$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/914DAAD3360CF77A56CDD8191FEEC13F016B05E4.cer File: 914DAAD3360CF77A56CDD8191FEEC13F016B05E4.cer (raw, json) Hash identifier: bfSg6I+kpGhr6fhmI2rZu4HrIPIKH5huwcqFkWpoq6U= Subject key identifier: 91:4D:AA:D3:36:0C:F7:7A:56:CD:D8:19:1F:EE:C1:3F:01:6B:05:E4 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 318E352774980B327F52905D3441493C90E95356 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/7694973A8F8301CBEBA474BD45AE1C1D959E8228F46D38DAB1C5F82806F94CAF/0/914DAAD3360CF77A56CDD8191FEEC13F016B05E4.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/7694973A8F8301CBEBA474BD45AE1C1D959E8228F46D38DAB1C5F82806F94CAF/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 27 Jan 2026 23:14:56 +0000 Certificate not after: Tue 26 Jan 2027 23:19:56 +0000 Subordinate resources: AS: 263216 IP: 191.98.208.0/21 IP: 2803:f280::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:8e:35:27:74:98:0b:32:7f:52:90:5d:34:41:49:3c:90:e9:53:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 27 23:14:56 2026 GMT Not After : Jan 26 23:19:56 2027 GMT Subject: CN=914DAAD3360CF77A56CDD8191FEEC13F016B05E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:2d:b2:5c:60:00:f7:d7:d0:74:3b:91:25:ff: 44:f1:94:27:5a:68:64:1a:c2:dd:e9:1f:09:d4:69: 72:ed:0b:9e:03:f7:2a:91:44:47:fd:b2:6c:7a:67: d7:ec:f9:1d:93:d6:ca:43:19:57:4f:9f:06:0f:e7: fd:18:c1:88:4a:71:ea:94:89:03:6d:30:4d:b7:d1: d1:91:13:3f:27:d5:41:bf:b1:df:20:3b:b5:9e:ea: 60:a2:e6:8b:6c:e6:ac:59:3c:57:77:f5:0e:4e:3a: 01:5f:1f:ff:5c:19:98:0a:69:08:6c:59:9e:20:65: 34:89:50:72:c2:b2:fe:5d:f7:39:9d:28:72:7b:a1: c5:01:94:23:bf:2b:52:ed:23:c4:f9:70:9a:32:6f: ec:21:89:ab:98:e1:50:20:75:55:45:4b:f6:60:26: 36:7c:84:e7:3a:70:93:93:55:b3:99:21:5a:11:7b: 49:64:4e:ec:d5:a7:e0:42:1f:c6:cb:7c:d5:71:13: 8a:4e:0e:f1:21:00:0d:28:47:d0:8a:f0:06:b4:74: 22:20:65:79:bc:23:af:5f:e8:57:ff:52:20:54:ad: 76:54:aa:4a:ea:c1:ea:ae:3f:ed:b8:a3:a0:bc:21: ba:10:90:66:5c:8c:f9:d9:91:db:79:55:e4:d5:6a: cc:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 91:4D:AA:D3:36:0C:F7:7A:56:CD:D8:19:1F:EE:C1:3F:01:6B:05:E4 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/7694973A8F8301CBEBA474BD45AE1C1D959E8228F46D38DAB1C5F82806F94CAF/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/7694973A8F8301CBEBA474BD45AE1C1D959E8228F46D38DAB1C5F82806F94CAF/0/914DAAD3360CF77A56CDD8191FEEC13F016B05E4.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 191.98.208.0/21 IPv6: 2803:f280::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263216 Signature Algorithm: sha256WithRSAEncryption 41:c3:13:57:f8:ea:9f:0c:a9:5d:ec:af:a9:e3:c6:72:47:60: 7f:99:43:d1:a4:83:57:bd:e5:fe:6b:99:b2:f3:60:4d:14:fa: c9:5d:f1:05:c5:ee:46:7f:dc:b8:91:81:bb:9f:ff:73:b4:94: 6a:13:91:25:60:8a:08:a5:e4:c3:da:ac:51:2d:4f:20:9f:b2: f7:ac:d6:4c:69:d0:62:0d:34:ab:73:38:1d:43:d9:ba:f6:30: 96:32:ff:a1:8b:5d:ed:92:06:a5:b5:22:2f:ab:23:b3:df:75: f1:35:55:c8:46:50:dd:18:77:15:77:99:80:1c:1d:7b:4c:76: 34:d8:db:25:2c:f6:a9:24:7b:38:ed:0e:77:b1:43:54:b0:83: c8:4f:bc:52:8b:ba:18:df:95:e2:15:17:92:cf:75:c2:23:30: 35:24:c6:42:ba:04:ee:d5:96:31:3d:fb:09:d6:e4:4e:2b:4a: 01:e9:5e:36:a6:90:f3:21:71:29:2f:15:4f:aa:97:22:8d:05: 7d:03:63:a5:b5:82:cd:e1:47:de:75:4b:bf:9a:46:1f:5a:c3: d1:7a:f7:c6:20:01:da:3d:33:b8:21:0b:db:55:ce:f1:61:6f: ca:d7:5b:b7:49:0a:e8:59:4a:79:27:0e:bb:b2:64:93:e9:ad: 75:fc:d9:8c -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUMY41J3SYCzJ/UpBdNEFJPJDpU1YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjcyMzE0NTZaFw0yNzAxMjYyMzE5NTZaMDMxMTAvBgNV BAMTKDkxNERBQUQzMzYwQ0Y3N0E1NkNERDgxOTFGRUVDMTNGMDE2QjA1RTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3LbJcYAD319B0O5El/0TxlCda aGQawt3pHwnUaXLtC54D9yqRREf9smx6Z9fs+R2T1spDGVdPnwYP5/0YwYhKceqU iQNtME230dGREz8n1UG/sd8gO7We6mCi5ots5qxZPFd39Q5OOgFfH/9cGZgKaQhs WZ4gZTSJUHLCsv5d9zmdKHJ7ocUBlCO/K1LtI8T5cJoyb+whiauY4VAgdVVFS/Zg JjZ8hOc6cJOTVbOZIVoRe0lkTuzVp+BCH8bLfNVxE4pODvEhAA0oR9CK8Aa0dCIg ZXm8I69f6Ff/UiBUrXZUqkrqwequP+24o6C8IboQkGZcjPnZkdt5VeTVasxXAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSRTarTNgz3elbN 2Bkf7sE/AWsF5DAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNzY5NDk3M0E4RjgzMDFDQkVCQTQ3NEJE NDVBRTFDMUQ5NTlFODIyOEY0NkQzOERBQjFDNUY4MjgwNkY5NENBRi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy83Njk0OTczQThGODMwMUNCRUJBNDc0QkQ0NUFFMUMxRDk1OUU4MjI4RjQ2 RDM4REFCMUM1RjgyODA2Rjk0Q0FGLzAvOTE0REFBRDMzNjBDRjc3QTU2Q0REODE5 MUZFRUMxM0YwMTZCMDVFNC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDv2LQMA0EAgAC MAcDBQAoA/KAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQEMDANBgkqhkiG9w0B AQsFAAOCAQEAQcMTV/jqnwypXeyvqePGckdgf5lD0aSDV73l/muZsvNgTRT6yV3x BcXuRn/cuJGBu5//c7SUahORJWCKCKXkw9qsUS1PIJ+y96zWTGnQYg00q3M4HUPZ uvYwljL/oYtd7ZIGpbUiL6sjs9918TVVyEZQ3Rh3FXeZgBwde0x2NNjbJSz2qSR7 OO0Od7FDVLCDyE+8Uou6GN+V4hUXks91wiMwNSTGQroE7tWWMT37CdbkTitKAele NqaQ8yFxKS8VT6qXIo0FfQNjpbWCzeFH3nVLv5pGH1rD0Xr3xiAB2j0zuCEL21XO 8WFvytdbt0kK6FlKeScOu7Jkk+mtdfzZjA== -----END CERTIFICATE-----Generated at Mon Mar 2 17:08:07 2026 by rpki-client