$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4A8CA56E3B7BF88CD1347971DBEE896F367714C7.cer File: 4A8CA56E3B7BF88CD1347971DBEE896F367714C7.cer (raw, json) Hash identifier: GsahYzE2DlsomrmsC4KNPiaXicxbwhdyK/XcmT4fwzU= Subject key identifier: 4A:8C:A5:6E:3B:7B:F8:8C:D1:34:79:71:DB:EE:89:6F:36:77:14:C7 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 7C1E7920E0887129C4C6DB185217401CED233B10 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/88FF336A6B2F9FAA9A7980829832DDE757814C175E420E9317DDA53106684047/0/4A8CA56E3B7BF88CD1347971DBEE896F367714C7.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/88FF336A6B2F9FAA9A7980829832DDE757814C175E420E9317DDA53106684047/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 19:42:16 +0000 Certificate not after: Wed 27 Jan 2027 19:47:16 +0000 Subordinate resources: AS: 262208 IP: 190.13.216.0/21 IP: 2803:9d20::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:1e:79:20:e0:88:71:29:c4:c6:db:18:52:17:40:1c:ed:23:3b:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 19:42:16 2026 GMT Not After : Jan 27 19:47:16 2027 GMT Subject: CN=4A8CA56E3B7BF88CD1347971DBEE896F367714C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:5a:90:49:ac:dd:4e:f1:31:88:2a:e2:b9:ba: 1e:41:0b:99:99:90:da:86:33:2d:35:4d:90:e0:c5: fb:4a:06:09:83:b6:62:40:58:69:e9:8d:d8:07:7b: 64:4d:0d:4e:04:3f:d0:16:e4:f8:db:a0:08:bf:ed: c6:59:d7:95:ab:f1:3a:71:81:ed:94:a1:36:96:b5: 6a:36:84:24:95:db:b1:78:68:f3:03:f9:f7:2a:e6: 9d:cb:86:55:17:f2:46:65:28:8f:5a:5a:91:23:0a: 60:d1:85:49:2f:9c:ff:1b:91:9b:4a:13:f0:a7:d0: 1b:a4:e0:fd:40:76:be:f6:a1:ce:03:9d:28:4e:b6: 3e:6a:23:3f:71:ab:e9:af:95:13:f1:57:9d:51:f9: b9:e2:b4:f5:78:b1:2c:16:84:cf:2c:61:b5:bc:db: bc:db:1e:4a:06:1e:a0:e0:bb:f0:ed:a1:fd:dd:33: 41:6f:d7:49:8f:7f:02:ea:46:b7:62:4b:49:cc:81: 62:71:62:be:f1:4b:7e:a6:6a:ef:2e:f6:85:9d:22: 8a:f6:36:af:b7:a5:82:a0:f8:bc:4c:62:04:f9:3f: 3c:ac:e2:4d:ba:a2:c7:83:05:92:02:4d:4f:3e:dc: bf:57:2c:80:2c:b9:a2:8b:9d:5d:f7:fc:42:87:ce: 81:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4A:8C:A5:6E:3B:7B:F8:8C:D1:34:79:71:DB:EE:89:6F:36:77:14:C7 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/88FF336A6B2F9FAA9A7980829832DDE757814C175E420E9317DDA53106684047/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/88FF336A6B2F9FAA9A7980829832DDE757814C175E420E9317DDA53106684047/0/4A8CA56E3B7BF88CD1347971DBEE896F367714C7.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 190.13.216.0/21 IPv6: 2803:9d20::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 262208 Signature Algorithm: sha256WithRSAEncryption 3f:2b:21:e1:af:91:8e:ce:e9:56:4e:e2:ce:99:de:21:c8:16: 81:6e:ab:1f:db:f9:8c:be:2a:38:d4:af:67:60:f1:0c:d7:04: 57:be:5e:ee:86:e6:24:56:20:79:02:85:eb:85:b4:b3:20:09: 3e:b8:e0:69:a6:78:47:6f:8a:38:46:0c:4b:6d:48:26:68:6d: 18:23:7b:0c:3c:ac:e2:15:16:88:77:0e:97:01:30:de:37:35: 4b:d0:13:9a:23:fa:e3:a6:4e:05:bb:4b:c7:5a:ee:10:ae:26: f4:d8:da:25:19:5c:09:0d:ed:b8:ff:b6:ee:e8:c3:17:a7:45: 1f:28:5b:cd:dc:b9:74:71:5f:39:49:61:aa:2a:b9:15:0b:49: d8:03:ec:c8:54:62:67:f8:fd:2e:63:8d:c3:ff:d1:4f:03:6f: b4:c2:8e:05:65:57:da:c0:6b:48:81:54:e9:e1:f6:ed:66:37: 2d:c3:7f:a7:33:2b:79:7b:74:e8:ef:be:a7:02:89:ed:8a:c5: f6:df:e3:d3:e8:5e:73:e1:f5:d2:7b:22:04:fd:fb:50:f9:f4: 98:4d:f5:f1:0f:6f:ed:60:49:86:9b:f1:46:d4:b8:f9:23:ef: c9:ec:aa:6d:49:ce:fe:2a:af:bf:a7:b9:f4:3c:67:63:4c:66: ed:cc:99:9c -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUfB55IOCIcSnExtsYUhdAHO0jOxAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgxOTQyMTZaFw0yNzAxMjcxOTQ3MTZaMDMxMTAvBgNV BAMTKDRBOENBNTZFM0I3QkY4OENEMTM0Nzk3MURCRUU4OTZGMzY3NzE0QzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaWpBJrN1O8TGIKuK5uh5BC5mZ kNqGMy01TZDgxftKBgmDtmJAWGnpjdgHe2RNDU4EP9AW5PjboAi/7cZZ15Wr8Tpx ge2UoTaWtWo2hCSV27F4aPMD+fcq5p3LhlUX8kZlKI9aWpEjCmDRhUkvnP8bkZtK E/Cn0Buk4P1Adr72oc4DnShOtj5qIz9xq+mvlRPxV51R+bnitPV4sSwWhM8sYbW8 27zbHkoGHqDgu/Dtof3dM0Fv10mPfwLqRrdiS0nMgWJxYr7xS36mau8u9oWdIor2 Nq+3pYKg+LxMYgT5Pzys4k26oseDBZICTU8+3L9XLIAsuaKLnV33/EKHzoF3AgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRKjKVuO3v4jNE0 eXHb7olvNncUxzAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvODhGRjMzNkE2QjJGOUZBQTlBNzk4MDgy OTgzMkRERTc1NzgxNEMxNzVFNDIwRTkzMTdEREE1MzEwNjY4NDA0Ny8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy84OEZGMzM2QTZCMkY5RkFBOUE3OTgwODI5ODMyRERFNzU3ODE0QzE3NUU0 MjBFOTMxN0REQTUzMTA2Njg0MDQ3LzAvNEE4Q0E1NkUzQjdCRjg4Q0QxMzQ3OTcx REJFRTg5NkYzNjc3MTRDNy5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDvg3YMA0EAgAC MAcDBQAoA50gMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQAQDANBgkqhkiG9w0B AQsFAAOCAQEAPysh4a+Rjs7pVk7izpneIcgWgW6rH9v5jL4qONSvZ2DxDNcEV75e 7obmJFYgeQKF64W0syAJPrjgaaZ4R2+KOEYMS21IJmhtGCN7DDys4hUWiHcOlwEw 3jc1S9ATmiP646ZOBbtLx1ruEK4m9NjaJRlcCQ3tuP+27ujDF6dFHyhbzdy5dHFf OUlhqiq5FQtJ2APsyFRiZ/j9LmONw//RTwNvtMKOBWVX2sBrSIFU6eH27WY3LcN/ pzMreXt06O++pwKJ7YrF9t/j0+hec+H10nsiBP37UPn0mE318Q9v7WBJhpvxRtS4 +SPvyeyqbUnO/iqvv6e59DxnY0xm7cyZnA== -----END CERTIFICATE-----Generated at Tue Mar 3 01:14:34 2026 by rpki-client