$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0DD8C886E7D641E553703DC5E196957F1368902C.cer File: 0DD8C886E7D641E553703DC5E196957F1368902C.cer (raw, json) Hash identifier: 8ejXSdKk+BRyZKpXbwHnRF3tt/AwQjKc9/DsZU3jcVE= Subject key identifier: 0D:D8:C8:86:E7:D6:41:E5:53:70:3D:C5:E1:96:95:7F:13:68:90:2C Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 095783778018C698320A97E8C1174EE8E6DBA16B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/BB554C471A70AB73B965B1569AA454FA3211FD142C831AEE1EAF89FA0FD12EB8/0/0DD8C886E7D641E553703DC5E196957F1368902C.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/BB554C471A70AB73B965B1569AA454FA3211FD142C831AEE1EAF89FA0FD12EB8/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 14:36:56 +0000 Certificate not after: Wed 27 Jan 2027 14:41:56 +0000 Subordinate resources: AS: 52436 IP: 132.255.112.0/22 IP: 138.97.176.0/22 IP: 168.181.208.0/22 IP: 168.196.32.0/22 IP: 179.42.168.0/22 IP: 190.120.244.0/22 IP: 190.122.180.0/22 IP: 207.248.124.0/22 IP: 2803:b900::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:57:83:77:80:18:c6:98:32:0a:97:e8:c1:17:4e:e8:e6:db:a1:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 14:36:56 2026 GMT Not After : Jan 27 14:41:56 2027 GMT Subject: CN=0DD8C886E7D641E553703DC5E196957F1368902C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:97:c9:f2:73:8a:97:71:c0:86:35:62:fc:7b: 71:a1:32:82:76:31:4a:ea:db:21:b1:29:3e:43:11: 9f:02:8b:35:ad:34:90:95:0d:f0:1b:84:bf:dd:57: 84:ee:10:b5:43:cf:ed:92:20:70:f1:a0:60:fd:dc: d6:a3:e0:3d:a2:95:7b:5d:b4:cb:cf:a1:77:0e:15: 65:6d:f9:04:fc:77:b1:65:01:ef:64:c9:12:c9:63: 65:53:73:db:17:75:28:2d:e0:84:0b:00:8b:06:a9: 9d:8e:c0:a9:54:40:11:78:a8:48:c7:1b:e6:8d:71: 65:2c:ec:9d:75:e4:a2:65:e1:37:03:6d:47:08:56: a3:ee:d0:94:97:3f:44:05:ec:4a:67:e3:42:51:47: af:8b:5d:ca:35:c3:36:b4:06:98:1b:49:44:d7:82: 9d:9f:12:ed:18:c7:34:39:e7:d6:ba:36:f1:4c:14: 43:7d:cd:3c:c5:c0:c6:64:20:a8:e6:da:1f:1d:a3: 11:05:f4:21:02:0f:b2:48:8b:be:82:bb:64:7b:8e: f9:c3:fe:4a:8f:7f:15:6e:20:85:6d:b0:98:b8:e4: fb:2d:b3:e1:10:c0:42:42:33:d7:ca:12:bf:f8:5d: 9a:9c:15:c4:dd:50:9b:14:c2:ff:b9:23:d2:35:cf: c7:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 0D:D8:C8:86:E7:D6:41:E5:53:70:3D:C5:E1:96:95:7F:13:68:90:2C X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/BB554C471A70AB73B965B1569AA454FA3211FD142C831AEE1EAF89FA0FD12EB8/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/BB554C471A70AB73B965B1569AA454FA3211FD142C831AEE1EAF89FA0FD12EB8/0/0DD8C886E7D641E553703DC5E196957F1368902C.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 132.255.112.0/22 138.97.176.0/22 168.181.208.0/22 168.196.32.0/22 179.42.168.0/22 190.120.244.0/22 190.122.180.0/22 207.248.124.0/22 IPv6: 2803:b900::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52436 Signature Algorithm: sha256WithRSAEncryption 0a:08:83:f6:3e:a4:43:f0:c6:19:14:b0:c4:74:68:ce:89:87: 74:4f:c3:b2:1d:d4:8b:19:de:b7:8c:d8:ae:c7:42:e8:23:c4: f4:ab:b7:52:5a:39:f7:ec:44:0b:02:8b:4d:e2:73:8b:37:bf: a0:2c:f8:6a:15:36:e6:64:d7:51:c8:be:b3:b4:39:d4:1a:78: aa:24:51:1b:67:bc:2e:8c:eb:bc:04:37:a2:df:01:68:39:f3: a1:ec:bb:c6:4b:cf:bb:02:c6:e6:48:f1:c0:7a:1d:76:f4:b3: 77:c0:11:35:93:7e:9b:fd:7f:ce:05:a8:67:85:7d:90:f0:1a: be:59:bd:60:d3:a2:af:7d:ff:45:df:a0:44:48:10:dc:1d:0f: e2:19:74:a8:8a:2a:b3:58:bd:ef:47:0c:50:ab:42:46:a0:29: 53:ee:d1:b5:39:6c:00:63:cc:63:6f:e2:61:38:50:e8:a9:2a: 6b:04:f4:f8:41:61:2f:3d:70:b8:8c:72:ce:86:5a:40:ac:67: 52:a0:2b:a9:7d:fd:e9:42:8c:30:c2:83:b6:07:bf:47:4c:e3: 15:0a:fe:51:af:6c:fa:33:65:2f:21:ad:1f:d3:81:af:c3:f9: db:40:00:53:9f:a4:3a:87:0a:12:53:17:51:67:ea:9d:25:4a: 6f:85:a0:a0 -----BEGIN CERTIFICATE----- MIIGzzCCBbegAwIBAgIUCVeDd4AYxpgyCpfowRdO6ObboWswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgxNDM2NTZaFw0yNzAxMjcxNDQxNTZaMDMxMTAvBgNV BAMTKDBERDhDODg2RTdENjQxRTU1MzcwM0RDNUUxOTY5NTdGMTM2ODkwMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLl8nyc4qXccCGNWL8e3GhMoJ2 MUrq2yGxKT5DEZ8CizWtNJCVDfAbhL/dV4TuELVDz+2SIHDxoGD93Naj4D2ilXtd tMvPoXcOFWVt+QT8d7FlAe9kyRLJY2VTc9sXdSgt4IQLAIsGqZ2OwKlUQBF4qEjH G+aNcWUs7J115KJl4TcDbUcIVqPu0JSXP0QF7Epn40JRR6+LXco1wza0BpgbSUTX gp2fEu0YxzQ559a6NvFMFEN9zTzFwMZkIKjm2h8doxEF9CECD7JIi76Cu2R7jvnD /kqPfxVuIIVtsJi45Psts+EQwEJCM9fKEr/4XZqcFcTdUJsUwv+5I9I1z8dNAgMB AAGjggPZMIID1TAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQN2MiG59ZB5VNw PcXhlpV/E2iQLDAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQkI1NTRDNDcxQTcwQUI3M0I5NjVCMTU2 OUFBNDU0RkEzMjExRkQxNDJDODMxQUVFMUVBRjg5RkEwRkQxMkVCOC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9CQjU1NEM0NzFBNzBBQjczQjk2NUIxNTY5QUE0NTRGQTMyMTFGRDE0MkM4 MzFBRUUxRUFGODlGQTBGRDEyRUI4LzAvMEREOEM4ODZFN0Q2NDFFNTUzNzAzREM1 RTE5Njk1N0YxMzY4OTAyQy5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFgGCCsGAQUFBwEHAQH/BEkwRzA2BAIAATAwAwQChP9wAwQCimGw AwQCqLXQAwQCqMQgAwQCsyqoAwQCvnj0AwQCvnq0AwQCz/h8MA0EAgACMAcDBQAo A7kAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDM1DANBgkqhkiG9w0BAQsFAAOC AQEACgiD9j6kQ/DGGRSwxHRozomHdE/Dsh3Uixnet4zYrsdC6CPE9Ku3Ulo59+xE CwKLTeJzize/oCz4ahU25mTXUci+s7Q51Bp4qiRRG2e8LozrvAQ3ot8BaDnzoey7 xkvPuwLG5kjxwHoddvSzd8ARNZN+m/1/zgWoZ4V9kPAavlm9YNOir33/Rd+gREgQ 3B0P4hl0qIoqs1i970cMUKtCRqApU+7RtTlsAGPMY2/iYThQ6KkqawT0+EFhLz1w uIxyzoZaQKxnUqArqX396UKMMMKDtge/R0zjFQr+Ua9s+jNlLyGtH9OBr8P520AA U5+kOocKElMXUWfqnSVKb4WgoA== -----END CERTIFICATE-----Generated at Mon Mar 2 20:19:37 2026 by rpki-client