$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/738DF3EF50BFD106CD59B65BB914A3C67F537DF2.cer File: 738DF3EF50BFD106CD59B65BB914A3C67F537DF2.cer (raw, json) Hash identifier: BQAG+i/H/ILPqJPXQbgMMplLW59LKqtEYP9enMmZZIo= Subject key identifier: 73:8D:F3:EF:50:BF:D1:06:CD:59:B6:5B:B9:14:A3:C6:7F:53:7D:F2 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 69A243F6B345A60D35D11D42F723F32E2F6656E7 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/368DDC0BEA654DEA43F4EC9399B84F0523B2B7B30EC9B3E6AB862C694907B3CC/0/738DF3EF50BFD106CD59B65BB914A3C67F537DF2.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/368DDC0BEA654DEA43F4EC9399B84F0523B2B7B30EC9B3E6AB862C694907B3CC/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 15:44:13 +0000 Certificate not after: Wed 27 Jan 2027 15:49:13 +0000 Subordinate resources: IP: 45.5.188.0/22 IP: 2801:1b:d000::/48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 05 Mar 2026 11:41:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:a2:43:f6:b3:45:a6:0d:35:d1:1d:42:f7:23:f3:2e:2f:66:56:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 15:44:13 2026 GMT Not After : Jan 27 15:49:13 2027 GMT Subject: CN=738DF3EF50BFD106CD59B65BB914A3C67F537DF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:99:d0:2f:48:a0:ae:d2:c0:ad:7c:3d:3f:db: 03:be:59:9a:fd:75:2d:04:14:37:8b:e4:44:e9:3c: 4f:89:1d:83:e2:74:25:b0:60:c1:12:54:da:af:e0: 18:50:d6:e7:f9:b3:74:59:14:e6:ae:21:c0:97:5e: c9:51:5a:fd:99:2a:85:3c:f1:8b:c5:44:86:fa:48: 19:36:97:26:93:50:30:89:18:0c:09:49:9d:a1:bc: cd:bb:0c:d2:43:c9:31:2c:66:f3:51:28:12:7a:51: 71:17:36:00:8f:a1:af:45:d8:45:1b:39:bd:b0:c6: 0f:8d:ce:22:e3:09:dd:90:7d:8f:1b:6f:9f:51:2d: e2:bd:ee:48:aa:38:4e:77:ed:9c:b9:eb:b2:04:0b: b5:ae:c3:19:2f:56:15:05:c0:2d:e3:93:d2:2d:32: 28:4c:96:64:44:b7:a3:83:21:df:7c:ac:3d:a0:e3: ad:3c:20:d9:a5:4e:05:df:63:68:c4:1a:93:7f:8c: 57:df:65:ae:5f:6a:c3:a6:68:41:1e:6e:d4:56:62: ca:ae:4c:aa:fa:68:3e:b9:e7:bb:c3:4a:c2:dc:58: d2:e0:2d:1d:12:c1:d3:10:cb:22:74:47:46:6b:b4: 52:76:a8:85:fe:c7:c9:e4:dd:6e:48:43:12:ae:0e: 58:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 73:8D:F3:EF:50:BF:D1:06:CD:59:B6:5B:B9:14:A3:C6:7F:53:7D:F2 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/368DDC0BEA654DEA43F4EC9399B84F0523B2B7B30EC9B3E6AB862C694907B3CC/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/368DDC0BEA654DEA43F4EC9399B84F0523B2B7B30EC9B3E6AB862C694907B3CC/0/738DF3EF50BFD106CD59B65BB914A3C67F537DF2.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.5.188.0/22 IPv6: 2801:1b:d000::/48 Signature Algorithm: sha256WithRSAEncryption 24:69:c7:1b:76:d4:70:bf:13:17:c0:1e:83:c3:f4:4a:4e:00: 26:e8:9d:28:c6:53:99:95:03:66:5c:cd:df:35:d4:ed:4d:d2: 6f:2a:7c:a0:d0:87:18:a6:ff:f9:75:10:45:91:5b:53:e0:d2: eb:89:c4:78:f0:ae:91:86:de:da:2b:5b:36:b5:fe:61:8c:a6: 46:63:cc:43:48:e6:7a:95:f6:f0:8f:9b:e1:6e:f7:b0:4c:4e: 21:db:a2:4d:a3:22:28:57:41:69:6f:9f:4b:96:c6:e8:2d:ec: a5:e1:9e:a8:87:44:ef:8b:5b:28:ed:fb:6d:01:16:a1:52:59: 4e:b1:40:e1:14:20:a9:9d:13:59:45:8d:15:b4:5a:6c:77:81: 05:c4:8b:2b:78:06:92:ce:6a:e4:92:3f:20:e5:bb:86:90:3a: 88:79:f0:67:10:22:78:6d:05:31:ae:e9:e3:ad:cf:e7:1d:9b: a7:46:35:e3:de:f3:11:9e:37:74:91:d1:f9:15:8c:cc:32:4a: a0:6d:c0:8f:9b:14:f4:84:79:96:d9:15:d5:b4:e5:b7:dc:ad: bc:f5:2b:c8:4d:0f:63:ee:52:ca:c1:2b:f8:dc:d1:f5:f6:c4: a3:a5:0d:18:32:99:8d:42:41:b7:c6:5a:ce:0d:87:66:90:62: 00:60:b9:99 -----BEGIN CERTIFICATE----- MIIGizCCBXOgAwIBAgIUaaJD9rNFpg010R1C9yPzLi9mVucwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgxNTQ0MTNaFw0yNzAxMjcxNTQ5MTNaMDMxMTAvBgNV BAMTKDczOERGM0VGNTBCRkQxMDZDRDU5QjY1QkI5MTRBM0M2N0Y1MzdERjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYmdAvSKCu0sCtfD0/2wO+WZr9 dS0EFDeL5ETpPE+JHYPidCWwYMESVNqv4BhQ1uf5s3RZFOauIcCXXslRWv2ZKoU8 8YvFRIb6SBk2lyaTUDCJGAwJSZ2hvM27DNJDyTEsZvNRKBJ6UXEXNgCPoa9F2EUb Ob2wxg+NziLjCd2QfY8bb59RLeK97kiqOE537Zy567IEC7WuwxkvVhUFwC3jk9It MihMlmREt6ODId98rD2g4608INmlTgXfY2jEGpN/jFffZa5fasOmaEEebtRWYsqu TKr6aD6557vDSsLcWNLgLR0SwdMQyyJ0R0ZrtFJ2qIX+x8nk3W5IQxKuDlgnAgMB AAGjggOVMIIDkTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRzjfPvUL/RBs1Z tlu5FKPGf1N98jAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMzY4RERDMEJFQTY1NERFQTQzRjRFQzkz OTlCODRGMDUyM0IyQjdCMzBFQzlCM0U2QUI4NjJDNjk0OTA3QjNDQy8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8zNjhEREMwQkVBNjU0REVBNDNGNEVDOTM5OUI4NEYwNTIzQjJCN0IzMEVD OUIzRTZBQjg2MkM2OTQ5MDdCM0NDLzAvNzM4REYzRUY1MEJGRDEwNkNENTlCNjVC QjkxNEEzQzY3RjUzN0RGMi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCLQW8MA8EAgAC MAkDBwAoAQAb0AAwDQYJKoZIhvcNAQELBQADggEBACRpxxt21HC/ExfAHoPD9EpO ACbonSjGU5mVA2Zczd811O1N0m8qfKDQhxim//l1EEWRW1Pg0uuJxHjwrpGG3tor Wza1/mGMpkZjzENI5nqV9vCPm+Fu97BMTiHbok2jIihXQWlvn0uWxugt7KXhnqiH RO+LWyjt+20BFqFSWU6xQOEUIKmdE1lFjRW0Wmx3gQXEiyt4BpLOauSSPyDlu4aQ Ooh58GcQInhtBTGu6eOtz+cdm6dGNePe8xGeN3SR0fkVjMwySqBtwI+bFPSEeZbZ FdW05bfcrbz1K8hND2PuUsrBK/jc0fX2xKOlDRgymY1CQbfGWs4Nh2aQYgBguZk= -----END CERTIFICATE-----Generated at Mon Mar 2 11:18:01 2026 by rpki-client