$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8B75AED69EDD3EDCFF669A1AD71F8B9BC53040BE.cer File: 8B75AED69EDD3EDCFF669A1AD71F8B9BC53040BE.cer (raw, json) Hash identifier: hiB1ILTzIzwCCxtBMRHvML0IjBXJK6AAfgdZMtc91/g= Subject key identifier: 8B:75:AE:D6:9E:DD:3E:DC:FF:66:9A:1A:D7:1F:8B:9B:C5:30:40:BE Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 2A289304AF23CA9C1373408F1D1EC46A5EB343FF Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/E92083FBD424D98BB7C69E11CFACDAC1AD2C342444BDF1C410A335BD5BC8602C/0/8B75AED69EDD3EDCFF669A1AD71F8B9BC53040BE.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/E92083FBD424D98BB7C69E11CFACDAC1AD2C342444BDF1C410A335BD5BC8602C/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 21:11:28 +0000 Certificate not after: Wed 27 Jan 2027 21:16:28 +0000 Subordinate resources: AS: 263759 IP: 190.122.188.0/22 IP: 2803:4300::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:28:93:04:af:23:ca:9c:13:73:40:8f:1d:1e:c4:6a:5e:b3:43:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 21:11:28 2026 GMT Not After : Jan 27 21:16:28 2027 GMT Subject: CN=8B75AED69EDD3EDCFF669A1AD71F8B9BC53040BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:4b:96:44:ac:bd:ee:4f:ed:91:e8:55:5a:4d: 89:fa:70:1f:39:bc:f0:6d:be:d9:2c:66:ac:1d:49: 36:eb:b4:2a:9c:41:0f:ef:a7:81:fd:dd:4e:6d:de: 58:5d:ab:e8:99:bd:a4:e0:93:7f:46:01:28:cb:a6: b6:09:43:39:ba:c0:de:a7:e2:c7:86:7a:4e:7e:b1: 8e:6f:85:a7:ba:ce:97:c2:ba:32:a6:6d:49:05:56: f0:b2:2c:29:f3:bf:a6:1c:e5:81:01:9a:51:57:4a: b6:37:f6:56:1b:16:71:86:b1:1a:3e:f6:ea:45:fd: 0a:f2:b0:e0:38:99:ec:15:bd:0b:b6:94:e0:ef:62: 3d:73:ce:a2:4a:61:e1:50:1b:aa:9d:12:a4:c7:28: 7c:4e:db:55:4a:93:20:d1:63:05:d0:72:c6:2b:d3: a3:22:17:96:56:76:f5:a2:ff:d8:b9:f6:2f:e3:e5: 06:f0:f8:65:e9:82:5d:89:15:fb:da:aa:0c:55:33: 9f:ff:db:b3:67:b2:86:65:17:ab:2b:c1:ef:6a:6c: 3e:1c:70:e5:88:77:4e:7b:7d:9f:3d:c0:cf:e4:ca: 9b:74:e1:8e:90:30:7c:e4:3b:dd:c0:f9:f7:0d:f5: 79:a3:85:f9:b5:8a:7b:6c:50:f1:95:74:75:31:95: 9c:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8B:75:AE:D6:9E:DD:3E:DC:FF:66:9A:1A:D7:1F:8B:9B:C5:30:40:BE X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/E92083FBD424D98BB7C69E11CFACDAC1AD2C342444BDF1C410A335BD5BC8602C/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/E92083FBD424D98BB7C69E11CFACDAC1AD2C342444BDF1C410A335BD5BC8602C/0/8B75AED69EDD3EDCFF669A1AD71F8B9BC53040BE.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 190.122.188.0/22 IPv6: 2803:4300::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263759 Signature Algorithm: sha256WithRSAEncryption 38:5e:95:71:09:46:42:d5:31:73:6e:c5:3c:e4:bb:a2:a6:eb: a5:04:cc:7c:1a:9f:fd:9c:25:10:cb:83:c9:89:73:57:f1:8b: 7c:d5:41:49:c5:78:7d:a7:d3:09:fb:0c:32:5f:93:90:10:48: cb:41:84:7f:01:ee:79:e9:10:8e:e9:3d:13:68:ad:7b:75:01: 38:b8:29:d0:7f:53:97:f4:db:d5:65:4d:71:b2:24:42:55:ae: d2:fc:ad:34:e0:c0:15:83:d4:d9:c5:02:e3:37:0d:89:c7:eb: 51:38:b1:68:c9:56:7a:8e:86:d7:96:2f:64:7a:66:81:e4:7c: ff:21:c9:be:1f:17:64:e8:dc:68:fe:03:ee:de:67:57:27:70: de:c7:89:e2:9e:93:0f:7e:61:ab:37:1c:eb:05:0b:64:b8:51: 28:22:94:3d:a1:2f:d4:f8:6a:80:4c:14:ab:63:d5:52:d4:5a: b9:02:a3:f1:65:c4:d4:d9:c1:ae:8f:4d:c1:70:bd:31:bc:79: 1b:01:47:c3:78:e8:9b:8e:45:8e:2f:98:8e:2e:8c:47:1d:ca: 5e:4c:bd:cd:5f:31:8b:7d:99:5d:7e:e5:da:53:8d:fa:04:29: 09:2a:38:26:98:4a:26:f8:89:a5:5d:c5:74:7b:e0:6d:9d:a8: a5:f2:60:3e -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUKiiTBK8jypwTc0CPHR7Eal6zQ/8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgyMTExMjhaFw0yNzAxMjcyMTE2MjhaMDMxMTAvBgNV BAMTKDhCNzVBRUQ2OUVERDNFRENGRjY2OUExQUQ3MUY4QjlCQzUzMDQwQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUS5ZErL3uT+2R6FVaTYn6cB85 vPBtvtksZqwdSTbrtCqcQQ/vp4H93U5t3lhdq+iZvaTgk39GASjLprYJQzm6wN6n 4seGek5+sY5vhae6zpfCujKmbUkFVvCyLCnzv6Yc5YEBmlFXSrY39lYbFnGGsRo+ 9upF/QrysOA4mewVvQu2lODvYj1zzqJKYeFQG6qdEqTHKHxO21VKkyDRYwXQcsYr 06MiF5ZWdvWi/9i59i/j5Qbw+GXpgl2JFfvaqgxVM5//27NnsoZlF6srwe9qbD4c cOWId057fZ89wM/kypt04Y6QMHzkO93A+fcN9Xmjhfm1intsUPGVdHUxlZxdAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSLda7Wnt0+3P9m mhrXH4ubxTBAvjAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTkyMDgzRkJENDI0RDk4QkI3QzY5RTEx Q0ZBQ0RBQzFBRDJDMzQyNDQ0QkRGMUM0MTBBMzM1QkQ1QkM4NjAyQy8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9FOTIwODNGQkQ0MjREOThCQjdDNjlFMTFDRkFDREFDMUFEMkMzNDI0NDRC REYxQzQxMEEzMzVCRDVCQzg2MDJDLzAvOEI3NUFFRDY5RUREM0VEQ0ZGNjY5QTFB RDcxRjhCOUJDNTMwNDBCRS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCvnq8MA0EAgAC MAcDBQAoA0MAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQGTzANBgkqhkiG9w0B AQsFAAOCAQEAOF6VcQlGQtUxc27FPOS7oqbrpQTMfBqf/ZwlEMuDyYlzV/GLfNVB ScV4fafTCfsMMl+TkBBIy0GEfwHueekQjuk9E2ite3UBOLgp0H9Tl/Tb1WVNcbIk QlWu0vytNODAFYPU2cUC4zcNicfrUTixaMlWeo6G15YvZHpmgeR8/yHJvh8XZOjc aP4D7t5nVydw3seJ4p6TD35hqzcc6wULZLhRKCKUPaEv1PhqgEwUq2PVUtRauQKj 8WXE1NnBro9NwXC9Mbx5GwFHw3jom45Fji+Yji6MRx3KXky9zV8xi32ZXX7l2lON +gQpCSo4JphKJviJpV3FdHvgbZ2opfJgPg== -----END CERTIFICATE-----Generated at Mon Mar 2 20:19:35 2026 by rpki-client