$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BBF0CBCC36D5CC9BC32A4A6CD28BD64B8F64B6B.cer File: 9BBF0CBCC36D5CC9BC32A4A6CD28BD64B8F64B6B.cer (raw, json) Hash identifier: MJDPKSckhm3BVs+f6vcu3TKa+WSXl9maKi6qW3nZ5jc= Subject key identifier: 9B:BF:0C:BC:C3:6D:5C:C9:BC:32:A4:A6:CD:28:BD:64:B8:F6:4B:6B Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 28F2F2AC376A2F368968CA4E586B9F311CC13EE6 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/E5CEDF6B497008B0F7BE8C0C1B5A85D27A9CEADBA8BFA51AE366058790CD8C39/0/9BBF0CBCC36D5CC9BC32A4A6CD28BD64B8F64B6B.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/E5CEDF6B497008B0F7BE8C0C1B5A85D27A9CEADBA8BFA51AE366058790CD8C39/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Thu 29 Jan 2026 00:58:03 +0000 Certificate not after: Thu 28 Jan 2027 01:03:03 +0000 Subordinate resources: AS: 270138 IP: 200.49.244.0/22 IP: 2806:3db::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 05 Mar 2026 11:41:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:f2:f2:ac:37:6a:2f:36:89:68:ca:4e:58:6b:9f:31:1c:c1:3e:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 29 00:58:03 2026 GMT Not After : Jan 28 01:03:03 2027 GMT Subject: CN=9BBF0CBCC36D5CC9BC32A4A6CD28BD64B8F64B6B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:42:1c:2b:6f:c6:4e:5c:cc:4b:8c:32:69:f6: f3:74:7e:c1:a9:0e:c6:ba:4d:5d:06:94:cc:69:49: e7:7e:b9:5c:03:ce:01:4b:c4:18:34:b1:19:df:1a: 57:b6:00:08:90:dc:2a:c1:bf:34:c0:e0:73:70:3f: 8c:73:93:59:65:94:e1:64:52:1a:2a:2e:e2:1e:19: 93:61:99:d8:c4:4b:1a:01:05:2b:37:fe:dc:bd:2f: 26:fd:b0:83:2b:0e:7e:4f:59:7f:36:f1:60:b9:b9: 13:92:76:d1:97:fa:28:08:a8:0c:74:fe:98:e8:7a: 5a:99:0e:0a:3c:29:e0:43:ae:81:b8:6f:f9:cd:e4: 78:63:7d:45:32:a7:2a:28:8b:d5:7d:e9:9e:a5:0f: d4:eb:11:fd:d8:e0:06:40:cf:45:84:a8:b9:57:43: 43:03:c4:87:9a:ff:5b:02:5b:f9:79:11:3f:37:2f: a4:c9:5a:c4:41:55:51:bd:0a:40:b3:c5:e7:fd:94: 00:94:18:60:14:a6:1e:57:6b:a6:c0:96:81:c9:26: 71:b5:87:7f:02:5b:11:f1:26:70:ee:51:74:03:ad: 3c:37:7f:42:60:2e:9b:87:d6:db:6a:89:bb:c2:dd: c6:12:a6:d0:8d:0d:89:68:b1:38:56:aa:7b:8d:a6: 9b:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9B:BF:0C:BC:C3:6D:5C:C9:BC:32:A4:A6:CD:28:BD:64:B8:F6:4B:6B X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/E5CEDF6B497008B0F7BE8C0C1B5A85D27A9CEADBA8BFA51AE366058790CD8C39/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/E5CEDF6B497008B0F7BE8C0C1B5A85D27A9CEADBA8BFA51AE366058790CD8C39/0/9BBF0CBCC36D5CC9BC32A4A6CD28BD64B8F64B6B.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.49.244.0/22 IPv6: 2806:3db::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 270138 Signature Algorithm: sha256WithRSAEncryption 37:ab:c8:75:40:b7:8a:2c:10:c8:95:52:20:3d:5a:44:cb:64: c5:f2:2f:56:b2:b2:fc:05:42:7a:1a:dc:37:a0:c0:ab:3f:03: 5e:80:8a:2a:bb:e4:a7:ee:95:19:30:2d:c8:71:82:b7:90:2d: eb:2d:7d:a1:51:0d:29:48:f8:18:6f:41:e0:09:ca:f5:5b:17: 03:5e:88:7e:c9:a4:83:7b:24:44:e8:c2:be:04:53:e7:12:96: 7e:3e:95:b0:51:fc:56:75:0d:57:5f:96:b4:78:c7:85:dc:58: b3:4b:73:f4:ae:6e:75:5e:9a:05:d7:7a:db:28:cc:49:31:5e: a2:ae:d0:71:a6:ea:d2:06:7e:17:6a:ee:0e:99:be:a8:05:97: aa:b8:eb:25:ae:9b:73:e1:f9:bd:69:2e:d7:89:3a:91:c8:c2: 8d:f3:e2:f1:27:19:08:27:54:61:d3:bf:c7:71:b2:2f:e2:a0: d5:5e:65:bb:13:30:78:3c:a9:39:8f:9b:15:3a:4a:cb:d2:7c: d5:b2:38:bb:63:de:ea:a2:e1:35:2e:b0:c3:47:86:b5:64:df: 3d:2d:81:96:8f:42:10:ad:dc:ad:99:39:6a:db:5e:83:74:1f: c8:95:66:bb:fc:9c:bb:fd:2c:bb:3b:2d:d4:76:65:5d:4e:7a: f4:b0:28:8d -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUKPLyrDdqLzaJaMpOWGufMRzBPuYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjkwMDU4MDNaFw0yNzAxMjgwMTAzMDNaMDMxMTAvBgNV BAMTKDlCQkYwQ0JDQzM2RDVDQzlCQzMyQTRBNkNEMjhCRDY0QjhGNjRCNkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHQhwrb8ZOXMxLjDJp9vN0fsGp Dsa6TV0GlMxpSed+uVwDzgFLxBg0sRnfGle2AAiQ3CrBvzTA4HNwP4xzk1lllOFk UhoqLuIeGZNhmdjESxoBBSs3/ty9Lyb9sIMrDn5PWX828WC5uROSdtGX+igIqAx0 /pjoelqZDgo8KeBDroG4b/nN5HhjfUUypyooi9V96Z6lD9TrEf3Y4AZAz0WEqLlX Q0MDxIea/1sCW/l5ET83L6TJWsRBVVG9CkCzxef9lACUGGAUph5Xa6bAloHJJnG1 h38CWxHxJnDuUXQDrTw3f0JgLpuH1ttqibvC3cYSptCNDYlosThWqnuNppu/AgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSbvwy8w21cybwy pKbNKL1kuPZLazAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVDRURGNkI0OTcwMDhCMEY3QkU4QzBD MUI1QTg1RDI3QTlDRUFEQkE4QkZBNTFBRTM2NjA1ODc5MENEOEMzOS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9FNUNFREY2QjQ5NzAwOEIwRjdCRThDMEMxQjVBODVEMjdBOUNFQURCQThC RkE1MUFFMzY2MDU4NzkwQ0Q4QzM5LzAvOUJCRjBDQkNDMzZENUNDOUJDMzJBNEE2 Q0QyOEJENjRCOEY2NEI2Qi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCyDH0MA0EAgAC MAcDBQAoBgPbMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQfOjANBgkqhkiG9w0B AQsFAAOCAQEAN6vIdUC3iiwQyJVSID1aRMtkxfIvVrKy/AVCehrcN6DAqz8DXoCK Krvkp+6VGTAtyHGCt5At6y19oVENKUj4GG9B4AnK9VsXA16Ifsmkg3skROjCvgRT 5xKWfj6VsFH8VnUNV1+WtHjHhdxYs0tz9K5udV6aBdd62yjMSTFeoq7Qcabq0gZ+ F2ruDpm+qAWXqrjrJa6bc+H5vWku14k6kcjCjfPi8ScZCCdUYdO/x3GyL+Kg1V5l uxMweDypOY+bFTpKy9J81bI4u2Pe6qLhNS6ww0eGtWTfPS2Blo9CEK3crZk5atte g3QfyJVmu/ycu/0suzst1HZlXU569LAojQ== -----END CERTIFICATE-----Generated at Mon Mar 2 12:45:07 2026 by rpki-client