$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8616AFEEE37AE6340A6524D920AA474EED6B6A70.cer File: 8616AFEEE37AE6340A6524D920AA474EED6B6A70.cer (raw, json) Hash identifier: WYTz3Ht8GLvh7osP5+HN+yC3Wi/Xu5gJrbqGi7+FQZM= Subject key identifier: 86:16:AF:EE:E3:7A:E6:34:0A:65:24:D9:20:AA:47:4E:ED:6B:6A:70 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 644CACAF6FEB5346EB46C4FBC77426B09ADD79B9 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/D6633A8732FC2FBB1FC821D3A7390B5E1B0220A07672532B53E32506040C0B44/0/8616AFEEE37AE6340A6524D920AA474EED6B6A70.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/D6633A8732FC2FBB1FC821D3A7390B5E1B0220A07672532B53E32506040C0B44/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 01:05:12 +0000 Certificate not after: Wed 27 Jan 2027 01:10:12 +0000 Subordinate resources: AS: 263798 IP: 138.186.20.0/22 IP: 190.61.32.0/19 IP: 2803:bc40::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:4c:ac:af:6f:eb:53:46:eb:46:c4:fb:c7:74:26:b0:9a:dd:79:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 01:05:12 2026 GMT Not After : Jan 27 01:10:12 2027 GMT Subject: CN=8616AFEEE37AE6340A6524D920AA474EED6B6A70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:be:98:fc:f1:ff:0c:d5:d6:3e:59:b3:a9:6d: 27:d8:0e:62:de:61:8d:de:b3:cd:8f:02:c8:d5:af: 0b:ae:ac:97:32:7c:0f:74:b7:8b:28:d9:93:7d:4a: 22:54:83:1e:79:15:f3:91:b5:5f:09:43:ae:eb:d7: c8:80:a6:42:50:4b:14:0e:23:2a:81:98:7d:f9:7d: 5d:f2:37:1c:27:ff:4f:ff:eb:fb:29:9e:ce:31:16: 25:6c:69:36:c9:3c:78:e7:36:ad:3e:35:db:fa:b7: 20:26:5f:88:2d:8c:a8:5f:6a:7e:8f:b7:8b:8f:95: 33:a2:f8:19:3d:a2:51:bd:0c:a4:4d:de:49:d8:c3: dd:3f:c1:d6:dd:c1:ba:19:bc:a8:8a:57:74:f2:01: 34:4e:74:86:e5:12:52:12:ed:b9:d7:41:22:fb:77: ad:de:b4:61:bd:44:b9:e8:e3:a4:09:66:f2:39:7b: e8:bb:64:0b:a3:d6:9f:c6:7c:4a:72:09:78:52:86: 52:53:c1:b5:69:84:2e:69:d1:d3:8f:a3:f5:60:1a: 20:d6:3a:c0:5c:e9:3e:f2:88:66:22:49:17:18:18: e1:26:ee:03:b7:7f:ac:68:74:63:78:87:cd:c1:30: d8:f7:c6:16:15:64:c7:5d:77:45:86:20:5c:d9:af: 6e:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 86:16:AF:EE:E3:7A:E6:34:0A:65:24:D9:20:AA:47:4E:ED:6B:6A:70 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/D6633A8732FC2FBB1FC821D3A7390B5E1B0220A07672532B53E32506040C0B44/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/D6633A8732FC2FBB1FC821D3A7390B5E1B0220A07672532B53E32506040C0B44/0/8616AFEEE37AE6340A6524D920AA474EED6B6A70.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.186.20.0/22 190.61.32.0/19 IPv6: 2803:bc40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263798 Signature Algorithm: sha256WithRSAEncryption 10:18:b9:87:9e:a9:95:ac:2f:1f:9f:b4:fa:97:f2:6f:c4:2d: e6:87:82:f7:d2:8d:cc:10:6f:2b:e7:f7:61:5a:c0:90:3d:af: 79:8b:06:fb:3b:01:f2:85:0d:5a:11:13:a4:66:95:60:6c:12: 1d:34:5f:82:64:55:da:96:85:4b:25:68:97:0d:dd:9a:5e:4e: 7d:34:8d:0a:40:b1:11:d3:4b:38:ba:10:e5:65:d8:80:81:a1: 74:84:a4:4f:ea:56:bd:b3:ee:4f:41:10:0b:ea:1c:0d:5a:1e: 20:56:b3:c9:43:03:be:be:ff:9e:74:4a:70:14:60:88:71:ae: 68:ba:e9:25:36:74:f4:1e:73:28:13:33:cd:02:ab:f7:d5:89: af:b8:21:c3:5c:ad:27:17:3c:ad:fd:d6:bd:2e:ce:51:41:ad: d2:0d:95:2d:9c:4e:d2:e1:89:b6:15:4f:7a:15:3f:fc:a8:fc: 13:a9:e0:10:0d:73:59:aa:ad:17:0d:1f:ba:70:7f:99:fd:50: 25:71:5b:d8:7f:79:9c:c3:a8:93:19:a6:aa:f7:14:9f:ad:e9: 08:4d:46:67:7a:65:6a:a5:d4:3f:7a:aa:5a:f6:e1:76:d2:84: 2a:e4:51:73:ca:e1:44:5b:68:80:28:9f:42:18:f6:da:4f:e3: 60:98:61:01 -----BEGIN CERTIFICATE----- MIIGqzCCBZOgAwIBAgIUZEysr2/rU0brRsT7x3QmsJrdebkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgwMTA1MTJaFw0yNzAxMjcwMTEwMTJaMDMxMTAvBgNV BAMTKDg2MTZBRkVFRTM3QUU2MzQwQTY1MjREOTIwQUE0NzRFRUQ2QjZBNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5vpj88f8M1dY+WbOpbSfYDmLe YY3es82PAsjVrwuurJcyfA90t4so2ZN9SiJUgx55FfORtV8JQ67r18iApkJQSxQO IyqBmH35fV3yNxwn/0//6/spns4xFiVsaTbJPHjnNq0+Ndv6tyAmX4gtjKhfan6P t4uPlTOi+Bk9olG9DKRN3knYw90/wdbdwboZvKiKV3TyATROdIblElIS7bnXQSL7 d63etGG9RLno46QJZvI5e+i7ZAuj1p/GfEpyCXhShlJTwbVphC5p0dOPo/VgGiDW OsBc6T7yiGYiSRcYGOEm7gO3f6xodGN4h83BMNj3xhYVZMddd0WGIFzZr277AgMB AAGjggO1MIIDsTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSGFq/u43rmNApl JNkgqkdO7WtqcDAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRDY2MzNBODczMkZDMkZCQjFGQzgyMUQz QTczOTBCNUUxQjAyMjBBMDc2NzI1MzJCNTNFMzI1MDYwNDBDMEI0NC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9ENjYzM0E4NzMyRkMyRkJCMUZDODIxRDNBNzM5MEI1RTFCMDIyMEEwNzY3 MjUzMkI1M0UzMjUwNjA0MEMwQjQ0LzAvODYxNkFGRUVFMzdBRTYzNDBBNjUyNEQ5 MjBBQTQ3NEVFRDZCNkE3MC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCiroUAwQFvj0g MA0EAgACMAcDBQAoA7xAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQGdjANBgkq hkiG9w0BAQsFAAOCAQEAEBi5h56plawvH5+0+pfyb8Qt5oeC99KNzBBvK+f3YVrA kD2veYsG+zsB8oUNWhETpGaVYGwSHTRfgmRV2paFSyVolw3dml5OfTSNCkCxEdNL OLoQ5WXYgIGhdISkT+pWvbPuT0EQC+ocDVoeIFazyUMDvr7/nnRKcBRgiHGuaLrp JTZ09B5zKBMzzQKr99WJr7ghw1ytJxc8rf3WvS7OUUGt0g2VLZxO0uGJthVPehU/ /Kj8E6ngEA1zWaqtFw0funB/mf1QJXFb2H95nMOokxmmqvcUn63pCE1GZ3plaqXU P3qqWvbhdtKEKuRRc8rhRFtogCifQhj22k/jYJhhAQ== -----END CERTIFICATE-----Generated at Mon Mar 2 15:45:23 2026 by rpki-client