$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/409F816F9F6076FF99779C7733845FD803FA035A.cer File: 409F816F9F6076FF99779C7733845FD803FA035A.cer (raw, json) Hash identifier: 2s4X8TDQqowKy4wzNPpJqCyoNlue4CgX3dP8H6QNHhI= Subject key identifier: 40:9F:81:6F:9F:60:76:FF:99:77:9C:77:33:84:5F:D8:03:FA:03:5A Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 4F9769F77BF467C1B4918F16757F2A1A7602FF88 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/70D661404135CBC4C9A26A7E0A41396D445E1D10397A15F537D8228C9A78EEC3/0/409F816F9F6076FF99779C7733845FD803FA035A.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/70D661404135CBC4C9A26A7E0A41396D445E1D10397A15F537D8228C9A78EEC3/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Thu 29 Jan 2026 01:01:03 +0000 Certificate not after: Thu 28 Jan 2027 01:06:03 +0000 Subordinate resources: AS: 52291 IP: 190.111.124.0/22 IP: 2803:3950::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 05 Mar 2026 11:41:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:97:69:f7:7b:f4:67:c1:b4:91:8f:16:75:7f:2a:1a:76:02:ff:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 29 01:01:03 2026 GMT Not After : Jan 28 01:06:03 2027 GMT Subject: CN=409F816F9F6076FF99779C7733845FD803FA035A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:1c:08:a3:7a:96:8d:e8:82:13:43:0d:43:65: 3b:9c:a4:0f:98:46:a7:4d:6e:c9:57:5c:f1:33:aa: f3:ad:35:c4:72:99:39:a8:44:26:8c:c1:7f:47:9b: 84:2f:64:13:39:03:de:31:10:98:30:92:0c:51:4c: ea:0d:16:e0:aa:a6:9a:29:e1:78:bc:64:31:4b:59: 45:78:ab:e9:c1:a8:98:5f:f9:23:c3:51:23:41:f0: 87:fe:05:d7:12:f0:b2:c8:5b:8e:e8:6b:d8:19:d3: 89:fd:33:99:5e:78:1a:58:6e:a9:f5:0e:3f:41:a0: 1c:e4:10:92:92:c3:15:08:4f:68:6c:94:a2:46:99: 5c:49:6c:39:df:e0:77:e7:02:f3:86:7b:54:0c:e4: fe:33:49:cb:22:36:df:6b:61:37:05:90:c4:e0:e7: 0f:26:f7:c4:49:87:1c:7c:51:fa:f6:2c:c7:bb:94: 7c:7c:2b:ba:96:8c:1a:f0:7b:aa:42:94:c0:7c:1f: ae:f3:60:1a:38:9f:d5:76:8c:97:4a:e2:59:eb:12: a7:90:2e:8f:08:f8:66:0f:67:95:a9:97:92:cb:ca: c4:3b:7d:5a:18:01:67:93:ad:1b:ff:c6:10:33:b5: 0b:0d:79:4f:bc:88:ab:20:e8:6d:ba:e3:e9:56:05: 4e:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 40:9F:81:6F:9F:60:76:FF:99:77:9C:77:33:84:5F:D8:03:FA:03:5A X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/70D661404135CBC4C9A26A7E0A41396D445E1D10397A15F537D8228C9A78EEC3/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/70D661404135CBC4C9A26A7E0A41396D445E1D10397A15F537D8228C9A78EEC3/0/409F816F9F6076FF99779C7733845FD803FA035A.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 190.111.124.0/22 IPv6: 2803:3950::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52291 Signature Algorithm: sha256WithRSAEncryption 06:c2:68:7b:d3:f1:a2:8b:9d:65:be:e0:87:54:88:02:43:79: 18:e9:11:51:16:94:aa:0e:37:40:7f:3d:8d:3b:f7:65:96:71: 50:26:c2:5a:21:c5:a8:43:ae:38:ff:eb:fa:7d:fb:65:85:11: db:5e:03:48:6d:ab:ca:27:0a:49:7d:0b:9e:62:4a:00:c2:6a: b0:aa:3b:51:dc:99:1c:09:2b:e0:62:e3:97:bb:4c:20:0c:4f: dd:ee:dc:8f:cb:92:a5:fe:32:1b:b4:ac:bf:db:01:c7:41:7b: 28:24:d4:5f:59:59:50:3a:0b:2e:4e:03:5d:49:83:97:9c:a5: 6c:04:49:20:0a:88:d9:13:4a:f8:1d:e9:57:af:7a:f3:a4:1b: d9:b6:53:75:04:56:8c:f4:f6:b0:40:e2:c4:92:5b:68:86:3c: 5b:73:ab:22:a3:e9:4e:4c:84:a3:28:4a:26:c4:7f:fe:7c:4d: 4d:dd:65:c1:8f:95:52:dd:e2:b3:38:ed:f4:64:ca:43:54:f9: 3f:60:26:9c:2b:33:b3:2f:00:0b:18:1b:cb:40:fc:42:5e:29: ed:b2:a6:4e:46:f0:e1:c8:8c:9a:52:56:89:40:68:bb:4b:1f: 8e:3f:34:ed:c0:dc:d5:5f:f4:4e:d3:86:76:57:50:b3:a9:2f: b8:7a:77:29 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUT5dp93v0Z8G0kY8WdX8qGnYC/4gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjkwMTAxMDNaFw0yNzAxMjgwMTA2MDNaMDMxMTAvBgNV BAMTKDQwOUY4MTZGOUY2MDc2RkY5OTc3OUM3NzMzODQ1RkQ4MDNGQTAzNUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvHAijepaN6IITQw1DZTucpA+Y RqdNbslXXPEzqvOtNcRymTmoRCaMwX9Hm4QvZBM5A94xEJgwkgxRTOoNFuCqppop 4Xi8ZDFLWUV4q+nBqJhf+SPDUSNB8If+BdcS8LLIW47oa9gZ04n9M5leeBpYbqn1 Dj9BoBzkEJKSwxUIT2hslKJGmVxJbDnf4HfnAvOGe1QM5P4zScsiNt9rYTcFkMTg 5w8m98RJhxx8Ufr2LMe7lHx8K7qWjBrwe6pClMB8H67zYBo4n9V2jJdK4lnrEqeQ Lo8I+GYPZ5Wpl5LLysQ7fVoYAWeTrRv/xhAztQsNeU+8iKsg6G264+lWBU49AgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRAn4Fvn2B2/5l3 nHczhF/YA/oDWjAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNzBENjYxNDA0MTM1Q0JDNEM5QTI2QTdF MEE0MTM5NkQ0NDVFMUQxMDM5N0ExNUY1MzdEODIyOEM5QTc4RUVDMy8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy83MEQ2NjE0MDQxMzVDQkM0QzlBMjZBN0UwQTQxMzk2RDQ0NUUxRDEwMzk3 QTE1RjUzN0Q4MjI4QzlBNzhFRUMzLzAvNDA5RjgxNkY5RjYwNzZGRjk5Nzc5Qzc3 MzM4NDVGRDgwM0ZBMDM1QS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCvm98MA0EAgAC MAcDBQAoAzlQMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDMQzANBgkqhkiG9w0B AQsFAAOCAQEABsJoe9PxooudZb7gh1SIAkN5GOkRURaUqg43QH89jTv3ZZZxUCbC WiHFqEOuOP/r+n37ZYUR214DSG2ryicKSX0LnmJKAMJqsKo7UdyZHAkr4GLjl7tM IAxP3e7cj8uSpf4yG7Ssv9sBx0F7KCTUX1lZUDoLLk4DXUmDl5ylbARJIAqI2RNK +B3pV69686Qb2bZTdQRWjPT2sEDixJJbaIY8W3OrIqPpTkyEoyhKJsR//nxNTd1l wY+VUt3iszjt9GTKQ1T5P2AmnCszsy8ACxgby0D8Ql4p7bKmTkbw4ciMmlJWiUBo u0sfjj807cDc1V/0TtOGdldQs6kvuHp3KQ== -----END CERTIFICATE-----Generated at Mon Mar 2 11:11:49 2026 by rpki-client