$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4233B5C9FB05032EE4D323F58984C9BB2353F9AE.cer File: 4233B5C9FB05032EE4D323F58984C9BB2353F9AE.cer (raw, json) Hash identifier: 6FUTBkRKZRdmQDcW+ZVnv+1hpLo7nHf0h8jBP+PBy4I= Subject key identifier: 42:33:B5:C9:FB:05:03:2E:E4:D3:23:F5:89:84:C9:BB:23:53:F9:AE Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 7C905B2869F258742F40CFBE789E99F286982177 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/BAF02E822514644D30EB9C6335075620AFEC893BDB9940FA1EA2568FBDD8CB17/0/4233B5C9FB05032EE4D323F58984C9BB2353F9AE.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/BAF02E822514644D30EB9C6335075620AFEC893BDB9940FA1EA2568FBDD8CB17/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 11:51:16 +0000 Certificate not after: Wed 27 Jan 2027 11:56:16 +0000 Subordinate resources: AS: 262231 IP: 143.0.80.0/22 IP: 170.245.168.0/22 IP: 190.52.80.0/20 IP: 2803:2c00::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:90:5b:28:69:f2:58:74:2f:40:cf:be:78:9e:99:f2:86:98:21:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 11:51:16 2026 GMT Not After : Jan 27 11:56:16 2027 GMT Subject: CN=4233B5C9FB05032EE4D323F58984C9BB2353F9AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:d0:8d:d7:ec:25:9f:9e:ad:8c:fb:13:72:d1: 16:00:93:ff:f2:61:2d:ef:38:27:37:7c:14:81:8a: 7c:ab:ab:69:90:0f:14:41:91:f0:ba:9e:cc:ba:16: 4f:91:bc:35:2b:c4:f2:06:a4:ed:71:79:48:e2:8e: 8b:be:dc:fd:f9:b5:f0:23:b1:1e:31:f4:f3:06:c6: 5d:57:28:68:6a:71:07:4d:6b:f2:b9:bf:1a:90:2d: 7d:be:3d:1a:06:bf:a4:71:96:de:2c:82:18:77:17: 50:d5:29:fa:6b:53:a4:02:f0:17:9b:c2:c9:31:f7: e4:43:e0:cf:03:50:ba:05:55:9a:ad:dc:65:38:83: 57:63:0b:5a:8f:a3:09:ae:c8:30:f7:4a:89:89:5a: 5c:0f:dd:80:66:0b:82:5f:6b:10:ed:de:4f:7f:4a: 68:53:50:cb:e5:0e:98:ce:62:42:d6:59:04:a3:88: 9a:21:d8:23:4f:08:e4:09:1f:fe:18:95:94:3b:4a: fb:e8:95:1a:2a:03:7b:87:30:d5:14:b4:60:d7:a4: 47:f8:89:19:fd:9b:81:44:bd:43:11:15:50:22:96: 2d:25:57:c6:9b:2a:b2:92:ea:d9:71:97:6a:6e:07: 5e:e2:fb:90:3c:01:6d:5a:58:cd:44:0c:c1:ab:27: 79:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 42:33:B5:C9:FB:05:03:2E:E4:D3:23:F5:89:84:C9:BB:23:53:F9:AE X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/BAF02E822514644D30EB9C6335075620AFEC893BDB9940FA1EA2568FBDD8CB17/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/BAF02E822514644D30EB9C6335075620AFEC893BDB9940FA1EA2568FBDD8CB17/0/4233B5C9FB05032EE4D323F58984C9BB2353F9AE.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.0.80.0/22 170.245.168.0/22 190.52.80.0/20 IPv6: 2803:2c00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 262231 Signature Algorithm: sha256WithRSAEncryption 73:b3:7f:ce:3b:61:2e:c5:e8:55:43:e9:31:1e:48:32:16:fa: 90:c4:5d:35:ed:e1:af:bc:bd:a7:18:91:6f:77:62:30:58:81: 6e:ff:84:ba:11:cc:2d:78:bc:d1:7d:de:c6:6b:6d:61:24:24: 6d:0a:d8:9b:4b:5a:26:5c:27:fa:97:a1:ac:01:b5:0b:5a:76: 35:ec:68:62:48:fb:4a:4b:31:76:8a:5d:3c:c0:72:41:67:7b: fb:0d:0f:7e:dd:d3:28:43:57:d8:6a:cf:c1:89:88:e8:98:d8: 48:45:a5:5b:eb:9f:ea:5e:e6:ae:62:61:83:ed:98:44:f9:7e: 77:a6:53:e6:08:a1:14:17:59:c3:72:99:10:50:8d:19:c8:6d: 38:3b:34:e5:88:5d:c0:ba:fc:c4:9d:be:01:80:ea:2a:42:82: 38:b1:23:ee:bd:f9:20:5d:ef:28:21:00:01:d3:55:da:51:ef: 76:b5:88:ff:b8:b4:21:d9:04:60:91:3f:03:ad:13:59:1a:af: 23:3c:de:46:41:49:c9:93:ad:43:cc:b1:65:08:98:96:c4:b6: 8f:9c:de:46:91:f9:f7:a4:c4:4d:20:a7:0c:41:a6:30:1e:4f: 58:ee:55:fa:6e:f0:22:e8:3a:87:1b:66:a3:e8:51:89:f6:92: 87:24:bc:71 -----BEGIN CERTIFICATE----- MIIGsTCCBZmgAwIBAgIUfJBbKGnyWHQvQM++eJ6Z8oaYIXcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgxMTUxMTZaFw0yNzAxMjcxMTU2MTZaMDMxMTAvBgNV BAMTKDQyMzNCNUM5RkIwNTAzMkVFNEQzMjNGNTg5ODRDOUJCMjM1M0Y5QUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDv0I3X7CWfnq2M+xNy0RYAk//y YS3vOCc3fBSBinyrq2mQDxRBkfC6nsy6Fk+RvDUrxPIGpO1xeUjijou+3P35tfAj sR4x9PMGxl1XKGhqcQdNa/K5vxqQLX2+PRoGv6Rxlt4sghh3F1DVKfprU6QC8Beb wskx9+RD4M8DULoFVZqt3GU4g1djC1qPowmuyDD3SomJWlwP3YBmC4JfaxDt3k9/ SmhTUMvlDpjOYkLWWQSjiJoh2CNPCOQJH/4YlZQ7SvvolRoqA3uHMNUUtGDXpEf4 iRn9m4FEvUMRFVAili0lV8abKrKS6tlxl2puB17i+5A8AW1aWM1EDMGrJ3mLAgMB AAGjggO7MIIDtzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRCM7XJ+wUDLuTT I/WJhMm7I1P5rjAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQkFGMDJFODIyNTE0NjQ0RDMwRUI5QzYz MzUwNzU2MjBBRkVDODkzQkRCOTk0MEZBMUVBMjU2OEZCREQ4Q0IxNy8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9CQUYwMkU4MjI1MTQ2NDREMzBFQjlDNjMzNTA3NTYyMEFGRUM4OTNCREI5 OTQwRkExRUEyNTY4RkJERDhDQjE3LzAvNDIzM0I1QzlGQjA1MDMyRUU0RDMyM0Y1 ODk4NEM5QkIyMzUzRjlBRS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCjwBQAwQCqvWo AwQEvjRQMA0EAgACMAcDBQAoAywAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQA VzANBgkqhkiG9w0BAQsFAAOCAQEAc7N/zjthLsXoVUPpMR5IMhb6kMRdNe3hr7y9 pxiRb3diMFiBbv+EuhHMLXi80X3exmttYSQkbQrYm0taJlwn+pehrAG1C1p2Nexo Ykj7SksxdopdPMByQWd7+w0Pft3TKENX2GrPwYmI6JjYSEWlW+uf6l7mrmJhg+2Y RPl+d6ZT5gihFBdZw3KZEFCNGchtODs05YhdwLr8xJ2+AYDqKkKCOLEj7r35IF3v KCEAAdNV2lHvdrWI/7i0IdkEYJE/A60TWRqvIzzeRkFJyZOtQ8yxZQiYlsS2j5ze RpH596TETSCnDEGmMB5PWO5V+m7wIug6hxtmo+hRifaShyS8cQ== -----END CERTIFICATE-----Generated at Mon Mar 2 17:58:13 2026 by rpki-client