPjEFu1KdmRwnntMI6UnAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQrJquejoQQ+0gA js3m2duC+DmhmjAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMkJDQzExQjNGODcwNDkzQ0E1RDVFNzM5 OEJGMkM4OTRGNTU0QjVFRUVCMjVCOTJCOUI3NTVCNUJGRTA3M0QyNS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8yQkNDMTFCM0Y4NzA0OTNDQTVENUU3Mzk4QkYyQzg5NEY1NTRCNUVFRUIy NUI5MkI5Qjc1NUI1QkZFMDczRDI1LzAvMkIyNkFCOUU4RTg0MTBGQjQ4MDA4RUNE RTZEOURCODJGODM5QTE5QS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAMP0DAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEL0owDQYJKoZIhvcNAQELBQADggEBAGbTdWz5 roHtbQ3LeP24CxdVcjst2qeaLy4qKs2DtLEKIWJvqmXjLfQEJe6/E33FgpevGfuL f48O3xwKXOrOoR0L5kMLgVc9nzPV2IalhOQhQn7O5qq6hpS+NqtoslLy5NsKZlNi eF3Y6GOAlu3usjbG9s3SmQBLFV8dIbpK7PTYk7T9kDUUDHozS4bIIhwoc2w8rOMp iYvdQvOPeFBBhvkmHXpqXuh8Ua4rKaeIWVw+coUkvWaL285M6sG3GoCrnx83eula hZG9bHoDI4BAlkj2suf5mSVY9+EEcAxO7zWuZ5L1QqQdyIp1P2yUL3nul9+mHQZf NXfbxkkVJkiUaDg= -----END CERTIFICATE-----Generated at Thu Mar 26 18:11:14 2026 by rpki-client