$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/196213DAEB5B1D8D5E669BE2FDCAFCD83B986883.cer File: 196213DAEB5B1D8D5E669BE2FDCAFCD83B986883.cer (raw, json) Hash identifier: lB4OrLXeFDwF3SY7tvyccQBCi/NQkQGfvurblauWba8= Subject key identifier: 19:62:13:DA:EB:5B:1D:8D:5E:66:9B:E2:FD:CA:FC:D8:3B:98:68:83 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 745D8DF8B78E3CCF63CEBE820EAB07334FC3000B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/6403E429D834D7BFC1329F9170CAEC9868C964B8E3ECFA9967B33466A994C07A/0/196213DAEB5B1D8D5E669BE2FDCAFCD83B986883.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/6403E429D834D7BFC1329F9170CAEC9868C964B8E3ECFA9967B33466A994C07A/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 27 Jan 2026 18:05:08 +0000 Certificate not after: Tue 26 Jan 2027 18:10:08 +0000 Subordinate resources: AS: 265810 IP: 201.182.0.0/22 IP: 2803:5820::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 05 Mar 2026 11:41:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:5d:8d:f8:b7:8e:3c:cf:63:ce:be:82:0e:ab:07:33:4f:c3:00:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 27 18:05:08 2026 GMT Not After : Jan 26 18:10:08 2027 GMT Subject: CN=196213DAEB5B1D8D5E669BE2FDCAFCD83B986883 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a0:40:49:1e:97:6d:87:33:82:fe:33:e3:1f: e3:e5:78:d1:d6:39:67:ec:11:89:b6:d9:ef:99:12: 42:2c:ce:43:0f:26:cf:76:8a:ef:86:ff:47:5d:1c: af:00:65:fa:c4:e3:7b:71:3f:6e:11:c9:d6:bb:f3: 38:5a:1c:4e:38:73:70:11:28:10:01:aa:72:e9:68: f9:50:dc:0c:ea:76:f6:b7:c4:f7:10:11:7c:0d:1a: d2:86:46:f7:25:2c:18:b6:9e:75:0a:77:79:29:71: 2c:c1:90:3c:30:90:f2:29:01:29:d0:56:74:3a:bf: e7:e6:b4:55:54:76:7b:ad:58:07:45:ea:0c:88:b6: e5:c2:a7:26:fd:05:de:d1:97:2d:da:21:9a:4d:1f: 11:4b:52:15:f8:fd:88:e7:78:c6:16:ea:03:70:bc: d7:01:94:ac:b5:c5:a1:4e:36:e7:75:b7:a5:e2:d8: 0e:09:0c:f9:43:3e:19:73:3a:2d:a9:f3:a9:fb:45: b7:e4:95:2c:6f:5b:2a:bc:11:3c:55:d5:b3:6c:5f: 41:f7:46:60:c6:88:3d:56:3a:61:b8:34:14:7b:db: 62:32:e4:16:5a:77:06:53:85:db:1e:df:cc:c6:fa: 3c:20:0a:72:9c:8b:ab:0b:3c:07:f6:8a:2b:7d:03: 34:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 19:62:13:DA:EB:5B:1D:8D:5E:66:9B:E2:FD:CA:FC:D8:3B:98:68:83 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6403E429D834D7BFC1329F9170CAEC9868C964B8E3ECFA9967B33466A994C07A/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6403E429D834D7BFC1329F9170CAEC9868C964B8E3ECFA9967B33466A994C07A/0/196213DAEB5B1D8D5E669BE2FDCAFCD83B986883.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 201.182.0.0/22 IPv6: 2803:5820::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265810 Signature Algorithm: sha256WithRSAEncryption 44:b4:c0:91:e6:24:71:6b:94:8c:e7:27:69:27:8c:a0:99:1c: 22:b4:c6:0a:f3:7c:b2:26:f0:45:8d:bf:52:55:6b:6a:37:ba: cc:2e:ca:2b:d1:31:90:ac:7d:b9:35:5a:ef:20:f1:92:49:b6: 2d:09:6f:a2:9d:3f:d6:68:a0:b3:3a:d0:d4:9f:fe:70:5b:90: 33:e2:15:3d:c2:8c:ea:57:3e:da:8a:c2:60:20:e0:9a:a8:ce: 1b:fc:bb:54:5a:a2:cf:2f:57:2a:f5:57:02:2a:4c:45:18:70: a0:fe:86:0f:7b:a8:80:79:cb:f6:1f:7a:5b:34:a6:54:6d:14: 23:5d:a1:18:af:41:e8:2a:33:9f:00:0b:b0:70:a0:c2:b8:fa: 7f:3b:3e:bf:57:ee:2e:9b:5a:8d:e2:b4:d2:d9:e9:49:ed:54: a9:32:39:db:e6:60:c6:67:b7:71:95:40:fd:da:cb:cb:d4:93: 0e:98:09:c7:0d:1e:f9:06:79:f4:75:ba:e4:28:fe:95:3a:30: 89:c5:98:e8:03:ef:61:63:58:84:95:f6:6b:14:7f:43:f0:68: 4f:2c:ed:2e:0f:6c:f0:08:58:f5:68:b7:15:b4:d4:85:ca:b5: f1:a7:b2:63:c1:4b:50:7e:ab:9a:7b:18:b7:21:78:75:6c:6b: 1b:3a:1a:49 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUdF2N+LeOPM9jzr6CDqsHM0/DAAswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjcxODA1MDhaFw0yNzAxMjYxODEwMDhaMDMxMTAvBgNV BAMTKDE5NjIxM0RBRUI1QjFEOEQ1RTY2OUJFMkZEQ0FGQ0Q4M0I5ODY4ODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+oEBJHpdthzOC/jPjH+PleNHW OWfsEYm22e+ZEkIszkMPJs92iu+G/0ddHK8AZfrE43txP24Ryda78zhaHE44c3AR KBABqnLpaPlQ3Azqdva3xPcQEXwNGtKGRvclLBi2nnUKd3kpcSzBkDwwkPIpASnQ VnQ6v+fmtFVUdnutWAdF6gyItuXCpyb9Bd7Rly3aIZpNHxFLUhX4/YjneMYW6gNw vNcBlKy1xaFONud1t6Xi2A4JDPlDPhlzOi2p86n7RbfklSxvWyq8ETxV1bNsX0H3 RmDGiD1WOmG4NBR722Iy5BZadwZThdse38zG+jwgCnKci6sLPAf2iit9AzShAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQZYhPa61sdjV5m m+L9yvzYO5hogzAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNjQwM0U0MjlEODM0RDdCRkMxMzI5Rjkx NzBDQUVDOTg2OEM5NjRCOEUzRUNGQTk5NjdCMzM0NjZBOTk0QzA3QS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy82NDAzRTQyOUQ4MzREN0JGQzEzMjlGOTE3MENBRUM5ODY4Qzk2NEI4RTNF Q0ZBOTk2N0IzMzQ2NkE5OTRDMDdBLzAvMTk2MjEzREFFQjVCMUQ4RDVFNjY5QkUy RkRDQUZDRDgzQjk4Njg4My5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCybYAMA0EAgAC MAcDBQAoA1ggMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQOUjANBgkqhkiG9w0B AQsFAAOCAQEARLTAkeYkcWuUjOcnaSeMoJkcIrTGCvN8sibwRY2/UlVraje6zC7K K9ExkKx9uTVa7yDxkkm2LQlvop0/1migszrQ1J/+cFuQM+IVPcKM6lc+2orCYCDg mqjOG/y7VFqizy9XKvVXAipMRRhwoP6GD3uogHnL9h96WzSmVG0UI12hGK9B6Coz nwALsHCgwrj6fzs+v1fuLptajeK00tnpSe1UqTI52+Zgxme3cZVA/drLy9STDpgJ xw0e+QZ59HW65Cj+lTowicWY6APvYWNYhJX2axR/Q/BoTyztLg9s8AhY9Wi3FbTU hcq18aeyY8FLUH6rmnsYtyF4dWxrGzoaSQ== -----END CERTIFICATE-----Generated at Mon Mar 2 11:44:18 2026 by rpki-client