$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E6859D79D3750E7EFF2B536A02FE3CF3A4F14077.cer File: E6859D79D3750E7EFF2B536A02FE3CF3A4F14077.cer (raw, json) Hash identifier: dYefO/Di72BoJrRVsxJJp4iBRb3PxibAlc6XBiN5/5Y= Subject key identifier: E6:85:9D:79:D3:75:0E:7E:FF:2B:53:6A:02:FE:3C:F3:A4:F1:40:77 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 5CD253334368B49FA7D8C2D1D0503900C182C613 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/7E35ACAC8BD9EE90A4E8253AD14CC00E169CEFD6BE60A83FE5E7AFD090B9C611/0/E6859D79D3750E7EFF2B536A02FE3CF3A4F14077.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/7E35ACAC8BD9EE90A4E8253AD14CC00E169CEFD6BE60A83FE5E7AFD090B9C611/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 18 Mar 2026 15:55:04 +0000 Certificate not after: Wed 17 Mar 2027 16:00:04 +0000 Subordinate resources: AS: 274043 IP: 131.255.19.0/24 IP: 2803:7cd0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 29 Mar 2026 13:37:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:d2:53:33:43:68:b4:9f:a7:d8:c2:d1:d0:50:39:00:c1:82:c6:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Mar 18 15:55:04 2026 GMT Not After : Mar 17 16:00:04 2027 GMT Subject: CN=E6859D79D3750E7EFF2B536A02FE3CF3A4F14077 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:10:6b:14:b4:72:0d:27:89:72:d9:67:74:73: a7:6b:18:4b:48:a4:2f:77:95:db:99:13:bc:32:c0: 3b:e0:5f:aa:f6:db:db:93:be:b9:2e:d0:5b:30:d3: 9d:39:3f:76:d8:28:66:46:89:d2:06:99:79:d3:bc: 3e:0c:a6:e0:da:ee:f4:98:39:53:0e:0a:5f:5e:25: 68:23:5a:fa:9a:c6:58:09:6e:3a:5d:49:91:73:31: 83:32:74:b7:ff:54:d0:b3:9e:7d:89:4b:e7:bb:9b: 93:92:4a:8f:d0:e3:49:85:68:9c:99:db:e6:f5:98: f8:66:82:4f:e8:a3:bf:d7:04:5c:9d:4c:34:f2:50: b2:50:87:e4:c6:94:12:34:27:cf:e5:9d:8a:03:dc: c6:d0:7e:5c:8c:b9:fe:dc:8c:a4:3d:96:ed:1b:02: 50:df:84:bb:3a:bb:23:5c:19:3c:16:b2:2d:5a:29: a5:3f:6a:08:db:67:22:02:e9:0e:e2:a8:a1:f2:18: 9d:53:00:a6:43:76:dc:de:33:fc:06:e2:c3:45:cb: 49:08:52:dc:e4:84:9a:a6:54:55:e0:97:46:aa:b1: a1:f3:89:95:52:c2:a2:6e:a7:fb:a8:4a:35:29:ff: 26:93:75:0a:56:ac:1b:f0:db:d1:5f:e3:38:e2:60: 42:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E6:85:9D:79:D3:75:0E:7E:FF:2B:53:6A:02:FE:3C:F3:A4:F1:40:77 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/7E35ACAC8BD9EE90A4E8253AD14CC00E169CEFD6BE60A83FE5E7AFD090B9C611/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/7E35ACAC8BD9EE90A4E8253AD14CC00E169CEFD6BE60A83FE5E7AFD090B9C611/0/E6859D79D3750E7EFF2B536A02FE3CF3A4F14077.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.255.19.0/24 IPv6: 2803:7cd0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 274043 Signature Algorithm: sha256WithRSAEncryption 8b:b1:7f:b5:c2:2d:16:aa:3e:2c:ce:b6:a9:5e:4e:e8:d0:91: 89:aa:e0:bc:3c:f2:d7:3b:4b:07:4a:06:84:2f:79:ed:01:a6: 24:c6:97:83:f9:49:34:52:35:c7:8d:66:f0:29:06:f6:84:49: 35:49:f9:54:eb:e6:83:42:ba:a1:8d:a0:58:de:ed:69:f1:8c: 9f:73:4c:3f:a8:2c:47:6c:57:57:a2:4d:62:27:e8:2e:d8:60: 46:32:2e:c2:0c:8f:fb:36:37:a8:60:49:ef:39:4d:d2:c0:79: 61:01:f9:d7:20:25:67:12:8a:06:89:43:56:70:ab:69:66:91: e7:d0:ca:bd:95:34:b5:c4:5b:11:20:5d:8c:6d:28:61:26:fe: 20:57:04:1e:15:a1:4f:72:a7:18:26:11:0e:a1:8f:dc:79:fb: e9:fc:96:68:2b:e5:48:2e:23:ec:70:18:44:b0:66:e8:dc:42: cb:04:cd:97:cf:17:57:0d:19:d4:9a:f9:e6:84:c3:2f:51:72: f7:09:35:61:0c:c1:e4:ea:1d:45:a1:86:ca:a6:f0:90:23:4a: c6:35:1e:ff:cc:3b:5a:6e:30:73:3f:79:d2:f6:e3:95:72:51: d8:cb:fe:73:e9:d9:c3:d0:9e:94:dc:68:8f:4e:ac:50:1c:b8: 2e:61:2e:0a -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUXNJTM0NotJ+n2MLR0FA5AMGCxhMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAzMTgxNTU1MDRaFw0yNzAzMTcxNjAwMDRaMDMxMTAvBgNV BAMTKEU2ODU5RDc5RDM3NTBFN0VGRjJCNTM2QTAyRkUzQ0YzQTRGMTQwNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzEGsUtHINJ4ly2Wd0c6drGEtI pC93lduZE7wywDvgX6r229uTvrku0Fsw0505P3bYKGZGidIGmXnTvD4MpuDa7vSY OVMOCl9eJWgjWvqaxlgJbjpdSZFzMYMydLf/VNCznn2JS+e7m5OSSo/Q40mFaJyZ 2+b1mPhmgk/oo7/XBFydTDTyULJQh+TGlBI0J8/lnYoD3MbQflyMuf7cjKQ9lu0b AlDfhLs6uyNcGTwWsi1aKaU/agjbZyIC6Q7iqKHyGJ1TAKZDdtzeM/wG4sNFy0kI UtzkhJqmVFXgl0aqsaHziZVSwqJup/uoSjUp/yaTdQpWrBvw29Ff4zjiYEL5AgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTmhZ1503UOfv8r U2oC/jzzpPFAdzAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvN0UzNUFDQUM4QkQ5RUU5MEE0RTgyNTNB RDE0Q0MwMEUxNjlDRUZENkJFNjBBODNGRTVFN0FGRDA5MEI5QzYxMS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy83RTM1QUNBQzhCRDlFRTkwQTRFODI1M0FEMTRDQzAwRTE2OUNFRkQ2QkU2 MEE4M0ZFNUU3QUZEMDkwQjlDNjExLzAvRTY4NTlENzlEMzc1MEU3RUZGMkI1MzZB MDJGRTNDRjNBNEYxNDA3Ny5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAg/8TMA0EAgAC MAcDBQAoA3zQMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQuezANBgkqhkiG9w0B AQsFAAOCAQEAi7F/tcItFqo+LM62qV5O6NCRiargvDzy1ztLB0oGhC957QGmJMaX g/lJNFI1x41m8CkG9oRJNUn5VOvmg0K6oY2gWN7tafGMn3NMP6gsR2xXV6JNYifo LthgRjIuwgyP+zY3qGBJ7zlN0sB5YQH51yAlZxKKBolDVnCraWaR59DKvZU0tcRb ESBdjG0oYSb+IFcEHhWhT3KnGCYRDqGP3Hn76fyWaCvlSC4j7HAYRLBm6NxCywTN l88XVw0Z1Jr55oTDL1Fy9wk1YQzB5OodRaGGyqbwkCNKxjUe/8w7Wm4wcz950vbj lXJR2Mv+c+nZw9CelNxoj06sUBy4LmEuCg== -----END CERTIFICATE-----Generated at Thu Mar 26 02:31:20 2026 by rpki-client