$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4AE2A36E08FA040CA3A7783B41FEF867CEFFCC06.cer File: 4AE2A36E08FA040CA3A7783B41FEF867CEFFCC06.cer (raw, json) Hash identifier: tOXZXyBa7EQk5s0OpqNlleC4lpAnGfc3TbmON+SOgWE= Subject key identifier: 4A:E2:A3:6E:08:FA:04:0C:A3:A7:78:3B:41:FE:F8:67:CE:FF:CC:06 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 03213982B8A551F8A88343E10BDEE31A0A73FF0D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/AEF890FED0D14EDF8A6D2C5F5EE05ECC7ABD4C62BE9A0094A6F1781189B2DA93/0/4AE2A36E08FA040CA3A7783B41FEF867CEFFCC06.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/AEF890FED0D14EDF8A6D2C5F5EE05ECC7ABD4C62BE9A0094A6F1781189B2DA93/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Fri 27 Mar 2026 13:20:01 +0000 Certificate not after: Fri 26 Mar 2027 13:25:01 +0000 Subordinate resources: AS: 267770 IP: 186.0.156.0/22 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Apr 2026 19:03:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:21:39:82:b8:a5:51:f8:a8:83:43:e1:0b:de:e3:1a:0a:73:ff:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Mar 27 13:20:01 2026 GMT Not After : Mar 26 13:25:01 2027 GMT Subject: CN=4AE2A36E08FA040CA3A7783B41FEF867CEFFCC06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:47:64:54:29:71:59:00:31:b7:bb:98:7e:fb: f1:ec:99:8f:92:ed:b4:44:fc:63:db:01:e8:47:2f: 48:c1:db:eb:1c:89:bd:71:9c:19:b5:6e:6e:e8:42: bc:83:eb:c1:ba:42:79:b9:cb:8c:c6:61:e1:b2:8a: cc:8e:63:5d:6a:8b:d7:5c:ae:93:63:69:cc:aa:08: ef:91:b9:72:46:8d:ea:05:82:8f:1e:e2:32:eb:ae: 2f:f6:6b:4b:da:6b:aa:64:3e:3e:80:82:6b:2a:2e: d5:29:e7:13:3d:c1:09:57:8c:8e:37:8a:e0:7d:dc: 14:13:1f:55:db:a7:69:a4:1a:8e:25:08:f9:c5:4e: a0:6b:46:1a:c0:cb:79:e1:e4:17:17:cb:8f:ea:73: c1:bb:01:a0:38:c6:98:67:3a:6c:b1:7a:37:45:f9: 4b:dd:18:71:49:22:19:23:03:26:37:d3:a2:41:1b: fa:3f:5b:90:fc:ba:24:49:ee:72:9f:da:0d:ee:ee: 48:6a:42:0e:41:7f:83:50:5a:e0:02:3a:74:17:80: 75:53:d4:78:5c:3b:1f:9e:44:2e:2b:f4:e3:29:fd: 4d:1a:7b:8c:51:d4:41:ca:91:1e:36:26:a3:c4:6f: e7:a7:76:de:f4:25:af:7f:7a:0c:9f:04:fe:11:8b: 64:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4A:E2:A3:6E:08:FA:04:0C:A3:A7:78:3B:41:FE:F8:67:CE:FF:CC:06 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/AEF890FED0D14EDF8A6D2C5F5EE05ECC7ABD4C62BE9A0094A6F1781189B2DA93/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/AEF890FED0D14EDF8A6D2C5F5EE05ECC7ABD4C62BE9A0094A6F1781189B2DA93/0/4AE2A36E08FA040CA3A7783B41FEF867CEFFCC06.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 186.0.156.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267770 Signature Algorithm: sha256WithRSAEncryption 58:c3:65:d8:38:38:77:86:5d:ca:db:91:fb:79:dd:62:8a:41: 29:e1:3e:37:4b:58:37:32:04:6a:0f:5d:3e:45:4f:51:4c:fe: 03:62:63:1e:98:21:f9:32:49:fc:70:ca:42:ab:37:87:92:62: 11:52:cf:bd:b4:f3:7b:59:80:f3:40:4b:b5:7e:2e:ea:a4:40: e8:db:35:c1:f0:0a:7b:0e:49:b1:91:76:a3:b6:8d:13:6f:28: 26:0b:55:0e:91:76:d9:6e:2e:ba:b9:5b:a9:43:f7:1c:0a:1d: fd:1f:14:8b:91:c5:fc:2c:73:d1:e0:90:8d:41:dd:2c:a1:4b: 25:e9:20:05:d2:e7:19:c7:d9:21:87:c5:cb:e0:f1:f7:a9:23: 41:4c:03:9c:9b:20:01:e5:9a:01:fb:61:6f:9d:c8:67:94:9b: 4c:1b:86:70:6a:14:9c:d7:c6:a1:38:ce:34:53:a2:06:51:c6: c3:c6:d2:c0:eb:b2:e0:3d:d9:76:19:e1:70:f3:ce:a1:59:90: 3c:dd:c0:cb:05:8b:01:4f:17:24:d1:16:01:29:52:18:bf:bc: ea:e6:f1:af:c9:15:11:2f:3a:ed:fe:88:05:f7:88:d5:e8:f9: c5:c1:df:c2:c1:c6:e0:98:62:83:af:96:c5:93:29:67:13:b9: ea:19:0a:30 -----BEGIN CERTIFICATE----- MIIGljCCBX6gAwIBAgIUAyE5grilUfiog0PhC97jGgpz/w0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAzMjcxMzIwMDFaFw0yNzAzMjYxMzI1MDFaMDMxMTAvBgNV BAMTKDRBRTJBMzZFMDhGQTA0MENBM0E3NzgzQjQxRkVGODY3Q0VGRkNDMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXR2RUKXFZADG3u5h++/HsmY+S 7bRE/GPbAehHL0jB2+scib1xnBm1bm7oQryD68G6Qnm5y4zGYeGyisyOY11qi9dc rpNjacyqCO+RuXJGjeoFgo8e4jLrri/2a0vaa6pkPj6AgmsqLtUp5xM9wQlXjI43 iuB93BQTH1Xbp2mkGo4lCPnFTqBrRhrAy3nh5BcXy4/qc8G7AaA4xphnOmyxejdF +UvdGHFJIhkjAyY306JBG/o/W5D8uiRJ7nKf2g3u7khqQg5Bf4NQWuACOnQXgHVT 1HhcOx+eRC4r9OMp/U0ae4xR1EHKkR42JqPEb+endt70Ja9/egyfBP4Ri2THAgMB AAGjggOgMIIDnDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRK4qNuCPoEDKOn eDtB/vhnzv/MBjAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQUVGODkwRkVEMEQxNEVERjhBNkQyQzVG NUVFMDVFQ0M3QUJENEM2MkJFOUEwMDk0QTZGMTc4MTE4OUIyREE5My8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9BRUY4OTBGRUQwRDE0RURGOEE2RDJDNUY1RUUwNUVDQzdBQkQ0QzYyQkU5 QTAwOTRBNkYxNzgxMTg5QjJEQTkzLzAvNEFFMkEzNkUwOEZBMDQwQ0EzQTc3ODNC NDFGRUY4NjdDRUZGQ0MwNi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCugCcMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQV+jANBgkqhkiG9w0BAQsFAAOCAQEAWMNl2Dg4 d4ZdytuR+3ndYopBKeE+N0tYNzIEag9dPkVPUUz+A2JjHpgh+TJJ/HDKQqs3h5Ji EVLPvbTze1mA80BLtX4u6qRA6Ns1wfAKew5JsZF2o7aNE28oJgtVDpF22W4uurlb qUP3HAod/R8Ui5HF/Cxz0eCQjUHdLKFLJekgBdLnGcfZIYfFy+Dx96kjQUwDnJsg AeWaAfthb53IZ5SbTBuGcGoUnNfGoTjONFOiBlHGw8bSwOuy4D3ZdhnhcPPOoVmQ PN3AywWLAU8XJNEWASlSGL+86ubxr8kVES867f6IBfeI1ej5xcHfwsHG4Jhig6+W xZMpZxO56hkKMA== -----END CERTIFICATE-----Generated at Fri Apr 17 19:09:32 2026 by rpki-client