$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9CA76F67F98107C2D6B3F148CA6A0FF953F74B25.cer File: 9CA76F67F98107C2D6B3F148CA6A0FF953F74B25.cer (raw, json) Hash identifier: nl3JIDKcn03QHUsNjIoThmTROhcVm0kEBlcF7nmxsA4= Subject key identifier: 9C:A7:6F:67:F9:81:07:C2:D6:B3:F1:48:CA:6A:0F:F9:53:F7:4B:25 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 5E105964A96830373708D9D6C74296D4E9BFA033 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/CADF8B4A8D6285A2033F1602337CAFB3C2DD94EDC2E5A25480033FEDFB776B2C/0/9CA76F67F98107C2D6B3F148CA6A0FF953F74B25.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/CADF8B4A8D6285A2033F1602337CAFB3C2DD94EDC2E5A25480033FEDFB776B2C/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Thu 29 Jan 2026 00:55:54 +0000 Certificate not after: Thu 28 Jan 2027 01:00:54 +0000 Subordinate resources: AS: 271823 IP: 190.83.72.0/22 IP: 2803:b2e0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:10:59:64:a9:68:30:37:37:08:d9:d6:c7:42:96:d4:e9:bf:a0:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 29 00:55:54 2026 GMT Not After : Jan 28 01:00:54 2027 GMT Subject: CN=9CA76F67F98107C2D6B3F148CA6A0FF953F74B25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c6:6f:f9:65:10:4c:37:fd:2f:b6:ec:5d:d3: 6e:e6:16:ea:57:c3:0d:e8:76:9f:39:53:a8:2c:e2: b3:1c:dc:94:d9:c9:43:38:6e:41:3d:38:38:12:c1: e1:7a:92:fa:22:5f:8a:cb:1f:4a:f9:c6:78:d2:21: ef:31:77:e1:a1:1f:58:16:66:d4:b2:6e:89:d2:a8: 87:3e:d4:cb:d9:87:ba:9a:c2:fe:fd:c9:dd:97:d8: 5f:04:2b:62:45:fb:ee:2f:0d:85:73:e1:52:77:2f: 8d:62:ff:c7:5e:b5:1b:02:c2:ae:c1:ca:c9:0a:55: a7:9a:3d:ab:8f:e6:56:b7:9c:12:ed:14:2e:f1:cb: 0b:51:98:9a:cc:23:41:4e:88:2c:a9:92:b0:12:ab: 42:8f:c7:5e:96:7d:9d:cb:96:5e:fc:e5:3d:95:d7: 47:3b:ad:6f:d7:15:2a:a6:09:91:5d:99:9f:c2:3d: f0:c9:3c:9a:3c:81:d2:aa:18:6f:30:fb:35:87:76: 52:06:0c:3d:48:f4:e0:43:a5:1d:4e:4c:75:5f:4a: 4c:41:e6:9f:68:b1:21:b8:02:d8:aa:f5:79:00:68: ef:c5:2b:e2:1e:38:b4:ec:46:d1:f8:be:a9:ef:37: 89:b7:07:6d:e5:74:c7:ba:c6:81:10:90:08:11:0e: 00:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9C:A7:6F:67:F9:81:07:C2:D6:B3:F1:48:CA:6A:0F:F9:53:F7:4B:25 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/CADF8B4A8D6285A2033F1602337CAFB3C2DD94EDC2E5A25480033FEDFB776B2C/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/CADF8B4A8D6285A2033F1602337CAFB3C2DD94EDC2E5A25480033FEDFB776B2C/0/9CA76F67F98107C2D6B3F148CA6A0FF953F74B25.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 190.83.72.0/22 IPv6: 2803:b2e0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 271823 Signature Algorithm: sha256WithRSAEncryption 3c:1a:64:8c:f1:76:ec:ab:cb:57:96:0c:83:25:db:49:ef:a7: 8f:08:9a:42:19:6f:48:be:91:67:02:c0:de:c2:96:5c:f8:e3: 78:09:c8:0a:e1:0b:ec:d2:ab:0a:b3:8e:5a:05:f4:93:23:df: ed:aa:78:08:10:19:df:85:87:6d:55:16:52:b7:a1:51:1d:52: 2f:93:81:1e:56:46:77:99:09:24:92:cb:c5:5b:01:63:d6:b5: 16:e6:48:35:c9:b8:3a:e3:db:d7:47:f9:84:a7:01:36:ad:c4: e2:e8:da:47:70:45:c5:4c:37:57:44:f4:1c:51:06:bb:f5:dc: 49:2c:b2:19:5c:35:74:76:6d:3c:ca:96:3e:97:e6:32:43:3e: 40:9b:5f:03:b7:83:d5:6e:cb:13:29:33:06:74:46:81:f3:98: 78:61:03:ba:46:7e:43:ff:9f:6d:04:68:bb:50:8e:0b:89:ea: 83:64:11:7f:85:c7:bf:ef:8b:5e:7c:90:6d:69:c0:e3:7f:b0: 1f:ce:bf:91:b7:11:77:ad:af:91:8e:70:fd:be:b9:09:d9:10: 06:04:70:e0:7b:e5:b9:75:e1:b7:f5:02:ee:a6:ad:4f:4f:cf: 2c:3f:1c:2c:60:75:2d:9c:a1:41:b9:27:d6:57:0d:de:14:38: ab:86:c4:3f -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUXhBZZKloMDc3CNnWx0KW1Om/oDMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjkwMDU1NTRaFw0yNzAxMjgwMTAwNTRaMDMxMTAvBgNV BAMTKDlDQTc2RjY3Rjk4MTA3QzJENkIzRjE0OENBNkEwRkY5NTNGNzRCMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWxm/5ZRBMN/0vtuxd027mFupX ww3odp85U6gs4rMc3JTZyUM4bkE9ODgSweF6kvoiX4rLH0r5xnjSIe8xd+GhH1gW ZtSybonSqIc+1MvZh7qawv79yd2X2F8EK2JF++4vDYVz4VJ3L41i/8detRsCwq7B yskKVaeaPauP5la3nBLtFC7xywtRmJrMI0FOiCypkrASq0KPx16WfZ3Lll785T2V 10c7rW/XFSqmCZFdmZ/CPfDJPJo8gdKqGG8w+zWHdlIGDD1I9OBDpR1OTHVfSkxB 5p9osSG4Atiq9XkAaO/FK+IeOLTsRtH4vqnvN4m3B23ldMe6xoEQkAgRDgCVAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBScp29n+YEHwtaz 8UjKag/5U/dLJTAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQ0FERjhCNEE4RDYyODVBMjAzM0YxNjAy MzM3Q0FGQjNDMkREOTRFREMyRTVBMjU0ODAwMzNGRURGQjc3NkIyQy8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9DQURGOEI0QThENjI4NUEyMDMzRjE2MDIzMzdDQUZCM0MyREQ5NEVEQzJF NUEyNTQ4MDAzM0ZFREZCNzc2QjJDLzAvOUNBNzZGNjdGOTgxMDdDMkQ2QjNGMTQ4 Q0E2QTBGRjk1M0Y3NEIyNS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCvlNIMA0EAgAC MAcDBQAoA7LgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQlzzANBgkqhkiG9w0B AQsFAAOCAQEAPBpkjPF27KvLV5YMgyXbSe+njwiaQhlvSL6RZwLA3sKWXPjjeAnI CuEL7NKrCrOOWgX0kyPf7ap4CBAZ34WHbVUWUrehUR1SL5OBHlZGd5kJJJLLxVsB Y9a1FuZINcm4OuPb10f5hKcBNq3E4ujaR3BFxUw3V0T0HFEGu/XcSSyyGVw1dHZt PMqWPpfmMkM+QJtfA7eD1W7LEykzBnRGgfOYeGEDukZ+Q/+fbQRou1COC4nqg2QR f4XHv++LXnyQbWnA43+wH86/kbcRd62vkY5w/b65CdkQBgRw4HvluXXht/UC7qat T0/PLD8cLGB1LZyhQbkn1lcN3hQ4q4bEPw== -----END CERTIFICATE-----Generated at Mon Mar 2 16:32:45 2026 by rpki-client