$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.cer File: 7D1F174BFBB17B7822E82D3AA14E86D385483089.cer (raw, json) Hash identifier: vlg6gRtdAQkmbNQBq0UZ1vytt86dZjetvLjfE0Lr1/o= Subject key identifier: 7D:1F:17:4B:FB:B1:7B:78:22:E8:2D:3A:A1:4E:86:D3:85:48:30:89 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 4078F5E5555CC3071F263FFA2523134738DF5D51 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 27 Jan 2026 19:52:33 +0000 Certificate not after: Tue 26 Jan 2027 19:57:33 +0000 Subordinate resources: AS: 262216 IP: 138.0.104.0/22 IP: 190.113.224.0/21 IP: 2803:5a00::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:78:f5:e5:55:5c:c3:07:1f:26:3f:fa:25:23:13:47:38:df:5d:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 27 19:52:33 2026 GMT Not After : Jan 26 19:57:33 2027 GMT Subject: CN=7D1F174BFBB17B7822E82D3AA14E86D385483089 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:01:80:ff:43:39:62:6e:1d:45:23:1b:fe:c5: b7:d4:27:b0:63:c5:5a:a8:ef:a1:cc:f4:84:62:71: 75:e2:ec:77:12:ed:57:1a:50:8e:16:2b:5d:48:4a: fd:b4:21:89:53:11:96:bb:87:59:36:51:78:e1:ec: bf:22:6e:76:1e:79:fa:92:1b:03:96:55:47:d7:65: c0:8b:62:3f:72:1e:d2:00:98:da:d1:92:7a:a0:cc: 4d:09:40:0d:1b:4d:e6:82:75:65:0f:56:e2:30:02: c2:5b:ea:31:2b:8f:3c:d0:a9:f0:9e:03:bb:84:43: 44:a4:35:ee:a2:5a:d3:43:d4:c0:ff:28:42:11:7d: 11:ec:5c:8f:de:b4:ab:8d:71:9f:1f:a8:02:b3:b0: 53:47:2b:d3:2f:80:6f:ef:0a:30:ca:d9:21:ef:bf: 1b:94:7b:42:72:9f:a5:4b:d3:a4:ae:ab:48:77:e9: 84:97:66:2d:44:4d:c3:52:bc:12:05:d5:88:e0:8e: c1:04:1b:bc:c0:31:a2:e2:6d:35:3a:24:77:ad:ed: 2c:42:13:c1:b0:a8:bc:c5:2f:99:b7:80:10:41:9d: 13:b9:26:77:58:32:44:f2:fa:b0:3e:62:1f:3d:bd: c8:f5:5d:fc:bf:4f:de:aa:46:07:18:a0:8f:f6:4c: 0e:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7D:1F:17:4B:FB:B1:7B:78:22:E8:2D:3A:A1:4E:86:D3:85:48:30:89 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.0.104.0/22 190.113.224.0/21 IPv6: 2803:5a00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 262216 Signature Algorithm: sha256WithRSAEncryption 1f:60:cd:bc:be:10:f6:2e:de:01:fe:72:de:2a:40:52:25:88: c1:43:f3:eb:87:fb:b7:fe:3d:62:eb:32:42:cd:df:94:4f:55: 37:72:48:71:64:33:0f:d6:65:fd:6d:d6:7d:95:63:bd:53:f8: 06:05:5c:9f:69:61:05:6b:ee:9d:35:bf:b6:d8:c8:93:79:33: 92:a6:81:bc:6f:5d:8b:8d:d5:e2:98:7d:c1:d6:28:02:4c:da: 37:4a:90:68:6c:f2:ed:19:18:dc:20:38:cd:02:6e:e0:c1:e5: 62:6f:96:95:26:3b:f6:e7:d0:92:05:6c:d5:77:f4:65:09:1a: a2:94:ee:28:6d:df:f1:42:82:aa:a5:f7:73:7b:9c:73:f0:9d: 80:12:98:96:bc:fb:e7:e1:90:80:43:69:49:31:a0:d0:e4:c8: fe:85:fb:3b:29:f0:a5:c5:d4:24:b2:7b:56:ef:31:fe:70:b2: dc:de:a6:88:ca:ad:c1:95:50:ef:59:15:e1:5f:88:3f:35:bc: 2c:25:d1:27:45:d9:cf:23:8f:f1:05:1b:5b:fc:e3:20:fc:fc: 63:e9:60:57:aa:a3:cd:b2:fc:0b:aa:b4:3b:16:55:6c:e4:a1: d1:0a:52:c6:b0:a2:8f:bc:9b:a9:5f:86:4e:bd:fa:5f:ed:94: 86:1d:c7:7a -----BEGIN CERTIFICATE----- MIIGqzCCBZOgAwIBAgIUQHj15VVcwwcfJj/6JSMTRzjfXVEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjcxOTUyMzNaFw0yNzAxMjYxOTU3MzNaMDMxMTAvBgNV BAMTKDdEMUYxNzRCRkJCMTdCNzgyMkU4MkQzQUExNEU4NkQzODU0ODMwODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9AYD/Qzlibh1FIxv+xbfUJ7Bj xVqo76HM9IRicXXi7HcS7VcaUI4WK11ISv20IYlTEZa7h1k2UXjh7L8ibnYeefqS GwOWVUfXZcCLYj9yHtIAmNrRknqgzE0JQA0bTeaCdWUPVuIwAsJb6jErjzzQqfCe A7uEQ0SkNe6iWtND1MD/KEIRfRHsXI/etKuNcZ8fqAKzsFNHK9MvgG/vCjDK2SHv vxuUe0Jyn6VL06Suq0h36YSXZi1ETcNSvBIF1YjgjsEEG7zAMaLibTU6JHet7SxC E8GwqLzFL5m3gBBBnRO5JndYMkTy+rA+Yh89vcj1Xfy/T96qRgcYoI/2TA6lAgMB AAGjggO1MIIDsTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR9HxdL+7F7eCLo LTqhTobThUgwiTAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvREJDRTMzRDVBODRFQzNFQkU1ODAzQjQz OTg3OTkwODcxOEIxNjM3RkRGMDIwRUY5QzgyREI3QkUyMDIwMDdDQy8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9EQkNFMzNENUE4NEVDM0VCRTU4MDNCNDM5ODc5OTA4NzE4QjE2MzdGREYw MjBFRjlDODJEQjdCRTIwMjAwN0NDLzAvN0QxRjE3NEJGQkIxN0I3ODIyRTgyRDNB QTE0RTg2RDM4NTQ4MzA4OS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCigBoAwQDvnHg MA0EAgACMAcDBQAoA1oAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQASDANBgkq hkiG9w0BAQsFAAOCAQEAH2DNvL4Q9i7eAf5y3ipAUiWIwUPz64f7t/49YusyQs3f lE9VN3JIcWQzD9Zl/W3WfZVjvVP4BgVcn2lhBWvunTW/ttjIk3kzkqaBvG9di43V 4ph9wdYoAkzaN0qQaGzy7RkY3CA4zQJu4MHlYm+WlSY79ufQkgVs1Xf0ZQkaopTu KG3f8UKCqqX3c3ucc/CdgBKYlrz75+GQgENpSTGg0OTI/oX7OynwpcXUJLJ7Vu8x /nCy3N6miMqtwZVQ71kV4V+IPzW8LCXRJ0XZzyOP8QUbW/zjIPz8Y+lgV6qjzbL8 C6q0OxZVbOSh0QpSxrCij7ybqV+GTr36X+2Uhh3Heg== -----END CERTIFICATE-----Generated at Mon Mar 2 17:58:06 2026 by rpki-client