$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C3B7B469CAC485C79640430F65FB7E54F99A890.cer File: 3C3B7B469CAC485C79640430F65FB7E54F99A890.cer (raw, json) Hash identifier: 2kLzgcnUW2LdTXS9mLmrfL56EvJ8TZbcYQ/FM869eEM= Subject key identifier: 3C:3B:7B:46:9C:AC:48:5C:79:64:04:30:F6:5F:B7:E5:4F:99:A8:90 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 054AB50A0E3D2916C774924F5E13E28E03F26381 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/EB5091115C1DA031B792EADFF54498AA3ACA566EAFC77F650EEB9BF8C6770728/0/3C3B7B469CAC485C79640430F65FB7E54F99A890.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/EB5091115C1DA031B792EADFF54498AA3ACA566EAFC77F650EEB9BF8C6770728/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 27 Jan 2026 18:22:45 +0000 Certificate not after: Tue 26 Jan 2027 18:27:45 +0000 Subordinate resources: AS: 272026 IP: 167.250.236.0/23 IP: 177.11.254.0/23 IP: 190.93.184.0/22 IP: 2803:6510::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:4a:b5:0a:0e:3d:29:16:c7:74:92:4f:5e:13:e2:8e:03:f2:63:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 27 18:22:45 2026 GMT Not After : Jan 26 18:27:45 2027 GMT Subject: CN=3C3B7B469CAC485C79640430F65FB7E54F99A890 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d1:d9:02:1e:35:b7:9d:a4:2d:91:56:ff:9c: 39:e7:17:d0:22:d1:8e:fa:18:3d:bc:d8:a1:05:67: 27:50:2a:eb:cc:96:ee:41:8a:f3:99:de:93:b4:55: 13:05:7f:87:6f:73:0c:aa:d6:f7:17:30:8e:3f:ba: 44:74:52:41:fc:3f:28:16:6b:5f:61:23:15:13:5e: f7:df:6e:09:22:cd:a9:8f:a9:ca:42:81:e0:c2:cd: 0c:86:e2:ff:3d:6e:38:42:23:d3:d7:b7:c1:c8:c7: 55:b3:ed:2f:55:2e:b0:df:70:e5:ae:ad:89:83:ae: 3e:12:32:2c:95:c8:a8:76:d1:7b:b9:61:04:c7:79: d3:2e:42:b2:93:e1:b9:95:7e:65:40:a5:ff:8e:3b: 25:77:99:70:65:e9:d0:8d:f2:d4:9a:49:cb:fa:e5: 1c:c8:ad:4d:76:2f:22:18:fd:26:f9:51:b2:20:6b: c0:61:34:4e:7d:40:0a:dd:6c:f8:ae:46:59:57:d9: f6:7b:11:6b:aa:4c:97:9a:77:d0:4a:2c:7c:91:d0: 1e:ae:4a:4e:40:db:d1:ce:25:3d:3e:ed:2e:61:db: 5e:68:4e:40:23:31:fd:fd:d0:65:6b:5b:4c:a2:67: 12:9e:9e:73:7c:ea:8e:81:ed:96:25:d7:ff:84:12: f7:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3C:3B:7B:46:9C:AC:48:5C:79:64:04:30:F6:5F:B7:E5:4F:99:A8:90 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/EB5091115C1DA031B792EADFF54498AA3ACA566EAFC77F650EEB9BF8C6770728/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/EB5091115C1DA031B792EADFF54498AA3ACA566EAFC77F650EEB9BF8C6770728/0/3C3B7B469CAC485C79640430F65FB7E54F99A890.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 167.250.236.0/23 177.11.254.0/23 190.93.184.0/22 IPv6: 2803:6510::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 272026 Signature Algorithm: sha256WithRSAEncryption 03:74:71:8f:89:d3:8c:04:11:d7:f6:8e:1f:9d:f8:5b:e5:a4: 02:ce:e4:31:32:5a:21:20:72:4b:ea:78:85:6a:e8:a6:ea:05: 57:13:c8:8d:0c:1e:55:fe:51:3b:39:9a:eb:ea:18:ce:5d:7d: 3e:6f:f2:22:c9:d2:8b:17:56:93:26:c6:78:4c:bd:89:c6:f4: 7c:46:68:a2:fa:1f:6d:b1:3b:07:73:ff:df:69:56:d7:7a:77: f1:0e:82:0b:06:dc:96:5a:a6:4a:3e:f5:e3:e0:5e:66:93:42: cd:91:2d:07:c9:4a:ec:a1:1c:c5:5f:07:df:97:73:20:0a:1f: 25:67:bc:1c:31:da:87:b3:23:36:5c:95:8c:70:d5:f0:2a:e5: 81:36:ee:9f:30:81:d6:b0:16:1a:0e:31:3f:03:53:79:69:1d: d1:64:76:1b:e9:37:02:1e:cf:56:59:33:ff:d7:49:6f:3a:a0: d0:5b:3c:c2:2d:dd:df:2c:af:ff:3b:d0:72:ac:30:31:e6:1f: 2a:b0:95:c4:a8:d1:8d:14:0e:f4:ee:57:70:62:03:e9:00:de: 80:bd:07:3a:95:bb:c2:da:9b:b4:e3:15:e0:be:87:a6:a9:12: 5d:56:62:7c:27:e3:c6:63:0c:f5:11:12:05:8c:af:cc:3e:cd: e0:0a:bb:6c -----BEGIN CERTIFICATE----- MIIGsTCCBZmgAwIBAgIUBUq1Cg49KRbHdJJPXhPijgPyY4EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjcxODIyNDVaFw0yNzAxMjYxODI3NDVaMDMxMTAvBgNV BAMTKDNDM0I3QjQ2OUNBQzQ4NUM3OTY0MDQzMEY2NUZCN0U1NEY5OUE4OTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM0dkCHjW3naQtkVb/nDnnF9Ai 0Y76GD282KEFZydQKuvMlu5BivOZ3pO0VRMFf4dvcwyq1vcXMI4/ukR0UkH8PygW a19hIxUTXvffbgkizamPqcpCgeDCzQyG4v89bjhCI9PXt8HIx1Wz7S9VLrDfcOWu rYmDrj4SMiyVyKh20Xu5YQTHedMuQrKT4bmVfmVApf+OOyV3mXBl6dCN8tSaScv6 5RzIrU12LyIY/Sb5UbIga8BhNE59QArdbPiuRllX2fZ7EWuqTJead9BKLHyR0B6u Sk5A29HOJT0+7S5h215oTkAjMf390GVrW0yiZxKennN86o6B7ZYl1/+EEvc7AgMB AAGjggO7MIIDtzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ8O3tGnKxIXHlk BDD2X7flT5mokDAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRUI1MDkxMTE1QzFEQTAzMUI3OTJFQURG RjU0NDk4QUEzQUNBNTY2RUFGQzc3RjY1MEVFQjlCRjhDNjc3MDcyOC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9FQjUwOTExMTVDMURBMDMxQjc5MkVBREZGNTQ0OThBQTNBQ0E1NjZFQUZD NzdGNjUwRUVCOUJGOEM2NzcwNzI4LzAvM0MzQjdCNDY5Q0FDNDg1Qzc5NjQwNDMw RjY1RkI3RTU0Rjk5QTg5MC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQBp/rsAwQBsQv+ AwQCvl24MA0EAgACMAcDBQAoA2UQMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQm mjANBgkqhkiG9w0BAQsFAAOCAQEAA3Rxj4nTjAQR1/aOH534W+WkAs7kMTJaISBy S+p4hWropuoFVxPIjQweVf5ROzma6+oYzl19Pm/yIsnSixdWkybGeEy9icb0fEZo ovofbbE7B3P/32lW13p38Q6CCwbcllqmSj714+BeZpNCzZEtB8lK7KEcxV8H35dz IAofJWe8HDHah7MjNlyVjHDV8CrlgTbunzCB1rAWGg4xPwNTeWkd0WR2G+k3Ah7P Vlkz/9dJbzqg0Fs8wi3d3yyv/zvQcqwwMeYfKrCVxKjRjRQO9O5XcGID6QDegL0H OpW7wtqbtOMV4L6HpqkSXVZifCfjxmMM9RESBYyvzD7N4Aq7bA== -----END CERTIFICATE-----Generated at Mon Mar 2 14:43:47 2026 by rpki-client