$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F653A3DC4E68D4F848AD95F8C61B21806A6962F.cer File: 1F653A3DC4E68D4F848AD95F8C61B21806A6962F.cer (raw, json) Hash identifier: OtfZdq+AjP2aOjFUa7ay5Jr3BZULr4jM0++BGyJQp7g= Subject key identifier: 1F:65:3A:3D:C4:E6:8D:4F:84:8A:D9:5F:8C:61:B2:18:06:A6:96:2F Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 301EE525AE5F432014CA9F36328A0B190D55293A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/ADFB38DEF03CDACFBC115FB5C45BB90BF78D25377B390C0B706A201C23F4D893/0/1F653A3DC4E68D4F848AD95F8C61B21806A6962F.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/ADFB38DEF03CDACFBC115FB5C45BB90BF78D25377B390C0B706A201C23F4D893/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 27 Jan 2026 17:50:44 +0000 Certificate not after: Tue 26 Jan 2027 17:55:44 +0000 Subordinate resources: AS: 265769 IP: 164.163.80.0/22 IP: 2803:e7c0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 05 Mar 2026 11:41:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:1e:e5:25:ae:5f:43:20:14:ca:9f:36:32:8a:0b:19:0d:55:29:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 27 17:50:44 2026 GMT Not After : Jan 26 17:55:44 2027 GMT Subject: CN=1F653A3DC4E68D4F848AD95F8C61B21806A6962F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:28:42:9a:15:b4:01:7c:3f:5d:7a:e9:77:df: b2:34:30:ad:74:16:e8:8c:25:fb:3b:0e:c5:aa:5f: 68:0c:ce:f4:70:5a:be:f0:45:96:c9:b9:f8:56:ae: e4:09:97:72:28:dd:79:47:77:01:f2:5a:1e:07:ba: af:a5:31:02:d5:a8:e9:73:ff:8d:7a:74:e2:17:75: de:f5:ca:ce:5d:e6:a7:29:bd:00:ad:9c:d5:2e:16: 8f:f6:79:e8:86:90:25:1e:39:dd:7c:0f:4a:97:f8: 11:4f:83:2e:63:20:5c:88:cd:6a:8a:b3:f1:f8:44: 54:ba:7c:66:c5:3e:49:79:f5:1d:68:ac:df:f0:40: 96:11:69:e9:a1:24:ee:8e:4a:99:18:03:eb:ae:dd: 77:8d:a3:e7:de:f6:96:a0:50:92:f7:43:58:f1:0a: 8c:ee:10:b3:46:22:aa:2b:66:70:8f:ae:56:3d:4d: f5:30:3e:7e:70:4d:8a:45:45:1c:61:9d:0f:86:ae: f5:d4:2a:4c:73:18:6a:ac:68:5f:a8:e7:f7:ab:6a: 69:c4:85:46:f8:cb:93:7e:5c:82:cb:7a:8e:42:55: 06:71:4f:f4:42:04:68:f0:1a:a9:d1:8a:71:cc:0d: 58:2c:65:e0:8a:e2:ad:c4:07:40:e7:4d:8b:ab:ad: 60:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1F:65:3A:3D:C4:E6:8D:4F:84:8A:D9:5F:8C:61:B2:18:06:A6:96:2F X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/ADFB38DEF03CDACFBC115FB5C45BB90BF78D25377B390C0B706A201C23F4D893/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/ADFB38DEF03CDACFBC115FB5C45BB90BF78D25377B390C0B706A201C23F4D893/0/1F653A3DC4E68D4F848AD95F8C61B21806A6962F.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.163.80.0/22 IPv6: 2803:e7c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265769 Signature Algorithm: sha256WithRSAEncryption 3c:b5:b0:b3:19:0f:a1:65:cd:75:9c:03:79:c5:9f:ce:6e:43: 06:bc:8e:da:ad:07:9b:26:a5:cd:ff:84:40:bc:65:81:2a:06: 56:82:26:cb:08:b0:cd:06:5e:e3:3d:48:96:d6:b6:a8:1f:ea: 8c:48:5d:19:d1:4b:91:91:9b:2a:9f:59:aa:a1:da:27:f0:43: 5d:4e:3f:20:ec:a8:4e:06:ce:fe:a3:38:a9:cb:9d:81:d5:2d: a9:4c:42:9d:7d:4f:a6:13:2c:9c:1f:3d:70:74:3a:eb:2f:6d: 7b:d1:6e:4e:78:37:72:12:b7:a0:0a:9a:61:30:cf:0f:e7:11: 5c:29:62:d3:19:40:f0:71:7b:c9:77:2e:a7:ee:8d:51:f7:58: 12:79:44:a9:e7:84:24:80:53:be:6d:9b:92:9f:57:11:a8:3b: 8e:b0:5f:5b:5b:0d:61:77:da:76:b8:9c:19:bc:04:ba:f9:88: fc:7e:29:26:b4:ce:15:1b:63:3a:92:01:bd:cf:cd:fd:af:81: b3:c8:d0:7c:22:03:89:40:70:b0:59:d4:17:6d:b0:0c:6c:a8: 5b:3c:b7:40:4a:14:81:44:73:97:6d:c7:81:14:fb:b4:4a:c9: be:3e:72:a9:fc:3e:50:d9:a2:94:ec:63:89:0d:ef:d0:e9:e9: 49:b7:4a:a4 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUMB7lJa5fQyAUyp82MooLGQ1VKTowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjcxNzUwNDRaFw0yNzAxMjYxNzU1NDRaMDMxMTAvBgNV BAMTKDFGNjUzQTNEQzRFNjhENEY4NDhBRDk1RjhDNjFCMjE4MDZBNjk2MkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDKEKaFbQBfD9deul337I0MK10 FuiMJfs7DsWqX2gMzvRwWr7wRZbJufhWruQJl3Io3XlHdwHyWh4Huq+lMQLVqOlz /416dOIXdd71ys5d5qcpvQCtnNUuFo/2eeiGkCUeOd18D0qX+BFPgy5jIFyIzWqK s/H4RFS6fGbFPkl59R1orN/wQJYRaemhJO6OSpkYA+uu3XeNo+fe9pagUJL3Q1jx CozuELNGIqorZnCPrlY9TfUwPn5wTYpFRRxhnQ+GrvXUKkxzGGqsaF+o5/eramnE hUb4y5N+XILLeo5CVQZxT/RCBGjwGqnRinHMDVgsZeCK4q3EB0DnTYurrWDzAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQfZTo9xOaNT4SK 2V+MYbIYBqaWLzAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQURGQjM4REVGMDNDREFDRkJDMTE1RkI1 QzQ1QkI5MEJGNzhEMjUzNzdCMzkwQzBCNzA2QTIwMUMyM0Y0RDg5My8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9BREZCMzhERUYwM0NEQUNGQkMxMTVGQjVDNDVCQjkwQkY3OEQyNTM3N0Iz OTBDMEI3MDZBMjAxQzIzRjREODkzLzAvMUY2NTNBM0RDNEU2OEQ0Rjg0OEFEOTVG OEM2MUIyMTgwNkE2OTYyRi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCpKNQMA0EAgAC MAcDBQAoA+fAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQOKTANBgkqhkiG9w0B AQsFAAOCAQEAPLWwsxkPoWXNdZwDecWfzm5DBryO2q0Hmyalzf+EQLxlgSoGVoIm ywiwzQZe4z1Ilta2qB/qjEhdGdFLkZGbKp9ZqqHaJ/BDXU4/IOyoTgbO/qM4qcud gdUtqUxCnX1PphMsnB89cHQ66y9te9FuTng3chK3oAqaYTDPD+cRXCli0xlA8HF7 yXcup+6NUfdYEnlEqeeEJIBTvm2bkp9XEag7jrBfW1sNYXfadricGbwEuvmI/H4p JrTOFRtjOpIBvc/N/a+Bs8jQfCIDiUBwsFnUF22wDGyoWzy3QEoUgURzl23HgRT7 tErJvj5yqfw+UNmilOxjiQ3v0OnpSbdKpA== -----END CERTIFICATE-----Generated at Mon Mar 2 09:49:23 2026 by rpki-client