$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/765D05128298873F41D1D65632AB25BDBE113398.cer File: 765D05128298873F41D1D65632AB25BDBE113398.cer (raw, json) Hash identifier: 0TM5FiRduE3ACxR9vc//ug+DAh3aOoOnbNSVR2APUnY= Subject key identifier: 76:5D:05:12:82:98:87:3F:41:D1:D6:56:32:AB:25:BD:BE:11:33:98 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 0BE96E1F670857F95B00C21BD73114928E2F833F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/F33622924E5F8D4BD0F1A61FAF7716DAD8DBE66FE9AEBDA179D95AED56B2B697/0/765D05128298873F41D1D65632AB25BDBE113398.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/F33622924E5F8D4BD0F1A61FAF7716DAD8DBE66FE9AEBDA179D95AED56B2B697/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 07:52:43 +0000 Certificate not after: Wed 27 Jan 2027 07:57:43 +0000 Subordinate resources: AS: 263777 IP: 138.204.4.0/22 IP: 168.227.252.0/22 IP: 170.239.32.0/22 IP: 2803:2240::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:e9:6e:1f:67:08:57:f9:5b:00:c2:1b:d7:31:14:92:8e:2f:83:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 07:52:43 2026 GMT Not After : Jan 27 07:57:43 2027 GMT Subject: CN=765D05128298873F41D1D65632AB25BDBE113398 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:7f:a0:60:de:70:15:ee:1f:bd:1b:b7:76:6c: 22:c1:26:17:6f:33:dc:1b:f7:d0:ab:39:16:a0:d6: 68:28:be:9a:51:6a:6e:30:27:ee:73:13:2f:be:c1: 2d:11:3f:ce:77:d6:7b:9c:20:a8:f9:8c:e7:84:78: 03:33:37:eb:3a:c4:2f:c4:42:2f:8a:cb:9b:2a:c5: 19:89:4f:52:d7:24:a4:b5:96:18:a8:6f:fe:d6:c5: 8c:c8:86:36:11:23:b6:6f:5d:41:79:da:1b:56:5a: 5d:1b:8b:5c:34:3a:0c:45:5c:ab:a9:5e:b4:6f:88: c1:d7:93:d4:79:3f:f0:37:48:86:6c:de:37:b8:9a: 56:20:76:c0:57:81:04:84:17:d8:90:f8:36:e4:ac: f6:a2:c7:3e:ed:28:cd:49:b6:51:5a:d3:44:23:a9: 1a:93:a7:c7:1d:2b:14:ee:bd:a2:1b:e4:31:ba:56: fa:84:1c:ab:64:27:79:ff:8b:82:2c:83:6c:5e:7e: fa:c5:8a:46:cf:35:c0:67:47:a4:8a:9a:1f:c3:56: 9b:73:9b:77:3d:24:dd:94:a6:8d:0f:d5:66:f7:56: 27:8a:76:cb:33:2a:2c:bb:05:cd:60:e7:10:42:dc: 55:84:ed:47:34:e2:6d:62:ec:26:7d:0c:b9:e7:63: be:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 76:5D:05:12:82:98:87:3F:41:D1:D6:56:32:AB:25:BD:BE:11:33:98 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/F33622924E5F8D4BD0F1A61FAF7716DAD8DBE66FE9AEBDA179D95AED56B2B697/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/F33622924E5F8D4BD0F1A61FAF7716DAD8DBE66FE9AEBDA179D95AED56B2B697/0/765D05128298873F41D1D65632AB25BDBE113398.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.204.4.0/22 168.227.252.0/22 170.239.32.0/22 IPv6: 2803:2240::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263777 Signature Algorithm: sha256WithRSAEncryption 63:7b:19:f7:8b:02:7d:82:d7:3e:fd:29:dc:d0:11:17:f3:40: 14:09:10:bf:1e:f6:b9:05:d3:8e:38:a2:e7:43:37:60:80:1b: f3:17:09:7d:2a:07:dc:20:8f:32:50:9c:73:1b:f7:25:76:e0: 7b:36:ee:15:1d:ad:32:e5:cb:44:65:24:d6:12:77:8b:c2:43: 11:d5:1a:8d:43:3d:b4:c8:b1:9e:8a:00:64:24:51:ad:1b:36: 0f:d7:c5:ea:28:63:e2:20:da:6c:cb:36:c0:3b:f7:de:80:83: 7b:63:d3:75:12:76:d2:bf:25:45:d5:d5:f2:44:6a:26:04:4a: 71:b4:ec:62:34:fe:c6:8e:86:54:a7:cf:13:03:f1:5a:68:db: 7b:f9:cf:2c:5c:03:ba:a0:f4:b1:94:7a:15:03:b8:a8:ba:b3: 25:78:00:7f:82:f9:6c:c0:69:62:74:b5:85:e4:52:66:4f:56: 73:7c:f6:9d:2d:43:00:29:ad:45:61:1d:d5:3a:1b:cd:93:33: 7c:07:b9:ce:ae:c9:94:59:02:96:e4:f7:83:b4:c9:32:f2:e5: 69:e0:08:4b:9c:23:ec:f3:03:5b:c6:77:4e:47:b6:31:17:1c: ba:ff:80:dd:b6:8e:09:ba:38:b4:8b:6b:f7:d8:c4:b7:64:ae: a9:c5:a6:82 -----BEGIN CERTIFICATE----- MIIGsTCCBZmgAwIBAgIUC+luH2cIV/lbAMIb1zEUko4vgz8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgwNzUyNDNaFw0yNzAxMjcwNzU3NDNaMDMxMTAvBgNV BAMTKDc2NUQwNTEyODI5ODg3M0Y0MUQxRDY1NjMyQUIyNUJEQkUxMTMzOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVf6Bg3nAV7h+9G7d2bCLBJhdv M9wb99CrORag1mgovppRam4wJ+5zEy++wS0RP8531nucIKj5jOeEeAMzN+s6xC/E Qi+Ky5sqxRmJT1LXJKS1lhiob/7WxYzIhjYRI7ZvXUF52htWWl0bi1w0OgxFXKup XrRviMHXk9R5P/A3SIZs3je4mlYgdsBXgQSEF9iQ+DbkrPaixz7tKM1JtlFa00Qj qRqTp8cdKxTuvaIb5DG6VvqEHKtkJ3n/i4Isg2xefvrFikbPNcBnR6SKmh/DVptz m3c9JN2Upo0P1Wb3VieKdsszKiy7Bc1g5xBC3FWE7Uc04m1i7CZ9DLnnY75rAgMB AAGjggO7MIIDtzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR2XQUSgpiHP0HR 1lYyqyW9vhEzmDAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRjMzNjIyOTI0RTVGOEQ0QkQwRjFBNjFG QUY3NzE2REFEOERCRTY2RkU5QUVCREExNzlEOTVBRUQ1NkIyQjY5Ny8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9GMzM2MjI5MjRFNUY4RDRCRDBGMUE2MUZBRjc3MTZEQUQ4REJFNjZGRTlB RUJEQTE3OUQ5NUFFRDU2QjJCNjk3LzAvNzY1RDA1MTI4Mjk4ODczRjQxRDFENjU2 MzJBQjI1QkRCRTExMzM5OC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCiswEAwQCqOP8 AwQCqu8gMA0EAgACMAcDBQAoAyJAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQG YTANBgkqhkiG9w0BAQsFAAOCAQEAY3sZ94sCfYLXPv0p3NARF/NAFAkQvx72uQXT jjii50M3YIAb8xcJfSoH3CCPMlCccxv3JXbgezbuFR2tMuXLRGUk1hJ3i8JDEdUa jUM9tMixnooAZCRRrRs2D9fF6ihj4iDabMs2wDv33oCDe2PTdRJ20r8lRdXV8kRq JgRKcbTsYjT+xo6GVKfPEwPxWmjbe/nPLFwDuqD0sZR6FQO4qLqzJXgAf4L5bMBp YnS1heRSZk9Wc3z2nS1DACmtRWEd1TobzZMzfAe5zq7JlFkCluT3g7TJMvLlaeAI S5wj7PMDW8Z3Tke2MRccuv+A3baOCbo4tItr99jEt2SuqcWmgg== -----END CERTIFICATE-----Generated at Mon Mar 2 14:44:05 2026 by rpki-client