$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B029297388C27DB3572FC8EA0B7B2B05BCC4413E.cer File: B029297388C27DB3572FC8EA0B7B2B05BCC4413E.cer (raw, json) Hash identifier: 8g6AyrBBJDp2GyBNlw/DHQGJ1REPF/3zrhuolEJk9pg= Subject key identifier: B0:29:29:73:88:C2:7D:B3:57:2F:C8:EA:0B:7B:2B:05:BC:C4:41:3E Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 2DB858F003CD6D9AA06DE332BC0F8B734082B2D5 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/13F7D7854A2C35859EBF483501B2CF7ABC767714700414A22FA9CC6D8742EE94/0/B029297388C27DB3572FC8EA0B7B2B05BCC4413E.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/13F7D7854A2C35859EBF483501B2CF7ABC767714700414A22FA9CC6D8742EE94/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Fri 20 Mar 2026 17:10:01 +0000 Certificate not after: Fri 19 Mar 2027 17:15:01 +0000 Subordinate resources: AS: 274309 IP: 2803:e430::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 30 Mar 2026 19:49:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:b8:58:f0:03:cd:6d:9a:a0:6d:e3:32:bc:0f:8b:73:40:82:b2:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Mar 20 17:10:01 2026 GMT Not After : Mar 19 17:15:01 2027 GMT Subject: CN=B029297388C27DB3572FC8EA0B7B2B05BCC4413E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:2e:b1:94:79:b1:41:d1:79:c8:4c:41:e1:81: fb:c4:d6:98:9c:d1:b6:62:85:e1:ee:20:53:e2:c7: 03:72:1b:c4:f3:53:36:0d:69:a8:e9:80:5f:64:ec: 98:f3:18:fb:a9:06:14:b6:e6:42:d5:3a:34:fc:48: c9:df:fd:8f:6c:2d:dc:18:59:f5:b6:89:f1:c8:f7: 1f:d7:f8:57:04:2a:00:c2:cc:28:40:fd:90:48:6d: 7a:41:a3:3d:40:57:e0:de:f2:d8:2e:84:6a:1a:7d: d5:5f:f0:3e:14:47:1e:c3:75:62:c5:b3:45:d7:df: db:0a:4a:37:a8:e7:32:2b:76:78:24:9e:b8:1e:36: 1b:d2:76:d4:f4:cb:26:b4:ba:d6:3e:fd:4e:42:a4: b0:ad:af:0b:4f:62:ac:23:8a:a3:f1:5e:d2:f7:33: 09:69:fa:ba:4b:25:cb:40:a2:9f:d2:d0:00:58:da: 09:a4:e3:7d:53:ff:6c:0c:76:42:c3:e0:8f:b0:df: 18:db:cf:92:f3:3c:05:40:14:54:42:7a:59:e4:64: f5:25:b5:95:b7:eb:30:ad:d7:f0:d9:3f:a2:0f:34: 92:27:81:aa:96:73:7c:54:71:95:56:9a:a2:b0:59: f2:e7:a2:f2:2e:8c:00:8c:e0:ba:fe:d6:50:39:26: ca:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B0:29:29:73:88:C2:7D:B3:57:2F:C8:EA:0B:7B:2B:05:BC:C4:41:3E X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/13F7D7854A2C35859EBF483501B2CF7ABC767714700414A22FA9CC6D8742EE94/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/13F7D7854A2C35859EBF483501B2CF7ABC767714700414A22FA9CC6D8742EE94/0/B029297388C27DB3572FC8EA0B7B2B05BCC4413E.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:e430::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 274309 Signature Algorithm: sha256WithRSAEncryption 43:40:61:b1:79:96:b5:b5:e8:08:34:27:1a:89:a5:0e:75:ff: 77:d6:a7:93:88:e0:2b:8c:59:44:0f:35:72:e0:69:70:83:88: 60:81:7b:f1:1b:6c:ad:61:f4:53:64:a1:a2:ea:f4:32:05:60: d7:8b:a2:45:d5:7f:e9:a7:0f:e6:11:64:d9:be:21:83:73:75: 84:77:3a:11:45:9f:02:bb:ba:f1:18:a3:1a:5d:61:eb:5b:c0: 9f:65:75:09:e9:bf:df:27:e4:de:3c:da:b6:8e:ac:c8:36:76: 55:85:cc:5b:62:b2:a2:df:cc:f3:a8:c2:ee:6a:a8:3a:5c:fb: 20:aa:7e:5b:20:5a:bd:79:8d:9a:5d:7c:fc:66:89:25:b3:16: 94:4b:09:f4:53:ff:6f:6f:33:61:70:f8:e7:e5:d7:e9:9b:2f: 03:59:0b:46:90:55:36:ca:a0:6b:b2:a8:95:20:cb:d9:3f:5d: ba:8f:a3:74:d0:42:08:01:92:d2:a9:47:0f:c9:7d:d3:84:e9: 1c:19:5b:82:02:56:1f:4b:58:d9:80:2b:5f:d5:20:8f:40:1c: 8e:28:f5:5e:91:61:cf:3d:3e:c0:69:b8:e1:64:31:60:5f:be: e7:bd:d6:72:35:a2:2c:6a:90:cd:0f:07:f8:3b:df:7f:10:a7: f3:e4:59:ec -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIULbhY8APNbZqgbeMyvA+Lc0CCstUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAzMjAxNzEwMDFaFw0yNzAzMTkxNzE1MDFaMDMxMTAvBgNV BAMTKEIwMjkyOTczODhDMjdEQjM1NzJGQzhFQTBCN0IyQjA1QkNDNDQxM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbLrGUebFB0XnITEHhgfvE1pic 0bZiheHuIFPixwNyG8TzUzYNaajpgF9k7JjzGPupBhS25kLVOjT8SMnf/Y9sLdwY WfW2ifHI9x/X+FcEKgDCzChA/ZBIbXpBoz1AV+De8tguhGoafdVf8D4URx7DdWLF s0XX39sKSjeo5zIrdngknrgeNhvSdtT0yya0utY+/U5CpLCtrwtPYqwjiqPxXtL3 Mwlp+rpLJctAop/S0ABY2gmk431T/2wMdkLD4I+w3xjbz5LzPAVAFFRCelnkZPUl tZW36zCt1/DZP6IPNJIngaqWc3xUcZVWmqKwWfLnovIujACM4Lr+1lA5Jsq1AgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSwKSlziMJ9s1cv yOoLeysFvMRBPjAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMTNGN0Q3ODU0QTJDMzU4NTlFQkY0ODM1 MDFCMkNGN0FCQzc2NzcxNDcwMDQxNEEyMkZBOUNDNkQ4NzQyRUU5NC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8xM0Y3RDc4NTRBMkMzNTg1OUVCRjQ4MzUwMUIyQ0Y3QUJDNzY3NzE0NzAw NDE0QTIyRkE5Q0M2RDg3NDJFRTk0LzAvQjAyOTI5NzM4OEMyN0RCMzU3MkZDOEVB MEI3QjJCMDVCQ0M0NDEzRS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAPkMDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEL4UwDQYJKoZIhvcNAQELBQADggEBAENAYbF5 lrW16Ag0JxqJpQ51/3fWp5OI4CuMWUQPNXLgaXCDiGCBe/EbbK1h9FNkoaLq9DIF YNeLokXVf+mnD+YRZNm+IYNzdYR3OhFFnwK7uvEYoxpdYetbwJ9ldQnpv98n5N48 2raOrMg2dlWFzFtisqLfzPOowu5qqDpc+yCqflsgWr15jZpdfPxmiSWzFpRLCfRT /29vM2Fw+Ofl1+mbLwNZC0aQVTbKoGuyqJUgy9k/XbqPo3TQQggBktKpRw/JfdOE 6RwZW4ICVh9LWNmAK1/VII9AHI4o9V6RYc89PsBpuOFkMWBfvue91nI1oixqkM0P B/g7338Qp/PkWew= -----END CERTIFICATE-----Generated at Thu Mar 26 20:39:17 2026 by rpki-client