$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90FA89BC83FD94C22D83DE3D35F34FEFEF422C56.cer File: 90FA89BC83FD94C22D83DE3D35F34FEFEF422C56.cer (raw, json) Hash identifier: f9swd8GVkJqYIe2bott6NPcQv/LmMDQsnFIaQi1ESjI= Subject key identifier: 90:FA:89:BC:83:FD:94:C2:2D:83:DE:3D:35:F3:4F:EF:EF:42:2C:56 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 0C595D2E04241440BD08C7C096EA270E852C3EB3 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/2FFA0E0B6901FE40A8CA6DECFD5A8FAA5DD4CAA138A3D762280875E175B5ECBA/0/90FA89BC83FD94C22D83DE3D35F34FEFEF422C56.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/2FFA0E0B6901FE40A8CA6DECFD5A8FAA5DD4CAA138A3D762280875E175B5ECBA/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 17:11:43 +0000 Certificate not after: Wed 27 Jan 2027 17:16:43 +0000 Subordinate resources: AS: 61475 IP: 201.131.41.0/24 IP: 2801:19:a000::/48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 05 Mar 2026 11:41:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:59:5d:2e:04:24:14:40:bd:08:c7:c0:96:ea:27:0e:85:2c:3e:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 17:11:43 2026 GMT Not After : Jan 27 17:16:43 2027 GMT Subject: CN=90FA89BC83FD94C22D83DE3D35F34FEFEF422C56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:44:dc:f6:b8:d2:99:77:5d:4b:0e:a6:25:4e: d5:f6:6b:62:c3:16:88:95:e2:d1:5e:ab:3f:a7:50: 4e:e8:bb:a8:24:04:5a:95:dd:58:1c:1d:12:c8:48: 44:0b:7f:ac:4f:70:43:eb:f1:b1:1f:51:83:e9:6b: d5:17:99:e0:58:24:29:50:58:7b:31:49:74:ab:48: ff:96:7b:07:f8:d4:6f:3a:ac:d4:e1:56:66:36:95: 81:bb:29:6c:c0:c9:bb:55:a4:2c:ef:2d:aa:64:9a: a3:a4:1d:27:c2:4f:73:15:4e:d4:c9:51:1c:fd:b5: 85:62:7d:17:14:ed:af:7a:4b:b3:3d:21:9f:80:4a: d7:59:1c:b0:86:ce:28:5c:76:63:3a:09:03:2d:2d: cf:a8:b3:fd:aa:30:45:20:92:fc:44:27:01:a5:77: 64:46:3c:a9:3f:42:fc:48:8a:d5:4d:31:f6:3c:27: 0e:e4:66:86:af:9b:b2:81:20:53:61:cb:cd:db:bf: 51:d4:ee:3f:0d:c3:b1:17:9f:5e:ee:9c:a3:84:f7: d8:18:18:6b:9a:9f:38:da:e3:ca:15:34:55:57:f5: a1:ae:ce:3a:6e:f9:53:b1:98:81:af:17:aa:ca:99: 96:ca:e6:69:0d:ce:4f:36:fb:11:00:a9:99:8b:79: 5f:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 90:FA:89:BC:83:FD:94:C2:2D:83:DE:3D:35:F3:4F:EF:EF:42:2C:56 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/2FFA0E0B6901FE40A8CA6DECFD5A8FAA5DD4CAA138A3D762280875E175B5ECBA/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/2FFA0E0B6901FE40A8CA6DECFD5A8FAA5DD4CAA138A3D762280875E175B5ECBA/0/90FA89BC83FD94C22D83DE3D35F34FEFEF422C56.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 201.131.41.0/24 IPv6: 2801:19:a000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 61475 Signature Algorithm: sha256WithRSAEncryption 87:f4:71:14:02:2f:f7:32:06:11:58:d9:0d:f1:f2:0d:0d:9d: 30:92:e7:2e:a5:c9:e3:df:ec:8e:bb:80:2c:11:c9:d7:d9:bb: 3d:c2:4e:a5:86:3f:24:4b:1e:cb:0e:af:02:e3:94:f1:d4:f9: 11:03:63:a7:77:5c:69:95:b2:6f:40:86:1b:fa:fd:4a:42:99: 9f:88:50:a4:f0:2d:36:e6:a8:cf:ed:5b:ec:ee:d4:97:fd:8a: 10:99:66:d1:6d:ce:63:a2:ce:b6:99:5e:63:d3:a5:e0:aa:94: e0:46:79:ab:5f:b1:52:94:78:20:e9:43:24:08:3f:e9:97:f1: 7c:43:ac:ca:ec:bd:93:b2:07:46:9c:ab:c8:49:dd:b8:71:24: 2b:00:6e:3e:4f:57:3e:15:ad:6c:4d:53:4c:31:0f:e2:15:30: 1a:4d:49:46:0a:18:48:f1:0c:be:e5:bc:da:84:a6:da:ab:6d: 14:83:27:b1:87:f1:5c:b4:3c:fd:d1:a5:8e:60:0a:0c:fb:74: 7a:e4:7b:a5:ff:87:fd:4f:d9:e9:06:7a:7a:02:90:7c:48:5b: 7a:78:c9:b7:91:9d:bf:8f:b8:9a:ce:a4:63:4b:40:b7:ee:fe: 28:f8:9d:fc:40:49:a7:22:c0:28:61:7d:c0:db:f9:a7:b2:12: 7a:b1:07:3e -----BEGIN CERTIFICATE----- MIIGpzCCBY+gAwIBAgIUDFldLgQkFEC9CMfAluonDoUsPrMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgxNzExNDNaFw0yNzAxMjcxNzE2NDNaMDMxMTAvBgNV BAMTKDkwRkE4OUJDODNGRDk0QzIyRDgzREUzRDM1RjM0RkVGRUY0MjJDNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbRNz2uNKZd11LDqYlTtX2a2LD FoiV4tFeqz+nUE7ou6gkBFqV3VgcHRLISEQLf6xPcEPr8bEfUYPpa9UXmeBYJClQ WHsxSXSrSP+Wewf41G86rNThVmY2lYG7KWzAybtVpCzvLapkmqOkHSfCT3MVTtTJ URz9tYVifRcU7a96S7M9IZ+AStdZHLCGzihcdmM6CQMtLc+os/2qMEUgkvxEJwGl d2RGPKk/QvxIitVNMfY8Jw7kZoavm7KBIFNhy83bv1HU7j8Nw7EXn17unKOE99gY GGuanzja48oVNFVX9aGuzjpu+VOxmIGvF6rKmZbK5mkNzk82+xEAqZmLeV9HAgMB AAGjggOxMIIDrTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSQ+om8g/2Uwi2D 3j0180/v70IsVjAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMkZGQTBFMEI2OTAxRkU0MEE4Q0E2REVD RkQ1QThGQUE1REQ0Q0FBMTM4QTNENzYyMjgwODc1RTE3NUI1RUNCQS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8yRkZBMEUwQjY5MDFGRTQwQThDQTZERUNGRDVBOEZBQTVERDRDQUExMzhB M0Q3NjIyODA4NzVFMTc1QjVFQ0JBLzAvOTBGQTg5QkM4M0ZEOTRDMjJEODNERTNE MzVGMzRGRUZFRjQyMkM1Ni5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAyYMpMA8EAgAC MAkDBwAoAQAZoAAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAPAjMA0GCSqGSIb3 DQEBCwUAA4IBAQCH9HEUAi/3MgYRWNkN8fINDZ0wkucupcnj3+yOu4AsEcnX2bs9 wk6lhj8kSx7LDq8C45Tx1PkRA2Ond1xplbJvQIYb+v1KQpmfiFCk8C025qjP7Vvs 7tSX/YoQmWbRbc5jos62mV5j06XgqpTgRnmrX7FSlHgg6UMkCD/pl/F8Q6zK7L2T sgdGnKvISd24cSQrAG4+T1c+Fa1sTVNMMQ/iFTAaTUlGChhI8Qy+5bzahKbaq20U gyexh/FctDz90aWOYAoM+3R65Hul/4f9T9npBnp6ApB8SFt6eMm3kZ2/j7iazqRj S0C37v4o+J38QEmnIsAoYX3A2/mnshJ6sQc+ -----END CERTIFICATE-----Generated at Mon Mar 2 13:36:20 2026 by rpki-client