$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7E458BAEF9BA9DCE3AA516F258A994358878C467.cer File: 7E458BAEF9BA9DCE3AA516F258A994358878C467.cer (raw, json) Hash identifier: 2lp9QbHPcpQ24ZoTJoUiccK0DWZM7b6Kjvi2K39OHRk= Subject key identifier: 7E:45:8B:AE:F9:BA:9D:CE:3A:A5:16:F2:58:A9:94:35:88:78:C4:67 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 3DF670706C1A04DD8158B3281EDF67A325F983B3 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/FD200842DF1B005F21BFA33AF9BE5EC4D424D0E49C109E5A0A8F57F63DD07D9F/0/7E458BAEF9BA9DCE3AA516F258A994358878C467.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/FD200842DF1B005F21BFA33AF9BE5EC4D424D0E49C109E5A0A8F57F63DD07D9F/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 27 Jan 2026 17:50:46 +0000 Certificate not after: Tue 26 Jan 2027 17:55:46 +0000 Subordinate resources: AS: 28501 IP: 200.33.26.0/23 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:f6:70:70:6c:1a:04:dd:81:58:b3:28:1e:df:67:a3:25:f9:83:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 27 17:50:46 2026 GMT Not After : Jan 26 17:55:46 2027 GMT Subject: CN=7E458BAEF9BA9DCE3AA516F258A994358878C467 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:46:48:71:bf:54:e6:e8:13:2b:be:ea:dd:81: 63:76:4f:fd:62:f3:48:36:4f:50:d5:12:8e:5d:23: 93:59:5e:71:a4:c1:a9:59:96:ef:c3:34:77:11:37: be:a0:cf:be:23:9b:fe:fa:8f:d0:8d:4d:ea:ac:68: 50:f2:1e:6f:c6:f0:37:6c:68:e9:11:2a:5d:d1:dd: 5c:70:e1:54:42:0a:a2:9c:ea:4e:a3:db:e1:ed:f2: aa:e3:b5:70:ec:62:d0:1a:95:11:0a:5d:c6:75:d8: ce:b1:32:06:ef:28:8d:d3:c9:cf:09:9b:ce:36:d4: 03:e9:d4:2c:dd:fc:5c:b8:55:87:fb:a1:52:99:2f: dc:fd:ad:18:dc:b7:49:0e:ca:08:9f:83:f3:e9:4e: 78:c2:92:c5:54:f6:ad:3e:2c:fc:35:aa:1a:b0:d5: 58:72:02:e1:2c:7a:47:bf:62:1c:23:5b:ed:45:57: 9d:df:3b:94:a9:48:2f:63:4c:4e:ef:cf:69:d9:1a: 2a:0b:a4:65:81:84:c2:14:19:54:ee:ad:73:4a:cd: 33:9c:df:6e:08:db:12:f8:ba:67:bd:9d:d1:6e:bb: 2f:01:cd:c3:1b:db:ed:b8:28:d4:14:eb:69:f3:1b: a1:7d:28:7d:c8:30:4c:41:f6:38:96:0e:84:fb:ba: 3d:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7E:45:8B:AE:F9:BA:9D:CE:3A:A5:16:F2:58:A9:94:35:88:78:C4:67 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/FD200842DF1B005F21BFA33AF9BE5EC4D424D0E49C109E5A0A8F57F63DD07D9F/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/FD200842DF1B005F21BFA33AF9BE5EC4D424D0E49C109E5A0A8F57F63DD07D9F/0/7E458BAEF9BA9DCE3AA516F258A994358878C467.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.33.26.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28501 Signature Algorithm: sha256WithRSAEncryption 0b:1c:ad:8d:f4:31:8e:13:c2:20:31:6c:4e:70:c7:80:55:6a: ea:0e:43:15:01:6c:8d:52:fa:8b:7f:85:b9:81:de:00:bf:99: 39:10:39:b9:4c:e6:df:57:95:92:81:b1:cd:45:43:47:fd:a5: 32:ae:ef:30:96:da:4e:63:2b:86:80:a4:c9:9f:e5:4c:37:a0: e1:fb:bd:bc:0a:ca:16:b9:c4:26:42:71:51:09:5a:d8:b1:b1: 38:b0:e2:9a:a7:d4:5e:a7:27:12:2c:9e:8c:c9:1a:6a:61:a0: 6b:e7:e8:fe:fb:b6:8d:99:b3:92:58:c6:b5:a8:8c:f9:ac:84: fb:bc:c1:67:ca:ee:ee:7a:bc:1c:bc:73:5e:5f:86:59:27:85: 91:24:46:fb:d4:1b:18:04:d0:cd:43:80:f8:a2:07:04:16:10: 3e:1a:27:f9:d2:24:b6:7a:e2:04:03:03:9e:8d:ec:41:1f:aa: 6c:9e:ee:7f:e6:4a:f0:a5:fe:52:b3:08:6f:4c:d6:aa:85:bb: f5:a8:61:96:96:28:c4:a0:c4:90:5c:89:a0:b8:c0:f1:ef:6b: 5e:89:5c:80:e3:dc:e9:1d:b7:95:de:3c:f5:5f:f5:8c:19:fa: 10:7a:1a:18:f7:3e:2c:8e:91:46:96:88:d0:af:1b:7e:07:41: a0:43:7b:40 -----BEGIN CERTIFICATE----- MIIGlTCCBX2gAwIBAgIUPfZwcGwaBN2BWLMoHt9noyX5g7MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjcxNzUwNDZaFw0yNzAxMjYxNzU1NDZaMDMxMTAvBgNV BAMTKDdFNDU4QkFFRjlCQTlEQ0UzQUE1MTZGMjU4QTk5NDM1ODg3OEM0NjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBRkhxv1Tm6BMrvurdgWN2T/1i 80g2T1DVEo5dI5NZXnGkwalZlu/DNHcRN76gz74jm/76j9CNTeqsaFDyHm/G8Dds aOkRKl3R3Vxw4VRCCqKc6k6j2+Ht8qrjtXDsYtAalREKXcZ12M6xMgbvKI3Tyc8J m8421APp1Czd/Fy4VYf7oVKZL9z9rRjct0kOygifg/PpTnjCksVU9q0+LPw1qhqw 1VhyAuEseke/YhwjW+1FV53fO5SpSC9jTE7vz2nZGioLpGWBhMIUGVTurXNKzTOc 324I2xL4ume9ndFuuy8BzcMb2+24KNQU62nzG6F9KH3IMExB9jiWDoT7uj1NAgMB AAGjggOfMIIDmzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR+RYuu+bqdzjql FvJYqZQ1iHjEZzAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRkQyMDA4NDJERjFCMDA1RjIxQkZBMzNB RjlCRTVFQzRENDI0RDBFNDlDMTA5RTVBMEE4RjU3RjYzREQwN0Q5Ri8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9GRDIwMDg0MkRGMUIwMDVGMjFCRkEzM0FGOUJFNUVDNEQ0MjREMEU0OUMx MDlFNUEwQThGNTdGNjNERDA3RDlGLzAvN0U0NThCQUVGOUJBOURDRTNBQTUxNkYy NThBOTk0MzU4ODc4QzQ2Ny5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQByCEaMBkGCCsG AQUFBwEIAQH/BAowCKAGMAQCAm9VMA0GCSqGSIb3DQEBCwUAA4IBAQALHK2N9DGO E8IgMWxOcMeAVWrqDkMVAWyNUvqLf4W5gd4Av5k5EDm5TObfV5WSgbHNRUNH/aUy ru8wltpOYyuGgKTJn+VMN6Dh+728CsoWucQmQnFRCVrYsbE4sOKap9RepycSLJ6M yRpqYaBr5+j++7aNmbOSWMa1qIz5rIT7vMFnyu7uerwcvHNeX4ZZJ4WRJEb71BsY BNDNQ4D4ogcEFhA+Gif50iS2euIEAwOejexBH6psnu5/5krwpf5SswhvTNaqhbv1 qGGWlijEoMSQXImguMDx72teiVyA49zpHbeV3jz1X/WMGfoQehoY9z4sjpFGlojQ rxt+B0GgQ3tA -----END CERTIFICATE-----Generated at Mon Mar 2 16:34:34 2026 by rpki-client