$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/19BF355A38263DAC0C4F3D824F2A42E88B78A1B6.cer File: 19BF355A38263DAC0C4F3D824F2A42E88B78A1B6.cer (raw, json) Hash identifier: qFFfIA1SbXq7ud0rkbS4sl8m6eFj0BOLeyYN6hkNXHM= Subject key identifier: 19:BF:35:5A:38:26:3D:AC:0C:4F:3D:82:4F:2A:42:E8:8B:78:A1:B6 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 02DC850BEFDBADEBC122BBB9C7DDBF103AA97E01 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/04C4499C13871C01CC13C4D3273A8ACF11671F0713002939882EDADDDDC575D5/0/19BF355A38263DAC0C4F3D824F2A42E88B78A1B6.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/04C4499C13871C01CC13C4D3273A8ACF11671F0713002939882EDADDDDC575D5/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 08:17:28 +0000 Certificate not after: Wed 27 Jan 2027 08:22:28 +0000 Subordinate resources: AS: 28432 IP: 201.131.236.0/22 IP: 2806:214::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:dc:85:0b:ef:db:ad:eb:c1:22:bb:b9:c7:dd:bf:10:3a:a9:7e:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 08:17:28 2026 GMT Not After : Jan 27 08:22:28 2027 GMT Subject: CN=19BF355A38263DAC0C4F3D824F2A42E88B78A1B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:31:db:6b:57:8d:c4:cd:fb:76:f6:62:7c:3b: 08:2d:2e:2f:79:b4:8b:d4:ba:41:f1:f4:b0:aa:ff: ec:f2:43:1f:ee:4f:10:46:d3:43:27:3d:53:fd:0c: 4d:07:ec:ff:6c:03:92:96:77:51:a3:8b:ba:24:73: 95:98:e2:57:4e:7d:ca:65:38:f5:35:ca:8d:39:96: 75:66:1e:90:63:28:be:d3:62:98:37:e1:8b:27:d6: 03:46:59:bd:71:fa:58:e0:aa:41:8e:1a:0a:22:86: 25:0f:9b:94:fa:44:75:1b:13:ad:1e:36:56:47:b0: 26:05:59:cf:c5:c0:f8:35:74:d3:18:60:85:5a:e1: 7c:2c:24:d3:01:e1:f4:8d:92:a7:25:92:1c:72:f1: 78:17:e7:8f:11:87:a5:76:1f:bc:aa:14:39:bd:09: a5:36:5a:0b:df:21:0e:a0:1b:fb:f0:9d:6c:cf:f2: a0:89:48:e9:af:a6:84:05:27:f8:a6:16:c2:59:89: 74:17:09:65:e9:5f:69:6c:00:2e:22:52:93:0e:86: 61:f6:08:aa:9f:72:ff:81:fa:80:92:1d:f4:26:31: 41:c8:97:3e:9a:f0:46:7d:fb:9c:9f:ee:cf:49:03: 72:52:a4:8b:5c:19:8a:66:95:38:fa:0b:d0:e4:5b: 34:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 19:BF:35:5A:38:26:3D:AC:0C:4F:3D:82:4F:2A:42:E8:8B:78:A1:B6 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/04C4499C13871C01CC13C4D3273A8ACF11671F0713002939882EDADDDDC575D5/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/04C4499C13871C01CC13C4D3273A8ACF11671F0713002939882EDADDDDC575D5/0/19BF355A38263DAC0C4F3D824F2A42E88B78A1B6.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 201.131.236.0/22 IPv6: 2806:214::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28432 Signature Algorithm: sha256WithRSAEncryption 50:a9:a5:81:1e:b4:17:85:05:49:c0:1f:3e:74:02:9c:1b:0b: b6:2a:07:9c:29:66:9d:2b:ac:7b:49:b4:d1:d2:05:88:c7:d7: 9a:f1:09:b4:7a:0b:86:8a:84:91:4e:e2:0b:4a:0c:bb:70:ee: 60:e9:81:56:a3:73:84:1c:3d:43:d5:2b:79:06:e5:63:ec:74: fe:c2:cb:93:f4:55:4c:6d:62:31:55:3f:41:b9:9b:06:f0:48: 70:f4:b1:38:cd:e4:28:10:ab:34:df:f6:a1:36:81:48:01:d5: 19:8e:6c:df:2c:f0:39:2b:ed:50:bd:fb:45:b4:9c:42:5c:bc: 24:3c:c9:98:22:97:4c:69:c2:a3:4b:de:13:b4:bd:33:a0:ce: 5b:e8:18:93:51:c3:6c:5f:bf:70:62:3e:a5:2e:66:d3:fc:64: 2b:5d:72:44:f3:7c:d4:d8:6d:e6:fe:ac:fb:9e:36:fe:b3:c7: f2:62:90:96:94:a7:70:95:ff:91:6e:0e:8e:11:fd:78:e9:be: 2e:fe:ba:19:47:8d:8b:fa:aa:df:ff:35:e2:01:89:a7:e5:05: 45:c6:60:0d:64:42:cf:f1:c5:d3:21:4d:64:46:3a:d7:85:78: 39:64:ca:33:69:39:96:7b:04:75:84:de:91:b2:50:67:6e:7c: 8f:76:81:fb -----BEGIN CERTIFICATE----- MIIGpDCCBYygAwIBAgIUAtyFC+/brevBIru5x92/EDqpfgEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgwODE3MjhaFw0yNzAxMjcwODIyMjhaMDMxMTAvBgNV BAMTKDE5QkYzNTVBMzgyNjNEQUMwQzRGM0Q4MjRGMkE0MkU4OEI3OEExQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBMdtrV43Ezft29mJ8OwgtLi95 tIvUukHx9LCq/+zyQx/uTxBG00MnPVP9DE0H7P9sA5KWd1Gji7okc5WY4ldOfcpl OPU1yo05lnVmHpBjKL7TYpg34Ysn1gNGWb1x+ljgqkGOGgoihiUPm5T6RHUbE60e NlZHsCYFWc/FwPg1dNMYYIVa4XwsJNMB4fSNkqclkhxy8XgX548Rh6V2H7yqFDm9 CaU2WgvfIQ6gG/vwnWzP8qCJSOmvpoQFJ/imFsJZiXQXCWXpX2lsAC4iUpMOhmH2 CKqfcv+B+oCSHfQmMUHIlz6a8EZ9+5yf7s9JA3JSpItcGYpmlTj6C9DkWzTbAgMB AAGjggOuMIIDqjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQZvzVaOCY9rAxP PYJPKkLoi3ihtjAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMDRDNDQ5OUMxMzg3MUMwMUNDMTNDNEQz MjczQThBQ0YxMTY3MUYwNzEzMDAyOTM5ODgyRURBREREREM1NzVENS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8wNEM0NDk5QzEzODcxQzAxQ0MxM0M0RDMyNzNBOEFDRjExNjcxRjA3MTMw MDI5Mzk4ODJFREFEREREQzU3NUQ1LzAvMTlCRjM1NUEzODI2M0RBQzBDNEYzRDgy NEYyQTQyRTg4Qjc4QTFCNi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCyYPsMA0EAgAC MAcDBQAoBgIUMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAm8QMA0GCSqGSIb3DQEB CwUAA4IBAQBQqaWBHrQXhQVJwB8+dAKcGwu2KgecKWadK6x7SbTR0gWIx9ea8Qm0 eguGioSRTuILSgy7cO5g6YFWo3OEHD1D1St5BuVj7HT+wsuT9FVMbWIxVT9BuZsG 8Ehw9LE4zeQoEKs03/ahNoFIAdUZjmzfLPA5K+1QvftFtJxCXLwkPMmYIpdMacKj S94TtL0zoM5b6BiTUcNsX79wYj6lLmbT/GQrXXJE83zU2G3m/qz7njb+s8fyYpCW lKdwlf+Rbg6OEf146b4u/roZR42L+qrf/zXiAYmn5QVFxmANZELP8cXTIU1kRjrX hXg5ZMozaTmWewR1hN6RslBnbnyPdoH7 -----END CERTIFICATE-----Generated at Mon Mar 2 17:57:09 2026 by rpki-client