$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6BAA546DDB6ECE501D36ECD3506DD86EA5EA56F9.cer File: 6BAA546DDB6ECE501D36ECD3506DD86EA5EA56F9.cer (raw, json) Hash identifier: QLvWwSt44t9lcWzexWwL9WnXImCLYvxoX6JCV9ezTwM= Subject key identifier: 6B:AA:54:6D:DB:6E:CE:50:1D:36:EC:D3:50:6D:D8:6E:A5:EA:56:F9 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 4A778BB9342BD8D8CB28967F72F640952C9CE9F6 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/9602839C9991461439EB5512DC6C3900EAB9DBA3FB08CEE8DB110E86CC29D686/0/6BAA546DDB6ECE501D36ECD3506DD86EA5EA56F9.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/9602839C9991461439EB5512DC6C3900EAB9DBA3FB08CEE8DB110E86CC29D686/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 06:56:26 +0000 Certificate not after: Wed 27 Jan 2027 07:01:26 +0000 Subordinate resources: AS: 269952 IP: 190.89.236.0/23 IP: 2803:86e0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:77:8b:b9:34:2b:d8:d8:cb:28:96:7f:72:f6:40:95:2c:9c:e9:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 06:56:26 2026 GMT Not After : Jan 27 07:01:26 2027 GMT Subject: CN=6BAA546DDB6ECE501D36ECD3506DD86EA5EA56F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:8c:e4:2b:aa:d3:18:69:73:f6:33:5c:b6:e3: e8:d0:50:3b:57:2a:e6:5e:b6:1c:b3:1b:de:ae:e1: f1:10:eb:79:8d:de:95:1c:70:87:4d:cb:a0:b1:82: af:b0:a2:e1:ae:0a:7f:cf:2b:f1:c0:aa:ee:35:23: 36:5a:b2:0f:1c:ad:15:ad:c1:0e:4e:02:e5:15:24: b3:5d:46:d0:06:cf:1d:dd:78:05:f9:9d:ca:54:3b: a7:ad:f7:95:80:9d:e5:4d:92:8d:ed:ac:f6:dc:1e: 80:07:23:5a:14:dd:3a:68:85:60:04:70:c2:b5:46: 96:ce:6f:fa:56:b9:f8:10:8c:90:ed:19:7d:c5:61: d4:ed:44:49:4c:be:34:3b:f0:eb:2e:66:1f:c7:26: 12:fb:ed:da:76:c2:bc:25:ae:35:e3:df:0a:54:0c: d4:dd:a4:2d:60:52:76:0f:f3:6b:c7:f5:bc:e3:83: 43:fc:2c:df:98:e8:81:74:6b:80:5e:76:08:da:26: cd:09:96:0c:08:ee:58:6e:57:1e:74:f9:e4:dd:02: b5:22:b1:b3:73:ca:83:be:f7:c0:57:4c:35:55:eb: 12:2a:4e:61:87:c4:84:c0:da:cb:ab:8e:4e:c7:92: 0d:eb:ab:a9:40:29:a3:e6:76:96:32:75:4e:3d:bb: 42:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 6B:AA:54:6D:DB:6E:CE:50:1D:36:EC:D3:50:6D:D8:6E:A5:EA:56:F9 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/9602839C9991461439EB5512DC6C3900EAB9DBA3FB08CEE8DB110E86CC29D686/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/9602839C9991461439EB5512DC6C3900EAB9DBA3FB08CEE8DB110E86CC29D686/0/6BAA546DDB6ECE501D36ECD3506DD86EA5EA56F9.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 190.89.236.0/23 IPv6: 2803:86e0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 269952 Signature Algorithm: sha256WithRSAEncryption 07:d5:2c:76:26:b2:0e:49:ec:0b:68:12:af:85:a9:c8:60:24: b7:01:6d:82:4d:a4:ef:55:50:16:45:c2:f0:c7:c3:7e:0c:6b: 9b:90:a9:be:5e:3c:fe:76:b1:a7:86:4a:9c:fb:70:89:92:6e: bd:bb:5f:da:3a:fe:0b:d2:e7:8d:55:11:14:85:5e:94:98:d3: 9a:ca:c7:64:5c:3a:44:83:43:29:6f:86:6f:44:91:1c:e7:fe: c4:c6:9a:c9:87:48:e9:40:fe:98:bb:8f:f6:39:62:a4:07:88: 60:ac:94:43:d4:b6:d3:da:15:11:7f:63:e0:40:11:95:5e:b9: c9:6d:a4:b0:9c:3d:b6:de:c4:6a:3c:84:07:5c:ce:3e:23:66: a8:e0:32:1d:4c:9f:3a:19:43:88:81:63:46:03:f4:d6:2c:b8: 45:6d:71:57:de:8d:06:f2:29:2e:cf:d3:55:c8:65:e8:82:cb: 5c:a1:94:cf:52:59:ea:b4:fc:64:16:bb:54:7b:e9:1e:fb:b9: ba:8c:82:a7:4b:82:82:ff:0a:a8:84:bb:c7:cb:46:05:54:06: a3:28:e5:08:cf:8c:d0:50:5e:62:61:76:97:49:fb:11:fa:ca: 52:f7:2f:7c:92:34:7c:68:eb:75:77:5c:c9:4b:62:89:81:74: 19:42:5f:21 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUSneLuTQr2NjLKJZ/cvZAlSyc6fYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgwNjU2MjZaFw0yNzAxMjcwNzAxMjZaMDMxMTAvBgNV BAMTKDZCQUE1NDZEREI2RUNFNTAxRDM2RUNEMzUwNkREODZFQTVFQTU2RjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAjOQrqtMYaXP2M1y24+jQUDtX KuZethyzG96u4fEQ63mN3pUccIdNy6Cxgq+wouGuCn/PK/HAqu41IzZasg8crRWt wQ5OAuUVJLNdRtAGzx3deAX5ncpUO6et95WAneVNko3trPbcHoAHI1oU3TpohWAE cMK1RpbOb/pWufgQjJDtGX3FYdTtRElMvjQ78OsuZh/HJhL77dp2wrwlrjXj3wpU DNTdpC1gUnYP82vH9bzjg0P8LN+Y6IF0a4BedgjaJs0JlgwI7lhuVx50+eTdArUi sbNzyoO+98BXTDVV6xIqTmGHxITA2surjk7Hkg3rq6lAKaPmdpYydU49u0LrAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRrqlRt227OUB02 7NNQbdhupepW+TAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvOTYwMjgzOUM5OTkxNDYxNDM5RUI1NTEy REM2QzM5MDBFQUI5REJBM0ZCMDhDRUU4REIxMTBFODZDQzI5RDY4Ni8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy85NjAyODM5Qzk5OTE0NjE0MzlFQjU1MTJEQzZDMzkwMEVBQjlEQkEzRkIw OENFRThEQjExMEU4NkNDMjlENjg2LzAvNkJBQTU0NkREQjZFQ0U1MDFEMzZFQ0Qz NTA2REQ4NkVBNUVBNTZGOS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBvlnsMA0EAgAC MAcDBQAoA4bgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQegDANBgkqhkiG9w0B AQsFAAOCAQEAB9UsdiayDknsC2gSr4WpyGAktwFtgk2k71VQFkXC8MfDfgxrm5Cp vl48/naxp4ZKnPtwiZJuvbtf2jr+C9LnjVURFIVelJjTmsrHZFw6RINDKW+Gb0SR HOf+xMaayYdI6UD+mLuP9jlipAeIYKyUQ9S209oVEX9j4EARlV65yW2ksJw9tt7E ajyEB1zOPiNmqOAyHUyfOhlDiIFjRgP01iy4RW1xV96NBvIpLs/TVchl6ILLXKGU z1JZ6rT8ZBa7VHvpHvu5uoyCp0uCgv8KqIS7x8tGBVQGoyjlCM+M0FBeYmF2l0n7 EfrKUvcvfJI0fGjrdXdcyUtiiYF0GUJfIQ== -----END CERTIFICATE-----Generated at Mon Mar 2 17:17:07 2026 by rpki-client