$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/071E98A75F67AF0AC72FFE00A1889291589B7570.cer File: 071E98A75F67AF0AC72FFE00A1889291589B7570.cer (raw, json) Hash identifier: v9WdgZC3QwJ3iAeiBHOhUgSXy+Fy3MA0H8wZgoX8ook= Subject key identifier: 07:1E:98:A7:5F:67:AF:0A:C7:2F:FE:00:A1:88:92:91:58:9B:75:70 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 1A599FBB107EA2AE9E4E65C63C4A7116F8E6F5E0 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/3A7A766FF12D0C92E188AA0B69DAD75FE237A2DF1FB8B07E502027AA4923DB20/0/071E98A75F67AF0AC72FFE00A1889291589B7570.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/3A7A766FF12D0C92E188AA0B69DAD75FE237A2DF1FB8B07E502027AA4923DB20/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 27 Jan 2026 17:50:44 +0000 Certificate not after: Tue 26 Jan 2027 17:55:44 +0000 Subordinate resources: AS: 262934 IP: 168.227.144.0/22 IP: 191.102.248.0/21 IP: 2803:fa80::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:59:9f:bb:10:7e:a2:ae:9e:4e:65:c6:3c:4a:71:16:f8:e6:f5:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 27 17:50:44 2026 GMT Not After : Jan 26 17:55:44 2027 GMT Subject: CN=071E98A75F67AF0AC72FFE00A1889291589B7570 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f9:77:ba:9b:b1:a6:de:c1:e7:2b:ba:1d:d1: 23:aa:9b:a1:0e:ed:75:4e:ee:50:8f:f0:40:76:74: 07:ba:ae:3f:22:66:40:6e:5a:de:7f:b5:44:ea:5d: 62:84:c8:41:3c:17:98:fe:cf:0f:80:8d:08:9e:03: 47:e5:65:80:d8:ef:8c:f4:29:e3:52:8e:ec:8c:46: 3f:a8:f0:40:6f:8a:0b:11:39:69:a6:5d:31:e8:e9: ae:7a:01:b9:dd:59:58:79:c8:aa:7f:23:e6:5f:ee: a6:89:5f:0f:66:b6:24:b0:15:71:9b:66:82:b9:e2: 21:db:13:47:b8:8b:04:2b:b3:f8:bd:c8:91:d6:f1: 53:37:da:3f:47:d8:3a:2c:82:7c:4e:3c:87:cc:de: d1:1e:5c:7f:d6:31:f1:09:8e:54:2c:71:6b:2b:dd: 23:37:7e:59:2f:83:3a:d0:b7:88:39:dd:0c:97:2a: d7:0c:8e:61:35:ee:22:74:fd:55:75:d3:2c:0c:f6: 05:89:d7:d1:85:87:3d:db:c8:5c:5f:78:ea:03:dd: c7:bb:11:06:17:37:29:05:7f:5b:dd:1a:f7:ae:dc: 06:bf:f2:ca:04:e3:7b:be:0a:e0:9c:75:af:26:7e: 0c:c0:23:f6:b0:0b:b3:a3:02:10:aa:f6:03:b0:63: 0b:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 07:1E:98:A7:5F:67:AF:0A:C7:2F:FE:00:A1:88:92:91:58:9B:75:70 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/3A7A766FF12D0C92E188AA0B69DAD75FE237A2DF1FB8B07E502027AA4923DB20/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/3A7A766FF12D0C92E188AA0B69DAD75FE237A2DF1FB8B07E502027AA4923DB20/0/071E98A75F67AF0AC72FFE00A1889291589B7570.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.227.144.0/22 191.102.248.0/21 IPv6: 2803:fa80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 262934 Signature Algorithm: sha256WithRSAEncryption 67:5a:2a:18:15:77:61:ac:46:27:25:d7:6e:c0:47:8a:6d:40: d3:5e:ff:8e:4e:f9:bf:13:b3:7b:39:02:5a:16:fb:f0:ab:b4: 50:d4:44:ea:c9:0f:ec:ed:f8:e3:a6:74:1b:d9:fb:a5:54:25: ab:05:6a:1b:92:cb:e6:30:f6:cf:e1:e4:9d:64:ed:d0:6d:73: 0c:6a:c4:da:63:04:98:98:57:14:3b:cf:fb:27:49:bc:94:85: c2:6d:2f:65:28:a2:ea:a7:0b:79:08:fb:26:79:bc:b9:fa:77: fb:6e:29:5c:b3:b3:fa:1d:15:09:13:e8:a1:b2:e9:62:3e:61: aa:93:f5:c7:7d:be:85:50:38:f9:69:21:3e:06:b8:78:64:75: 45:72:bd:d0:36:db:33:b9:78:79:f7:a5:27:1b:7f:db:ea:10: 73:0c:e4:07:92:7e:2d:ad:e5:39:8d:47:72:fd:6a:94:90:f1: ff:a9:17:14:c7:51:58:ed:5a:0e:7e:01:c0:93:40:e6:d5:e0: cb:b1:f2:9a:12:96:20:c3:93:93:72:3a:50:20:ff:0d:9c:cf: 3b:67:f9:b4:48:ef:d8:e6:28:ff:54:bc:ba:f3:93:48:a8:71: 35:ea:45:97:53:32:c7:7d:97:0e:9f:f0:3a:f1:8b:a1:29:23: 25:0c:94:5d -----BEGIN CERTIFICATE----- MIIGqzCCBZOgAwIBAgIUGlmfuxB+oq6eTmXGPEpxFvjm9eAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjcxNzUwNDRaFw0yNzAxMjYxNzU1NDRaMDMxMTAvBgNV BAMTKDA3MUU5OEE3NUY2N0FGMEFDNzJGRkUwMEExODg5MjkxNTg5Qjc1NzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD+Xe6m7Gm3sHnK7od0SOqm6EO 7XVO7lCP8EB2dAe6rj8iZkBuWt5/tUTqXWKEyEE8F5j+zw+AjQieA0flZYDY74z0 KeNSjuyMRj+o8EBvigsROWmmXTHo6a56AbndWVh5yKp/I+Zf7qaJXw9mtiSwFXGb ZoK54iHbE0e4iwQrs/i9yJHW8VM32j9H2DosgnxOPIfM3tEeXH/WMfEJjlQscWsr 3SM3flkvgzrQt4g53QyXKtcMjmE17iJ0/VV10ywM9gWJ19GFhz3byFxfeOoD3ce7 EQYXNykFf1vdGveu3Aa/8soE43u+CuCcda8mfgzAI/awC7OjAhCq9gOwYwsXAgMB AAGjggO1MIIDsTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQHHpinX2evCscv /gChiJKRWJt1cDAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvM0E3QTc2NkZGMTJEMEM5MkUxODhBQTBC NjlEQUQ3NUZFMjM3QTJERjFGQjhCMDdFNTAyMDI3QUE0OTIzREIyMC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8zQTdBNzY2RkYxMkQwQzkyRTE4OEFBMEI2OURBRDc1RkUyMzdBMkRGMUZC OEIwN0U1MDIwMjdBQTQ5MjNEQjIwLzAvMDcxRTk4QTc1RjY3QUYwQUM3MkZGRTAw QTE4ODkyOTE1ODlCNzU3MC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCqOOQAwQDv2b4 MA0EAgACMAcDBQAoA/qAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQDFjANBgkq hkiG9w0BAQsFAAOCAQEAZ1oqGBV3YaxGJyXXbsBHim1A017/jk75vxOzezkCWhb7 8Ku0UNRE6skP7O3446Z0G9n7pVQlqwVqG5LL5jD2z+HknWTt0G1zDGrE2mMEmJhX FDvP+ydJvJSFwm0vZSii6qcLeQj7Jnm8ufp3+24pXLOz+h0VCRPoobLpYj5hqpP1 x32+hVA4+WkhPga4eGR1RXK90DbbM7l4efelJxt/2+oQcwzkB5J+La3lOY1Hcv1q lJDx/6kXFMdRWO1aDn4BwJNA5tXgy7HymhKWIMOTk3I6UCD/DZzPO2f5tEjv2OYo /1S8uvOTSKhxNepFl1Myx32XDp/wOvGLoSkjJQyUXQ== -----END CERTIFICATE-----Generated at Mon Mar 2 14:47:50 2026 by rpki-client