$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/591291A5B3618648A8E1B8E7D3149BC8D25D71BD.cer File: 591291A5B3618648A8E1B8E7D3149BC8D25D71BD.cer (raw, json) Hash identifier: Qsp8ei5nz1QE8pUzd8hbiZg7Wbqle6AVGrK2mTGXcPQ= Subject key identifier: 59:12:91:A5:B3:61:86:48:A8:E1:B8:E7:D3:14:9B:C8:D2:5D:71:BD Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 177096F87C4ED701DC13CD0082149EDAA4B3314A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/21BDDA317AA5DF9D576425534068A2B336CEB5CD7B5DCF255EADC3946F3C8250/0/591291A5B3618648A8E1B8E7D3149BC8D25D71BD.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/21BDDA317AA5DF9D576425534068A2B336CEB5CD7B5DCF255EADC3946F3C8250/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Thu 29 Jan 2026 02:55:30 +0000 Certificate not after: Thu 28 Jan 2027 03:00:30 +0000 Subordinate resources: AS: 262932 IP: 170.150.64.0/22 IP: 191.103.96.0/20 IP: 2803:ba80::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:70:96:f8:7c:4e:d7:01:dc:13:cd:00:82:14:9e:da:a4:b3:31:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 29 02:55:30 2026 GMT Not After : Jan 28 03:00:30 2027 GMT Subject: CN=591291A5B3618648A8E1B8E7D3149BC8D25D71BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:3b:a7:ad:e7:39:e7:c6:c7:da:07:9b:43:d8: 37:4e:db:e5:53:d9:d2:47:f5:9a:e2:73:e6:94:ec: 37:a4:10:d6:20:35:81:2a:88:2c:3c:5f:13:d0:4d: 32:f6:aa:32:a6:ad:ce:ce:81:1e:2a:41:47:f2:b0: 89:d1:b8:d5:4e:4a:63:fa:ce:2e:44:c6:74:3b:5c: b3:6e:e8:08:14:d4:7c:85:2d:3e:75:36:7c:57:88: d5:9e:9e:7c:f9:de:d8:62:17:69:10:6f:80:00:1b: 50:d5:02:46:32:80:cf:08:ac:7a:32:27:32:6d:77: 1d:6a:6f:3c:c0:e1:df:ef:35:c0:ec:bb:de:40:8f: cb:1b:45:0f:e6:d4:69:0e:ed:36:7b:c2:af:04:ab: 9d:1c:de:bd:a7:2e:f6:ed:76:64:ad:fa:53:fa:20: 48:cc:19:bc:df:e9:b5:14:61:8f:1a:0f:54:f8:04: 52:b7:3c:5f:e2:0a:44:14:06:a6:2d:ec:af:14:2e: 65:6d:4c:0c:75:70:a8:9d:c7:75:51:00:cb:05:cd: dc:bb:ac:c1:5e:92:ac:09:1a:10:4c:cf:ad:94:16: fe:13:9f:89:2f:77:02:fe:6c:ee:a1:c1:a5:54:b3: 5c:95:c5:ff:17:84:89:61:2f:83:76:93:c5:af:86: f7:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 59:12:91:A5:B3:61:86:48:A8:E1:B8:E7:D3:14:9B:C8:D2:5D:71:BD X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/21BDDA317AA5DF9D576425534068A2B336CEB5CD7B5DCF255EADC3946F3C8250/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/21BDDA317AA5DF9D576425534068A2B336CEB5CD7B5DCF255EADC3946F3C8250/0/591291A5B3618648A8E1B8E7D3149BC8D25D71BD.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.150.64.0/22 191.103.96.0/20 IPv6: 2803:ba80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 262932 Signature Algorithm: sha256WithRSAEncryption 1f:ee:ce:ce:87:5e:28:5c:a2:ad:3e:2e:03:ee:ab:02:38:c7: 6d:52:e8:c4:dc:32:1c:98:9d:95:ca:47:cb:06:d8:9b:7e:10: 30:60:75:5b:eb:60:1a:62:a6:11:b7:46:89:f3:a5:b9:a5:75: 65:c5:f9:0f:3a:18:de:65:e6:58:9f:32:2d:19:31:f9:6f:78: 13:c0:92:63:f0:9b:49:a6:55:22:5a:72:2d:b0:4b:cc:6e:bf: 92:3f:a9:30:78:43:56:36:cb:dc:f0:de:99:fc:34:78:c3:12: f8:60:97:72:da:a2:de:69:1c:f2:0f:65:5d:bb:e7:ce:28:b9: 7e:29:29:f1:96:be:c2:d8:71:55:90:2c:07:aa:99:42:9a:71: 83:c2:ad:8a:f7:0a:d7:6e:4a:24:26:55:9c:1d:27:e5:08:71: 53:15:c3:2a:dd:bc:b9:fa:3c:e7:42:65:77:ab:71:51:37:fc: d2:2a:95:33:03:5a:7a:43:8f:ef:c2:b7:cb:77:9a:b7:72:6c: b3:42:ce:59:83:b7:b7:76:d6:32:01:a8:8b:2f:75:a6:d5:28: 15:66:fa:76:bb:74:c0:83:2e:08:d8:78:2b:a1:e5:e9:21:e9: 4f:0c:fb:40:50:fb:d7:a3:4b:fe:89:d7:54:55:ff:74:29:fb: 2d:cd:9e:03 -----BEGIN CERTIFICATE----- MIIGqzCCBZOgAwIBAgIUF3CW+HxO1wHcE80AghSe2qSzMUowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjkwMjU1MzBaFw0yNzAxMjgwMzAwMzBaMDMxMTAvBgNV BAMTKDU5MTI5MUE1QjM2MTg2NDhBOEUxQjhFN0QzMTQ5QkM4RDI1RDcxQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwO6et5znnxsfaB5tD2DdO2+VT 2dJH9Zric+aU7DekENYgNYEqiCw8XxPQTTL2qjKmrc7OgR4qQUfysInRuNVOSmP6 zi5ExnQ7XLNu6AgU1HyFLT51NnxXiNWennz53thiF2kQb4AAG1DVAkYygM8IrHoy JzJtdx1qbzzA4d/vNcDsu95Aj8sbRQ/m1GkO7TZ7wq8Eq50c3r2nLvbtdmSt+lP6 IEjMGbzf6bUUYY8aD1T4BFK3PF/iCkQUBqYt7K8ULmVtTAx1cKidx3VRAMsFzdy7 rMFekqwJGhBMz62UFv4Tn4kvdwL+bO6hwaVUs1yVxf8XhIlhL4N2k8WvhvexAgMB AAGjggO1MIIDsTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRZEpGls2GGSKjh uOfTFJvI0l1xvTAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMjFCRERBMzE3QUE1REY5RDU3NjQyNTUz NDA2OEEyQjMzNkNFQjVDRDdCNURDRjI1NUVBREMzOTQ2RjNDODI1MC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8yMUJEREEzMTdBQTVERjlENTc2NDI1NTM0MDY4QTJCMzM2Q0VCNUNEN0I1 RENGMjU1RUFEQzM5NDZGM0M4MjUwLzAvNTkxMjkxQTVCMzYxODY0OEE4RTFCOEU3 RDMxNDlCQzhEMjVENzFCRC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCqpZAAwQEv2dg MA0EAgACMAcDBQAoA7qAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQDFDANBgkq hkiG9w0BAQsFAAOCAQEAH+7OzodeKFyirT4uA+6rAjjHbVLoxNwyHJidlcpHywbY m34QMGB1W+tgGmKmEbdGifOluaV1ZcX5DzoY3mXmWJ8yLRkx+W94E8CSY/CbSaZV IlpyLbBLzG6/kj+pMHhDVjbL3PDemfw0eMMS+GCXctqi3mkc8g9lXbvnzii5fikp 8Za+wthxVZAsB6qZQppxg8KtivcK125KJCZVnB0n5QhxUxXDKt28ufo850Jld6tx UTf80iqVMwNaekOP78K3y3eat3Jss0LOWYO3t3bWMgGoiy91ptUoFWb6drt0wIMu CNh4K6Hl6SHpTwz7QFD716NL/onXVFX/dCn7Lc2eAw== -----END CERTIFICATE-----Generated at Tue Mar 3 00:42:47 2026 by rpki-client