$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/923504C7D19C7A7CE0F053B7B1BDA28A0F9E1F54.cer File: 923504C7D19C7A7CE0F053B7B1BDA28A0F9E1F54.cer (raw, json) Hash identifier: LlUBs4ue6mdnjidQD9Wz8KWrv5ieTb5Cxuet1nkredQ= Subject key identifier: 92:35:04:C7:D1:9C:7A:7C:E0:F0:53:B7:B1:BD:A2:8A:0F:9E:1F:54 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 1F2525A315655E68117F32A33831E92922E39E2D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/D3DB546456EE585FDB3D3AB0B45FBBB6D5166A5A7973E0F23E12DDF81BBB477D/0/923504C7D19C7A7CE0F053B7B1BDA28A0F9E1F54.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/D3DB546456EE585FDB3D3AB0B45FBBB6D5166A5A7973E0F23E12DDF81BBB477D/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 01:57:24 +0000 Certificate not after: Wed 27 Jan 2027 02:02:24 +0000 Subordinate resources: AS: 272057 IP: 187.63.156.0/22 IP: 2803:7d10::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 05 Mar 2026 11:41:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:25:25:a3:15:65:5e:68:11:7f:32:a3:38:31:e9:29:22:e3:9e:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 01:57:24 2026 GMT Not After : Jan 27 02:02:24 2027 GMT Subject: CN=923504C7D19C7A7CE0F053B7B1BDA28A0F9E1F54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d7:06:6e:3d:13:57:f8:f3:f0:3c:ba:20:13: 78:14:14:e7:d9:9b:8c:57:ed:b8:96:ac:ea:1d:5d: fb:c9:72:4f:28:f3:aa:78:08:5f:75:5e:92:4c:29: 7a:84:ea:c3:6d:15:e0:fc:4d:71:a1:fe:1c:52:09: 89:89:19:51:dc:9d:67:99:ef:11:8f:48:55:ed:0b: 4e:75:60:51:92:bb:79:b9:b3:56:85:fc:89:25:de: dd:21:4d:dc:1d:86:6e:a3:ad:26:ad:ec:93:99:08: 71:c7:c4:44:3f:ed:31:7b:cd:7d:e3:1d:32:4e:a7: 0e:28:17:8e:ec:09:7f:72:fb:f9:40:e5:3e:a0:08: 8e:63:07:8b:52:5a:51:94:36:00:7d:4b:4a:6c:94: 88:ca:9b:37:4b:77:a9:24:be:94:ed:3a:56:f6:cc: d7:36:96:87:42:28:db:71:9b:14:9c:a4:0a:22:ef: e0:48:c6:5d:80:14:73:66:91:43:ad:42:57:4d:9e: 5e:55:fa:ab:e0:76:a0:dd:f4:82:85:49:37:2f:30: 5a:93:ec:e2:a7:9d:da:a4:b0:a6:2d:be:2b:3c:96: 56:35:1e:89:36:be:e1:d6:5d:65:58:0a:e6:b0:ea: 75:bd:9c:2a:f7:e4:20:94:fb:b5:c6:b4:4b:2f:ef: ba:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 92:35:04:C7:D1:9C:7A:7C:E0:F0:53:B7:B1:BD:A2:8A:0F:9E:1F:54 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/D3DB546456EE585FDB3D3AB0B45FBBB6D5166A5A7973E0F23E12DDF81BBB477D/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/D3DB546456EE585FDB3D3AB0B45FBBB6D5166A5A7973E0F23E12DDF81BBB477D/0/923504C7D19C7A7CE0F053B7B1BDA28A0F9E1F54.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 187.63.156.0/22 IPv6: 2803:7d10::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 272057 Signature Algorithm: sha256WithRSAEncryption 3f:0a:00:fa:47:15:24:b5:e9:0d:2a:b0:c6:b8:b6:fd:79:99: 5c:5d:e8:b7:79:09:14:c4:7b:50:e7:dc:cc:c1:21:1c:fd:95: a1:96:d3:87:75:6b:ed:52:96:11:a9:5f:24:76:20:23:c4:9f: a2:75:f6:91:44:f8:01:8c:e6:c8:cb:22:11:46:89:0a:1d:fe: be:f6:bc:09:4a:67:23:39:4a:0b:60:f0:2e:62:34:9c:14:eb: 59:2a:06:2a:11:b8:e6:70:88:38:10:60:bf:ce:f8:d9:d4:8d: 0a:7c:44:e2:af:38:58:75:cc:4f:55:c2:55:eb:82:b5:7f:52: bc:6e:3a:d7:da:13:d9:01:ad:b0:85:a6:8b:e0:07:76:14:4f: eb:6d:04:80:2f:02:a0:f3:36:51:79:9a:4e:80:43:ea:a3:20: a0:1d:bb:a1:88:73:75:89:f5:0a:de:4d:88:5c:21:a5:bf:cd: 29:c7:a0:2e:69:18:b2:2b:0e:f6:0e:40:91:01:15:d6:ca:db: 4d:9a:bd:21:33:94:6f:57:1c:53:5c:6a:03:4b:f0:ff:d7:27: 6e:6b:00:6d:4f:16:51:25:3a:de:a7:fb:14:ed:30:60:9f:63: a9:a5:14:bd:c5:7f:b1:c4:7a:89:9e:a0:67:a8:36:15:ba:1d: 1c:0f:a3:0b -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUHyUloxVlXmgRfzKjODHpKSLjni0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgwMTU3MjRaFw0yNzAxMjcwMjAyMjRaMDMxMTAvBgNV BAMTKDkyMzUwNEM3RDE5QzdBN0NFMEYwNTNCN0IxQkRBMjhBMEY5RTFGNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC1wZuPRNX+PPwPLogE3gUFOfZ m4xX7biWrOodXfvJck8o86p4CF91XpJMKXqE6sNtFeD8TXGh/hxSCYmJGVHcnWeZ 7xGPSFXtC051YFGSu3m5s1aF/Ikl3t0hTdwdhm6jrSat7JOZCHHHxEQ/7TF7zX3j HTJOpw4oF47sCX9y+/lA5T6gCI5jB4tSWlGUNgB9S0pslIjKmzdLd6kkvpTtOlb2 zNc2lodCKNtxmxScpAoi7+BIxl2AFHNmkUOtQldNnl5V+qvgdqDd9IKFSTcvMFqT 7OKnndqksKYtvis8llY1Hok2vuHWXWVYCuaw6nW9nCr35CCU+7XGtEsv77qnAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSSNQTH0Zx6fODw U7exvaKKD54fVDAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRDNEQjU0NjQ1NkVFNTg1RkRCM0QzQUIw QjQ1RkJCQjZENTE2NkE1QTc5NzNFMEYyM0UxMkRERjgxQkJCNDc3RC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9EM0RCNTQ2NDU2RUU1ODVGREIzRDNBQjBCNDVGQkJCNkQ1MTY2QTVBNzk3 M0UwRjIzRTEyRERGODFCQkI0NzdELzAvOTIzNTA0QzdEMTlDN0E3Q0UwRjA1M0I3 QjFCREEyOEEwRjlFMUY1NC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuz+cMA0EAgAC MAcDBQAoA30QMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQmuTANBgkqhkiG9w0B AQsFAAOCAQEAPwoA+kcVJLXpDSqwxri2/XmZXF3ot3kJFMR7UOfczMEhHP2VoZbT h3Vr7VKWEalfJHYgI8SfonX2kUT4AYzmyMsiEUaJCh3+vva8CUpnIzlKC2DwLmI0 nBTrWSoGKhG45nCIOBBgv8742dSNCnxE4q84WHXMT1XCVeuCtX9SvG4619oT2QGt sIWmi+AHdhRP620EgC8CoPM2UXmaToBD6qMgoB27oYhzdYn1Ct5NiFwhpb/NKceg LmkYsisO9g5AkQEV1srbTZq9ITOUb1ccU1xqA0vw/9cnbmsAbU8WUSU63qf7FO0w YJ9jqaUUvcV/scR6iZ6gZ6g2FbodHA+jCw== -----END CERTIFICATE-----Generated at Mon Mar 2 13:24:38 2026 by rpki-client