$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A4D80CAC0655113C518284B3D90E6899CC2F974.cer File: 9A4D80CAC0655113C518284B3D90E6899CC2F974.cer (raw, json) Hash identifier: W3tmOKYlwXIEjmUJWob454SPxeY/TYqUU7chnx8vYP8= Subject key identifier: 9A:4D:80:CA:C0:65:51:13:C5:18:28:4B:3D:90:E6:89:9C:C2:F9:74 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 78F71B4F453990CA3EAE47A2A397B9A57C2CB37A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/6228E479E36A5EFB7D0C118CD5C94E5E1C604D5AD2633D01BED41F3E018F7972/0/9A4D80CAC0655113C518284B3D90E6899CC2F974.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/6228E479E36A5EFB7D0C118CD5C94E5E1C604D5AD2633D01BED41F3E018F7972/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 09:52:12 +0000 Certificate not after: Wed 27 Jan 2027 09:57:12 +0000 Subordinate resources: AS: 269991 IP: 24.152.56.0/24 IP: 2803:dee0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:f7:1b:4f:45:39:90:ca:3e:ae:47:a2:a3:97:b9:a5:7c:2c:b3:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 09:52:12 2026 GMT Not After : Jan 27 09:57:12 2027 GMT Subject: CN=9A4D80CAC0655113C518284B3D90E6899CC2F974 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f7:80:15:44:19:b9:38:d1:e3:07:a2:63:a8: d2:29:57:56:96:34:fc:1c:0c:24:1a:a6:31:1d:bb: 79:a1:6a:a4:77:d1:cf:9a:de:b5:3f:d4:d1:72:d0: 05:3f:7f:14:37:c3:02:43:84:ef:50:6d:ee:4c:24: 7a:0b:f1:ac:da:bf:07:a6:39:ec:3e:8c:f1:58:16: df:b7:6a:ce:a9:c8:f5:84:86:a4:dd:ed:16:38:9a: bd:ff:c2:fb:38:c4:be:bb:b4:8b:e4:ab:d1:c1:4c: d5:19:0d:f8:a4:06:f3:e4:23:5d:2d:a1:1b:7e:d9: a8:0b:0f:2a:20:b0:93:58:da:7f:7c:62:63:3f:c7: 0e:68:63:55:7d:91:91:be:3b:0a:38:73:e9:cc:43: bb:68:0f:fc:d2:7d:18:7f:e0:74:bb:3a:27:45:37: 30:14:7d:f9:66:40:d8:e3:27:e1:50:f0:6f:89:ef: d8:21:c7:61:94:78:ed:9b:3c:bb:30:4f:59:a7:a1: ab:4d:ce:4d:63:10:36:4e:32:cc:ef:81:38:e7:a3: b2:04:ba:dc:a8:79:d9:1b:e7:29:6e:59:a8:97:9b: 90:83:5e:fc:11:01:8e:ff:1e:3b:b2:2a:59:d1:df: a5:2e:09:7a:3f:93:a9:9e:96:91:d9:69:15:e5:1b: 90:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9A:4D:80:CA:C0:65:51:13:C5:18:28:4B:3D:90:E6:89:9C:C2:F9:74 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6228E479E36A5EFB7D0C118CD5C94E5E1C604D5AD2633D01BED41F3E018F7972/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6228E479E36A5EFB7D0C118CD5C94E5E1C604D5AD2633D01BED41F3E018F7972/0/9A4D80CAC0655113C518284B3D90E6899CC2F974.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 24.152.56.0/24 IPv6: 2803:dee0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 269991 Signature Algorithm: sha256WithRSAEncryption 53:dc:66:40:31:6f:8a:a2:53:36:d3:25:dd:0e:1f:fd:39:73: 90:17:6e:6c:a4:ba:7e:23:2f:c9:00:e8:96:92:09:a2:b8:ad: 4b:52:42:33:e5:a6:6a:87:90:1a:dd:29:c9:20:28:6b:bf:41: 8b:1f:32:79:7b:40:71:05:c4:6b:f8:26:13:c6:24:79:74:32: 86:9b:1c:1f:f7:7c:4d:4e:fd:2e:a8:d2:8e:9c:85:a0:34:f8: 82:1d:86:92:82:02:27:0f:2f:dc:12:4f:6a:26:0c:e8:70:b1: fd:7b:eb:c8:df:08:31:15:c6:82:c4:39:78:2f:07:be:09:a0: 27:72:21:fa:6e:8a:29:41:39:0f:c4:6a:29:52:fa:2f:b0:19: 17:fa:38:52:7e:8c:d8:0d:f7:13:10:58:0f:6d:f2:82:ae:2f: 10:86:f0:87:b2:ff:d0:77:a2:94:65:4e:d2:c7:04:8a:8f:88: 73:6b:50:eb:08:2c:f2:eb:75:d9:5f:50:7e:ba:a5:52:3e:7d: 70:9f:83:47:c6:bd:b0:74:29:3f:79:60:1c:30:55:cc:d0:47: 11:1e:40:28:f0:2c:69:b4:84:6c:6a:bc:d1:24:4a:af:eb:ca: 52:e9:66:ae:23:86:3d:89:5b:a4:4a:d0:28:9a:67:c7:3c:2a: c3:53:97:9e -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUePcbT0U5kMo+rkeio5e5pXwss3owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgwOTUyMTJaFw0yNzAxMjcwOTU3MTJaMDMxMTAvBgNV BAMTKDlBNEQ4MENBQzA2NTUxMTNDNTE4Mjg0QjNEOTBFNjg5OUNDMkY5NzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp94AVRBm5ONHjB6JjqNIpV1aW NPwcDCQapjEdu3mhaqR30c+a3rU/1NFy0AU/fxQ3wwJDhO9Qbe5MJHoL8azavwem Oew+jPFYFt+3as6pyPWEhqTd7RY4mr3/wvs4xL67tIvkq9HBTNUZDfikBvPkI10t oRt+2agLDyogsJNY2n98YmM/xw5oY1V9kZG+Owo4c+nMQ7toD/zSfRh/4HS7OidF NzAUfflmQNjjJ+FQ8G+J79ghx2GUeO2bPLswT1mnoatNzk1jEDZOMszvgTjno7IE utyoedkb5yluWaiXm5CDXvwRAY7/HjuyKlnR36UuCXo/k6melpHZaRXlG5AdAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSaTYDKwGVRE8UY KEs9kOaJnML5dDAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNjIyOEU0NzlFMzZBNUVGQjdEMEMxMThD RDVDOTRFNUUxQzYwNEQ1QUQyNjMzRDAxQkVENDFGM0UwMThGNzk3Mi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy82MjI4RTQ3OUUzNkE1RUZCN0QwQzExOENENUM5NEU1RTFDNjA0RDVBRDI2 MzNEMDFCRUQ0MUYzRTAxOEY3OTcyLzAvOUE0RDgwQ0FDMDY1NTExM0M1MTgyODRC M0Q5MEU2ODk5Q0MyRjk3NC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAGJg4MA0EAgAC MAcDBQAoA97gMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQepzANBgkqhkiG9w0B AQsFAAOCAQEAU9xmQDFviqJTNtMl3Q4f/TlzkBdubKS6fiMvyQDolpIJoritS1JC M+WmaoeQGt0pySAoa79Bix8yeXtAcQXEa/gmE8YkeXQyhpscH/d8TU79LqjSjpyF oDT4gh2GkoICJw8v3BJPaiYM6HCx/XvryN8IMRXGgsQ5eC8HvgmgJ3Ih+m6KKUE5 D8RqKVL6L7AZF/o4Un6M2A33ExBYD23ygq4vEIbwh7L/0HeilGVO0scEio+Ic2tQ 6wgs8ut12V9QfrqlUj59cJ+DR8a9sHQpP3lgHDBVzNBHER5AKPAsabSEbGq80SRK r+vKUulmriOGPYlbpErQKJpnxzwqw1OXng== -----END CERTIFICATE-----Generated at Mon Mar 2 14:09:57 2026 by rpki-client