$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DB282B34740BD99CDF8943062B7DCEC3C4B1FF3.cer File: 8DB282B34740BD99CDF8943062B7DCEC3C4B1FF3.cer (raw, json) Hash identifier: 7aMSvWr3LY/hgCGEQ2qiwaHIPMDJSzjWJoVTaaS5Mwo= Subject key identifier: 8D:B2:82:B3:47:40:BD:99:CD:F8:94:30:62:B7:DC:EC:3C:4B:1F:F3 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 2FB1EA8A205FBEF6BAE8BC19C9C96F689A0E3954 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/D6C0CE8CFCA14141C3AE42DE6EFC6BBC7716894DF4542224014E417E2E14AB2B/0/8DB282B34740BD99CDF8943062B7DCEC3C4B1FF3.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/D6C0CE8CFCA14141C3AE42DE6EFC6BBC7716894DF4542224014E417E2E14AB2B/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Thu 29 Jan 2026 00:57:58 +0000 Certificate not after: Thu 28 Jan 2027 01:02:58 +0000 Subordinate resources: AS: 14117 IP: 131.0.172.0/22 IP: 179.56.0.0/15 IP: 181.226.0.0/16 IP: 190.13.128.0/18 IP: 190.95.0.0/17 IP: 190.121.0.0/17 IP: 190.211.0.0/18 IP: 190.217.128.0/17 IP: 200.85.192.0/19 IP: 200.126.64.0/18 IP: 201.186.0.0 -- 201.187.127.255 IP: 201.220.96.0/19 IP: 201.221.192.0/19 IP: 216.155.64.0/19 IP: 2803:6f00::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 05 Mar 2026 11:41:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:b1:ea:8a:20:5f:be:f6:ba:e8:bc:19:c9:c9:6f:68:9a:0e:39:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 29 00:57:58 2026 GMT Not After : Jan 28 01:02:58 2027 GMT Subject: CN=8DB282B34740BD99CDF8943062B7DCEC3C4B1FF3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:5e:81:59:15:a4:2f:f7:8a:88:d6:bb:c8:d0: 42:b8:ef:51:ba:29:a9:87:27:dc:79:5c:14:0e:af: 16:3c:cb:f4:7e:fa:07:3e:65:09:63:3c:b0:4c:b1: 9c:cc:ba:d8:69:57:9a:28:34:b2:93:f6:79:70:ad: 43:d7:6a:10:8b:6c:77:d2:d0:5e:b5:f0:75:bf:60: 2a:51:77:63:12:5b:a4:5d:7f:f8:5f:67:72:db:7e: 1a:89:f5:3e:93:b5:09:69:7d:bf:3a:cb:46:4a:c1: 5f:f8:e7:63:54:f7:7c:da:d2:f7:27:e8:c0:eb:0d: 18:45:5c:4b:87:36:eb:0a:6b:a6:41:22:aa:90:96: 30:e4:c9:2a:ff:4b:10:a2:69:5f:47:f3:5c:5c:16: 53:b1:c1:48:97:e1:dd:07:58:a6:c4:11:23:4e:28: 79:f5:63:0f:62:65:8a:8f:c0:51:08:1b:94:9d:f5: fb:b5:0a:a1:04:0d:72:36:90:47:bc:d2:a7:d4:be: 27:e4:18:d6:00:19:12:a7:6d:37:3b:c7:45:f2:81: 4e:ff:ab:1d:b4:52:ca:b1:9a:17:5a:e4:7c:ad:f8: 3e:4f:80:de:cc:88:a9:35:5e:d9:61:f7:36:4b:24: f6:d3:65:ea:d4:3e:72:95:35:75:66:be:48:e4:9b: 4f:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8D:B2:82:B3:47:40:BD:99:CD:F8:94:30:62:B7:DC:EC:3C:4B:1F:F3 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/D6C0CE8CFCA14141C3AE42DE6EFC6BBC7716894DF4542224014E417E2E14AB2B/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/D6C0CE8CFCA14141C3AE42DE6EFC6BBC7716894DF4542224014E417E2E14AB2B/0/8DB282B34740BD99CDF8943062B7DCEC3C4B1FF3.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.0.172.0/22 179.56.0.0/15 181.226.0.0/16 190.13.128.0/18 190.95.0.0/17 190.121.0.0/17 190.211.0.0/18 190.217.128.0/17 200.85.192.0/19 200.126.64.0/18 201.186.0.0-201.187.127.255 201.220.96.0/19 201.221.192.0/19 216.155.64.0/19 IPv6: 2803:6f00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 14117 Signature Algorithm: sha256WithRSAEncryption 86:ac:b3:a7:df:6a:49:b7:99:f5:71:e1:3c:7b:28:a5:2a:a4: 69:04:1e:97:d3:a7:b3:e6:9d:6e:c5:b7:c1:09:5e:3b:32:e6: 44:80:99:36:2e:23:f9:73:41:93:c9:60:09:97:3f:02:9b:f2: fe:b5:1d:6f:48:bc:54:f5:00:42:f1:c3:d1:cb:3e:fb:ce:0d: 4d:1f:5c:fb:dd:ee:6c:db:3b:ee:f5:f5:d5:b3:47:bb:b9:5d: 7c:88:04:33:06:d5:76:05:70:5b:03:2e:e2:dc:fd:de:5e:55: f9:8c:cd:0d:0a:e3:88:fc:dd:0b:30:94:17:14:60:93:be:3c: 85:49:f0:7a:eb:40:af:1c:12:ac:f2:1d:cd:25:0a:df:9c:e5: 35:8e:02:4d:74:a0:8c:03:26:62:dc:1c:68:d3:de:08:70:de: 23:38:a0:0f:cf:b6:82:0b:6c:ed:59:d1:6f:cb:5c:f4:59:f9: 5d:05:0f:5f:6f:ae:96:c7:28:ea:c4:5d:69:30:77:27:18:b3: ae:aa:58:ad:ca:30:ed:21:04:b1:e1:79:72:66:65:a1:81:0f: e6:1d:3b:bd:f1:98:75:b1:af:bc:50:85:2e:53:ac:eb:5e:27: ce:92:86:9a:7b:2e:8d:02:df:b5:9f:8c:1b:6d:4b:0a:1d:01: 59:08:d5:02 -----BEGIN CERTIFICATE----- MIIG+DCCBeCgAwIBAgIUL7HqiiBfvva66LwZyclvaJoOOVQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjkwMDU3NThaFw0yNzAxMjgwMTAyNThaMDMxMTAvBgNV BAMTKDhEQjI4MkIzNDc0MEJEOTlDREY4OTQzMDYyQjdEQ0VDM0M0QjFGRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJXoFZFaQv94qI1rvI0EK471G6 KamHJ9x5XBQOrxY8y/R++gc+ZQljPLBMsZzMuthpV5ooNLKT9nlwrUPXahCLbHfS 0F618HW/YCpRd2MSW6Rdf/hfZ3LbfhqJ9T6TtQlpfb86y0ZKwV/452NU93za0vcn 6MDrDRhFXEuHNusKa6ZBIqqQljDkySr/SxCiaV9H81xcFlOxwUiX4d0HWKbEESNO KHn1Yw9iZYqPwFEIG5Sd9fu1CqEEDXI2kEe80qfUvifkGNYAGRKnbTc7x0XygU7/ qx20Usqxmhda5Hyt+D5PgN7MiKk1Xtlh9zZLJPbTZerUPnKVNXVmvkjkm0/xAgMB AAGjggQCMIID/jAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSNsoKzR0C9mc34 lDBit9zsPEsf8zAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRDZDMENFOENGQ0ExNDE0MUMzQUU0MkRF NkVGQzZCQkM3NzE2ODk0REY0NTQyMjI0MDE0RTQxN0UyRTE0QUIyQi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9ENkMwQ0U4Q0ZDQTE0MTQxQzNBRTQyREU2RUZDNkJCQzc3MTY4OTRERjQ1 NDIyMjQwMTRFNDE3RTJFMTRBQjJCLzAvOERCMjgyQjM0NzQwQkQ5OUNERjg5NDMw NjJCN0RDRUMzQzRCMUZGMy5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMIGBBggrBgEFBQcBBwEB/wRyMHAwXwQCAAEwWQMEAoMArAMDAbM4 AwMAteIDBAa+DYADBAe+XwADBAe+eQADBAa+0wADBAe+2YADBAXIVcADBAbIfkAw CwMDAcm6AwQHybsAAwQFydxgAwQFyd3AAwQF2JtAMA0EAgACMAcDBQAoA28AMBkG CCsGAQUFBwEIAQH/BAowCKAGMAQCAjclMA0GCSqGSIb3DQEBCwUAA4IBAQCGrLOn 32pJt5n1ceE8eyilKqRpBB6X06ez5p1uxbfBCV47MuZEgJk2LiP5c0GTyWAJlz8C m/L+tR1vSLxU9QBC8cPRyz77zg1NH1z73e5s2zvu9fXVs0e7uV18iAQzBtV2BXBb Ay7i3P3eXlX5jM0NCuOI/N0LMJQXFGCTvjyFSfB660CvHBKs8h3NJQrfnOU1jgJN dKCMAyZi3Bxo094IcN4jOKAPz7aCC2ztWdFvy1z0WfldBQ9fb66WxyjqxF1pMHcn GLOuqlityjDtIQSx4XlyZmWhgQ/mHTu98Zh1sa+8UIUuU6zrXifOkoaaey6NAt+1 n4wbbUsKHQFZCNUC -----END CERTIFICATE-----Generated at Mon Mar 2 09:49:58 2026 by rpki-client