$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C8C442A5D343D572D9DF1E401590E1DEAC8DD28D.cer File: C8C442A5D343D572D9DF1E401590E1DEAC8DD28D.cer (raw, json) Hash identifier: s5UMmkG9fccFeG+qkZdzMtdhkA3ySrATru9mU+C/jZY= Subject key identifier: C8:C4:42:A5:D3:43:D5:72:D9:DF:1E:40:15:90:E1:DE:AC:8D:D2:8D Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 01FA8FDAD475BAADA6DEFA5C56BC56D34FF367D7 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/6B22787BC36A856F55DBDF0C72220B953C34ADE4E9212C80B761BAA0A13B2266/0/C8C442A5D343D572D9DF1E401590E1DEAC8DD28D.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/6B22787BC36A856F55DBDF0C72220B953C34ADE4E9212C80B761BAA0A13B2266/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Thu 19 Mar 2026 16:45:01 +0000 Certificate not after: Thu 18 Mar 2027 16:50:01 +0000 Subordinate resources: AS: 270207 IP: 2806:3f8::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 30 Mar 2026 19:49:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:fa:8f:da:d4:75:ba:ad:a6:de:fa:5c:56:bc:56:d3:4f:f3:67:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Mar 19 16:45:01 2026 GMT Not After : Mar 18 16:50:01 2027 GMT Subject: CN=C8C442A5D343D572D9DF1E401590E1DEAC8DD28D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:99:13:89:c4:8b:d6:00:a6:47:ab:43:11:9a: e5:f9:d9:b6:a3:02:ac:4e:78:a7:50:3d:e0:e1:c3: 1e:6d:b8:a0:c3:7e:52:ab:32:81:6d:a9:c3:df:a7: 5b:ad:b2:a0:99:0e:86:1b:19:89:3d:27:aa:e9:79: 4e:10:e2:cb:d2:26:11:68:ab:71:9d:21:82:04:c5: 80:9e:20:aa:32:3a:4c:df:40:80:24:6f:07:d8:c7: ab:be:42:28:0f:f7:b8:ea:9c:04:f2:e9:98:8a:3f: 4c:a0:5f:77:ab:6c:c5:1b:84:2a:ce:4e:73:87:a5: 86:95:84:08:b6:ec:e8:3b:f3:f3:d5:68:15:80:10: 99:72:cd:6f:1f:3c:70:33:32:08:65:44:41:23:75: c2:79:a2:7f:69:b0:8e:de:78:cb:03:32:c0:ea:3c: 3f:ba:3c:4c:dd:56:34:6b:0b:35:82:9b:43:f0:eb: 86:8a:90:5e:ea:f1:53:aa:8d:e9:99:e8:4c:a0:54: c5:2a:6c:9e:e4:a5:10:1d:da:a2:57:ed:f5:f5:ac: 41:ad:3f:8e:bf:c3:bc:ef:0b:dd:70:82:c2:63:be: 03:fe:f2:2e:0c:0d:91:a2:31:7d:74:04:ba:9b:98: a1:5b:0c:7e:e1:a5:3d:11:07:58:09:32:b1:ff:69: 4e:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C8:C4:42:A5:D3:43:D5:72:D9:DF:1E:40:15:90:E1:DE:AC:8D:D2:8D X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6B22787BC36A856F55DBDF0C72220B953C34ADE4E9212C80B761BAA0A13B2266/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6B22787BC36A856F55DBDF0C72220B953C34ADE4E9212C80B761BAA0A13B2266/0/C8C442A5D343D572D9DF1E401590E1DEAC8DD28D.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2806:3f8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 270207 Signature Algorithm: sha256WithRSAEncryption 60:9b:2c:85:60:19:7e:cc:23:4c:6e:59:c6:92:bc:b9:c1:da: 5d:4a:a2:fd:0e:7c:95:f8:43:c9:e3:ac:bd:12:8c:3c:ba:fa: 98:7e:9d:8c:c0:c0:6d:bf:d9:66:57:44:d4:dd:e2:85:ff:39: f3:66:87:6e:db:9b:3f:1d:03:38:db:c3:c7:c9:b9:67:1a:48: c8:99:c9:0a:c1:0f:bf:99:85:d2:08:a0:5a:c1:8b:31:03:28: ad:11:2c:cf:8e:af:33:2d:36:27:05:9b:c1:39:12:30:13:63: 23:17:fb:4b:9b:08:74:8d:ae:52:c1:e5:ad:2a:10:d7:c2:2b: 84:b5:5b:1a:8a:8e:e0:d1:b7:2a:4c:83:8a:84:e7:99:a8:3d: 6c:73:8d:d9:7e:20:a1:18:ba:07:4e:c9:2f:77:e3:79:32:c4: 29:e3:08:a2:ce:47:21:51:aa:5b:14:dd:a8:0b:d3:f3:db:2a: 90:29:2c:35:2f:df:84:04:a8:3a:79:df:d6:33:e3:51:4b:c0: 88:81:2e:32:35:54:09:87:24:ef:5a:c6:fb:74:9f:61:f5:cb: 58:7a:82:43:51:2f:12:e1:57:f5:e2:61:d5:c6:24:0e:d3:a3: d8:26:ab:43:cc:47:cf:d2:4e:88:c6:a3:ab:30:7d:33:e9:30: 54:3e:83:54 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUAfqP2tR1uq2m3vpcVrxW00/zZ9cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAzMTkxNjQ1MDFaFw0yNzAzMTgxNjUwMDFaMDMxMTAvBgNV BAMTKEM4QzQ0MkE1RDM0M0Q1NzJEOURGMUU0MDE1OTBFMURFQUM4REQyOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDImROJxIvWAKZHq0MRmuX52baj AqxOeKdQPeDhwx5tuKDDflKrMoFtqcPfp1utsqCZDoYbGYk9J6rpeU4Q4svSJhFo q3GdIYIExYCeIKoyOkzfQIAkbwfYx6u+QigP97jqnATy6ZiKP0ygX3erbMUbhCrO TnOHpYaVhAi27Og78/PVaBWAEJlyzW8fPHAzMghlREEjdcJ5on9psI7eeMsDMsDq PD+6PEzdVjRrCzWCm0Pw64aKkF7q8VOqjemZ6EygVMUqbJ7kpRAd2qJX7fX1rEGt P46/w7zvC91wgsJjvgP+8i4MDZGiMX10BLqbmKFbDH7hpT0RB1gJMrH/aU65AgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTIxEKl00PVctnf HkAVkOHerI3SjTAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNkIyMjc4N0JDMzZBODU2RjU1REJERjBD NzIyMjBCOTUzQzM0QURFNEU5MjEyQzgwQjc2MUJBQTBBMTNCMjI2Ni8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy82QjIyNzg3QkMzNkE4NTZGNTVEQkRGMEM3MjIyMEI5NTNDMzRBREU0RTky MTJDODBCNzYxQkFBMEExM0IyMjY2LzAvQzhDNDQyQTVEMzQzRDU3MkQ5REYxRTQw MTU5MEUxREVBQzhERDI4RC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAYD+DAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEH38wDQYJKoZIhvcNAQELBQADggEBAGCbLIVg GX7MI0xuWcaSvLnB2l1Kov0OfJX4Q8njrL0SjDy6+ph+nYzAwG2/2WZXRNTd4oX/ OfNmh27bmz8dAzjbw8fJuWcaSMiZyQrBD7+ZhdIIoFrBizEDKK0RLM+OrzMtNicF m8E5EjATYyMX+0ubCHSNrlLB5a0qENfCK4S1WxqKjuDRtypMg4qE55moPWxzjdl+ IKEYugdOyS9343kyxCnjCKLORyFRqlsU3agL0/PbKpApLDUv34QEqDp539Yz41FL wIiBLjI1VAmHJO9axvt0n2H1y1h6gkNRLxLhV/XiYdXGJA7To9gmq0PMR8/STojG o6swfTPpMFQ+g1Q= -----END CERTIFICATE-----Generated at Thu Mar 26 20:39:37 2026 by rpki-client