$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4BEC5F5834A2EB23022E1C752ED30EC1C2C168C6.cer File: 4BEC5F5834A2EB23022E1C752ED30EC1C2C168C6.cer (raw, json) Hash identifier: kcqxMLMbTikhVjLKlsYWM2KL6LmrTwuKkON+t8ELkhE= Subject key identifier: 4B:EC:5F:58:34:A2:EB:23:02:2E:1C:75:2E:D3:0E:C1:C2:C1:68:C6 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 7FFDFC2F254888B31AEFC3F38E0583527835E504 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/E7ED879457F684DC8C9E0C0B0C544D8F11500FB34E29EE98878412E241372045/0/4BEC5F5834A2EB23022E1C752ED30EC1C2C168C6.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/E7ED879457F684DC8C9E0C0B0C544D8F11500FB34E29EE98878412E241372045/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 27 Jan 2026 20:37:37 +0000 Certificate not after: Tue 26 Jan 2027 20:42:37 +0000 Subordinate resources: AS: 270053 IP: 179.191.0.0/22 IP: 2803:9de0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 05 Mar 2026 11:41:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:fd:fc:2f:25:48:88:b3:1a:ef:c3:f3:8e:05:83:52:78:35:e5:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 27 20:37:37 2026 GMT Not After : Jan 26 20:42:37 2027 GMT Subject: CN=4BEC5F5834A2EB23022E1C752ED30EC1C2C168C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:c7:ec:cd:e4:0c:33:ba:ca:17:c5:e2:a6:92: 7a:38:15:aa:de:0d:6a:45:96:9c:0a:fc:1c:d3:0f: 52:be:ed:24:a2:85:70:d3:56:04:2e:18:aa:3b:1c: 7d:46:ae:16:48:a0:52:23:80:23:ef:d5:db:f8:fa: f2:93:ee:7b:2b:ec:de:ce:8a:e4:41:3c:65:10:b3: d9:80:81:78:53:ee:b8:df:1d:77:13:0f:5b:54:b3: 2a:2b:cf:a7:80:d3:c0:eb:36:61:30:e5:93:c4:5e: 34:a6:06:ce:db:3b:e9:20:c3:ee:7c:d1:59:53:ef: aa:92:7d:71:d8:d8:12:55:a1:47:14:b4:08:36:ed: 4c:47:19:a0:20:90:3a:20:5d:1b:a1:96:43:73:f1: 23:92:0e:da:91:fe:c5:46:14:fa:6b:3b:57:16:0b: 02:39:03:d5:f4:65:88:d6:59:71:3f:93:31:30:8d: 20:99:43:52:d3:4c:bc:38:08:a9:b7:8d:14:e3:16: b5:32:c5:b1:26:e0:d7:23:7b:dc:7e:5a:23:33:ad: 70:59:39:f8:1c:f2:37:e7:c1:d6:65:ee:0c:42:7d: 4e:3b:1b:7a:5f:8f:6f:79:41:6a:62:f3:84:72:28: 17:f3:99:9f:bd:dd:f9:da:6d:39:0f:f9:02:2b:b8: aa:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4B:EC:5F:58:34:A2:EB:23:02:2E:1C:75:2E:D3:0E:C1:C2:C1:68:C6 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/E7ED879457F684DC8C9E0C0B0C544D8F11500FB34E29EE98878412E241372045/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/E7ED879457F684DC8C9E0C0B0C544D8F11500FB34E29EE98878412E241372045/0/4BEC5F5834A2EB23022E1C752ED30EC1C2C168C6.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 179.191.0.0/22 IPv6: 2803:9de0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 270053 Signature Algorithm: sha256WithRSAEncryption 5c:6d:dc:d5:1f:d5:d8:0c:01:60:11:a5:26:6b:d9:12:fa:1a: 88:a9:e7:89:05:93:e2:eb:b0:d5:b4:cb:e7:81:f4:84:b7:55: 5d:cc:b8:1f:db:f6:8c:7c:3e:ba:45:84:f5:a4:69:79:bc:c3: 10:b2:1c:ae:bb:7d:fa:58:25:cc:e3:e7:fa:49:96:e1:74:06: d9:b3:c9:25:61:8f:be:16:0d:4f:0c:af:9e:56:14:6b:b9:09: 6d:f2:d7:2e:15:52:5a:ef:7a:47:f0:f1:5e:60:f4:47:01:b0: e6:d4:7a:81:7f:fe:10:a3:c7:65:d3:36:e8:e6:4c:2b:a5:32: d6:fb:79:ed:88:46:2a:5e:96:ae:b0:a3:df:b7:52:0f:1d:06: 71:d2:b8:1c:72:a3:66:c4:8a:b8:bf:29:37:47:01:8e:7a:02: 74:e8:1a:2e:8e:57:a8:3a:75:d7:ae:6d:e6:a2:4e:fd:f2:1e: 1a:f4:a4:79:9e:0a:9a:b2:35:65:85:c7:17:5a:d3:33:77:d9: d8:df:55:ab:4e:fc:5a:bb:36:6c:24:2c:bf:69:e4:5e:45:f1: 4f:b9:8f:59:5a:d2:81:cd:b3:d8:af:b7:d7:65:fa:20:b8:94: 2e:a7:98:8c:b4:3e:a6:63:03:27:b5:c8:ea:ed:87:61:73:30: 76:45:4a:a5 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUf/38LyVIiLMa78PzjgWDUng15QQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjcyMDM3MzdaFw0yNzAxMjYyMDQyMzdaMDMxMTAvBgNV BAMTKDRCRUM1RjU4MzRBMkVCMjMwMjJFMUM3NTJFRDMwRUMxQzJDMTY4QzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfx+zN5AwzusoXxeKmkno4Fare DWpFlpwK/BzTD1K+7SSihXDTVgQuGKo7HH1GrhZIoFIjgCPv1dv4+vKT7nsr7N7O iuRBPGUQs9mAgXhT7rjfHXcTD1tUsyorz6eA08DrNmEw5ZPEXjSmBs7bO+kgw+58 0VlT76qSfXHY2BJVoUcUtAg27UxHGaAgkDogXRuhlkNz8SOSDtqR/sVGFPprO1cW CwI5A9X0ZYjWWXE/kzEwjSCZQ1LTTLw4CKm3jRTjFrUyxbEm4Ncje9x+WiMzrXBZ Ofgc8jfnwdZl7gxCfU47G3pfj295QWpi84RyKBfzmZ+93fnabTkP+QIruKonAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRL7F9YNKLrIwIu HHUu0w7BwsFoxjAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTdFRDg3OTQ1N0Y2ODREQzhDOUUwQzBC MEM1NDREOEYxMTUwMEZCMzRFMjlFRTk4ODc4NDEyRTI0MTM3MjA0NS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9FN0VEODc5NDU3RjY4NERDOEM5RTBDMEIwQzU0NEQ4RjExNTAwRkIzNEUy OUVFOTg4Nzg0MTJFMjQxMzcyMDQ1LzAvNEJFQzVGNTgzNEEyRUIyMzAyMkUxQzc1 MkVEMzBFQzFDMkMxNjhDNi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCs78AMA0EAgAC MAcDBQAoA53gMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQe5TANBgkqhkiG9w0B AQsFAAOCAQEAXG3c1R/V2AwBYBGlJmvZEvoaiKnniQWT4uuw1bTL54H0hLdVXcy4 H9v2jHw+ukWE9aRpebzDELIcrrt9+lglzOPn+kmW4XQG2bPJJWGPvhYNTwyvnlYU a7kJbfLXLhVSWu96R/DxXmD0RwGw5tR6gX/+EKPHZdM26OZMK6Uy1vt57YhGKl6W rrCj37dSDx0GcdK4HHKjZsSKuL8pN0cBjnoCdOgaLo5XqDp1165t5qJO/fIeGvSk eZ4KmrI1ZYXHF1rTM3fZ2N9Vq078Wrs2bCQsv2nkXkXxT7mPWVrSgc2z2K+312X6 ILiULqeYjLQ+pmMDJ7XI6u2HYXMwdkVKpQ== -----END CERTIFICATE-----Generated at Mon Mar 2 09:40:52 2026 by rpki-client