$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/03C9CC4EE8A51FF28A7D5811EFAB0F0C705F0DC9.cer File: 03C9CC4EE8A51FF28A7D5811EFAB0F0C705F0DC9.cer (raw, json) Hash identifier: ob3P23HFGzIlqUC6K8A0309kDqc8l8z2kOkdUp0oVq4= Subject key identifier: 03:C9:CC:4E:E8:A5:1F:F2:8A:7D:58:11:EF:AB:0F:0C:70:5F:0D:C9 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 2BA1D610C760CCC9287B4138EBCCC168ABA5F4D6 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/6699EC6C7E3534FBE5924BD4393A1CCB4806FA2E55AECBEBB96E8CDE9DA995F8/0/03C9CC4EE8A51FF28A7D5811EFAB0F0C705F0DC9.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/6699EC6C7E3534FBE5924BD4393A1CCB4806FA2E55AECBEBB96E8CDE9DA995F8/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Thu 29 Jan 2026 03:45:39 +0000 Certificate not after: Thu 28 Jan 2027 03:50:39 +0000 Subordinate resources: IP: 207.248.114.0/23 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:a1:d6:10:c7:60:cc:c9:28:7b:41:38:eb:cc:c1:68:ab:a5:f4:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 29 03:45:39 2026 GMT Not After : Jan 28 03:50:39 2027 GMT Subject: CN=03C9CC4EE8A51FF28A7D5811EFAB0F0C705F0DC9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:44:f8:6d:43:7f:51:d0:8f:90:53:5a:0b:cf: 54:10:1e:db:36:a7:6b:07:83:ef:36:4e:16:0e:0f: 67:f1:98:20:80:ef:29:62:58:99:ff:8e:f4:f1:48: 04:66:63:7c:c9:04:7e:b2:6b:b3:59:18:f6:ab:f3: c7:2c:01:38:5a:6b:64:f5:61:d3:a7:6a:25:1c:ce: 68:e7:06:ed:35:55:31:b3:4d:05:9b:1d:2b:1f:85: bf:4a:3e:11:dc:1d:98:2f:11:4f:19:bb:9a:ef:ed: 1b:d6:bc:c9:55:84:c7:9c:73:72:cb:12:c2:e8:4b: 87:fa:08:13:49:ef:96:43:03:09:3e:00:5d:0c:58: 0c:89:c6:c2:8f:19:7e:ca:ee:a9:a1:ad:e1:6e:df: 5a:27:c9:73:d7:8a:3a:ce:0c:d5:a1:1a:db:83:75: 99:b0:b2:4e:6d:62:f5:59:96:0c:db:6e:61:24:40: 6a:5f:6d:98:41:aa:c3:d0:17:a2:75:01:4b:d0:4d: 18:2b:3f:8d:c1:f6:a6:fa:0b:7c:aa:41:2b:05:47: 73:6b:c1:27:5d:28:24:55:c8:3e:2e:94:d5:52:60: bd:35:75:99:b8:96:8b:4d:77:d6:86:d4:b5:75:e1: 7a:03:90:94:eb:ff:d8:67:c9:93:f7:ee:07:e7:95: eb:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 03:C9:CC:4E:E8:A5:1F:F2:8A:7D:58:11:EF:AB:0F:0C:70:5F:0D:C9 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6699EC6C7E3534FBE5924BD4393A1CCB4806FA2E55AECBEBB96E8CDE9DA995F8/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6699EC6C7E3534FBE5924BD4393A1CCB4806FA2E55AECBEBB96E8CDE9DA995F8/0/03C9CC4EE8A51FF28A7D5811EFAB0F0C705F0DC9.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 207.248.114.0/23 Signature Algorithm: sha256WithRSAEncryption 34:93:32:be:2a:79:5f:78:40:1b:d9:fb:3a:fa:a5:c8:1a:5d: 98:65:8d:37:ad:2c:e5:65:75:ee:64:25:d0:84:57:d2:67:8c: a8:8a:ee:e8:b3:51:ff:61:4f:80:35:05:4d:7d:86:57:b2:c3: 53:f8:1c:16:ea:5c:86:51:b3:4d:8b:f9:23:09:a1:3c:c1:14: 57:fa:6e:4b:a6:d1:4b:8e:9c:88:52:6c:dd:48:25:5d:09:08: da:ab:6c:eb:d1:e1:da:21:b1:49:4e:7e:b6:06:ca:d4:cc:4e: 1e:64:bf:07:30:7c:5e:4b:dd:ac:ee:9c:a4:c5:a3:fe:06:bf: bf:b4:f7:fe:77:6a:e4:fe:54:90:4e:05:5e:e7:ff:39:54:8f: 9c:d0:59:4f:c2:72:74:29:10:28:51:89:a6:f5:ba:f4:a7:b7: 0a:ba:a9:4b:70:5a:24:3d:36:8f:3c:5d:80:99:ce:fb:ab:c8: d9:ae:49:b0:c0:97:fc:ab:4a:58:e1:a8:43:a7:49:2c:6d:67: f8:8d:43:33:41:10:17:a2:79:7f:83:f3:4a:60:c9:88:fd:b8: a4:79:64:b3:33:57:ec:ce:ef:c2:2d:a0:d7:41:fe:35:09:6e: eb:f6:1b:bd:9e:25:51:f8:e0:09:e4:49:c1:ab:75:cf:ba:94: 04:05:8d:60 -----BEGIN CERTIFICATE----- MIIGejCCBWKgAwIBAgIUK6HWEMdgzMkoe0E468zBaKul9NYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjkwMzQ1MzlaFw0yNzAxMjgwMzUwMzlaMDMxMTAvBgNV BAMTKDAzQzlDQzRFRThBNTFGRjI4QTdENTgxMUVGQUIwRjBDNzA1RjBEQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClRPhtQ39R0I+QU1oLz1QQHts2 p2sHg+82ThYOD2fxmCCA7yliWJn/jvTxSARmY3zJBH6ya7NZGPar88csAThaa2T1 YdOnaiUczmjnBu01VTGzTQWbHSsfhb9KPhHcHZgvEU8Zu5rv7RvWvMlVhMecc3LL EsLoS4f6CBNJ75ZDAwk+AF0MWAyJxsKPGX7K7qmhreFu31onyXPXijrODNWhGtuD dZmwsk5tYvVZlgzbbmEkQGpfbZhBqsPQF6J1AUvQTRgrP43B9qb6C3yqQSsFR3Nr wSddKCRVyD4ulNVSYL01dZm4lotNd9aG1LV14XoDkJTr/9hnyZP37gfnlevVAgMB AAGjggOEMIIDgDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQDycxO6KUf8op9 WBHvqw8McF8NyTAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNjY5OUVDNkM3RTM1MzRGQkU1OTI0QkQ0 MzkzQTFDQ0I0ODA2RkEyRTU1QUVDQkVCQjk2RThDREU5REE5OTVGOC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy82Njk5RUM2QzdFMzUzNEZCRTU5MjRCRDQzOTNBMUNDQjQ4MDZGQTJFNTVB RUNCRUJCOTZFOENERTlEQTk5NUY4LzAvMDNDOUNDNEVFOEE1MUZGMjhBN0Q1ODEx RUZBQjBGMEM3MDVGMERDOS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBz/hyMA0GCSqG SIb3DQEBCwUAA4IBAQA0kzK+KnlfeEAb2fs6+qXIGl2YZY03rSzlZXXuZCXQhFfS Z4yoiu7os1H/YU+ANQVNfYZXssNT+BwW6lyGUbNNi/kjCaE8wRRX+m5LptFLjpyI UmzdSCVdCQjaq2zr0eHaIbFJTn62BsrUzE4eZL8HMHxeS92s7pykxaP+Br+/tPf+ d2rk/lSQTgVe5/85VI+c0FlPwnJ0KRAoUYmm9br0p7cKuqlLcFokPTaPPF2Amc77 q8jZrkmwwJf8q0pY4ahDp0ksbWf4jUMzQRAXonl/g/NKYMmI/bikeWSzM1fszu/C LaDXQf41CW7r9hu9niVR+OAJ5EnBq3XPupQEBY1g -----END CERTIFICATE-----Generated at Mon Mar 2 14:08:59 2026 by rpki-client