$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A72DC25D420B15DD00FF3323CB446E7A055F3BE.cer File: 0A72DC25D420B15DD00FF3323CB446E7A055F3BE.cer (raw, json) Hash identifier: ka7Pg9xR9qGZnOBhjPpJiqXAG9fJwsDIikqUOpdrFQI= Subject key identifier: 0A:72:DC:25:D4:20:B1:5D:D0:0F:F3:32:3C:B4:46:E7:A0:55:F3:BE Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 7D94C6DE9F9B22621DEDE05564150AD0A966839D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/D986FF7194FB2000A64C23C93E048A61F1672C1CD6C5FB29EAD37980641AFCA7/0/0A72DC25D420B15DD00FF3323CB446E7A055F3BE.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/D986FF7194FB2000A64C23C93E048A61F1672C1CD6C5FB29EAD37980641AFCA7/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 22:58:12 +0000 Certificate not after: Wed 27 Jan 2027 23:03:12 +0000 Subordinate resources: AS: 271792 IP: 190.171.76.0/22 IP: 2803:ffe0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:94:c6:de:9f:9b:22:62:1d:ed:e0:55:64:15:0a:d0:a9:66:83:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 22:58:12 2026 GMT Not After : Jan 27 23:03:12 2027 GMT Subject: CN=0A72DC25D420B15DD00FF3323CB446E7A055F3BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:6f:0d:4d:0e:b4:d6:78:c6:f2:bb:09:1f:bf: 7c:ea:b6:33:33:f6:a7:38:0f:c0:19:c8:66:e2:7f: ec:ec:05:26:1a:db:79:f8:bf:33:d5:c4:ca:43:42: 8d:ef:5a:a8:8b:29:33:0f:72:78:20:cd:86:1b:63: dd:dc:b9:83:b7:d1:66:35:0f:5b:04:0f:51:f0:8e: 58:d2:5f:3e:0a:5f:83:d0:93:b4:11:00:ef:cc:de: 00:ee:9a:cb:b5:8b:a1:9b:71:82:46:e1:63:8f:41: 00:b7:07:9f:34:92:b9:c6:5e:f3:62:d9:30:41:47: fb:62:f8:a3:5d:38:0f:6a:d9:29:e8:2e:f3:ce:c4: 8c:03:98:d3:b3:3e:08:88:c0:17:0c:a6:6f:13:28: 5a:c2:6f:18:47:55:db:e3:cf:15:1b:36:dd:5b:6c: 6a:d0:97:6b:2e:82:7e:76:f6:cf:49:9a:0b:af:43: 85:31:ef:84:6a:35:21:0c:ed:3f:e4:ed:2f:53:42: f0:86:ed:f9:c3:8e:a1:41:4f:ce:f6:13:43:dc:d3: 37:b0:0d:1a:8a:09:37:01:f2:b1:02:46:5d:53:3f: b3:01:9e:cd:15:49:9c:1c:41:39:fd:3a:6c:9d:0a: 67:50:0e:ea:ad:de:58:a4:d1:02:0d:d5:db:25:f7: d6:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 0A:72:DC:25:D4:20:B1:5D:D0:0F:F3:32:3C:B4:46:E7:A0:55:F3:BE X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/D986FF7194FB2000A64C23C93E048A61F1672C1CD6C5FB29EAD37980641AFCA7/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/D986FF7194FB2000A64C23C93E048A61F1672C1CD6C5FB29EAD37980641AFCA7/0/0A72DC25D420B15DD00FF3323CB446E7A055F3BE.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 190.171.76.0/22 IPv6: 2803:ffe0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 271792 Signature Algorithm: sha256WithRSAEncryption 7e:f5:08:b9:08:cd:db:9b:9e:f2:fd:9c:9c:b3:87:82:97:20: 6c:01:32:1e:ab:ec:b9:76:11:8a:de:dc:4b:f5:6b:fa:f4:ee: f7:5a:3f:df:be:5f:81:5d:b0:f4:62:e3:74:92:b9:00:e8:30: 8a:6d:f3:6b:81:a2:dd:0d:00:4f:10:eb:7a:82:21:40:d5:cd: 31:2a:0a:2a:22:ac:51:e0:5d:d6:c6:4e:19:6f:d9:45:27:b6: b4:1c:9b:76:a6:a9:80:b5:c6:ad:8b:f5:54:40:ba:c9:1e:a2: 2d:41:c1:83:08:9b:4a:0d:7a:b3:cf:6d:ff:2e:f1:20:4f:e2: cc:06:dd:19:09:c2:ca:7b:a4:38:27:55:96:3b:b3:22:56:9d: 39:79:4c:64:7e:21:ab:f7:20:ca:f7:7c:a9:dd:be:eb:d2:6f: 39:69:fc:c5:e9:fb:82:bd:e8:59:b1:ad:3e:35:eb:8e:d5:31: 10:95:9b:28:f5:5d:4c:77:ed:d7:73:3e:ff:61:28:0f:78:0c: ec:91:9d:da:52:e7:7a:6c:f2:4a:66:d6:f3:7c:4c:90:57:7f: 13:b6:b7:6a:66:7f:e8:34:eb:0f:4a:11:ce:c4:bf:3c:ea:e8: 5d:2d:ad:4b:0a:75:ba:c6:77:50:c4:1e:7a:86:79:25:0b:09: cb:65:96:0d -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUfZTG3p+bImId7eBVZBUK0Klmg50wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgyMjU4MTJaFw0yNzAxMjcyMzAzMTJaMDMxMTAvBgNV BAMTKDBBNzJEQzI1RDQyMEIxNUREMDBGRjMzMjNDQjQ0NkU3QTA1NUYzQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8bw1NDrTWeMbyuwkfv3zqtjMz 9qc4D8AZyGbif+zsBSYa23n4vzPVxMpDQo3vWqiLKTMPcnggzYYbY93cuYO30WY1 D1sED1HwjljSXz4KX4PQk7QRAO/M3gDumsu1i6GbcYJG4WOPQQC3B580krnGXvNi 2TBBR/ti+KNdOA9q2SnoLvPOxIwDmNOzPgiIwBcMpm8TKFrCbxhHVdvjzxUbNt1b bGrQl2sugn529s9JmguvQ4Ux74RqNSEM7T/k7S9TQvCG7fnDjqFBT872E0Pc0zew DRqKCTcB8rECRl1TP7MBns0VSZwcQTn9OmydCmdQDuqt3lik0QIN1dsl99YfAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQKctwl1CCxXdAP 8zI8tEbnoFXzvjAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRDk4NkZGNzE5NEZCMjAwMEE2NEMyM0M5 M0UwNDhBNjFGMTY3MkMxQ0Q2QzVGQjI5RUFEMzc5ODA2NDFBRkNBNy8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9EOTg2RkY3MTk0RkIyMDAwQTY0QzIzQzkzRTA0OEE2MUYxNjcyQzFDRDZD NUZCMjlFQUQzNzk4MDY0MUFGQ0E3LzAvMEE3MkRDMjVENDIwQjE1REQwMEZGMzMy M0NCNDQ2RTdBMDU1RjNCRS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCvqtMMA0EAgAC MAcDBQAoA//gMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQlsDANBgkqhkiG9w0B AQsFAAOCAQEAfvUIuQjN25ue8v2cnLOHgpcgbAEyHqvsuXYRit7cS/Vr+vTu91o/ 375fgV2w9GLjdJK5AOgwim3za4Gi3Q0ATxDreoIhQNXNMSoKKiKsUeBd1sZOGW/Z RSe2tBybdqapgLXGrYv1VEC6yR6iLUHBgwibSg16s89t/y7xIE/izAbdGQnCynuk OCdVljuzIladOXlMZH4hq/cgyvd8qd2+69JvOWn8xen7gr3oWbGtPjXrjtUxEJWb KPVdTHft13M+/2EoD3gM7JGd2lLnemzySmbW83xMkFd/E7a3amZ/6DTrD0oRzsS/ POroXS2tSwp1usZ3UMQeeoZ5JQsJy2WWDQ== -----END CERTIFICATE-----Generated at Mon Mar 2 17:58:36 2026 by rpki-client