$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/402EE1D9B06FF99090AB25CAA286ABC0E56BB374.cer File: 402EE1D9B06FF99090AB25CAA286ABC0E56BB374.cer (raw, json) Hash identifier: /w5ZR9AaCWk2KbsWjRMHI3kFbyxkOULgOMy3iqym18Q= Subject key identifier: 40:2E:E1:D9:B0:6F:F9:90:90:AB:25:CA:A2:86:AB:C0:E5:6B:B3:74 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 7311A88149F5CF0497BB5CF9C3E0702EC2C021A0 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/1DEC688CE1BC7E1EEAF3F82677078C9A253FC65372690F6E7B145EC9B84CC452/0/402EE1D9B06FF99090AB25CAA286ABC0E56BB374.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/1DEC688CE1BC7E1EEAF3F82677078C9A253FC65372690F6E7B145EC9B84CC452/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Thu 29 Jan 2026 00:35:03 +0000 Certificate not after: Thu 28 Jan 2027 00:40:03 +0000 Subordinate resources: IP: 177.126.36.0/22 IP: 2803:a410::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:11:a8:81:49:f5:cf:04:97:bb:5c:f9:c3:e0:70:2e:c2:c0:21:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 29 00:35:03 2026 GMT Not After : Jan 28 00:40:03 2027 GMT Subject: CN=402EE1D9B06FF99090AB25CAA286ABC0E56BB374 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:73:80:a4:bc:d9:66:65:ae:7c:0c:37:5e:f2: e9:e8:37:9b:0c:dc:cc:58:17:21:d8:08:b1:c3:73: 70:de:63:8c:e2:8c:36:bd:95:d4:94:cd:2d:87:d0: 42:e8:4a:93:3b:b3:c1:f8:9e:27:02:c8:cb:85:fd: 71:02:91:4d:76:74:42:47:49:db:43:32:3d:3c:e0: 24:f1:6b:1a:20:c6:3e:6d:37:b6:23:6b:d1:56:9d: e7:f3:7f:04:8b:74:84:68:3f:b9:86:d3:fa:d2:8e: ae:e3:32:61:32:21:9b:37:76:5e:e3:c9:ae:88:61: 05:11:be:f9:82:bc:e2:cd:2f:55:cd:95:d8:97:35: 06:b5:cc:7b:55:93:b0:c1:1c:0e:c5:4d:cd:16:7a: 89:78:62:a1:68:20:6e:b3:f8:ef:80:03:23:39:5f: ac:c4:e5:f5:4a:e9:2f:36:98:24:d9:35:50:a6:5a: 70:e7:b2:43:71:ed:1a:45:3b:38:7d:16:21:be:c2: c9:3f:8a:64:d3:96:c5:cf:fa:2d:b2:6c:f5:0b:3f: 67:56:93:89:f3:f9:71:b6:b9:10:e9:60:60:c1:29: 24:aa:25:47:3a:ea:20:94:e5:15:7c:c7:52:83:16: f1:c3:ce:9d:7d:90:b1:4b:79:7a:54:58:c3:1a:57: bd:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 40:2E:E1:D9:B0:6F:F9:90:90:AB:25:CA:A2:86:AB:C0:E5:6B:B3:74 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1DEC688CE1BC7E1EEAF3F82677078C9A253FC65372690F6E7B145EC9B84CC452/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1DEC688CE1BC7E1EEAF3F82677078C9A253FC65372690F6E7B145EC9B84CC452/0/402EE1D9B06FF99090AB25CAA286ABC0E56BB374.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.126.36.0/22 IPv6: 2803:a410::/32 Signature Algorithm: sha256WithRSAEncryption 7b:8b:71:60:79:ff:66:82:0d:a1:5a:6c:c2:18:97:84:23:39: d4:8c:ba:59:f9:03:97:6c:4e:b9:4c:b6:16:ac:ac:11:35:77: dd:87:7f:bd:51:30:2b:57:86:e5:dc:c7:98:15:6c:9d:83:8a: b1:5a:88:4c:18:93:cb:1c:c3:30:be:b8:d1:1b:ce:fa:73:57: 4f:63:0d:88:b2:88:5d:4a:58:0f:5c:cf:bb:db:6f:e6:ee:9f: 90:d6:fe:f0:96:91:84:59:7c:d1:43:e6:5c:73:64:2b:08:f4: d9:e1:76:47:61:13:b7:1a:2c:b4:df:c3:12:68:16:69:da:89: 0b:ae:1a:a8:15:d7:44:58:72:0b:67:5d:f6:ef:cc:a1:82:96: 2d:21:e1:fd:66:03:0e:04:da:ba:2c:3b:66:d8:a1:96:3e:79: 26:04:e6:ac:c8:91:a3:fd:3a:91:cd:f8:b3:4a:c5:7b:34:e4: 86:0c:63:7a:24:32:59:2b:bc:8e:61:14:f1:26:e7:75:13:eb: 8c:f2:5a:50:83:8a:74:b8:df:76:72:19:47:eb:e1:63:5d:87: 8e:82:42:97:75:2d:89:b3:b6:53:16:25:47:28:b6:d3:84:80: fb:35:ec:fa:64:4a:41:25:15:0d:ee:39:f1:ef:89:d6:6e:37: fa:99:f3:10 -----BEGIN CERTIFICATE----- MIIGiTCCBXGgAwIBAgIUcxGogUn1zwSXu1z5w+BwLsLAIaAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjkwMDM1MDNaFw0yNzAxMjgwMDQwMDNaMDMxMTAvBgNV BAMTKDQwMkVFMUQ5QjA2RkY5OTA5MEFCMjVDQUEyODZBQkMwRTU2QkIzNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtc4CkvNlmZa58DDde8unoN5sM 3MxYFyHYCLHDc3DeY4zijDa9ldSUzS2H0ELoSpM7s8H4nicCyMuF/XECkU12dEJH SdtDMj084CTxaxogxj5tN7Yja9FWnefzfwSLdIRoP7mG0/rSjq7jMmEyIZs3dl7j ya6IYQURvvmCvOLNL1XNldiXNQa1zHtVk7DBHA7FTc0Weol4YqFoIG6z+O+AAyM5 X6zE5fVK6S82mCTZNVCmWnDnskNx7RpFOzh9FiG+wsk/imTTlsXP+i2ybPULP2dW k4nz+XG2uRDpYGDBKSSqJUc66iCU5RV8x1KDFvHDzp19kLFLeXpUWMMaV73LAgMB AAGjggOTMIIDjzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRALuHZsG/5kJCr JcqihqvA5WuzdDAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMURFQzY4OENFMUJDN0UxRUVBRjNGODI2 NzcwNzhDOUEyNTNGQzY1MzcyNjkwRjZFN0IxNDVFQzlCODRDQzQ1Mi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8xREVDNjg4Q0UxQkM3RTFFRUFGM0Y4MjY3NzA3OEM5QTI1M0ZDNjUzNzI2 OTBGNkU3QjE0NUVDOUI4NENDNDUyLzAvNDAyRUUxRDlCMDZGRjk5MDkwQUIyNUNB QTI4NkFCQzBFNTZCQjM3NC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCsX4kMA0EAgAC MAcDBQAoA6QQMA0GCSqGSIb3DQEBCwUAA4IBAQB7i3Fgef9mgg2hWmzCGJeEIznU jLpZ+QOXbE65TLYWrKwRNXfdh3+9UTArV4bl3MeYFWydg4qxWohMGJPLHMMwvrjR G876c1dPYw2IsohdSlgPXM+722/m7p+Q1v7wlpGEWXzRQ+Zcc2QrCPTZ4XZHYRO3 Giy038MSaBZp2okLrhqoFddEWHILZ13278yhgpYtIeH9ZgMOBNq6LDtm2KGWPnkm BOasyJGj/TqRzfizSsV7NOSGDGN6JDJZK7yOYRTxJud1E+uM8lpQg4p0uN92chlH 6+FjXYeOgkKXdS2Js7ZTFiVHKLbThID7Nez6ZEpBJRUN7jnx74nWbjf6mfMQ -----END CERTIFICATE-----Generated at Mon Mar 2 20:19:23 2026 by rpki-client