$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/374193CBA9F2789EEAD8F4332D8C61B9E274DB1C.cer File: 374193CBA9F2789EEAD8F4332D8C61B9E274DB1C.cer (raw, json) Hash identifier: ChDnomXnPOSnAQ/3wgj9Af68qRDKCZi4kSVccjQvgAo= Subject key identifier: 37:41:93:CB:A9:F2:78:9E:EA:D8:F4:33:2D:8C:61:B9:E2:74:DB:1C Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 12B82E9E766598252F43D80112F7E9928E8AB46A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/624A8B9BFE663C452B74DB18265BB268AB482F1EAD9E0283496A00925F59583E/0/374193CBA9F2789EEAD8F4332D8C61B9E274DB1C.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/624A8B9BFE663C452B74DB18265BB268AB482F1EAD9E0283496A00925F59583E/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 07:17:40 +0000 Certificate not after: Wed 27 Jan 2027 07:22:40 +0000 Subordinate resources: AS: 273967 IP: 192.141.128.0/22 IP: 2803:e820::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:b8:2e:9e:76:65:98:25:2f:43:d8:01:12:f7:e9:92:8e:8a:b4:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 07:17:40 2026 GMT Not After : Jan 27 07:22:40 2027 GMT Subject: CN=374193CBA9F2789EEAD8F4332D8C61B9E274DB1C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a5:23:86:3b:47:22:33:40:ae:54:05:fd:34: c6:e5:ee:9a:0a:86:dc:04:7e:b5:08:35:47:79:16: 8d:9e:5b:d0:ca:d8:d0:c6:af:ea:bb:a8:8e:a3:c3: 2b:95:6a:f1:02:9f:f1:cc:19:52:1b:ae:b7:ed:69: 96:31:32:37:26:c2:d9:b6:fe:d1:2e:05:f0:18:fd: 80:95:5d:0a:c9:17:eb:ea:00:8d:49:e6:50:97:24: 6d:e4:8b:2e:2c:37:c1:83:d4:fb:6a:21:e0:81:d6: b0:7e:98:ff:6b:b7:eb:f3:7c:96:67:f2:95:7c:37: 92:ec:a9:f7:17:0c:65:81:82:94:94:33:4a:27:df: 68:24:2f:51:4a:f9:7f:a2:e2:9d:f5:3b:dc:22:1f: 2b:6d:fb:95:49:62:6a:3a:0f:00:99:1c:af:31:7e: c5:93:c6:67:90:87:84:67:6d:24:f9:cb:12:84:65: 46:a2:a4:2b:b5:b9:53:6c:3d:b8:d3:28:b9:ec:a4: 9f:ba:6e:03:0d:2d:72:cf:83:a5:1a:eb:f1:eb:a6: b1:09:bc:c4:0a:c0:67:c8:84:b2:fd:9c:17:73:86: 25:a4:80:ec:34:d3:33:6c:c8:b2:42:c5:22:64:28: b0:7c:b5:19:cc:20:0c:5c:75:b5:0b:e0:b8:e0:01: ba:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 37:41:93:CB:A9:F2:78:9E:EA:D8:F4:33:2D:8C:61:B9:E2:74:DB:1C X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/624A8B9BFE663C452B74DB18265BB268AB482F1EAD9E0283496A00925F59583E/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/624A8B9BFE663C452B74DB18265BB268AB482F1EAD9E0283496A00925F59583E/0/374193CBA9F2789EEAD8F4332D8C61B9E274DB1C.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.141.128.0/22 IPv6: 2803:e820::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273967 Signature Algorithm: sha256WithRSAEncryption 5e:df:3e:1a:42:c5:d9:c7:53:43:5d:f4:64:d8:f1:2b:a1:3e: cb:f4:2f:8d:a9:ec:d2:03:38:bf:4a:5d:df:a0:25:f2:4b:f2: 24:a8:e5:09:ef:93:28:e9:29:d6:45:38:d4:aa:1b:1f:41:84: 2a:a2:9d:a0:6d:12:fc:b9:ee:f4:1d:c8:a3:3e:61:88:56:f5: e3:b5:ed:41:4a:87:d3:05:9b:b7:63:85:5a:7f:fe:b1:46:58: 4b:bc:74:1d:55:31:31:73:07:62:63:d8:b7:5c:40:18:4c:67: 91:d7:0e:ba:8d:5d:d9:54:92:ba:af:d7:5b:9e:8c:a0:43:b3: 1e:27:f5:6a:23:83:bb:61:28:d9:17:d5:3f:d6:c3:b9:af:2c: f4:08:83:81:db:44:38:e9:92:a2:65:6e:34:30:77:15:28:b0: cc:d3:55:ca:06:82:88:a6:ff:30:c4:e9:f0:61:2d:c2:62:a5: c0:a1:81:6e:ce:07:28:77:96:c4:a1:be:21:fc:c6:50:97:cd: 87:2d:69:29:68:7b:22:ef:5e:e7:b0:d8:4c:c7:48:54:30:df: 70:79:37:d7:5e:0a:e1:fc:c8:a5:de:9c:7e:22:80:ea:31:6a: b6:00:dc:b1:dc:82:a5:53:2a:58:e0:67:fb:ab:44:51:9c:0b: 29:c3:95:f2 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUErgunnZlmCUvQ9gBEvfpko6KtGowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgwNzE3NDBaFw0yNzAxMjcwNzIyNDBaMDMxMTAvBgNV BAMTKDM3NDE5M0NCQTlGMjc4OUVFQUQ4RjQzMzJEOEM2MUI5RTI3NERCMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKpSOGO0ciM0CuVAX9NMbl7poK htwEfrUINUd5Fo2eW9DK2NDGr+q7qI6jwyuVavECn/HMGVIbrrftaZYxMjcmwtm2 /tEuBfAY/YCVXQrJF+vqAI1J5lCXJG3kiy4sN8GD1PtqIeCB1rB+mP9rt+vzfJZn 8pV8N5LsqfcXDGWBgpSUM0on32gkL1FK+X+i4p31O9wiHytt+5VJYmo6DwCZHK8x fsWTxmeQh4RnbST5yxKEZUaipCu1uVNsPbjTKLnspJ+6bgMNLXLPg6Ua6/HrprEJ vMQKwGfIhLL9nBdzhiWkgOw00zNsyLJCxSJkKLB8tRnMIAxcdbUL4LjgAbpRAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ3QZPLqfJ4nurY 9DMtjGG54nTbHDAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNjI0QThCOUJGRTY2M0M0NTJCNzREQjE4 MjY1QkIyNjhBQjQ4MkYxRUFEOUUwMjgzNDk2QTAwOTI1RjU5NTgzRS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy82MjRBOEI5QkZFNjYzQzQ1MkI3NERCMTgyNjVCQjI2OEFCNDgyRjFFQUQ5 RTAyODM0OTZBMDA5MjVGNTk1ODNFLzAvMzc0MTkzQ0JBOUYyNzg5RUVBRDhGNDMz MkQ4QzYxQjlFMjc0REIxQy5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCwI2AMA0EAgAC MAcDBQAoA+ggMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQuLzANBgkqhkiG9w0B AQsFAAOCAQEAXt8+GkLF2cdTQ130ZNjxK6E+y/Qvjans0gM4v0pd36Al8kvyJKjl Ce+TKOkp1kU41KobH0GEKqKdoG0S/Lnu9B3Ioz5hiFb147XtQUqH0wWbt2OFWn/+ sUZYS7x0HVUxMXMHYmPYt1xAGExnkdcOuo1d2VSSuq/XW56MoEOzHif1aiODu2Eo 2RfVP9bDua8s9AiDgdtEOOmSomVuNDB3FSiwzNNVygaCiKb/MMTp8GEtwmKlwKGB bs4HKHeWxKG+IfzGUJfNhy1pKWh7Iu9e57DYTMdIVDDfcHk3114K4fzIpd6cfiKA 6jFqtgDcsdyCpVMqWOBn+6tEUZwLKcOV8g== -----END CERTIFICATE-----Generated at Mon Mar 2 18:24:29 2026 by rpki-client