$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/38C175F6560828A6C6DF5D55DABC39D0E8C07B76.cer File: 38C175F6560828A6C6DF5D55DABC39D0E8C07B76.cer (raw, json) Hash identifier: quBV2t5a7IrKsf3bweIh7ar9bZzq3g3fas9vsAoXBjU= Subject key identifier: 38:C1:75:F6:56:08:28:A6:C6:DF:5D:55:DA:BC:39:D0:E8:C0:7B:76 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 35EFE1D5BB3D6134A5C4638EFED32A2044EA224F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/DE6FEE471F8368E3413CE442352DE443E2A056105AD9C90AED29FDC605E04C7B/0/38C175F6560828A6C6DF5D55DABC39D0E8C07B76.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/DE6FEE471F8368E3413CE442352DE443E2A056105AD9C90AED29FDC605E04C7B/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 27 Jan 2026 22:34:40 +0000 Certificate not after: Tue 26 Jan 2027 22:39:40 +0000 Subordinate resources: AS: 265725 IP: 160.238.168.0/22 IP: 2803:7dc0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:ef:e1:d5:bb:3d:61:34:a5:c4:63:8e:fe:d3:2a:20:44:ea:22:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 27 22:34:40 2026 GMT Not After : Jan 26 22:39:40 2027 GMT Subject: CN=38C175F6560828A6C6DF5D55DABC39D0E8C07B76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:06:17:44:31:74:ee:4a:cd:1b:7c:d2:7e:a5: bd:76:c9:4c:81:29:e7:78:cd:3a:a9:b9:48:d2:92: 52:44:9f:10:72:6b:3e:9c:e6:7a:68:0a:3c:6d:38: 79:8b:2f:90:ce:19:85:b1:55:ee:99:8a:d0:54:40: c6:50:fa:e6:77:91:aa:19:84:fe:95:e8:aa:62:9e: 80:e4:57:1a:ba:28:66:8c:0f:b6:8e:39:a9:55:b5: 57:4f:7a:a9:d9:14:74:53:f9:05:60:41:8d:d6:05: 2a:4d:36:80:0a:b3:38:cd:2d:4b:2d:7b:f8:82:e7: 05:3d:82:39:03:dc:ce:b0:8c:c2:97:d0:db:2a:fa: e1:d4:fd:a9:f4:e6:3b:7a:07:f3:68:1f:15:f7:3a: 90:9f:70:e4:5f:de:07:b0:2c:fb:f9:5e:cd:1b:eb: ab:42:dc:cb:ce:f7:b6:cd:b9:82:8c:5f:70:ff:58: 76:db:fb:d4:f8:1a:7a:c3:14:de:5a:91:32:19:75: c3:86:26:30:06:54:94:a4:b9:42:a9:8f:a1:98:c2: 81:38:d7:90:e7:07:17:7c:e1:82:27:b5:8f:2d:a8: 6c:40:09:9c:d1:9f:82:d5:93:e8:d7:74:f6:f0:e3: da:6c:e9:8e:77:1f:01:d1:ea:08:86:f9:50:4a:1e: 73:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 38:C1:75:F6:56:08:28:A6:C6:DF:5D:55:DA:BC:39:D0:E8:C0:7B:76 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/DE6FEE471F8368E3413CE442352DE443E2A056105AD9C90AED29FDC605E04C7B/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/DE6FEE471F8368E3413CE442352DE443E2A056105AD9C90AED29FDC605E04C7B/0/38C175F6560828A6C6DF5D55DABC39D0E8C07B76.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.238.168.0/22 IPv6: 2803:7dc0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265725 Signature Algorithm: sha256WithRSAEncryption 2d:b8:4a:40:eb:72:a7:60:a2:87:61:95:85:b2:a0:04:ed:38: 4f:7d:49:0c:3b:60:82:90:b9:f1:84:9b:89:0d:c6:94:ff:57: 8e:75:fa:dc:41:6a:ae:10:a0:14:cb:13:b3:d2:fb:24:3c:8d: e3:40:19:91:3a:84:50:e8:74:56:d9:62:60:b8:de:77:5e:65: 4f:25:1c:4d:56:c4:c2:b2:1f:89:96:ad:e5:0f:b8:15:6d:af: a3:db:d4:2a:62:5e:73:e1:8a:88:b1:77:5d:65:ff:94:d3:c2: 51:0a:43:e7:26:6a:2d:75:90:44:c0:ae:25:7e:d5:6f:45:d0: 5b:bc:6a:c4:23:a3:0a:b4:8d:3f:51:a4:23:39:bf:1c:cc:fc: 40:f3:ba:0b:a6:61:70:06:73:73:ed:b2:e3:e0:44:8a:9e:c0: fc:5f:50:00:11:73:27:cf:7f:37:f4:84:01:64:da:53:99:5c: d7:72:bd:37:0b:ac:02:09:25:4b:a8:ed:9e:b3:ee:30:b8:9b: 46:38:1a:2d:f1:3d:67:38:6d:f2:a0:bb:93:0e:52:10:1d:94: ed:d2:e5:a5:db:56:dd:72:d0:44:f2:8c:62:ff:37:30:ed:16: e6:c9:18:2c:d5:ab:e2:01:e4:b0:b8:5d:75:45:3d:15:db:8f: 65:ff:c5:58 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUNe/h1bs9YTSlxGOO/tMqIETqIk8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjcyMjM0NDBaFw0yNzAxMjYyMjM5NDBaMDMxMTAvBgNV BAMTKDM4QzE3NUY2NTYwODI4QTZDNkRGNUQ1NURBQkMzOUQwRThDMDdCNzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCFBhdEMXTuSs0bfNJ+pb12yUyB Ked4zTqpuUjSklJEnxByaz6c5npoCjxtOHmLL5DOGYWxVe6ZitBUQMZQ+uZ3kaoZ hP6V6KpinoDkVxq6KGaMD7aOOalVtVdPeqnZFHRT+QVgQY3WBSpNNoAKszjNLUst e/iC5wU9gjkD3M6wjMKX0Nsq+uHU/an05jt6B/NoHxX3OpCfcORf3gewLPv5Xs0b 66tC3MvO97bNuYKMX3D/WHbb+9T4GnrDFN5akTIZdcOGJjAGVJSkuUKpj6GYwoE4 15DnBxd84YIntY8tqGxACZzRn4LVk+jXdPbw49ps6Y53HwHR6giG+VBKHnO1AgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ4wXX2Vggopsbf XVXavDnQ6MB7djAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvREU2RkVFNDcxRjgzNjhFMzQxM0NFNDQy MzUyREU0NDNFMkEwNTYxMDVBRDlDOTBBRUQyOUZEQzYwNUUwNEM3Qi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9ERTZGRUU0NzFGODM2OEUzNDEzQ0U0NDIzNTJERTQ0M0UyQTA1NjEwNUFE OUM5MEFFRDI5RkRDNjA1RTA0QzdCLzAvMzhDMTc1RjY1NjA4MjhBNkM2REY1RDU1 REFCQzM5RDBFOEMwN0I3Ni5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCoO6oMA0EAgAC MAcDBQAoA33AMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQN/TANBgkqhkiG9w0B AQsFAAOCAQEALbhKQOtyp2Cih2GVhbKgBO04T31JDDtggpC58YSbiQ3GlP9XjnX6 3EFqrhCgFMsTs9L7JDyN40AZkTqEUOh0VtliYLjed15lTyUcTVbEwrIfiZat5Q+4 FW2vo9vUKmJec+GKiLF3XWX/lNPCUQpD5yZqLXWQRMCuJX7Vb0XQW7xqxCOjCrSN P1GkIzm/HMz8QPO6C6ZhcAZzc+2y4+BEip7A/F9QABFzJ89/N/SEAWTaU5lc13K9 NwusAgklS6jtnrPuMLibRjgaLfE9Zzht8qC7kw5SEB2U7dLlpdtW3XLQRPKMYv83 MO0W5skYLNWr4gHksLhddUU9FduPZf/FWA== -----END CERTIFICATE-----Generated at Mon Mar 2 14:09:07 2026 by rpki-client