$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54AE4F9093F43A67A2FE1341FD2490AA6C8A6CF9.cer File: 54AE4F9093F43A67A2FE1341FD2490AA6C8A6CF9.cer (raw, json) Hash identifier: r02UoHf2Pv5s/GuWM/BJ+e13xLlS5/1ITyAyJI4RmSY= Subject key identifier: 54:AE:4F:90:93:F4:3A:67:A2:FE:13:41:FD:24:90:AA:6C:8A:6C:F9 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 43CD5EBD2409F5F48D007E177A6A808C420C478B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/1ABD464BCCC74022684F43D3B94574C085E50A4166D4212577E20B525104EA39/0/54AE4F9093F43A67A2FE1341FD2490AA6C8A6CF9.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/1ABD464BCCC74022684F43D3B94574C085E50A4166D4212577E20B525104EA39/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 27 Jan 2026 17:50:46 +0000 Certificate not after: Tue 26 Jan 2027 17:55:46 +0000 Subordinate resources: AS: 272902 IP: 190.110.240.0/24 IP: 200.123.54.0/24 IP: 2803:d690::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 05 Mar 2026 11:41:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:cd:5e:bd:24:09:f5:f4:8d:00:7e:17:7a:6a:80:8c:42:0c:47:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 27 17:50:46 2026 GMT Not After : Jan 26 17:55:46 2027 GMT Subject: CN=54AE4F9093F43A67A2FE1341FD2490AA6C8A6CF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:25:90:08:96:6b:c0:1d:04:f4:e0:d9:ac:de: ba:6d:1e:3c:4d:9f:44:b7:16:4e:4f:a0:76:54:1e: 44:b6:f3:e3:6a:72:1e:07:92:5c:5a:c4:0a:05:36: 0b:ef:93:5c:0b:4c:8d:98:fb:9b:a7:ce:2c:f7:fe: 08:3f:30:84:aa:d1:7c:f2:c5:fb:f1:0d:be:55:8f: ef:cb:19:90:2b:31:03:aa:4f:85:f2:04:2e:2e:64: 50:10:0d:db:60:38:b1:df:d2:72:42:ef:39:be:ae: a8:e5:9e:8f:9e:eb:d4:38:30:c9:c5:ac:14:e6:ab: e9:f0:90:89:d3:48:1b:7f:99:38:f3:fd:a9:b5:96: 72:fa:57:78:fa:26:4d:69:e0:68:9a:6c:76:80:97: f3:05:52:0d:ee:9a:d4:ca:5b:da:54:55:dc:38:0c: c2:49:79:92:3b:44:42:f9:8f:f9:84:86:94:f6:39: 27:ac:c0:e2:df:13:a0:ea:d6:bd:95:25:9a:11:12: 32:39:a4:8a:38:9a:1d:9c:91:18:3e:29:b9:a3:d4: 61:b7:9d:78:7b:03:3c:6e:d6:38:df:d8:c6:fd:85: 71:f6:33:a0:fd:33:74:96:56:5c:4c:8a:bf:ee:bd: cd:6e:3a:06:df:a2:9a:1e:b8:4a:85:42:ef:06:65: af:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 54:AE:4F:90:93:F4:3A:67:A2:FE:13:41:FD:24:90:AA:6C:8A:6C:F9 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1ABD464BCCC74022684F43D3B94574C085E50A4166D4212577E20B525104EA39/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1ABD464BCCC74022684F43D3B94574C085E50A4166D4212577E20B525104EA39/0/54AE4F9093F43A67A2FE1341FD2490AA6C8A6CF9.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 190.110.240.0/24 200.123.54.0/24 IPv6: 2803:d690::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 272902 Signature Algorithm: sha256WithRSAEncryption 86:b8:ba:43:4e:83:8e:9e:59:d1:a5:b1:0d:4b:d3:b1:dd:75: 68:b1:e2:f6:03:4a:6f:61:08:eb:40:07:09:86:2c:a9:fc:9a: 5c:e4:fc:b2:a9:f7:74:e3:20:ed:35:62:29:04:0d:2a:ec:44: bc:70:f1:c9:48:ef:1b:85:fd:4c:41:08:cd:3f:e5:40:83:23: 4a:70:ea:26:89:1f:77:36:d2:25:5d:c4:0c:54:61:10:4c:9d: 4c:23:85:dc:3b:4f:b2:c4:d0:82:d1:4b:b0:8c:9b:60:6b:75: 3a:6f:4a:fd:b3:9d:ae:58:4e:b7:ed:2b:bd:2e:11:1b:29:4e: 73:28:1f:e7:ff:4f:0d:ce:8a:0e:f7:6b:3a:23:38:dc:33:6d: 17:0e:a8:0c:68:48:71:e7:b5:e5:1b:82:41:91:f0:3a:4d:06: 28:6c:cd:6a:31:71:88:90:1d:79:4a:39:6a:dd:d2:f7:75:89: 65:57:90:4d:d7:ce:1a:d8:4b:e5:1e:b0:d4:46:98:05:ad:14: 17:31:6a:63:9c:13:ab:b8:fd:d1:a5:2c:fc:68:e1:75:ab:df: d9:1f:01:0e:cc:54:5f:f0:25:ed:a7:24:ab:f8:67:65:d7:d7: 8b:d8:99:f0:ca:03:f4:c9:60:fd:93:5c:21:3e:91:a9:05:9b: ed:66:d3:c8 -----BEGIN CERTIFICATE----- MIIGqzCCBZOgAwIBAgIUQ81evSQJ9fSNAH4XemqAjEIMR4swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjcxNzUwNDZaFw0yNzAxMjYxNzU1NDZaMDMxMTAvBgNV BAMTKDU0QUU0RjkwOTNGNDNBNjdBMkZFMTM0MUZEMjQ5MEFBNkM4QTZDRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFJZAIlmvAHQT04Nms3rptHjxN n0S3Fk5PoHZUHkS28+Nqch4HklxaxAoFNgvvk1wLTI2Y+5unziz3/gg/MISq0Xzy xfvxDb5Vj+/LGZArMQOqT4XyBC4uZFAQDdtgOLHf0nJC7zm+rqjlno+e69Q4MMnF rBTmq+nwkInTSBt/mTjz/am1lnL6V3j6Jk1p4GiabHaAl/MFUg3umtTKW9pUVdw4 DMJJeZI7REL5j/mEhpT2OSeswOLfE6Dq1r2VJZoREjI5pIo4mh2ckRg+Kbmj1GG3 nXh7Azxu1jjf2Mb9hXH2M6D9M3SWVlxMir/uvc1uOgbfopoeuEqFQu8GZa//AgMB AAGjggO1MIIDsTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRUrk+Qk/Q6Z6L+ E0H9JJCqbIps+TAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMUFCRDQ2NEJDQ0M3NDAyMjY4NEY0M0Qz Qjk0NTc0QzA4NUU1MEE0MTY2RDQyMTI1NzdFMjBCNTI1MTA0RUEzOS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8xQUJENDY0QkNDQzc0MDIyNjg0RjQzRDNCOTQ1NzRDMDg1RTUwQTQxNjZE NDIxMjU3N0UyMEI1MjUxMDRFQTM5LzAvNTRBRTRGOTA5M0Y0M0E2N0EyRkUxMzQx RkQyNDkwQUE2QzhBNkNGOS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAvm7wAwQAyHs2 MA0EAgACMAcDBQAoA9aQMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQqBjANBgkq hkiG9w0BAQsFAAOCAQEAhri6Q06Djp5Z0aWxDUvTsd11aLHi9gNKb2EI60AHCYYs qfyaXOT8sqn3dOMg7TViKQQNKuxEvHDxyUjvG4X9TEEIzT/lQIMjSnDqJokfdzbS JV3EDFRhEEydTCOF3DtPssTQgtFLsIybYGt1Om9K/bOdrlhOt+0rvS4RGylOcygf 5/9PDc6KDvdrOiM43DNtFw6oDGhIcee15RuCQZHwOk0GKGzNajFxiJAdeUo5at3S 93WJZVeQTdfOGthL5R6w1EaYBa0UFzFqY5wTq7j90aUs/Gjhdavf2R8BDsxUX/Al 7ackq/hnZdfXi9iZ8MoD9Mlg/ZNcIT6RqQWb7WbTyA== -----END CERTIFICATE-----Generated at Mon Mar 2 11:47:56 2026 by rpki-client