$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.cer File: 747499EE49F6E45F50C4860BE79D79CBD7CB57B1.cer (raw, json) Hash identifier: dVR+NQ/6rkay/oD5VdjQStxgX0jLv/2/MRgMxJ7ii1A= Subject key identifier: 74:74:99:EE:49:F6:E4:5F:50:C4:86:0B:E7:9D:79:CB:D7:CB:57:B1 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 75181D5D5EB300F34AB56328775082213D356B29 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 27 Jan 2026 18:54:45 +0000 Certificate not after: Tue 26 Jan 2027 18:59:45 +0000 Subordinate resources: AS: 6147 AS: 264684 IP: 170.79.36.0/22 IP: 181.64.0.0/14 IP: 190.40.0.0/14 IP: 190.232.0.0/13 IP: 200.4.192.0/18 IP: 200.10.64.0/19 IP: 200.37.0.0/16 IP: 200.48.0.0/16 IP: 200.60.0.0/16 IP: 200.106.0.0/17 IP: 200.107.128.0/18 IP: 200.121.0.0/16 IP: 201.131.220.0/22 IP: 201.230.0.0/16 IP: 201.240.0.0/16 IP: 2001:1388::/31 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:18:1d:5d:5e:b3:00:f3:4a:b5:63:28:77:50:82:21:3d:35:6b:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 27 18:54:45 2026 GMT Not After : Jan 26 18:59:45 2027 GMT Subject: CN=747499EE49F6E45F50C4860BE79D79CBD7CB57B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:63:f4:6d:de:54:82:2d:6e:38:65:c0:9a:2d: 14:7e:7d:6e:95:5d:d0:5e:12:01:61:40:2a:e3:f0: 6a:1c:b6:bc:52:e2:e0:58:a9:67:22:03:46:18:d0: f7:18:c3:5b:f8:48:d0:36:8b:db:8a:76:27:52:c7: 92:7b:8b:64:d0:8a:16:a3:2a:1a:7e:0c:ce:62:43: bd:3b:e1:f9:82:1d:17:86:bb:5d:fc:ae:f9:ad:b1: f2:22:f3:9c:da:f1:0d:f2:70:60:93:66:21:b8:d0: 24:12:a0:f2:32:6d:fe:f4:e7:64:40:10:9a:6f:62: af:31:8d:f2:66:13:12:ba:0f:c6:14:1d:f7:09:4a: 07:93:2e:a2:07:73:e3:39:7f:f7:0c:f4:d3:40:8a: 17:17:03:18:cb:3d:17:4e:98:20:9b:b9:c2:09:47: d2:72:49:b8:5a:e9:a8:1e:28:a0:b0:83:b3:34:a9: 11:eb:0f:de:f3:75:b2:a9:44:37:04:82:f7:58:f9: 6d:09:29:8e:3f:79:df:41:a1:ae:9f:35:df:2c:29: 56:8b:0e:41:d5:e0:17:06:8b:8c:59:65:08:47:a8: a0:9e:55:b6:ee:16:e4:d8:da:4f:75:32:de:08:b2: 7e:00:24:13:17:8e:73:5e:5c:b8:de:80:73:99:27: 74:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 74:74:99:EE:49:F6:E4:5F:50:C4:86:0B:E7:9D:79:CB:D7:CB:57:B1 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.79.36.0/22 181.64.0.0/14 190.40.0.0/14 190.232.0.0/13 200.4.192.0/18 200.10.64.0/19 200.37.0.0/16 200.48.0.0/16 200.60.0.0/16 200.106.0.0/17 200.107.128.0/18 200.121.0.0/16 201.131.220.0/22 201.230.0.0/16 201.240.0.0/16 IPv6: 2001:1388::/31 sbgp-autonomousSysNum: critical Autonomous System Numbers: 6147 264684 Signature Algorithm: sha256WithRSAEncryption 10:36:c6:da:e8:eb:3b:4f:8f:20:82:b1:e8:b9:ed:1e:c1:26: b6:5d:e9:cb:01:65:4f:b1:1c:e8:e1:da:22:4e:05:05:18:99: 64:49:70:f5:8e:74:3d:2c:03:30:6a:d6:81:67:1a:36:58:90: 49:20:dc:2e:40:9e:42:03:9e:be:2e:79:c3:69:6b:91:1a:dd: 1c:d7:48:c7:74:12:b6:98:79:f3:35:1e:b3:23:c5:02:8b:11: db:ae:7d:49:20:4a:03:59:f9:5f:01:48:79:5b:29:85:08:90: d1:51:ee:c3:4b:fa:fe:f9:9c:5b:c8:d6:8d:36:c3:c9:e8:75: 1b:7a:af:88:24:83:a3:e6:e5:a1:22:f6:88:b1:41:af:31:14: 1f:01:99:8a:4d:8f:7d:eb:00:97:16:6f:9b:c3:97:09:78:09: 8d:4d:21:c2:93:ee:aa:a4:83:f0:55:e1:b8:8b:80:85:f3:ae: cb:e3:57:cb:80:e3:2e:0b:0c:44:bc:1a:90:77:7a:b1:75:19: c1:9a:dd:97:c8:48:bb:01:4c:8d:57:eb:6b:45:7a:ab:46:49: 0b:4c:d5:c9:49:a1:3f:30:23:de:1f:24:d6:58:df:0f:e3:dc: 00:56:33:9a:f8:95:e2:b8:28:d9:81:9c:e9:d9:6c:f7:df:d1: ed:86:c1:79 -----BEGIN CERTIFICATE----- MIIG9DCCBdygAwIBAgIUdRgdXV6zAPNKtWMod1CCIT01aykwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjcxODU0NDVaFw0yNzAxMjYxODU5NDVaMDMxMTAvBgNV BAMTKDc0NzQ5OUVFNDlGNkU0NUY1MEM0ODYwQkU3OUQ3OUNCRDdDQjU3QjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdY/Rt3lSCLW44ZcCaLRR+fW6V XdBeEgFhQCrj8GoctrxS4uBYqWciA0YY0PcYw1v4SNA2i9uKdidSx5J7i2TQihaj Khp+DM5iQ7074fmCHReGu138rvmtsfIi85za8Q3ycGCTZiG40CQSoPIybf7052RA EJpvYq8xjfJmExK6D8YUHfcJSgeTLqIHc+M5f/cM9NNAihcXAxjLPRdOmCCbucIJ R9JySbha6ageKKCwg7M0qRHrD97zdbKpRDcEgvdY+W0JKY4/ed9Boa6fNd8sKVaL DkHV4BcGi4xZZQhHqKCeVbbuFuTY2k91Mt4Isn4AJBMXjnNeXLjegHOZJ3Q1AgMB AAGjggP+MIID+jAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR0dJnuSfbkX1DE hgvnnXnL18tXsTAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNTUwMkEyMTI2RkVGMzM4RDM5QzhCNzQz OTIwQzFCQTIyNDEwN0NGRDEyNjM1NTBGQzkyRjRENThFRDFBM0MyQi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy81NTAyQTIxMjZGRUYzMzhEMzlDOEI3NDM5MjBDMUJBMjI0MTA3Q0ZEMTI2 MzU1MEZDOTJGNEQ1OEVEMUEzQzJCLzAvNzQ3NDk5RUU0OUY2RTQ1RjUwQzQ4NjBC RTc5RDc5Q0JEN0NCNTdCMS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMHkGCCsGAQUFBwEHAQH/BGowaDBXBAIAATBRAwQCqk8kAwMCtUAD AwK+KAMDA77oAwQGyATAAwQFyApAAwMAyCUDAwDIMAMDAMg8AwQHyGoAAwQGyGuA AwMAyHkDBALJg9wDAwDJ5gMDAMnwMA0EAgACMAcDBQEgAROIMB4GCCsGAQUFBwEI AQH/BA8wDaALMAkCAhgDAgMECewwDQYJKoZIhvcNAQELBQADggEBABA2xtro6ztP jyCCsei57R7BJrZd6csBZU+xHOjh2iJOBQUYmWRJcPWOdD0sAzBq1oFnGjZYkEkg 3C5AnkIDnr4uecNpa5Ea3RzXSMd0EraYefM1HrMjxQKLEduufUkgSgNZ+V8BSHlb KYUIkNFR7sNL+v75nFvI1o02w8nodRt6r4gkg6Pm5aEi9oixQa8xFB8BmYpNj33r AJcWb5vDlwl4CY1NIcKT7qqkg/BV4biLgIXzrsvjV8uA4y4LDES8GpB3erF1GcGa 3ZfISLsBTI1X62tFeqtGSQtM1clJoT8wI94fJNZY3w/j3ABWM5r4leK4KNmBnOnZ bPff0e2GwXk= -----END CERTIFICATE-----Generated at Mon Mar 2 15:37:58 2026 by rpki-client