$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/87170FE663930DA5DB9475CEAC8B0600B2C02832.cer File: 87170FE663930DA5DB9475CEAC8B0600B2C02832.cer (raw, json) Hash identifier: Tpxxg58VKZdjVuzOnfQsDmjsd3mNpykln7vny8akA8k= Subject key identifier: 87:17:0F:E6:63:93:0D:A5:DB:94:75:CE:AC:8B:06:00:B2:C0:28:32 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 0C090D9B942E1A91C9F9BCD175F8EF88373FEA06 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/28F749D15A239E7711C5BBFCD179E0221928BA4F3EBBC75B0E08C12A7EF28E69/0/87170FE663930DA5DB9475CEAC8B0600B2C02832.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/28F749D15A239E7711C5BBFCD179E0221928BA4F3EBBC75B0E08C12A7EF28E69/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 27 Jan 2026 22:28:15 +0000 Certificate not after: Tue 26 Jan 2027 22:33:15 +0000 Subordinate resources: IP: 45.224.96.0/22 IP: 2803:9c20::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:09:0d:9b:94:2e:1a:91:c9:f9:bc:d1:75:f8:ef:88:37:3f:ea:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 27 22:28:15 2026 GMT Not After : Jan 26 22:33:15 2027 GMT Subject: CN=87170FE663930DA5DB9475CEAC8B0600B2C02832 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:dd:00:e4:d0:54:ed:39:eb:7d:15:09:ff:cd: 35:1a:9a:6c:23:f1:01:fa:86:c0:93:7e:a3:9a:03: 01:da:2f:86:ec:fc:dd:c4:74:2f:68:fb:62:91:cd: d9:6c:43:29:41:23:2b:64:7d:62:34:e4:6e:27:46: 02:87:e0:60:dc:db:d7:52:91:41:69:47:77:87:1b: 7a:57:be:1a:39:00:05:02:23:73:5f:d1:e9:d4:7b: 58:5e:81:07:ab:a4:f3:fb:f0:b4:97:aa:e0:5d:4f: 9f:26:29:f4:58:36:6f:f0:63:2a:7d:e0:95:42:14: 8d:9e:2c:d2:94:48:6e:2a:e8:3b:7b:cc:fd:73:28: 78:dd:a5:df:02:e9:0d:ca:37:cf:4c:d1:48:fc:10: d8:d4:a6:9d:5b:f1:e5:69:a5:16:5a:5c:c6:a9:4c: b2:9e:2a:70:4c:98:36:74:f9:fc:6a:af:de:41:6e: 2c:2d:d6:18:77:9f:86:24:bc:14:eb:19:df:99:79: f4:b0:90:59:96:db:cc:95:c4:35:ed:a8:a5:1d:5d: 1a:19:bd:df:1a:e8:f5:bd:55:50:29:4b:3b:25:b5: f8:af:bb:4c:86:92:95:ae:06:37:d6:96:38:c9:40: 04:ca:0a:96:b9:df:50:2e:62:ad:f1:32:29:71:35: be:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 87:17:0F:E6:63:93:0D:A5:DB:94:75:CE:AC:8B:06:00:B2:C0:28:32 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/28F749D15A239E7711C5BBFCD179E0221928BA4F3EBBC75B0E08C12A7EF28E69/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/28F749D15A239E7711C5BBFCD179E0221928BA4F3EBBC75B0E08C12A7EF28E69/0/87170FE663930DA5DB9475CEAC8B0600B2C02832.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.224.96.0/22 IPv6: 2803:9c20::/32 Signature Algorithm: sha256WithRSAEncryption 18:0d:8d:13:89:9f:f3:db:1d:0a:4c:62:70:91:72:21:a2:cb: f1:1c:ee:ae:2b:0e:00:15:9d:b8:5c:d8:5d:b0:63:ea:c1:a5: 1b:8c:d1:cd:71:e0:83:9a:5a:d0:ab:9d:87:d8:30:17:20:b9: c6:31:db:5a:4e:4f:4c:25:73:89:8a:bf:48:b0:89:6e:b2:1b: 89:5c:cb:64:c4:d0:5e:aa:07:25:9d:82:d0:78:84:ed:7e:0b: 56:ff:50:d2:5a:27:bb:84:c3:6f:22:2e:a7:73:fc:b9:c3:96: 2a:e6:24:98:75:a4:bd:ea:34:46:c9:7c:c9:26:e4:c7:05:ee: 4f:da:bd:bc:20:bf:a9:0b:48:6b:0c:eb:a3:bb:6f:5f:61:da: 87:f4:9b:55:23:44:d4:98:70:e4:55:55:29:de:d5:1e:0d:48: b4:61:c7:89:17:26:34:e4:c3:7c:77:26:bd:1b:cb:4f:80:45: 9a:6c:37:95:b1:03:ce:db:de:f0:75:33:04:65:02:a2:4c:65: a0:b2:17:e7:f2:17:75:63:b1:b6:3b:ad:5e:0b:38:eb:6d:2a: 8e:74:98:db:27:21:d3:1d:5e:df:14:d2:9b:15:f2:f5:61:37: 78:6c:62:3a:fb:6b:a5:cf:6b:e1:04:b9:01:17:ff:38:3c:63: a4:c5:f1:22 -----BEGIN CERTIFICATE----- MIIGiTCCBXGgAwIBAgIUDAkNm5QuGpHJ+bzRdfjviDc/6gYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjcyMjI4MTVaFw0yNzAxMjYyMjMzMTVaMDMxMTAvBgNV BAMTKDg3MTcwRkU2NjM5MzBEQTVEQjk0NzVDRUFDOEIwNjAwQjJDMDI4MzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv3QDk0FTtOet9FQn/zTUammwj 8QH6hsCTfqOaAwHaL4bs/N3EdC9o+2KRzdlsQylBIytkfWI05G4nRgKH4GDc29dS kUFpR3eHG3pXvho5AAUCI3Nf0enUe1hegQerpPP78LSXquBdT58mKfRYNm/wYyp9 4JVCFI2eLNKUSG4q6Dt7zP1zKHjdpd8C6Q3KN89M0Uj8ENjUpp1b8eVppRZaXMap TLKeKnBMmDZ0+fxqr95Bbiwt1hh3n4YkvBTrGd+ZefSwkFmW28yVxDXtqKUdXRoZ vd8a6PW9VVApSzsltfivu0yGkpWuBjfWljjJQATKCpa531AuYq3xMilxNb7TAgMB AAGjggOTMIIDjzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSHFw/mY5MNpduU dc6siwYAssAoMjAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMjhGNzQ5RDE1QTIzOUU3NzExQzVCQkZD RDE3OUUwMjIxOTI4QkE0RjNFQkJDNzVCMEUwOEMxMkE3RUYyOEU2OS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8yOEY3NDlEMTVBMjM5RTc3MTFDNUJCRkNEMTc5RTAyMjE5MjhCQTRGM0VC QkM3NUIwRTA4QzEyQTdFRjI4RTY5LzAvODcxNzBGRTY2MzkzMERBNURCOTQ3NUNF QUM4QjA2MDBCMkMwMjgzMi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLeBgMA0EAgAC MAcDBQAoA5wgMA0GCSqGSIb3DQEBCwUAA4IBAQAYDY0TiZ/z2x0KTGJwkXIhosvx HO6uKw4AFZ24XNhdsGPqwaUbjNHNceCDmlrQq52H2DAXILnGMdtaTk9MJXOJir9I sIlushuJXMtkxNBeqgclnYLQeITtfgtW/1DSWie7hMNvIi6nc/y5w5Yq5iSYdaS9 6jRGyXzJJuTHBe5P2r28IL+pC0hrDOuju29fYdqH9JtVI0TUmHDkVVUp3tUeDUi0 YceJFyY05MN8dya9G8tPgEWabDeVsQPO297wdTMEZQKiTGWgshfn8hd1Y7G2O61e CzjrbSqOdJjbJyHTHV7fFNKbFfL1YTd4bGI6+2ulz2vhBLkBF/84PGOkxfEi -----END CERTIFICATE-----Generated at Mon Mar 2 18:48:45 2026 by rpki-client