$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/331C39F8DA2D3717859BF2ABF1E2187143BAB539.cer File: 331C39F8DA2D3717859BF2ABF1E2187143BAB539.cer (raw, json) Hash identifier: zjXDifiBEvUu6iFRtzOpx++TfFCRIAeAX/x/uZCQIyU= Subject key identifier: 33:1C:39:F8:DA:2D:37:17:85:9B:F2:AB:F1:E2:18:71:43:BA:B5:39 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 0F19B0C230F62775EF36753C16B959A155A4049A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/2C98D75A90FD82DD0B5305EC2D5037CFE3292FBB062B106AF1C3133C6608FEA4/0/331C39F8DA2D3717859BF2ABF1E2187143BAB539.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/2C98D75A90FD82DD0B5305EC2D5037CFE3292FBB062B106AF1C3133C6608FEA4/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 09:34:43 +0000 Certificate not after: Wed 27 Jan 2027 09:39:43 +0000 Subordinate resources: AS: 263819 AS: 264646 IP: 138.0.88.0/22 IP: 2803:1780::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 05 Mar 2026 11:41:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:19:b0:c2:30:f6:27:75:ef:36:75:3c:16:b9:59:a1:55:a4:04:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 09:34:43 2026 GMT Not After : Jan 27 09:39:43 2027 GMT Subject: CN=331C39F8DA2D3717859BF2ABF1E2187143BAB539 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a5:ce:af:e2:9f:1c:76:c9:22:18:a8:fc:f4: 78:fd:d5:43:cb:aa:7f:5e:0a:a9:30:53:db:6c:3b: 3d:4c:66:91:03:50:f0:19:6f:e1:71:cc:2a:b7:a6: d2:f8:40:f2:c3:e6:ee:6c:74:14:3c:94:03:ad:03: f2:4b:0c:f8:bc:cb:5f:60:98:52:60:53:1d:98:44: b2:f8:cb:1c:93:f6:22:7d:fa:b0:f9:e3:f9:71:79: 15:da:ee:bc:5e:cf:99:37:0a:03:cb:5f:99:92:17: a2:ad:82:0e:d7:01:12:cd:21:5c:2a:95:80:fa:b8: fb:f8:0e:c0:50:22:a7:bc:f0:da:c6:e9:28:e7:07: 35:20:dd:cb:02:1e:d6:d0:22:40:25:f1:c6:dc:6f: 7c:3c:5a:6a:80:be:d3:4e:1e:91:e4:7c:fc:03:7e: d3:01:8d:b1:1b:21:59:f9:6a:10:a6:2c:6a:8f:c5: ba:c5:4a:c4:99:49:24:eb:a4:4b:b7:4f:e9:c8:28: 6f:dd:2c:a7:78:cc:f3:3d:25:00:23:00:02:c0:5e: 97:2e:ef:73:47:68:d4:40:ed:e3:3e:c3:2b:69:80: 83:63:18:a5:3a:55:01:69:50:9d:2c:e4:02:dd:71: d4:46:98:3d:17:24:d2:f5:78:37:3c:28:d6:6d:71: 72:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 33:1C:39:F8:DA:2D:37:17:85:9B:F2:AB:F1:E2:18:71:43:BA:B5:39 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/2C98D75A90FD82DD0B5305EC2D5037CFE3292FBB062B106AF1C3133C6608FEA4/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/2C98D75A90FD82DD0B5305EC2D5037CFE3292FBB062B106AF1C3133C6608FEA4/0/331C39F8DA2D3717859BF2ABF1E2187143BAB539.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.0.88.0/22 IPv6: 2803:1780::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263819 264646 Signature Algorithm: sha256WithRSAEncryption 00:05:7c:ed:17:b4:d0:c1:33:ff:2f:02:5a:2b:7a:b4:db:0b: 16:23:a7:9c:0a:02:d0:30:6c:cb:74:cd:1f:28:30:5c:e6:11: 90:bc:21:9d:6e:c1:23:48:54:c8:56:37:37:7c:d2:0a:d8:22: 94:d9:a2:4d:30:31:48:e7:18:0a:0a:59:0f:5d:37:42:67:36: 19:48:2d:e5:43:6b:62:7d:1d:94:49:38:db:ce:b7:42:74:6c: 63:07:09:be:e0:26:4b:97:84:3f:e7:23:7a:80:e4:30:cf:9a: ed:ee:d4:27:39:57:66:ed:ed:fd:79:b8:6e:0a:23:9f:ae:d0: 04:35:a4:75:4e:be:96:27:3e:77:c1:0c:a4:ac:68:f1:9a:89: a1:6c:0a:88:b1:06:22:6b:c5:8d:d3:8a:e7:94:43:0e:cc:aa: 07:47:84:5e:26:a6:30:b2:46:4e:79:12:62:11:98:6a:60:4c: 1b:5b:25:e0:02:a7:b6:6e:7f:66:7b:41:9a:1b:f5:dc:a2:cc: 87:6e:66:6e:eb:0a:f1:87:a5:a2:6c:2b:f1:df:62:82:bf:88: 31:cb:7d:f3:be:4c:53:60:cd:5b:92:f5:2a:88:0e:52:e9:30: 23:e6:f9:52:f8:2f:75:d3:eb:f4:ea:6c:8a:67:7a:15:7d:b4: 3f:7c:1f:58 -----BEGIN CERTIFICATE----- MIIGqjCCBZKgAwIBAgIUDxmwwjD2J3XvNnU8FrlZoVWkBJowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgwOTM0NDNaFw0yNzAxMjcwOTM5NDNaMDMxMTAvBgNV BAMTKDMzMUMzOUY4REEyRDM3MTc4NTlCRjJBQkYxRTIxODcxNDNCQUI1MzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtpc6v4p8cdskiGKj89Hj91UPL qn9eCqkwU9tsOz1MZpEDUPAZb+FxzCq3ptL4QPLD5u5sdBQ8lAOtA/JLDPi8y19g mFJgUx2YRLL4yxyT9iJ9+rD54/lxeRXa7rxez5k3CgPLX5mSF6Ktgg7XARLNIVwq lYD6uPv4DsBQIqe88NrG6SjnBzUg3csCHtbQIkAl8cbcb3w8WmqAvtNOHpHkfPwD ftMBjbEbIVn5ahCmLGqPxbrFSsSZSSTrpEu3T+nIKG/dLKd4zPM9JQAjAALAXpcu 73NHaNRA7eM+wytpgINjGKU6VQFpUJ0s5ALdcdRGmD0XJNL1eDc8KNZtcXL/AgMB AAGjggO0MIIDsDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQzHDn42i03F4Wb 8qvx4hhxQ7q1OTAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMkM5OEQ3NUE5MEZEODJERDBCNTMwNUVD MkQ1MDM3Q0ZFMzI5MkZCQjA2MkIxMDZBRjFDMzEzM0M2NjA4RkVBNC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8yQzk4RDc1QTkwRkQ4MkREMEI1MzA1RUMyRDUwMzdDRkUzMjkyRkJCMDYy QjEwNkFGMUMzMTMzQzY2MDhGRUE0LzAvMzMxQzM5RjhEQTJEMzcxNzg1OUJGMkFC RjFFMjE4NzE0M0JBQjUzOS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCigBYMA0EAgAC MAcDBQAoAxeAMB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwQGiwIDBAnGMA0GCSqG SIb3DQEBCwUAA4IBAQAABXztF7TQwTP/LwJaK3q02wsWI6ecCgLQMGzLdM0fKDBc 5hGQvCGdbsEjSFTIVjc3fNIK2CKU2aJNMDFI5xgKClkPXTdCZzYZSC3lQ2tifR2U STjbzrdCdGxjBwm+4CZLl4Q/5yN6gOQwz5rt7tQnOVdm7e39ebhuCiOfrtAENaR1 Tr6WJz53wQykrGjxmomhbAqIsQYia8WN04rnlEMOzKoHR4ReJqYwskZOeRJiEZhq YEwbWyXgAqe2bn9me0GaG/XcosyHbmZu6wrxh6WibCvx32KCv4gxy33zvkxTYM1b kvUqiA5S6TAj5vlS+C910+v06myKZ3oVfbQ/fB9Y -----END CERTIFICATE-----Generated at Mon Mar 2 11:18:14 2026 by rpki-client