$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/935D764569E69FAF7EA9F7B726A5B9FB1EE44EEB.cer File: 935D764569E69FAF7EA9F7B726A5B9FB1EE44EEB.cer (raw, json) Hash identifier: N21YC1r0JUzaFL4dHM8gUrASgYN5MObMs05APXRuKkU= Subject key identifier: 93:5D:76:45:69:E6:9F:AF:7E:A9:F7:B7:26:A5:B9:FB:1E:E4:4E:EB Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 50BE692197981FFFAD96CA4FDE2D14D1C6423AAA Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/70C686E18A30E992F2E1BD802B896DEB1FEAB9CCFB439812C1789375C4132E93/0/935D764569E69FAF7EA9F7B726A5B9FB1EE44EEB.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/70C686E18A30E992F2E1BD802B896DEB1FEAB9CCFB439812C1789375C4132E93/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 27 Jan 2026 17:50:42 +0000 Certificate not after: Tue 26 Jan 2027 17:55:42 +0000 Subordinate resources: AS: 269908 IP: 190.93.188.0/22 IP: 2803:ace0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:be:69:21:97:98:1f:ff:ad:96:ca:4f:de:2d:14:d1:c6:42:3a:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 27 17:50:42 2026 GMT Not After : Jan 26 17:55:42 2027 GMT Subject: CN=935D764569E69FAF7EA9F7B726A5B9FB1EE44EEB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ee:30:b6:34:af:ef:1e:d8:5b:b9:3e:4a:2c: 80:9d:33:47:ed:97:48:3e:15:ba:34:07:0b:57:eb: 64:5b:cc:01:4b:5b:e2:35:fa:19:fc:da:92:fa:bc: 8f:45:5b:d8:01:10:3e:1b:53:07:df:81:e0:1f:a3: 02:b5:11:b3:9d:5d:09:7e:b2:b1:27:75:af:3a:22: d4:73:db:82:9d:29:23:b3:13:9c:85:bd:cf:d2:b3: 6b:04:35:11:9a:38:a3:fd:53:13:9c:ac:a0:d2:ab: e3:9c:2c:ec:d2:de:db:38:e7:70:96:68:97:0e:28: 93:71:3a:ab:92:66:64:a8:bf:2a:64:ee:9f:aa:72: df:db:03:c8:54:03:ae:e7:b8:04:53:d9:b5:1d:45: 3f:d8:59:e4:5f:4c:b5:a3:34:6d:f5:de:36:fa:5e: 25:96:05:e4:a1:fc:52:3c:cf:33:65:4f:f0:a3:0a: 4b:78:a4:ad:2c:e9:37:5f:92:40:54:36:a1:9f:6b: f3:20:19:92:1d:bf:14:20:8a:d2:18:24:3c:0b:39: 9a:01:9a:63:0f:a2:95:d9:37:49:f5:1a:4b:7d:c0: da:07:d8:e4:f6:07:60:58:69:7a:4d:2f:9e:25:ff: f3:b7:22:77:03:33:ab:21:bd:58:53:61:ac:ba:ac: 8f:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 93:5D:76:45:69:E6:9F:AF:7E:A9:F7:B7:26:A5:B9:FB:1E:E4:4E:EB X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/70C686E18A30E992F2E1BD802B896DEB1FEAB9CCFB439812C1789375C4132E93/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/70C686E18A30E992F2E1BD802B896DEB1FEAB9CCFB439812C1789375C4132E93/0/935D764569E69FAF7EA9F7B726A5B9FB1EE44EEB.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 190.93.188.0/22 IPv6: 2803:ace0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 269908 Signature Algorithm: sha256WithRSAEncryption 44:c7:b0:a5:42:1d:81:82:b1:3a:92:9e:2e:17:4e:3f:20:d9: 0c:7b:3e:f8:f5:05:36:9c:a1:0f:ec:18:17:da:fe:19:da:9e: f8:af:44:ca:c8:d3:14:57:84:e3:89:29:08:b9:b2:82:c1:6f: a5:4a:66:44:2a:85:66:0d:b3:65:99:07:42:72:9f:4c:93:e1: b6:8c:d9:05:8c:0e:1f:14:b9:73:35:fb:31:d3:4c:30:c6:f0: cd:87:da:a0:51:83:8f:78:46:6e:5b:7d:bc:d0:44:88:82:60: e3:83:b7:a4:1a:28:13:d1:56:ca:22:e8:c2:63:49:8d:66:48: 04:c4:b5:5b:3a:07:2b:cf:84:bf:1c:81:b9:bf:94:2c:ff:16: 5e:3e:24:7b:81:d1:74:31:17:5d:d1:17:25:f3:7c:da:2e:7f: 63:17:cc:74:d3:e8:3a:fe:7e:42:c7:04:6e:d7:99:4e:89:2b: 6a:b8:3c:99:c0:0e:36:ca:37:40:e1:c5:c4:4a:70:53:06:0c: 9a:4d:23:fa:f8:5d:64:a2:ab:c4:f3:24:6b:4c:5d:d9:7b:5e: 5e:d5:bd:23:3e:6e:87:a2:02:ea:2b:4c:fc:cc:90:41:84:c9: 0d:bc:a3:f3:4c:ac:71:06:47:d1:43:f7:0f:c9:f1:9f:4d:45: 1f:8f:b6:b4 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUUL5pIZeYH/+tlspP3i0U0cZCOqowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjcxNzUwNDJaFw0yNzAxMjYxNzU1NDJaMDMxMTAvBgNV BAMTKDkzNUQ3NjQ1NjlFNjlGQUY3RUE5RjdCNzI2QTVCOUZCMUVFNDRFRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU7jC2NK/vHthbuT5KLICdM0ft l0g+Fbo0BwtX62RbzAFLW+I1+hn82pL6vI9FW9gBED4bUwffgeAfowK1EbOdXQl+ srEnda86ItRz24KdKSOzE5yFvc/Ss2sENRGaOKP9UxOcrKDSq+OcLOzS3ts453CW aJcOKJNxOquSZmSovypk7p+qct/bA8hUA67nuART2bUdRT/YWeRfTLWjNG313jb6 XiWWBeSh/FI8zzNlT/CjCkt4pK0s6TdfkkBUNqGfa/MgGZIdvxQgitIYJDwLOZoB mmMPopXZN0n1Gkt9wNoH2OT2B2BYaXpNL54l//O3IncDM6shvVhTYay6rI9TAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSTXXZFaeafr36p 97cmpbn7HuRO6zAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNzBDNjg2RTE4QTMwRTk5MkYyRTFCRDgw MkI4OTZERUIxRkVBQjlDQ0ZCNDM5ODEyQzE3ODkzNzVDNDEzMkU5My8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy83MEM2ODZFMThBMzBFOTkyRjJFMUJEODAyQjg5NkRFQjFGRUFCOUNDRkI0 Mzk4MTJDMTc4OTM3NUM0MTMyRTkzLzAvOTM1RDc2NDU2OUU2OUZBRjdFQTlGN0I3 MjZBNUI5RkIxRUU0NEVFQi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCvl28MA0EAgAC MAcDBQAoA6zgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQeVDANBgkqhkiG9w0B AQsFAAOCAQEARMewpUIdgYKxOpKeLhdOPyDZDHs++PUFNpyhD+wYF9r+Gdqe+K9E ysjTFFeE44kpCLmygsFvpUpmRCqFZg2zZZkHQnKfTJPhtozZBYwOHxS5czX7MdNM MMbwzYfaoFGDj3hGblt9vNBEiIJg44O3pBooE9FWyiLowmNJjWZIBMS1WzoHK8+E vxyBub+ULP8WXj4ke4HRdDEXXdEXJfN82i5/YxfMdNPoOv5+QscEbteZTokrarg8 mcAONso3QOHFxEpwUwYMmk0j+vhdZKKrxPMka0xd2XteXtW9Iz5uh6IC6itM/MyQ QYTJDbyj80yscQZH0UP3D8nxn01FH4+2tA== -----END CERTIFICATE-----Generated at Mon Mar 2 14:33:10 2026 by rpki-client