$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/97EAA46116DFE68341EB6C0BD2AF7D8214B0D633.cer File: 97EAA46116DFE68341EB6C0BD2AF7D8214B0D633.cer (raw, json) Hash identifier: G+JdR18CAAhDtlfvZIFiRQtAAqlyFJL7rHLskf0Irwo= Subject key identifier: 97:EA:A4:61:16:DF:E6:83:41:EB:6C:0B:D2:AF:7D:82:14:B0:D6:33 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 2DD64569E47A3E93161F0B07355A47BCBB130860 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/8034F25A6C93248A860BFA557C270DA44FCC770AB950C7748CF870E2E8AC4080/0/97EAA46116DFE68341EB6C0BD2AF7D8214B0D633.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/8034F25A6C93248A860BFA557C270DA44FCC770AB950C7748CF870E2E8AC4080/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 12:40:15 +0000 Certificate not after: Wed 27 Jan 2027 12:45:15 +0000 Subordinate resources: AS: 265635 IP: 170.246.48.0/22 IP: 2803:3ac0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 05 Mar 2026 11:41:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:d6:45:69:e4:7a:3e:93:16:1f:0b:07:35:5a:47:bc:bb:13:08:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 12:40:15 2026 GMT Not After : Jan 27 12:45:15 2027 GMT Subject: CN=97EAA46116DFE68341EB6C0BD2AF7D8214B0D633 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:2d:79:5c:ad:3e:e7:26:a3:ae:a9:c1:03:95: c0:e7:ea:01:bd:db:4e:1b:de:2d:c7:75:7e:dd:f1: 76:4a:b4:30:21:da:8a:3f:6a:61:ca:fa:5c:a7:bf: 47:56:21:2d:b3:fa:1b:66:fa:d2:46:47:43:f6:3a: 6b:c9:21:c2:67:e6:3a:4d:07:4f:04:b7:67:f1:52: 7a:94:24:e9:42:d9:1e:f2:d9:ae:31:6f:73:6d:2c: 23:a2:1e:88:6e:96:a2:76:a6:ad:84:e3:0a:0e:9f: 23:a1:19:f9:8a:5d:55:b4:88:78:2f:73:2b:d5:92: 39:82:bd:0e:d7:ad:7f:7c:f8:74:7d:17:a9:fe:d3: 95:dc:6c:05:ab:69:9b:3a:53:d2:73:d0:b8:d3:36: ec:93:a2:2b:29:81:41:cc:70:a3:b4:be:02:95:aa: 9e:e5:31:96:1f:30:50:5d:57:f4:b6:48:0e:1e:93: bb:a9:d6:80:5a:5c:ca:ac:ba:d8:14:84:fd:94:76: 06:25:a3:19:61:41:a3:a4:0a:fa:da:08:ac:44:be: 82:a6:11:54:31:48:3b:f5:30:c4:99:7b:76:e8:bb: 2e:05:b8:f1:83:50:33:55:34:8f:bf:54:95:ce:a8: 3a:51:5e:70:3d:3b:4e:b0:4c:3f:49:3e:8f:fc:e6: 14:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 97:EA:A4:61:16:DF:E6:83:41:EB:6C:0B:D2:AF:7D:82:14:B0:D6:33 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/8034F25A6C93248A860BFA557C270DA44FCC770AB950C7748CF870E2E8AC4080/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/8034F25A6C93248A860BFA557C270DA44FCC770AB950C7748CF870E2E8AC4080/0/97EAA46116DFE68341EB6C0BD2AF7D8214B0D633.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.246.48.0/22 IPv6: 2803:3ac0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265635 Signature Algorithm: sha256WithRSAEncryption 4c:83:bc:3c:17:2d:8b:c7:89:ee:1e:f3:41:1c:1c:0b:a6:f9: c9:6f:4f:2d:ac:4a:4f:52:73:d1:16:9c:01:4d:d4:86:71:cf: e0:af:31:cb:ae:21:0e:f0:41:9b:67:5c:c3:8d:37:72:22:61: fb:fb:65:53:0b:54:80:f5:11:c2:a4:2c:ca:c6:b0:e0:51:de: dc:f9:b5:e9:07:8e:a9:53:94:25:3f:f8:b5:34:74:4f:17:33: f0:6d:ef:60:d9:69:18:5a:bf:75:cb:da:21:d3:3f:ea:0a:1a: 9a:37:d7:33:6f:c7:7e:8c:a4:41:b3:1e:5b:b0:12:5d:f7:95: d2:51:ce:10:81:96:26:b7:51:19:09:61:96:b6:b9:41:17:fa: c6:4d:4f:87:e8:38:43:90:a0:5f:21:06:c0:ea:8c:9a:1d:fc: 4b:67:fe:19:8a:5d:9a:0c:98:fc:04:18:c9:b3:32:82:92:8d: 2a:bf:eb:21:41:c3:40:91:09:50:37:16:8f:ab:fc:42:c4:a8: 97:60:9f:39:a8:3c:82:6f:c5:9b:c2:3b:55:54:ed:c5:0d:0b: d0:4c:fb:30:6f:17:6c:eb:20:7c:74:74:7f:a2:2a:13:54:01: 8c:5c:e1:ff:15:93:1a:8b:5a:24:fd:09:2a:95:fc:a6:50:d4: 14:48:a1:3f -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIULdZFaeR6PpMWHwsHNVpHvLsTCGAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgxMjQwMTVaFw0yNzAxMjcxMjQ1MTVaMDMxMTAvBgNV BAMTKDk3RUFBNDYxMTZERkU2ODM0MUVCNkMwQkQyQUY3RDgyMTRCMEQ2MzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYLXlcrT7nJqOuqcEDlcDn6gG9 204b3i3HdX7d8XZKtDAh2oo/amHK+lynv0dWIS2z+htm+tJGR0P2OmvJIcJn5jpN B08Et2fxUnqUJOlC2R7y2a4xb3NtLCOiHohulqJ2pq2E4woOnyOhGfmKXVW0iHgv cyvVkjmCvQ7XrX98+HR9F6n+05XcbAWraZs6U9Jz0LjTNuyToispgUHMcKO0vgKV qp7lMZYfMFBdV/S2SA4ek7up1oBaXMqsutgUhP2UdgYloxlhQaOkCvraCKxEvoKm EVQxSDv1MMSZe3bouy4FuPGDUDNVNI+/VJXOqDpRXnA9O06wTD9JPo/85hQzAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSX6qRhFt/mg0Hr bAvSr32CFLDWMzAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvODAzNEYyNUE2QzkzMjQ4QTg2MEJGQTU1 N0MyNzBEQTQ0RkNDNzcwQUI5NTBDNzc0OENGODcwRTJFOEFDNDA4MC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy84MDM0RjI1QTZDOTMyNDhBODYwQkZBNTU3QzI3MERBNDRGQ0M3NzBBQjk1 MEM3NzQ4Q0Y4NzBFMkU4QUM0MDgwLzAvOTdFQUE0NjExNkRGRTY4MzQxRUI2QzBC RDJBRjdEODIxNEIwRDYzMy5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCqvYwMA0EAgAC MAcDBQAoAzrAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQNozANBgkqhkiG9w0B AQsFAAOCAQEATIO8PBcti8eJ7h7zQRwcC6b5yW9PLaxKT1Jz0RacAU3UhnHP4K8x y64hDvBBm2dcw403ciJh+/tlUwtUgPURwqQsysaw4FHe3Pm16QeOqVOUJT/4tTR0 Txcz8G3vYNlpGFq/dcvaIdM/6goamjfXM2/HfoykQbMeW7ASXfeV0lHOEIGWJrdR GQlhlra5QRf6xk1Ph+g4Q5CgXyEGwOqMmh38S2f+GYpdmgyY/AQYybMygpKNKr/r IUHDQJEJUDcWj6v8QsSol2CfOag8gm/Fm8I7VVTtxQ0L0Ez7MG8XbOsgfHR0f6Iq E1QBjFzh/xWTGotaJP0JKpX8plDUFEihPw== -----END CERTIFICATE-----Generated at Mon Mar 2 11:04:13 2026 by rpki-client