$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/10375D175F51B222AA826C424C2717803A68C991.cer File: 10375D175F51B222AA826C424C2717803A68C991.cer (raw, json) Hash identifier: /VuvXMMvxxKNcChNsCj4Op5hip66rAgFK9pUgBkp/V4= Subject key identifier: 10:37:5D:17:5F:51:B2:22:AA:82:6C:42:4C:27:17:80:3A:68:C9:91 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 35A3C86D48F30423F89BA01C2B53F74C333CF7B7 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/174E0592B6FE13D34009C97E6AB4F6E129B52B23FC0D4590E21563D8D2FD5AE4/0/10375D175F51B222AA826C424C2717803A68C991.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/174E0592B6FE13D34009C97E6AB4F6E129B52B23FC0D4590E21563D8D2FD5AE4/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 27 Jan 2026 17:50:57 +0000 Certificate not after: Tue 26 Jan 2027 17:55:57 +0000 Subordinate resources: AS: 272039 IP: 190.89.172.0/22 IP: 2803:66e0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:a3:c8:6d:48:f3:04:23:f8:9b:a0:1c:2b:53:f7:4c:33:3c:f7:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 27 17:50:57 2026 GMT Not After : Jan 26 17:55:57 2027 GMT Subject: CN=10375D175F51B222AA826C424C2717803A68C991 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:cf:fe:b3:38:d7:68:09:5d:ce:aa:52:f2:f7: b4:84:2b:16:6f:41:6d:98:5d:13:ff:0d:a1:11:70: 17:bf:22:40:53:31:0f:ce:d6:84:d1:ee:94:dc:36: db:77:7b:c9:fd:32:2d:a6:2a:06:52:72:a1:09:dc: df:13:46:42:f3:aa:3a:d1:f5:8d:b6:56:6a:d6:0a: 9f:60:6f:00:a8:36:43:17:c0:d7:ba:0e:e9:fc:e1: 3d:aa:ef:db:92:75:02:4d:d5:4b:2b:e3:5f:d0:74: 1b:39:79:e7:d3:6e:83:de:b4:ac:54:a5:c4:93:a6: 61:05:ce:fb:fa:1a:8d:5c:12:da:ef:62:14:bf:fd: 95:17:b3:bb:f4:87:9f:0d:7b:1c:df:72:11:60:ff: 5c:2f:e2:d7:85:2b:40:89:c3:f4:0e:7e:1c:e3:d6: 3a:90:be:be:70:b5:f3:6a:04:cd:a5:8e:00:72:0e: b1:9f:fc:a4:23:15:82:b1:50:10:0a:81:5d:fb:fa: 32:0d:30:ee:49:80:d0:c1:ff:31:d1:98:3a:88:62: de:66:7f:71:8c:cd:c7:89:03:52:fc:9a:31:b5:30: 14:2a:83:00:d4:46:d6:1e:ef:99:70:7c:7f:05:a0: 9e:13:f1:bd:f3:13:2a:f3:b0:bf:14:f8:60:d6:b3: 38:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 10:37:5D:17:5F:51:B2:22:AA:82:6C:42:4C:27:17:80:3A:68:C9:91 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/174E0592B6FE13D34009C97E6AB4F6E129B52B23FC0D4590E21563D8D2FD5AE4/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/174E0592B6FE13D34009C97E6AB4F6E129B52B23FC0D4590E21563D8D2FD5AE4/0/10375D175F51B222AA826C424C2717803A68C991.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 190.89.172.0/22 IPv6: 2803:66e0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 272039 Signature Algorithm: sha256WithRSAEncryption 72:96:f2:e9:a1:0b:aa:91:46:fe:f7:ba:ad:67:76:a1:ed:7a: 15:cf:6d:b0:68:6b:32:b4:d6:62:be:62:59:04:86:66:85:0b: 09:bc:73:5f:6e:a6:21:0e:41:8d:96:7a:e3:a6:53:e4:09:bd: 96:f2:77:fe:91:5e:7a:fd:c7:95:de:f5:37:0d:1e:0a:4a:b5: aa:a6:64:0c:36:01:e5:50:f5:c3:49:44:eb:88:c3:9f:bb:25: a4:34:ec:41:5b:fa:99:fa:0a:a5:2a:e1:aa:a5:77:8d:e5:91: ef:51:1d:0c:71:7c:d8:2b:48:b4:4b:12:83:43:1b:43:41:1f: 28:54:ab:f0:c1:7d:38:d5:a8:be:61:d9:62:40:ce:04:05:11: da:60:91:40:61:4a:1c:9d:c6:c1:3a:0b:1a:78:ea:db:ee:a2: fb:cc:a3:e8:6c:6b:99:6b:e6:30:df:45:50:23:ca:aa:b6:86: b8:d0:2c:46:51:e8:7d:8c:4d:b2:9a:4d:ab:5d:2c:39:b9:fe: 71:98:38:0b:cd:f7:93:aa:d6:5a:f4:e8:cb:b9:23:9e:bf:f5: f8:65:3a:d2:79:a6:11:0a:84:c4:18:85:91:fc:72:6b:b8:e2: d3:87:3b:60:ac:d4:bc:62:ad:55:09:f7:8f:7f:de:fc:d7:0e: a9:b5:e9:cd -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUNaPIbUjzBCP4m6AcK1P3TDM897cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjcxNzUwNTdaFw0yNzAxMjYxNzU1NTdaMDMxMTAvBgNV BAMTKDEwMzc1RDE3NUY1MUIyMjJBQTgyNkM0MjRDMjcxNzgwM0E2OEM5OTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOz/6zONdoCV3OqlLy97SEKxZv QW2YXRP/DaERcBe/IkBTMQ/O1oTR7pTcNtt3e8n9Mi2mKgZScqEJ3N8TRkLzqjrR 9Y22VmrWCp9gbwCoNkMXwNe6Dun84T2q79uSdQJN1Usr41/QdBs5eefTboPetKxU pcSTpmEFzvv6Go1cEtrvYhS//ZUXs7v0h58NexzfchFg/1wv4teFK0CJw/QOfhzj 1jqQvr5wtfNqBM2ljgByDrGf/KQjFYKxUBAKgV37+jINMO5JgNDB/zHRmDqIYt5m f3GMzceJA1L8mjG1MBQqgwDURtYe75lwfH8FoJ4T8b3zEyrzsL8U+GDWszhzAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQQN10XX1GyIqqC bEJMJxeAOmjJkTAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMTc0RTA1OTJCNkZFMTNEMzQwMDlDOTdF NkFCNEY2RTEyOUI1MkIyM0ZDMEQ0NTkwRTIxNTYzRDhEMkZENUFFNC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8xNzRFMDU5MkI2RkUxM0QzNDAwOUM5N0U2QUI0RjZFMTI5QjUyQjIzRkMw RDQ1OTBFMjE1NjNEOEQyRkQ1QUU0LzAvMTAzNzVEMTc1RjUxQjIyMkFBODI2QzQy NEMyNzE3ODAzQTY4Qzk5MS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCvlmsMA0EAgAC MAcDBQAoA2bgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQmpzANBgkqhkiG9w0B AQsFAAOCAQEAcpby6aELqpFG/ve6rWd2oe16Fc9tsGhrMrTWYr5iWQSGZoULCbxz X26mIQ5BjZZ646ZT5Am9lvJ3/pFeev3Hld71Nw0eCkq1qqZkDDYB5VD1w0lE64jD n7slpDTsQVv6mfoKpSrhqqV3jeWR71EdDHF82CtItEsSg0MbQ0EfKFSr8MF9ONWo vmHZYkDOBAUR2mCRQGFKHJ3GwToLGnjq2+6i+8yj6GxrmWvmMN9FUCPKqraGuNAs RlHofYxNsppNq10sObn+cZg4C833k6rWWvToy7kjnr/1+GU60nmmEQqExBiFkfxy a7ji04c7YKzUvGKtVQn3j3/e/NcOqbXpzQ== -----END CERTIFICATE-----Generated at Mon Mar 2 15:57:07 2026 by rpki-client