$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/596D2EDA6ECC42DC0132B3F7028F4D838CA0BF5F.cer File: 596D2EDA6ECC42DC0132B3F7028F4D838CA0BF5F.cer (raw, json) Hash identifier: dg3JRZtWMpP6fYrMuwIC9Ft76kZOPXWskdlsdnFHnaM= Subject key identifier: 59:6D:2E:DA:6E:CC:42:DC:01:32:B3:F7:02:8F:4D:83:8C:A0:BF:5F Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 5F50AA2EDF3F1B40732B9D9E02CEDAEB230361B7 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/9DF9937177B1EC160552C5AD2FA05E41CEA78C00D571BB4C755834E4C0DCD487/0/596D2EDA6ECC42DC0132B3F7028F4D838CA0BF5F.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/9DF9937177B1EC160552C5AD2FA05E41CEA78C00D571BB4C755834E4C0DCD487/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 14:46:46 +0000 Certificate not after: Wed 27 Jan 2027 14:51:46 +0000 Subordinate resources: AS: 265758 IP: 131.196.180.0/22 IP: 2803:5bc0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:50:aa:2e:df:3f:1b:40:73:2b:9d:9e:02:ce:da:eb:23:03:61:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 14:46:46 2026 GMT Not After : Jan 27 14:51:46 2027 GMT Subject: CN=596D2EDA6ECC42DC0132B3F7028F4D838CA0BF5F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:0d:a3:bf:c2:cc:80:43:e6:52:b2:9f:38:ba: 48:22:f6:5a:e6:ae:3f:3f:72:64:8c:b5:7e:9e:87: 91:8b:83:69:0f:3d:43:d8:1c:af:91:16:f3:75:c4: c7:9d:ee:3d:ca:20:eb:ab:15:66:c3:6f:a3:c1:8c: 8b:88:a7:44:76:7d:e5:92:e3:c8:15:12:db:33:10: 02:fe:7e:ca:26:b1:cb:0b:14:f8:6a:5c:f4:b6:49: a6:46:19:cd:87:e5:d2:c3:88:c1:64:8b:1a:d4:fe: c4:00:21:b3:66:96:2e:9d:b1:13:e0:95:ce:9e:a4: 58:e4:15:d4:d1:9f:b3:c8:92:c8:cf:47:74:32:7e: 89:61:bb:db:1b:21:f3:d6:49:8c:e5:3f:5e:9c:83: 69:0f:83:d3:e2:fc:8c:1f:11:65:be:37:55:02:82: 20:db:d3:05:25:65:71:28:7b:0e:03:ac:a7:ef:fb: e3:9b:3f:cc:90:ed:63:0f:c4:5d:7d:e2:a4:98:0f: 5f:b4:5a:38:96:1e:26:8a:a0:fe:d3:23:a2:4c:2d: 3b:db:b6:76:c6:9f:15:89:d7:06:3f:17:13:4a:01: c0:43:21:8b:dc:1b:2c:d6:2a:f6:95:05:a6:9d:4f: dd:fe:c7:37:5a:ee:ad:3b:92:9b:96:e3:95:80:9e: b6:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 59:6D:2E:DA:6E:CC:42:DC:01:32:B3:F7:02:8F:4D:83:8C:A0:BF:5F X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/9DF9937177B1EC160552C5AD2FA05E41CEA78C00D571BB4C755834E4C0DCD487/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/9DF9937177B1EC160552C5AD2FA05E41CEA78C00D571BB4C755834E4C0DCD487/0/596D2EDA6ECC42DC0132B3F7028F4D838CA0BF5F.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.196.180.0/22 IPv6: 2803:5bc0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265758 Signature Algorithm: sha256WithRSAEncryption 67:3d:4b:8b:03:c4:c6:d9:91:a8:ff:92:23:66:6c:cf:ad:ec: 56:d7:cf:fc:67:27:24:da:e8:15:c1:4b:7c:e7:66:cb:1a:85: 3e:a2:03:de:9c:d7:64:32:a4:e7:a2:10:a0:0b:55:35:97:eb: 79:ae:5c:39:34:4c:c9:2b:d0:5f:6e:a4:7a:14:d0:17:fe:80: 2b:ba:a6:ec:4f:ad:6d:6d:2e:25:2e:10:f9:9e:99:db:1a:0a: db:79:20:62:65:dc:32:89:77:e6:8c:ab:bd:ff:07:15:11:23: 60:f0:83:ab:9c:e0:2c:68:60:03:ad:82:f2:d0:02:9f:b0:55: da:b3:4f:f2:b5:22:31:8c:bb:e7:91:05:53:c9:91:47:5b:6f: 46:17:98:0a:3b:5f:d7:74:20:c9:e6:f0:46:d2:9b:a0:21:4a: 8b:4e:59:6e:70:b0:de:e7:c2:44:04:1b:16:89:3d:2f:0d:ea: 53:91:47:3e:52:68:c0:62:02:60:a5:b3:bc:ae:02:fd:d5:69: 90:a9:85:ac:13:8b:cf:20:80:62:4c:cc:9b:02:74:16:81:ef: d0:7b:71:94:56:69:6b:3d:f3:56:26:87:4b:e8:d6:74:4a:fb: 57:25:13:cd:61:53:fc:59:92:18:80:ae:90:21:b3:7d:e9:97: 73:f7:39:bb -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUX1CqLt8/G0BzK52eAs7a6yMDYbcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgxNDQ2NDZaFw0yNzAxMjcxNDUxNDZaMDMxMTAvBgNV BAMTKDU5NkQyRURBNkVDQzQyREMwMTMyQjNGNzAyOEY0RDgzOENBMEJGNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsDaO/wsyAQ+ZSsp84ukgi9lrm rj8/cmSMtX6eh5GLg2kPPUPYHK+RFvN1xMed7j3KIOurFWbDb6PBjIuIp0R2feWS 48gVEtszEAL+fsomscsLFPhqXPS2SaZGGc2H5dLDiMFkixrU/sQAIbNmli6dsRPg lc6epFjkFdTRn7PIksjPR3Qyfolhu9sbIfPWSYzlP16cg2kPg9Pi/IwfEWW+N1UC giDb0wUlZXEoew4DrKfv++ObP8yQ7WMPxF194qSYD1+0WjiWHiaKoP7TI6JMLTvb tnbGnxWJ1wY/FxNKAcBDIYvcGyzWKvaVBaadT93+xzda7q07kpuW45WAnrbNAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRZbS7absxC3AEy s/cCj02DjKC/XzAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvOURGOTkzNzE3N0IxRUMxNjA1NTJDNUFE MkZBMDVFNDFDRUE3OEMwMEQ1NzFCQjRDNzU1ODM0RTRDMERDRDQ4Ny8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy85REY5OTM3MTc3QjFFQzE2MDU1MkM1QUQyRkEwNUU0MUNFQTc4QzAwRDU3 MUJCNEM3NTU4MzRFNEMwRENENDg3LzAvNTk2RDJFREE2RUNDNDJEQzAxMzJCM0Y3 MDI4RjREODM4Q0EwQkY1Ri5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCg8S0MA0EAgAC MAcDBQAoA1vAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQOHjANBgkqhkiG9w0B AQsFAAOCAQEAZz1LiwPExtmRqP+SI2Zsz63sVtfP/GcnJNroFcFLfOdmyxqFPqID 3pzXZDKk56IQoAtVNZfrea5cOTRMySvQX26kehTQF/6AK7qm7E+tbW0uJS4Q+Z6Z 2xoK23kgYmXcMol35oyrvf8HFREjYPCDq5zgLGhgA62C8tACn7BV2rNP8rUiMYy7 55EFU8mRR1tvRheYCjtf13QgyebwRtKboCFKi05ZbnCw3ufCRAQbFok9Lw3qU5FH PlJowGICYKWzvK4C/dVpkKmFrBOLzyCAYkzMmwJ0FoHv0HtxlFZpaz3zViaHS+jW dEr7VyUTzWFT/FmSGICukCGzfemXc/c5uw== -----END CERTIFICATE-----Generated at Mon Mar 2 18:48:52 2026 by rpki-client