$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5DC401609A3F736147EA58DDC7A8E7B21A0F8A0D.cer File: 5DC401609A3F736147EA58DDC7A8E7B21A0F8A0D.cer (raw, json) Hash identifier: UfUZUMKR/BgwYN3UlLRS1JNxyemtKvlXv1rarKepZ2E= Subject key identifier: 5D:C4:01:60:9A:3F:73:61:47:EA:58:DD:C7:A8:E7:B2:1A:0F:8A:0D Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 01362D264595730723FE7BFD6F19D60D2C78ED95 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/C9B370E65CCDD3B5F4DE03A1737B59E11DD20497DA9C88D2D0B6E5087C251E85/0/5DC401609A3F736147EA58DDC7A8E7B21A0F8A0D.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/C9B370E65CCDD3B5F4DE03A1737B59E11DD20497DA9C88D2D0B6E5087C251E85/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Sat 07 Feb 2026 18:30:01 +0000 Certificate not after: Sat 06 Feb 2027 18:35:01 +0000 Subordinate resources: AS: 273095 IP: 200.50.156.0/22 IP: 2803:6050::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:36:2d:26:45:95:73:07:23:fe:7b:fd:6f:19:d6:0d:2c:78:ed:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Feb 7 18:30:01 2026 GMT Not After : Feb 6 18:35:01 2027 GMT Subject: CN=5DC401609A3F736147EA58DDC7A8E7B21A0F8A0D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e4:d1:1d:b3:e1:0b:5a:5a:09:05:3c:7d:e7: 14:b7:f1:da:f4:43:3a:de:df:b5:1f:bc:0d:57:79: 52:06:1e:03:7f:d8:85:7b:56:e6:f4:84:f4:97:89: 28:15:56:0c:f8:19:0c:38:72:a8:96:0c:03:a7:5e: 5e:4c:16:00:72:4c:0a:5a:f2:32:f6:ec:f4:07:92: 20:8b:83:d8:87:ae:2f:a4:3f:46:29:e9:8e:0e:79: 12:b1:c3:91:7d:13:b3:a2:dc:4f:d0:8c:7d:5b:c1: 98:16:25:70:28:4b:8e:4f:bd:2c:08:a9:83:77:26: d1:0d:d5:61:4f:3d:02:bf:30:93:ad:99:47:db:8f: 7f:af:a2:5d:57:dd:cd:bc:07:db:87:fa:75:15:79: 4a:38:6c:21:93:70:eb:7c:fe:d9:16:45:cd:74:00: 9c:3e:69:5c:06:cf:28:65:df:2c:72:5c:94:d2:f2: 89:ba:f1:37:11:bc:5a:e7:98:f9:a2:67:eb:43:59: 18:2e:ac:5e:ff:b0:25:e6:1d:c2:a8:5c:67:80:e5: d3:ba:fe:0b:34:9e:bd:81:93:64:d6:4c:4c:87:96: 5b:e1:11:97:70:4a:ab:54:ce:8a:db:76:72:00:8d: ae:98:5d:33:71:cf:eb:bd:61:27:ab:bb:53:e2:a2: b6:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5D:C4:01:60:9A:3F:73:61:47:EA:58:DD:C7:A8:E7:B2:1A:0F:8A:0D X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/C9B370E65CCDD3B5F4DE03A1737B59E11DD20497DA9C88D2D0B6E5087C251E85/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/C9B370E65CCDD3B5F4DE03A1737B59E11DD20497DA9C88D2D0B6E5087C251E85/0/5DC401609A3F736147EA58DDC7A8E7B21A0F8A0D.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.50.156.0/22 IPv6: 2803:6050::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273095 Signature Algorithm: sha256WithRSAEncryption 2b:29:4d:3b:26:73:fe:5d:9d:ce:99:dc:c3:5a:97:5f:f0:4a: db:39:f8:a2:36:47:f0:e7:a5:44:2c:bc:d3:b1:06:17:c9:f2: 76:73:ee:63:c9:75:1b:9f:9b:b2:d5:a6:ff:de:3a:8b:8a:22: 7b:81:fa:54:53:a9:9c:6d:2b:64:6a:be:7d:ca:42:fe:bb:5f: cd:7f:db:6b:9a:41:bf:04:95:48:c0:65:91:a5:b3:1f:d3:c4: 80:30:1b:e8:cc:e8:9b:da:d2:8b:41:27:46:8e:61:4b:47:f0: 5b:1b:ef:0e:ae:0a:30:8b:ea:d0:b4:8f:2c:d2:19:e2:9e:0c: 58:ec:a2:36:c2:bf:20:29:63:a7:b5:cd:91:4d:c8:16:77:7a: 87:73:e9:40:17:7e:f3:d5:3b:36:f1:05:e0:0a:78:26:40:7d: 7a:9d:e3:65:37:0c:58:95:4b:37:a9:ba:56:d4:33:be:17:6e: 9d:60:8c:e3:6e:78:c9:d0:08:bc:31:a5:b6:ae:bb:ac:d8:ca: 8f:a5:44:e4:2a:23:c8:1f:cd:c2:ed:c3:ab:4b:9e:15:f7:49: a1:c0:97:a3:54:a4:c2:ee:4e:aa:66:bc:cf:95:30:3d:90:5a: 1a:ad:e2:fb:45:f8:6d:ab:b4:0d:6d:dd:6b:a2:51:a7:8f:db: b0:ab:25:02 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUATYtJkWVcwcj/nv9bxnWDSx47ZUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAyMDcxODMwMDFaFw0yNzAyMDYxODM1MDFaMDMxMTAvBgNV BAMTKDVEQzQwMTYwOUEzRjczNjE0N0VBNThEREM3QThFN0IyMUEwRjhBMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu5NEds+ELWloJBTx95xS38dr0 Qzre37UfvA1XeVIGHgN/2IV7Vub0hPSXiSgVVgz4GQw4cqiWDAOnXl5MFgByTApa 8jL27PQHkiCLg9iHri+kP0Yp6Y4OeRKxw5F9E7Oi3E/QjH1bwZgWJXAoS45PvSwI qYN3JtEN1WFPPQK/MJOtmUfbj3+vol1X3c28B9uH+nUVeUo4bCGTcOt8/tkWRc10 AJw+aVwGzyhl3yxyXJTS8om68TcRvFrnmPmiZ+tDWRgurF7/sCXmHcKoXGeA5dO6 /gs0nr2Bk2TWTEyHllvhEZdwSqtUzorbdnIAja6YXTNxz+u9YSeru1PiorYRAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRdxAFgmj9zYUfq WN3HqOeyGg+KDTAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQzlCMzcwRTY1Q0NERDNCNUY0REUwM0Ex NzM3QjU5RTExREQyMDQ5N0RBOUM4OEQyRDBCNkU1MDg3QzI1MUU4NS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9DOUIzNzBFNjVDQ0REM0I1RjRERTAzQTE3MzdCNTlFMTFERDIwNDk3REE5 Qzg4RDJEMEI2RTUwODdDMjUxRTg1LzAvNURDNDAxNjA5QTNGNzM2MTQ3RUE1OERE QzdBOEU3QjIxQTBGOEEwRC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCyDKcMA0EAgAC MAcDBQAoA2BQMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQqxzANBgkqhkiG9w0B AQsFAAOCAQEAKylNOyZz/l2dzpncw1qXX/BK2zn4ojZH8OelRCy807EGF8nydnPu Y8l1G5+bstWm/946i4oie4H6VFOpnG0rZGq+fcpC/rtfzX/ba5pBvwSVSMBlkaWz H9PEgDAb6Mzom9rSi0EnRo5hS0fwWxvvDq4KMIvq0LSPLNIZ4p4MWOyiNsK/IClj p7XNkU3IFnd6h3PpQBd+89U7NvEF4Ap4JkB9ep3jZTcMWJVLN6m6VtQzvhdunWCM 4254ydAIvDGltq67rNjKj6VE5CojyB/Nwu3Dq0ueFfdJocCXo1Skwu5Oqma8z5Uw PZBaGq3i+0X4bau0DW3da6JRp4/bsKslAg== -----END CERTIFICATE-----Generated at Mon Mar 2 17:03:01 2026 by rpki-client