$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/39C2CD2ABB23EB7590AA4367371D4342B9889881.cer File: 39C2CD2ABB23EB7590AA4367371D4342B9889881.cer (raw, json) Hash identifier: KeD4b/NS5atfZjzZcvZtrELoma8YnioI9jDPAoFbDS8= Subject key identifier: 39:C2:CD:2A:BB:23:EB:75:90:AA:43:67:37:1D:43:42:B9:88:98:81 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 4DF78DFCCD0C090E6FF3AC0E2FC367303BD4B8FD Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/112D51081C3D0FF680742BBEBAAA66A46F02C5841E24516D0D7CDFFD22B3720A/0/39C2CD2ABB23EB7590AA4367371D4342B9889881.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/112D51081C3D0FF680742BBEBAAA66A46F02C5841E24516D0D7CDFFD22B3720A/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Fri 30 Jan 2026 06:46:45 +0000 Certificate not after: Fri 29 Jan 2027 06:51:45 +0000 Subordinate resources: AS: 270162 IP: 103.239.234.0/24 IP: 2806:3e8::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:f7:8d:fc:cd:0c:09:0e:6f:f3:ac:0e:2f:c3:67:30:3b:d4:b8:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 30 06:46:45 2026 GMT Not After : Jan 29 06:51:45 2027 GMT Subject: CN=39C2CD2ABB23EB7590AA4367371D4342B9889881 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:77:4e:8d:fe:ab:a4:75:4f:db:ef:48:a1:7b: f2:a2:33:b1:dc:fc:71:32:b1:83:6e:79:5c:65:d0: e8:15:ff:e1:53:94:87:8b:c1:78:3f:c5:7e:19:5d: 36:a4:76:df:76:34:37:3b:f9:e2:74:1e:3e:2c:58: 41:26:9d:e5:43:43:c9:b0:ce:3a:28:bc:b7:0a:bd: 71:28:a6:d2:fa:ba:cf:60:79:2d:24:ef:1f:13:a7: d0:08:04:e8:f4:c4:e2:82:4e:7b:ce:9f:80:72:60: d2:8f:b4:e1:39:71:76:19:18:e8:c9:32:04:7d:ea: 5f:bd:0f:14:8e:d9:12:9b:d7:b6:bb:ab:64:62:d6: 02:53:5d:df:45:4a:bd:c8:e0:79:e1:48:77:a1:f8: b2:ce:48:22:92:14:37:c4:72:84:6a:c7:b8:cf:43: 62:93:b5:43:d5:14:e6:63:03:66:d0:62:37:32:ac: fd:90:65:32:78:f6:05:52:42:54:97:b4:76:99:b0: 9b:a4:49:33:3b:82:62:c4:bd:0a:9a:55:a8:56:74: fc:da:3e:0e:82:82:91:a7:9c:6a:5d:3f:c0:98:a5: e6:3b:be:f4:e6:a3:70:f4:95:1a:33:b0:30:05:19: 77:8b:77:c6:c3:bd:ee:1f:a4:0b:c8:82:4b:b7:17: a3:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 39:C2:CD:2A:BB:23:EB:75:90:AA:43:67:37:1D:43:42:B9:88:98:81 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/112D51081C3D0FF680742BBEBAAA66A46F02C5841E24516D0D7CDFFD22B3720A/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/112D51081C3D0FF680742BBEBAAA66A46F02C5841E24516D0D7CDFFD22B3720A/0/39C2CD2ABB23EB7590AA4367371D4342B9889881.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.239.234.0/24 IPv6: 2806:3e8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 270162 Signature Algorithm: sha256WithRSAEncryption 1a:88:c3:1d:5c:a7:b2:ee:13:4d:fd:c9:b7:74:6f:bd:c2:f6: 73:70:06:71:15:05:9a:75:32:d7:8f:fa:32:31:15:8f:3f:53: b0:bf:89:a8:6b:14:af:df:96:cf:ea:31:5a:1b:b0:69:89:50: 07:3a:8e:a9:ee:a1:8e:de:28:fd:d2:7b:2c:41:65:f1:51:57: 51:0d:cd:78:45:8c:74:57:ac:f3:7d:f6:cf:c2:20:ca:79:b5: 41:a1:df:2e:9a:33:a0:24:fe:af:e9:74:90:2d:84:3f:01:33: 47:8f:8e:e3:cc:4d:f3:cd:20:69:f7:52:a1:21:04:c9:e7:f6: db:9d:08:3d:49:45:26:69:ed:66:f9:39:fc:f4:6d:14:f9:f4: 3c:48:c9:ee:fa:44:b3:d9:ef:3c:02:63:91:e2:08:c8:f0:93: 01:3c:32:96:48:cf:e0:28:50:f8:66:1e:51:e9:31:ca:a7:28: df:ea:8b:11:94:77:c2:56:71:6e:0a:a5:d9:7f:f0:11:34:42: 83:58:2e:66:06:b3:5a:50:5d:15:8d:9d:6d:34:11:77:fc:f7: 4f:69:ab:5e:fb:a0:1f:b4:15:ea:29:78:3f:bd:38:18:e0:26: 75:b5:58:01:11:a1:bd:81:f8:22:fc:63:2f:68:17:30:2d:aa: 03:c7:7b:73 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUTfeN/M0MCQ5v86wOL8NnMDvUuP0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMzAwNjQ2NDVaFw0yNzAxMjkwNjUxNDVaMDMxMTAvBgNV BAMTKDM5QzJDRDJBQkIyM0VCNzU5MEFBNDM2NzM3MUQ0MzQyQjk4ODk4ODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVd06N/qukdU/b70ihe/KiM7Hc /HEysYNueVxl0OgV/+FTlIeLwXg/xX4ZXTakdt92NDc7+eJ0Hj4sWEEmneVDQ8mw zjoovLcKvXEoptL6us9geS0k7x8Tp9AIBOj0xOKCTnvOn4ByYNKPtOE5cXYZGOjJ MgR96l+9DxSO2RKb17a7q2Ri1gJTXd9FSr3I4HnhSHeh+LLOSCKSFDfEcoRqx7jP Q2KTtUPVFOZjA2bQYjcyrP2QZTJ49gVSQlSXtHaZsJukSTM7gmLEvQqaVahWdPza Pg6CgpGnnGpdP8CYpeY7vvTmo3D0lRozsDAFGXeLd8bDve4fpAvIgku3F6MbAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ5ws0quyPrdZCq Q2c3HUNCuYiYgTAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMTEyRDUxMDgxQzNEMEZGNjgwNzQyQkJF QkFBQTY2QTQ2RjAyQzU4NDFFMjQ1MTZEMEQ3Q0RGRkQyMkIzNzIwQS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8xMTJENTEwODFDM0QwRkY2ODA3NDJCQkVCQUFBNjZBNDZGMDJDNTg0MUUy NDUxNkQwRDdDREZGRDIyQjM3MjBBLzAvMzlDMkNEMkFCQjIzRUI3NTkwQUE0MzY3 MzcxRDQzNDJCOTg4OTg4MS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAZ+/qMA0EAgAC MAcDBQAoBgPoMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQfUjANBgkqhkiG9w0B AQsFAAOCAQEAGojDHVynsu4TTf3Jt3RvvcL2c3AGcRUFmnUy14/6MjEVjz9TsL+J qGsUr9+Wz+oxWhuwaYlQBzqOqe6hjt4o/dJ7LEFl8VFXUQ3NeEWMdFes8332z8Ig ynm1QaHfLpozoCT+r+l0kC2EPwEzR4+O48xN880gafdSoSEEyef2250IPUlFJmnt Zvk5/PRtFPn0PEjJ7vpEs9nvPAJjkeIIyPCTATwylkjP4ChQ+GYeUekxyqco3+qL EZR3wlZxbgql2X/wETRCg1guZgazWlBdFY2dbTQRd/z3T2mrXvugH7QV6il4P704 GOAmdbVYARGhvYH4IvxjL2gXMC2qA8d7cw== -----END CERTIFICATE-----Generated at Mon Mar 2 14:51:27 2026 by rpki-client