$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1FF21857EA288ABC3D5018816284FC74ED1A1CCC.cer File: 1FF21857EA288ABC3D5018816284FC74ED1A1CCC.cer (raw, json) Hash identifier: EHhWEpkRLCctxyGDv4leQ7yHI3EbsqKvcsEkoS1yCTg= Subject key identifier: 1F:F2:18:57:EA:28:8A:BC:3D:50:18:81:62:84:FC:74:ED:1A:1C:CC Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 29B297DE0A012C436F63D33A8EF5395139ED73AC Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/DFE6CDC7E766B98D80C28F25199F10970DD8987334F8EDB0B9D232DC5206854B/0/1FF21857EA288ABC3D5018816284FC74ED1A1CCC.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/DFE6CDC7E766B98D80C28F25199F10970DD8987334F8EDB0B9D232DC5206854B/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 27 Jan 2026 19:16:18 +0000 Certificate not after: Tue 26 Jan 2027 19:21:18 +0000 Subordinate resources: IP: 45.224.52.0/22 IP: 2803:7220::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:b2:97:de:0a:01:2c:43:6f:63:d3:3a:8e:f5:39:51:39:ed:73:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 27 19:16:18 2026 GMT Not After : Jan 26 19:21:18 2027 GMT Subject: CN=1FF21857EA288ABC3D5018816284FC74ED1A1CCC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:34:7a:2b:10:59:e2:2f:2b:18:e2:26:80:cc: 63:01:ac:4f:5a:dd:34:62:88:5f:90:22:00:48:18: e8:bb:09:8c:1e:b3:c8:b6:f4:1e:91:90:e3:fb:1e: ca:80:33:f1:6a:be:ba:a2:eb:ab:f8:30:f7:f8:1e: f4:65:01:2a:14:5a:c7:59:78:56:6e:d3:7b:f5:ae: 8f:b7:06:19:66:72:10:c9:a7:bd:e4:cf:bd:53:36: e0:6b:0c:9e:57:ac:83:90:65:b8:0b:73:ca:b4:16: 56:43:47:f3:95:aa:07:10:7d:bf:0d:f1:87:42:f1: 47:9e:3d:8d:aa:14:2b:cc:38:63:6c:32:ba:1b:ca: 0b:01:79:8e:0b:04:8b:74:be:58:41:33:57:4c:58: 59:32:d6:2d:e1:01:ae:9f:a5:a5:10:af:ff:83:6d: af:67:9b:88:51:a7:e9:dc:27:c8:73:01:5e:a3:47: 12:b5:2e:e7:1e:80:12:0f:4c:de:8f:4b:2b:31:72: 01:6e:b2:19:4d:cf:9b:72:be:04:ac:05:8c:52:ca: b1:09:0a:ae:e1:80:92:c3:ae:bc:ba:d1:2e:e3:f5: 3d:ee:16:47:f9:75:5e:f5:ca:c1:5d:47:ab:80:6a: 51:de:73:18:15:75:27:a5:f2:ba:31:e0:f1:ac:8c: 4d:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1F:F2:18:57:EA:28:8A:BC:3D:50:18:81:62:84:FC:74:ED:1A:1C:CC X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/DFE6CDC7E766B98D80C28F25199F10970DD8987334F8EDB0B9D232DC5206854B/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/DFE6CDC7E766B98D80C28F25199F10970DD8987334F8EDB0B9D232DC5206854B/0/1FF21857EA288ABC3D5018816284FC74ED1A1CCC.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.224.52.0/22 IPv6: 2803:7220::/32 Signature Algorithm: sha256WithRSAEncryption 4e:67:93:ee:6b:0d:cf:70:a1:78:8c:f6:5d:02:9d:33:d3:27: 59:2f:e6:01:6a:5b:40:70:48:e7:13:b3:27:1d:78:82:9a:45: 6b:10:2c:a5:30:b8:9b:78:07:c5:e1:0a:dd:14:ef:ae:eb:11: 3c:3b:df:2c:68:c1:f0:af:75:ce:72:fd:5a:df:dd:ed:b7:f4: 12:22:be:1e:4f:22:bf:80:b7:5c:26:38:bb:16:a4:df:be:98: 50:18:b2:50:2e:6f:d9:ec:87:66:21:d0:55:94:b1:be:12:d6: fc:1a:5d:9f:93:0b:8e:cb:57:67:b8:20:97:4e:7d:4f:65:c8: 82:20:40:d2:49:71:f8:2e:de:d6:7b:0a:0a:71:a3:d9:ef:a6: 13:a5:50:4f:c2:91:a6:78:1d:67:0c:44:dc:b9:ee:8d:07:4f: 1f:79:0e:05:b9:bc:6a:01:14:c9:08:bc:52:a0:f3:1b:58:06: 42:0d:04:7a:6c:e7:ed:8e:37:85:9d:40:72:6b:3d:61:cd:13: 98:bf:df:ec:5b:ec:a8:ce:1d:17:65:4c:7a:8f:fd:ea:34:03: e0:a4:a9:fc:9d:ee:aa:75:29:30:f9:eb:45:38:91:3f:6d:78: 99:5c:5b:a9:bb:97:5a:8b:b7:9f:97:ad:06:c8:8f:b1:52:db: da:ec:fe:10 -----BEGIN CERTIFICATE----- MIIGiTCCBXGgAwIBAgIUKbKX3goBLENvY9M6jvU5UTntc6wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjcxOTE2MThaFw0yNzAxMjYxOTIxMThaMDMxMTAvBgNV BAMTKDFGRjIxODU3RUEyODhBQkMzRDUwMTg4MTYyODRGQzc0RUQxQTFDQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4NHorEFniLysY4iaAzGMBrE9a 3TRiiF+QIgBIGOi7CYwes8i29B6RkOP7HsqAM/Fqvrqi66v4MPf4HvRlASoUWsdZ eFZu03v1ro+3BhlmchDJp73kz71TNuBrDJ5XrIOQZbgLc8q0FlZDR/OVqgcQfb8N 8YdC8UeePY2qFCvMOGNsMrobygsBeY4LBIt0vlhBM1dMWFky1i3hAa6fpaUQr/+D ba9nm4hRp+ncJ8hzAV6jRxK1LucegBIPTN6PSysxcgFushlNz5tyvgSsBYxSyrEJ Cq7hgJLDrry60S7j9T3uFkf5dV71ysFdR6uAalHecxgVdSel8rox4PGsjE1ZAgMB AAGjggOTMIIDjzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQf8hhX6iiKvD1Q GIFihPx07RoczDAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvREZFNkNEQzdFNzY2Qjk4RDgwQzI4RjI1 MTk5RjEwOTcwREQ4OTg3MzM0RjhFREIwQjlEMjMyREM1MjA2ODU0Qi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9ERkU2Q0RDN0U3NjZCOThEODBDMjhGMjUxOTlGMTA5NzBERDg5ODczMzRG OEVEQjBCOUQyMzJEQzUyMDY4NTRCLzAvMUZGMjE4NTdFQTI4OEFCQzNENTAxODgx NjI4NEZDNzRFRDFBMUNDQy5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLeA0MA0EAgAC MAcDBQAoA3IgMA0GCSqGSIb3DQEBCwUAA4IBAQBOZ5Puaw3PcKF4jPZdAp0z0ydZ L+YBaltAcEjnE7MnHXiCmkVrECylMLibeAfF4QrdFO+u6xE8O98saMHwr3XOcv1a 393tt/QSIr4eTyK/gLdcJji7FqTfvphQGLJQLm/Z7IdmIdBVlLG+Etb8Gl2fkwuO y1dnuCCXTn1PZciCIEDSSXH4Lt7WewoKcaPZ76YTpVBPwpGmeB1nDETcue6NB08f eQ4FubxqARTJCLxSoPMbWAZCDQR6bOftjjeFnUByaz1hzROYv9/sW+yozh0XZUx6 j/3qNAPgpKn8ne6qdSkw+etFOJE/bXiZXFupu5dai7efl60GyI+xUtva7P4Q -----END CERTIFICATE-----Generated at Mon Mar 2 14:16:09 2026 by rpki-client