$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2CF1E43493BF6D8C874D42F3C1C2E968854077DF.cer File: 2CF1E43493BF6D8C874D42F3C1C2E968854077DF.cer (raw, json) Hash identifier: kriJa2YZbs8juQy83NH4TnsNzFK8Qm1RKFAVskofb1w= Subject key identifier: 2C:F1:E4:34:93:BF:6D:8C:87:4D:42:F3:C1:C2:E9:68:85:40:77:DF Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 7709A54B4627FC72FB2870DC76C5054647E5F2A3 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/0E0915A96964B49C5337E308F5C4B22950C42ED3979D4A8AC3CEB0FB5AF6DE11/0/2CF1E43493BF6D8C874D42F3C1C2E968854077DF.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/0E0915A96964B49C5337E308F5C4B22950C42ED3979D4A8AC3CEB0FB5AF6DE11/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Fri 06 Feb 2026 05:15:01 +0000 Certificate not after: Fri 05 Feb 2027 05:20:01 +0000 Subordinate resources: AS: 28084 IP: 200.3.194.0/24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 05 Mar 2026 11:41:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:09:a5:4b:46:27:fc:72:fb:28:70:dc:76:c5:05:46:47:e5:f2:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Feb 6 05:15:01 2026 GMT Not After : Feb 5 05:20:01 2027 GMT Subject: CN=2CF1E43493BF6D8C874D42F3C1C2E968854077DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:28:1c:02:0c:81:07:a7:06:81:fc:62:d1:df: b2:52:4f:3c:df:3c:94:65:30:db:be:e9:88:38:f5: 82:d5:1d:94:23:0b:b2:cc:a2:24:4a:75:de:5f:70: 0e:00:33:b2:e9:7c:0e:2d:ad:3a:5a:72:21:9a:c2: 63:17:ad:39:7c:ad:1b:74:61:bb:ea:3d:e4:2b:70: ae:2a:88:02:ba:85:54:6b:4d:9a:6e:74:d2:89:84: 8b:ec:e4:e2:19:e8:15:3e:c8:c7:27:fa:ff:e8:b0: 18:11:54:9e:8b:36:90:82:4a:b9:e7:13:8e:66:89: a5:92:c9:d6:8f:d4:a1:d2:50:d9:73:16:c2:94:b0: c7:b7:01:63:43:ff:f4:4d:c4:2d:18:10:5f:40:c5: 70:7b:6c:3c:b7:28:06:db:40:11:22:34:07:df:c5: d8:33:a9:ce:0f:e0:43:f4:d9:71:e3:de:c4:98:92: c5:8d:bd:f1:0d:54:a3:9e:cc:8d:47:13:14:b3:80: bc:ef:fc:6b:71:0a:dd:aa:93:4f:63:62:8c:e9:80: 02:75:40:04:24:83:b3:8d:67:f5:19:80:a2:a5:4e: ea:25:11:7c:75:8d:a1:c1:ed:e2:dd:39:5c:f2:06: c5:da:83:83:00:12:47:31:66:56:1d:99:dc:82:83: d7:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2C:F1:E4:34:93:BF:6D:8C:87:4D:42:F3:C1:C2:E9:68:85:40:77:DF X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0E0915A96964B49C5337E308F5C4B22950C42ED3979D4A8AC3CEB0FB5AF6DE11/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0E0915A96964B49C5337E308F5C4B22950C42ED3979D4A8AC3CEB0FB5AF6DE11/0/2CF1E43493BF6D8C874D42F3C1C2E968854077DF.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.3.194.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28084 Signature Algorithm: sha256WithRSAEncryption 72:0f:1a:fb:54:90:56:f1:02:82:ae:fa:67:4c:26:8e:7a:0a: 9c:dc:fa:14:86:49:fb:5e:f1:ab:fa:7a:79:69:14:7c:dd:14: 47:55:c6:a2:96:fb:b5:a8:13:d2:7b:b4:b1:bf:cf:3f:8c:78: ab:39:52:80:63:2b:ee:a8:40:d3:48:5a:fe:cc:ba:34:81:5e: 6d:00:87:a5:ad:bf:d4:3a:94:45:83:3a:fd:7f:4e:e2:07:7c: b0:39:7d:94:3c:e2:72:40:86:f4:e9:eb:4f:a4:cd:30:d2:8f: bb:11:df:90:99:9a:71:f3:53:59:6c:02:49:1a:62:95:6f:44: 58:3e:9f:5a:0c:71:2a:d6:3d:c2:29:ed:5b:9e:f2:1a:bd:41: 1a:fe:40:fa:3f:15:b9:35:32:86:a5:26:48:83:7a:c4:a5:e5: 73:6e:7f:94:33:98:19:68:08:25:e6:a2:f2:68:b4:0e:be:60: b1:63:93:92:8c:cb:ce:11:8b:54:82:db:3f:fe:d6:02:07:90: c8:35:31:a1:49:77:83:3b:d4:0a:cf:0e:f6:c5:e7:16:90:95: db:09:7f:15:87:f0:d1:3c:e8:0f:4c:e2:ce:7f:f5:53:08:63: 8b:97:ba:90:f3:65:54:c4:6e:51:2c:eb:c3:82:c3:ff:6e:c7: 73:c1:f0:14 -----BEGIN CERTIFICATE----- MIIGlTCCBX2gAwIBAgIUdwmlS0Yn/HL7KHDcdsUFRkfl8qMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAyMDYwNTE1MDFaFw0yNzAyMDUwNTIwMDFaMDMxMTAvBgNV BAMTKDJDRjFFNDM0OTNCRjZEOEM4NzRENDJGM0MxQzJFOTY4ODU0MDc3REYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWKBwCDIEHpwaB/GLR37JSTzzf PJRlMNu+6Yg49YLVHZQjC7LMoiRKdd5fcA4AM7LpfA4trTpaciGawmMXrTl8rRt0 YbvqPeQrcK4qiAK6hVRrTZpudNKJhIvs5OIZ6BU+yMcn+v/osBgRVJ6LNpCCSrnn E45miaWSydaP1KHSUNlzFsKUsMe3AWND//RNxC0YEF9AxXB7bDy3KAbbQBEiNAff xdgzqc4P4EP02XHj3sSYksWNvfENVKOezI1HExSzgLzv/GtxCt2qk09jYozpgAJ1 QAQkg7ONZ/UZgKKlTuolEXx1jaHB7eLdOVzyBsXag4MAEkcxZlYdmdyCg9d3AgMB AAGjggOfMIIDmzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQs8eQ0k79tjIdN QvPBwulohUB33zAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMEUwOTE1QTk2OTY0QjQ5QzUzMzdFMzA4 RjVDNEIyMjk1MEM0MkVEMzk3OUQ0QThBQzNDRUIwRkI1QUY2REUxMS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8wRTA5MTVBOTY5NjRCNDlDNTMzN0UzMDhGNUM0QjIyOTUwQzQyRUQzOTc5 RDRBOEFDM0NFQjBGQjVBRjZERTExLzAvMkNGMUU0MzQ5M0JGNkQ4Qzg3NEQ0MkYz QzFDMkU5Njg4NTQwNzdERi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyAPCMBkGCCsG AQUFBwEIAQH/BAowCKAGMAQCAm20MA0GCSqGSIb3DQEBCwUAA4IBAQByDxr7VJBW 8QKCrvpnTCaOegqc3PoUhkn7XvGr+np5aRR83RRHVcailvu1qBPSe7Sxv88/jHir OVKAYyvuqEDTSFr+zLo0gV5tAIelrb/UOpRFgzr9f07iB3ywOX2UPOJyQIb06etP pM0w0o+7Ed+QmZpx81NZbAJJGmKVb0RYPp9aDHEq1j3CKe1bnvIavUEa/kD6PxW5 NTKGpSZIg3rEpeVzbn+UM5gZaAgl5qLyaLQOvmCxY5OSjMvOEYtUgts//tYCB5DI NTGhSXeDO9QKzw72xecWkJXbCX8Vh/DRPOgPTOLOf/VTCGOLl7qQ82VUxG5RLOvD gsP/bsdzwfAU -----END CERTIFICATE-----Generated at Mon Mar 2 09:36:31 2026 by rpki-client