$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3249F9F2D0369FF06E9B2651663EFA2423E42AFC.cer File: 3249F9F2D0369FF06E9B2651663EFA2423E42AFC.cer (raw, json) Hash identifier: VFtnxC1kWdwFIHx9bZ6GOA6eg7zm90sig7XL9UNVNkI= Subject key identifier: 32:49:F9:F2:D0:36:9F:F0:6E:9B:26:51:66:3E:FA:24:23:E4:2A:FC Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 3A81D9A13CC4066475279337213D85DE6023564C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/712CE0FF8C33D2ACD0453B429414594ADCB4F79743EA72EC74406261A800D0FA/0/3249F9F2D0369FF06E9B2651663EFA2423E42AFC.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/712CE0FF8C33D2ACD0453B429414594ADCB4F79743EA72EC74406261A800D0FA/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 21:17:37 +0000 Certificate not after: Wed 27 Jan 2027 21:22:37 +0000 Subordinate resources: AS: 272140 IP: 190.103.191.0/24 IP: 2801:18:5800::/48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:81:d9:a1:3c:c4:06:64:75:27:93:37:21:3d:85:de:60:23:56:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 21:17:37 2026 GMT Not After : Jan 27 21:22:37 2027 GMT Subject: CN=3249F9F2D0369FF06E9B2651663EFA2423E42AFC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:8f:85:d6:9b:4d:b4:5e:93:2d:ac:b5:66:df: c7:7d:f9:2e:ac:e0:41:3b:85:28:24:80:7c:c0:9c: bc:bf:97:97:78:8c:78:e5:ee:4c:23:34:6d:ac:9b: ee:a4:b2:2d:36:e5:3c:30:c1:bc:fa:31:3b:7d:c3: 4d:0d:28:97:b4:8d:3a:a8:2f:b0:85:c7:7e:7b:13: e9:8f:92:fd:d5:7e:9b:f2:06:ae:3b:e9:b1:6c:c1: fc:22:ca:ef:9f:34:a2:41:f3:ca:6b:d8:63:4d:ac: 07:e4:fd:3c:4d:54:22:87:8b:8a:5a:84:f5:86:e3: 5c:4e:fb:66:43:36:f4:af:72:61:93:a6:f2:2f:fc: a8:28:ca:48:c9:28:c8:bd:36:31:72:ef:6a:de:ae: 55:83:31:03:40:5d:27:52:0c:0e:f3:c9:52:8f:93: f2:44:bc:62:75:5e:aa:b3:a3:3a:84:6f:7a:42:f7: ef:57:32:76:e5:26:2a:48:c7:ab:d5:87:04:d1:ed: 08:21:4e:11:d0:56:96:77:02:55:9a:7e:02:64:21: e9:1c:b2:68:f1:a6:64:46:75:9e:ff:03:6e:66:e6: fc:d5:92:89:2a:bc:67:d1:26:9c:46:36:fb:04:a0: 26:56:13:d1:49:5f:35:6b:d2:e3:b5:57:43:2e:98: 1f:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 32:49:F9:F2:D0:36:9F:F0:6E:9B:26:51:66:3E:FA:24:23:E4:2A:FC X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/712CE0FF8C33D2ACD0453B429414594ADCB4F79743EA72EC74406261A800D0FA/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/712CE0FF8C33D2ACD0453B429414594ADCB4F79743EA72EC74406261A800D0FA/0/3249F9F2D0369FF06E9B2651663EFA2423E42AFC.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 190.103.191.0/24 IPv6: 2801:18:5800::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 272140 Signature Algorithm: sha256WithRSAEncryption 39:23:31:71:4a:ca:8d:d5:92:75:a3:8b:02:7e:d3:77:69:46: 3e:f0:dd:06:0b:fa:b1:3d:b8:87:f1:94:95:27:6a:6e:6b:05: af:9c:b1:92:6d:f6:71:b9:9b:24:d9:b9:9b:38:e9:c9:bf:04: 4f:e6:c0:d6:58:30:3b:b1:83:8a:e3:0c:0e:44:fb:9c:a8:85: d7:6d:ad:51:3a:a2:59:b1:b0:52:9b:75:48:71:d4:41:95:f2: 10:8f:76:3e:70:89:ca:03:cc:06:34:36:fe:ee:fb:94:39:a6: 5c:21:8a:9d:56:96:80:c3:10:61:ad:61:f4:1b:1e:7e:1c:45: 79:cd:9a:b9:4a:44:cf:88:db:13:8e:a2:c5:bc:af:72:d1:18: 3c:d3:81:fb:3b:e2:c6:2c:0c:97:02:2a:33:9c:c6:1d:ba:0b: e1:84:85:10:35:78:71:9e:09:a6:af:0a:13:c2:61:b6:9b:54: f4:b0:5b:31:ce:88:af:ef:fd:f2:50:7e:f6:83:23:b2:d3:85: 38:7b:d4:58:10:3a:72:79:2a:cd:26:28:e3:91:fa:5c:7a:f9: 1e:d9:8d:25:a3:21:8d:cd:7f:07:02:dc:9d:14:f3:dd:0a:fa: 0f:83:f4:2f:c6:43:30:cd:6b:9d:99:e3:e3:e2:8d:e6:9e:98: 92:15:18:1c -----BEGIN CERTIFICATE----- MIIGpzCCBY+gAwIBAgIUOoHZoTzEBmR1J5M3IT2F3mAjVkwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgyMTE3MzdaFw0yNzAxMjcyMTIyMzdaMDMxMTAvBgNV BAMTKDMyNDlGOUYyRDAzNjlGRjA2RTlCMjY1MTY2M0VGQTI0MjNFNDJBRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAj4XWm020XpMtrLVm38d9+S6s 4EE7hSgkgHzAnLy/l5d4jHjl7kwjNG2sm+6ksi025Twwwbz6MTt9w00NKJe0jTqo L7CFx357E+mPkv3VfpvyBq476bFswfwiyu+fNKJB88pr2GNNrAfk/TxNVCKHi4pa hPWG41xO+2ZDNvSvcmGTpvIv/KgoykjJKMi9NjFy72rerlWDMQNAXSdSDA7zyVKP k/JEvGJ1XqqzozqEb3pC9+9XMnblJipIx6vVhwTR7QghThHQVpZ3AlWafgJkIekc smjxpmRGdZ7/A25m5vzVkokqvGfRJpxGNvsEoCZWE9FJXzVr0uO1V0MumB8JAgMB AAGjggOxMIIDrTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQySfny0Daf8G6b JlFmPvokI+Qq/DAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNzEyQ0UwRkY4QzMzRDJBQ0QwNDUzQjQy OTQxNDU5NEFEQ0I0Rjc5NzQzRUE3MkVDNzQ0MDYyNjFBODAwRDBGQS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy83MTJDRTBGRjhDMzNEMkFDRDA0NTNCNDI5NDE0NTk0QURDQjRGNzk3NDNF QTcyRUM3NDQwNjI2MUE4MDBEMEZBLzAvMzI0OUY5RjJEMDM2OUZGMDZFOUIyNjUx NjYzRUZBMjQyM0U0MkFGQy5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAvme/MA8EAgAC MAkDBwAoAQAYWAAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBCcMMA0GCSqGSIb3 DQEBCwUAA4IBAQA5IzFxSsqN1ZJ1o4sCftN3aUY+8N0GC/qxPbiH8ZSVJ2puawWv nLGSbfZxuZsk2bmbOOnJvwRP5sDWWDA7sYOK4wwORPucqIXXba1ROqJZsbBSm3VI cdRBlfIQj3Y+cInKA8wGNDb+7vuUOaZcIYqdVpaAwxBhrWH0Gx5+HEV5zZq5SkTP iNsTjqLFvK9y0Rg804H7O+LGLAyXAioznMYdugvhhIUQNXhxngmmrwoTwmG2m1T0 sFsxzoiv7/3yUH72gyOy04U4e9RYEDpyeSrNJijjkfpcevke2Y0loyGNzX8HAtyd FPPdCvoPg/QvxkMwzWudmePj4o3mnpiSFRgc -----END CERTIFICATE-----Generated at Mon Mar 2 17:08:00 2026 by rpki-client