$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DCCD1347B8E4A264380CB0C336092CD0A179491.cer File: 2DCCD1347B8E4A264380CB0C336092CD0A179491.cer (raw, json) Hash identifier: Bi7I837x9wnYZVbwgbsM95LrWztgQzLcmIskb2Tj63I= Subject key identifier: 2D:CC:D1:34:7B:8E:4A:26:43:80:CB:0C:33:60:92:CD:0A:17:94:91 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 1BC85D4A5B9DB54932F7E814572C859F7F6B8E10 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/5D2665180959F31AB0FC833CCD759F5CA6CA5B61674D8A7B78E7EE072ADAA739/0/2DCCD1347B8E4A264380CB0C336092CD0A179491.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/5D2665180959F31AB0FC833CCD759F5CA6CA5B61674D8A7B78E7EE072ADAA739/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 23:37:09 +0000 Certificate not after: Wed 27 Jan 2027 23:42:09 +0000 Subordinate resources: AS: 272014 IP: 138.0.120.0/23 IP: 2803:d780::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:c8:5d:4a:5b:9d:b5:49:32:f7:e8:14:57:2c:85:9f:7f:6b:8e:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 23:37:09 2026 GMT Not After : Jan 27 23:42:09 2027 GMT Subject: CN=2DCCD1347B8E4A264380CB0C336092CD0A179491 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:eb:c1:f6:c5:c1:e3:53:05:c8:38:f9:a1:0b: 5a:4e:58:ee:72:05:03:04:79:e8:16:34:cc:79:89: e6:54:e9:7c:47:26:68:d3:00:0e:3d:24:3b:a5:0e: 88:68:54:f7:5e:b2:68:3d:75:a9:68:c8:36:87:a8: dc:86:fc:69:c1:92:2c:98:c7:63:c8:fa:6e:77:e5: 60:e7:fe:e4:d9:ec:63:ae:3c:32:9b:7d:cd:e5:a2: 7a:55:38:b7:b9:7f:8c:85:02:b8:e7:73:ef:e1:71: db:c4:97:fd:2e:19:a8:ba:0d:12:6e:88:9a:7f:62: fd:5f:bf:46:4b:32:a2:f1:47:75:b8:bb:8f:c5:1f: 54:8f:8a:cd:0c:cf:bb:fb:fb:a0:21:3c:e2:8b:14: 1f:78:85:8c:ac:33:7a:7e:f0:70:52:13:63:43:f3: 6e:ab:23:c7:88:83:8a:40:9b:19:30:e1:63:d8:0b: 5b:6f:ca:da:d9:1e:61:78:04:b5:f7:9f:f0:ca:f3: 90:5e:86:6a:bd:96:73:b8:f4:70:f3:ec:c4:30:f3: 48:c2:6c:45:72:a3:8a:c6:19:ae:7b:db:c0:fa:04: 1b:9a:a1:34:76:0e:49:2c:0d:83:80:42:3d:58:ad: b0:03:b7:66:e9:a7:0c:b6:7f:3e:7b:c2:74:ff:93: 6f:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2D:CC:D1:34:7B:8E:4A:26:43:80:CB:0C:33:60:92:CD:0A:17:94:91 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/5D2665180959F31AB0FC833CCD759F5CA6CA5B61674D8A7B78E7EE072ADAA739/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/5D2665180959F31AB0FC833CCD759F5CA6CA5B61674D8A7B78E7EE072ADAA739/0/2DCCD1347B8E4A264380CB0C336092CD0A179491.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.0.120.0/23 IPv6: 2803:d780::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 272014 Signature Algorithm: sha256WithRSAEncryption 7e:e2:7e:a1:d8:f8:17:01:19:85:c2:2c:b1:9a:bc:9a:35:1f: 81:6b:ec:c1:c5:05:4d:60:a8:e9:ff:c5:37:bf:92:1b:15:22: b1:70:57:af:01:0a:ee:72:ab:07:b1:62:38:86:fb:0e:b6:32: e1:f6:00:78:27:44:89:90:9d:93:2e:c6:3b:24:b7:a1:8e:f5: 27:3d:2b:f5:1d:14:57:ae:6d:c5:1e:c9:28:ac:9b:6c:17:d0: ca:4b:87:85:c3:3c:da:42:12:bf:1a:15:15:0e:1f:4c:b4:c3: b9:8f:56:9a:a4:a4:5d:51:e0:27:44:dd:b0:37:be:62:33:4f: 1e:09:c8:e0:3b:36:84:2c:12:68:1d:56:ee:82:ab:da:05:86: 95:7e:e9:2c:25:f1:eb:83:2b:b3:5f:57:9b:43:95:28:53:1d: c9:05:8e:af:7e:41:84:67:81:b2:48:35:d2:a1:9d:79:0d:36: 06:5a:7b:5d:77:4a:ab:9f:d4:ba:52:d9:22:9e:01:70:e8:39: 12:b2:fe:2f:45:56:8b:42:e3:02:99:d8:a7:5a:1c:5d:0a:39: 99:6f:86:4c:f8:43:4b:72:5f:37:91:58:b7:4e:88:7d:c5:7f: f5:89:02:56:03:76:f2:83:3c:1a:86:8c:fc:b1:86:ca:b8:ac: 28:7f:61:c2 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUG8hdSludtUky9+gUVyyFn39rjhAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgyMzM3MDlaFw0yNzAxMjcyMzQyMDlaMDMxMTAvBgNV BAMTKDJEQ0NEMTM0N0I4RTRBMjY0MzgwQ0IwQzMzNjA5MkNEMEExNzk0OTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB68H2xcHjUwXIOPmhC1pOWO5y BQMEeegWNMx5ieZU6XxHJmjTAA49JDulDohoVPdesmg9daloyDaHqNyG/GnBkiyY x2PI+m535WDn/uTZ7GOuPDKbfc3lonpVOLe5f4yFArjnc+/hcdvEl/0uGai6DRJu iJp/Yv1fv0ZLMqLxR3W4u4/FH1SPis0Mz7v7+6AhPOKLFB94hYysM3p+8HBSE2ND 826rI8eIg4pAmxkw4WPYC1tvytrZHmF4BLX3n/DK85Behmq9lnO49HDz7MQw80jC bEVyo4rGGa5728D6BBuaoTR2DkksDYOAQj1YrbADt2bppwy2fz57wnT/k2+bAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQtzNE0e45KJkOA ywwzYJLNCheUkTAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNUQyNjY1MTgwOTU5RjMxQUIwRkM4MzND Q0Q3NTlGNUNBNkNBNUI2MTY3NEQ4QTdCNzhFN0VFMDcyQURBQTczOS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy81RDI2NjUxODA5NTlGMzFBQjBGQzgzM0NDRDc1OUY1Q0E2Q0E1QjYxNjc0 RDhBN0I3OEU3RUUwNzJBREFBNzM5LzAvMkRDQ0QxMzQ3QjhFNEEyNjQzODBDQjBD MzM2MDkyQ0QwQTE3OTQ5MS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBigB4MA0EAgAC MAcDBQAoA9eAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQmjjANBgkqhkiG9w0B AQsFAAOCAQEAfuJ+odj4FwEZhcIssZq8mjUfgWvswcUFTWCo6f/FN7+SGxUisXBX rwEK7nKrB7FiOIb7DrYy4fYAeCdEiZCdky7GOyS3oY71Jz0r9R0UV65txR7JKKyb bBfQykuHhcM82kISvxoVFQ4fTLTDuY9WmqSkXVHgJ0TdsDe+YjNPHgnI4Ds2hCwS aB1W7oKr2gWGlX7pLCXx64Mrs19Xm0OVKFMdyQWOr35BhGeBskg10qGdeQ02Blp7 XXdKq5/UulLZIp4BcOg5ErL+L0VWi0LjApnYp1ocXQo5mW+GTPhDS3JfN5FYt06I fcV/9YkCVgN28oM8GoaM/LGGyrisKH9hwg== -----END CERTIFICATE-----Generated at Mon Mar 2 14:47:55 2026 by rpki-client