$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/632D71062751773B5FA51AC0AB69127826F756A2.cer File: 632D71062751773B5FA51AC0AB69127826F756A2.cer (raw, json) Hash identifier: OGqfKeVEOCsQbvsc/N168EAfkCiSyChZD9l44TJrpDA= Subject key identifier: 63:2D:71:06:27:51:77:3B:5F:A5:1A:C0:AB:69:12:78:26:F7:56:A2 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 44C03FC0A20430A6987B1AB755E62FDD53B42190 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/103AE1AC330EAC8A63D02330742753AC6FE7F0280423D4A41AAD47830E99D099/0/632D71062751773B5FA51AC0AB69127826F756A2.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/103AE1AC330EAC8A63D02330742753AC6FE7F0280423D4A41AAD47830E99D099/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 19:42:05 +0000 Certificate not after: Wed 27 Jan 2027 19:47:05 +0000 Subordinate resources: AS: 263744 IP: 131.108.16.0/22 IP: 138.94.216.0/22 IP: 143.137.168.0/22 IP: 168.228.44.0/22 IP: 170.81.196.0/22 IP: 2803:5380::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:c0:3f:c0:a2:04:30:a6:98:7b:1a:b7:55:e6:2f:dd:53:b4:21:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 19:42:05 2026 GMT Not After : Jan 27 19:47:05 2027 GMT Subject: CN=632D71062751773B5FA51AC0AB69127826F756A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:5c:7c:98:3d:d5:34:5e:1c:b6:a2:61:b5:d4: 03:92:a6:3d:25:5b:fe:ba:ac:64:71:dd:00:1e:22: dc:0d:ba:08:92:4a:81:ef:1e:32:7c:44:bd:1c:c9: d8:66:7d:ea:0b:30:06:ff:d0:d7:ad:7d:25:28:87: dd:71:42:66:06:e0:14:b1:1f:55:3d:96:f6:db:99: ce:63:77:7e:53:c1:05:0d:49:55:bb:e2:ca:d7:fe: 00:95:10:15:d5:13:65:69:4d:6e:4a:ee:a4:95:31: cb:91:d1:31:e3:01:bc:27:99:74:79:27:b6:35:dc: 1b:7b:ae:d6:fe:3a:db:3f:55:ea:21:a2:c4:5c:b2: 4b:e0:1d:f8:1f:92:f3:ae:db:ad:93:58:d4:5d:fc: 02:95:8d:09:5f:29:95:c2:93:36:76:f6:54:85:70: 87:91:64:db:f0:9e:25:a2:17:c8:52:2e:96:0c:e9: c5:b9:c7:a0:e8:89:b2:f2:db:ad:94:5f:c0:7f:38: e9:8d:7a:d9:70:15:92:1b:d8:79:fe:6e:77:f8:49: b0:75:f3:3e:83:59:3c:25:a6:d8:c2:eb:0b:85:84: 35:21:d1:ee:88:c9:e8:c0:a0:63:6c:f6:5d:03:77: 14:f8:07:f1:34:2e:1f:07:e0:eb:6a:55:6d:15:98: b0:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 63:2D:71:06:27:51:77:3B:5F:A5:1A:C0:AB:69:12:78:26:F7:56:A2 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/103AE1AC330EAC8A63D02330742753AC6FE7F0280423D4A41AAD47830E99D099/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/103AE1AC330EAC8A63D02330742753AC6FE7F0280423D4A41AAD47830E99D099/0/632D71062751773B5FA51AC0AB69127826F756A2.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.108.16.0/22 138.94.216.0/22 143.137.168.0/22 168.228.44.0/22 170.81.196.0/22 IPv6: 2803:5380::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263744 Signature Algorithm: sha256WithRSAEncryption 38:c8:67:6b:79:7f:8e:c1:b7:e7:8c:91:e2:b5:b1:04:d5:66: 1c:55:54:10:c3:ff:ca:5c:18:2b:48:5c:23:e6:75:e2:e7:b2: 73:30:85:a0:bb:4f:04:e7:ab:24:84:db:2c:ef:99:cf:06:38: e0:11:86:ca:46:30:46:6a:66:22:b7:1d:f1:72:c8:f3:01:a9: 48:d0:8e:41:f1:b1:96:09:67:4e:dd:a7:fc:ab:ae:59:65:3a: 10:91:3e:ca:19:23:dc:2b:77:da:26:cd:35:04:cd:d0:d2:c8: a3:e9:fd:42:ad:e2:7e:b5:2a:d1:af:0b:a5:d4:17:1c:a3:67: 4e:60:6e:dc:9c:63:bf:0b:60:b0:39:e7:43:90:48:9d:64:63: f4:8f:12:06:d3:a6:9b:44:e8:6b:bd:13:00:6c:16:46:28:70: 30:b1:19:47:3f:9a:c4:c2:4c:6d:bd:7d:8d:c2:45:54:d2:f0: d7:df:d4:e9:2a:84:7b:ed:f5:8f:60:23:44:f8:c1:84:9b:d0: d6:bc:dd:39:74:4d:5e:9e:b5:69:67:e3:f6:e1:b9:e1:d0:4e: 76:b6:1d:f1:d3:25:30:92:5b:e0:af:e0:8c:96:34:23:72:95: 60:ac:d5:77:25:59:37:a6:14:14:d1:c8:14:f2:25:fd:a7:c8: e6:28:cf:9b -----BEGIN CERTIFICATE----- MIIGvTCCBaWgAwIBAgIURMA/wKIEMKaYexq3VeYv3VO0IZAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgxOTQyMDVaFw0yNzAxMjcxOTQ3MDVaMDMxMTAvBgNV BAMTKDYzMkQ3MTA2Mjc1MTc3M0I1RkE1MUFDMEFCNjkxMjc4MjZGNzU2QTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyXHyYPdU0Xhy2omG11AOSpj0l W/66rGRx3QAeItwNugiSSoHvHjJ8RL0cydhmfeoLMAb/0NetfSUoh91xQmYG4BSx H1U9lvbbmc5jd35TwQUNSVW74srX/gCVEBXVE2VpTW5K7qSVMcuR0THjAbwnmXR5 J7Y13Bt7rtb+Ots/VeohosRcskvgHfgfkvOu262TWNRd/AKVjQlfKZXCkzZ29lSF cIeRZNvwniWiF8hSLpYM6cW5x6DoibLy262UX8B/OOmNetlwFZIb2Hn+bnf4SbB1 8z6DWTwlptjC6wuFhDUh0e6IyejAoGNs9l0DdxT4B/E0Lh8H4OtqVW0VmLDDAgMB AAGjggPHMIIDwzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRjLXEGJ1F3O1+l GsCraRJ4JvdWojAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMTAzQUUxQUMzMzBFQUM4QTYzRDAyMzMw NzQyNzUzQUM2RkU3RjAyODA0MjNENEE0MUFBRDQ3ODMwRTk5RDA5OS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8xMDNBRTFBQzMzMEVBQzhBNjNEMDIzMzA3NDI3NTNBQzZGRTdGMDI4MDQy M0Q0QTQxQUFENDc4MzBFOTlEMDk5LzAvNjMyRDcxMDYyNzUxNzczQjVGQTUxQUMw QUI2OTEyNzgyNkY3NTZBMi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQCg2wQAwQCil7Y AwQCj4moAwQCqOQsAwQCqlHEMA0EAgACMAcDBQAoA1OAMBoGCCsGAQUFBwEIAQH/ BAswCaAHMAUCAwQGQDANBgkqhkiG9w0BAQsFAAOCAQEAOMhna3l/jsG354yR4rWx BNVmHFVUEMP/ylwYK0hcI+Z14ueyczCFoLtPBOerJITbLO+ZzwY44BGGykYwRmpm Ircd8XLI8wGpSNCOQfGxlglnTt2n/KuuWWU6EJE+yhkj3Ct32ibNNQTN0NLIo+n9 Qq3ifrUq0a8LpdQXHKNnTmBu3JxjvwtgsDnnQ5BInWRj9I8SBtOmm0Toa70TAGwW RihwMLEZRz+axMJMbb19jcJFVNLw19/U6SqEe+31j2AjRPjBhJvQ1rzdOXRNXp61 aWfj9uG54dBOdrYd8dMlMJJb4K/gjJY0I3KVYKzVdyVZN6YUFNHIFPIl/afI5ijP mw== -----END CERTIFICATE-----Generated at Mon Mar 2 21:45:00 2026 by rpki-client