$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/53D4F0BC875DC3586A091B51BD4FE92B29066E9B.cer File: 53D4F0BC875DC3586A091B51BD4FE92B29066E9B.cer (raw, json) Hash identifier: 8vrPLCfAw2XlquxhfIDoa1/NpnMgI6/lqlt6r+BCGOU= Subject key identifier: 53:D4:F0:BC:87:5D:C3:58:6A:09:1B:51:BD:4F:E9:2B:29:06:6E:9B Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 193DE7354D590EBC7518D88BDF004737AFFDED17 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/28B471F53C5849AB7C08BDF79B5BA3A8C5117A10E1B25C07E917356BE311F2CB/0/53D4F0BC875DC3586A091B51BD4FE92B29066E9B.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/28B471F53C5849AB7C08BDF79B5BA3A8C5117A10E1B25C07E917356BE311F2CB/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 16:16:13 +0000 Certificate not after: Wed 27 Jan 2027 16:21:13 +0000 Subordinate resources: AS: 262226 IP: 200.115.181.0/24 IP: 2801:0:340::/48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:3d:e7:35:4d:59:0e:bc:75:18:d8:8b:df:00:47:37:af:fd:ed:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 16:16:13 2026 GMT Not After : Jan 27 16:21:13 2027 GMT Subject: CN=53D4F0BC875DC3586A091B51BD4FE92B29066E9B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ef:2c:d3:17:0b:3d:ed:20:f3:40:eb:cc:0e: f7:61:3e:91:e3:23:f7:4c:e6:30:f6:fa:5c:19:ca: 01:37:b5:08:bc:83:47:e7:07:56:f5:9e:20:93:0e: 34:69:45:67:38:7c:2b:07:55:c0:75:87:a9:a5:64: e5:c5:cf:58:3d:df:84:15:1a:c5:a8:78:2b:0b:66: 23:e8:d8:ce:a4:43:97:31:4b:fc:ec:e2:37:4e:31: 37:fd:7d:88:03:9e:de:57:29:be:ed:c6:b2:28:94: 3f:93:5b:e1:69:04:b8:35:12:20:99:60:1a:bc:57: 10:69:d0:80:13:dd:82:e5:31:d4:f1:8d:1a:02:02: 84:c7:e2:59:0e:e6:bd:b4:bd:ab:91:fc:01:4f:bd: 33:25:34:12:51:84:6d:09:83:9d:3b:fc:aa:21:80: d0:ec:12:97:77:8e:6d:c5:ba:06:df:f0:ce:e8:ee: 93:f8:46:43:b8:c4:51:de:d2:e7:eb:de:b6:2f:04: 67:f2:64:cb:64:42:f9:98:35:55:39:20:8f:3f:51: ed:32:d3:02:44:f8:46:c6:d3:cd:7d:74:0d:39:f8: 58:18:2a:31:a3:ec:65:3b:aa:12:75:8a:10:28:ea: 11:7f:e6:8f:24:ce:61:75:8f:a9:97:43:89:d2:25: b2:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 53:D4:F0:BC:87:5D:C3:58:6A:09:1B:51:BD:4F:E9:2B:29:06:6E:9B X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/28B471F53C5849AB7C08BDF79B5BA3A8C5117A10E1B25C07E917356BE311F2CB/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/28B471F53C5849AB7C08BDF79B5BA3A8C5117A10E1B25C07E917356BE311F2CB/0/53D4F0BC875DC3586A091B51BD4FE92B29066E9B.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.115.181.0/24 IPv6: 2801:0:340::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 262226 Signature Algorithm: sha256WithRSAEncryption 27:58:3a:01:0c:c2:2f:df:7b:a9:1d:3e:97:e2:2b:33:eb:2f: ea:4d:d1:0e:1c:07:56:9f:2b:bb:de:93:7e:6a:10:a3:92:e0: f9:b5:f0:d3:5f:a6:29:82:bf:9c:a0:f2:ab:66:1c:ae:24:c2: 74:29:c7:82:71:25:57:74:d6:0c:ed:b9:64:7b:d3:ac:e1:5f: e7:bc:90:7a:05:20:28:e8:29:52:2e:41:14:a7:d5:1e:70:a3: fe:02:2a:22:ad:24:a4:3f:91:08:2d:2b:28:1e:67:63:a9:b0: 66:9e:5f:bd:c9:ac:a0:b5:19:1a:d3:29:98:c4:d4:89:f0:ce: 06:8c:3e:ef:fe:b6:89:c7:13:91:1a:1d:d6:31:ef:0b:3b:14: 55:8a:2b:ad:85:0a:e7:e2:58:25:d1:d3:62:84:aa:f1:24:5d: d4:fc:c6:d7:c1:b8:b0:70:6b:e2:35:97:96:6c:08:f4:b6:6c: 89:11:31:dc:95:23:d6:cc:b0:f9:82:36:10:bd:02:5b:ef:2d: cc:70:54:c1:7e:50:48:03:15:69:b6:3c:f0:f5:23:9c:c7:a7: d7:dd:38:07:5b:3e:d2:39:33:53:b3:9a:ff:d4:e3:ce:cd:fe: fa:27:c0:5b:f0:a4:29:0f:17:22:47:ef:4e:d1:16:d4:c2:75: 2b:69:c0:81 -----BEGIN CERTIFICATE----- MIIGpzCCBY+gAwIBAgIUGT3nNU1ZDrx1GNiL3wBHN6/97RcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgxNjE2MTNaFw0yNzAxMjcxNjIxMTNaMDMxMTAvBgNV BAMTKDUzRDRGMEJDODc1REMzNTg2QTA5MUI1MUJENEZFOTJCMjkwNjZFOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw7yzTFws97SDzQOvMDvdhPpHj I/dM5jD2+lwZygE3tQi8g0fnB1b1niCTDjRpRWc4fCsHVcB1h6mlZOXFz1g934QV GsWoeCsLZiPo2M6kQ5cxS/zs4jdOMTf9fYgDnt5XKb7txrIolD+TW+FpBLg1EiCZ YBq8VxBp0IAT3YLlMdTxjRoCAoTH4lkO5r20vauR/AFPvTMlNBJRhG0Jg507/Koh gNDsEpd3jm3Fugbf8M7o7pP4RkO4xFHe0ufr3rYvBGfyZMtkQvmYNVU5II8/Ue0y 0wJE+EbG0819dA05+FgYKjGj7GU7qhJ1ihAo6hF/5o8kzmF1j6mXQ4nSJbLrAgMB AAGjggOxMIIDrTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRT1PC8h13DWGoJ G1G9T+krKQZumzAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMjhCNDcxRjUzQzU4NDlBQjdDMDhCREY3 OUI1QkEzQThDNTExN0ExMEUxQjI1QzA3RTkxNzM1NkJFMzExRjJDQi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8yOEI0NzFGNTNDNTg0OUFCN0MwOEJERjc5QjVCQTNBOEM1MTE3QTEwRTFC MjVDMDdFOTE3MzU2QkUzMTFGMkNCLzAvNTNENEYwQkM4NzVEQzM1ODZBMDkxQjUx QkQ0RkU5MkIyOTA2NkU5Qi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAyHO1MA8EAgAC MAkDBwAoAQAAA0AwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBABSMA0GCSqGSIb3 DQEBCwUAA4IBAQAnWDoBDMIv33upHT6X4isz6y/qTdEOHAdWnyu73pN+ahCjkuD5 tfDTX6Ypgr+coPKrZhyuJMJ0KceCcSVXdNYM7blke9Os4V/nvJB6BSAo6ClSLkEU p9UecKP+AioirSSkP5EILSsoHmdjqbBmnl+9yaygtRka0ymYxNSJ8M4GjD7v/raJ xxORGh3WMe8LOxRViiuthQrn4lgl0dNihKrxJF3U/MbXwbiwcGviNZeWbAj0tmyJ ETHclSPWzLD5gjYQvQJb7y3McFTBflBIAxVptjzw9SOcx6fX3TgHWz7SOTNTs5r/ 1OPOzf76J8Bb8KQpDxciR+9O0RbUwnUracCB -----END CERTIFICATE-----Generated at Mon Mar 2 17:17:17 2026 by rpki-client