$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E552EDA3BF8A5B6CADC533E403537B6DC729938.cer File: 9E552EDA3BF8A5B6CADC533E403537B6DC729938.cer (raw, json) Hash identifier: AjHE/ALDpKdpjCfWGMzro5ryBuWkhBteOOP4g+Twq5c= Subject key identifier: 9E:55:2E:DA:3B:F8:A5:B6:CA:DC:53:3E:40:35:37:B6:DC:72:99:38 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 3A2EB88325633EC52178458F9C0282BD7AD07EAA Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/AEC379831D2AE7A5D56AF6A90D9AF915FB6377EE9FF9B2A25FE909700E8A3C7F/0/9E552EDA3BF8A5B6CADC533E403537B6DC729938.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/AEC379831D2AE7A5D56AF6A90D9AF915FB6377EE9FF9B2A25FE909700E8A3C7F/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 27 Jan 2026 17:50:47 +0000 Certificate not after: Tue 26 Jan 2027 17:55:47 +0000 Subordinate resources: AS: 10299 IP: 131.108.168.0/22 IP: 138.122.200.0/22 IP: 168.227.0.0/22 IP: 170.81.24.0/22 IP: 186.27.128.0/17 IP: 190.1.192.0/18 IP: 190.99.128.0/17 IP: 200.29.96.0/19 IP: 2800:950::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:2e:b8:83:25:63:3e:c5:21:78:45:8f:9c:02:82:bd:7a:d0:7e:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 27 17:50:47 2026 GMT Not After : Jan 26 17:55:47 2027 GMT Subject: CN=9E552EDA3BF8A5B6CADC533E403537B6DC729938 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c4:47:75:cf:55:8e:54:b1:59:17:65:cb:77: 78:37:4f:57:db:73:ac:86:0f:00:ab:e4:44:1b:08: a9:b6:61:11:6a:67:a5:f2:9d:41:65:c3:b8:82:67: aa:10:dc:35:b3:24:1f:b1:79:cf:0b:1f:7a:d9:8c: 5c:b5:cb:12:d4:b8:68:12:c2:9e:0b:fa:c1:2e:3c: 56:92:0f:d5:1a:ea:d9:87:ec:bb:1f:87:1a:c2:99: 35:5f:dd:bc:d7:6b:18:40:a2:d2:bb:0e:3c:d1:30: a8:62:f2:d5:58:a7:9f:34:a6:85:3c:f4:a5:08:59: f2:c2:a0:48:ca:d9:77:6c:19:1c:1d:ff:82:d7:48: bb:ed:23:e9:2f:6c:1b:bb:ac:ab:08:e5:75:12:b8: 6a:5d:59:dd:ab:42:e5:6b:83:33:4f:a9:92:4a:ab: 00:f2:c3:94:fa:ed:ce:fe:40:44:1f:ee:3b:c8:aa: 2f:07:f0:b1:02:e1:f5:f2:5f:55:e3:a5:67:b6:e2: 56:76:2c:2d:06:df:e7:17:4b:e6:87:a9:ab:45:67: 74:27:63:18:0b:47:5d:b1:a0:cd:e8:36:74:3e:0d: c9:09:f3:a5:8a:cd:85:40:e7:3d:5b:13:51:48:58: 68:db:1c:46:21:a7:51:ff:35:10:fd:cb:dc:ce:36: 89:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9E:55:2E:DA:3B:F8:A5:B6:CA:DC:53:3E:40:35:37:B6:DC:72:99:38 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/AEC379831D2AE7A5D56AF6A90D9AF915FB6377EE9FF9B2A25FE909700E8A3C7F/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/AEC379831D2AE7A5D56AF6A90D9AF915FB6377EE9FF9B2A25FE909700E8A3C7F/0/9E552EDA3BF8A5B6CADC533E403537B6DC729938.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.108.168.0/22 138.122.200.0/22 168.227.0.0/22 170.81.24.0/22 186.27.128.0/17 190.1.192.0/18 190.99.128.0/17 200.29.96.0/19 IPv6: 2800:950::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 10299 Signature Algorithm: sha256WithRSAEncryption 53:4a:ab:cf:7e:cf:71:0a:da:6f:59:b8:05:71:21:72:64:e5: 32:38:fb:5d:36:c1:57:f5:35:e4:6a:c7:ed:60:07:8d:e1:20: d9:d0:4b:a9:00:ad:aa:3c:37:eb:99:cb:a6:88:44:dc:e6:02: b3:07:a1:ca:88:38:6b:c3:de:48:9b:40:7f:1e:d4:3e:0c:5c: eb:c7:67:c2:1c:05:cb:1e:35:9e:9c:e2:aa:fd:b2:d1:2f:59: 56:5a:ec:61:18:83:04:4d:21:cf:93:eb:a8:b8:c3:87:11:a6: 78:e0:d8:f5:f4:f8:e4:ad:dd:f5:66:02:99:3e:90:92:66:fe: 71:86:b2:51:c7:52:4a:0a:64:42:94:16:75:2c:ed:2c:46:c2: dc:12:5f:bf:d6:f2:9b:3e:a8:5f:e4:a2:d7:b6:28:f8:f7:db: 48:54:cf:d8:91:d4:10:a8:25:24:54:51:83:72:60:74:f3:c6: 4b:e5:44:7a:af:69:59:d2:e9:d8:8a:34:ce:b6:3b:7f:40:a1: 1a:05:c9:33:84:15:3f:84:b1:69:e9:9e:b3:af:18:64:80:f7: c8:6f:5b:3c:ed:d9:56:e6:f2:e0:1a:df:45:4a:cd:8f:ec:a5: ca:86:dd:3f:a2:22:4c:84:e7:6a:e4:34:fc:3d:72:7e:52:84: a6:78:63:f3 -----BEGIN CERTIFICATE----- MIIGzjCCBbagAwIBAgIUOi64gyVjPsUheEWPnAKCvXrQfqowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjcxNzUwNDdaFw0yNzAxMjYxNzU1NDdaMDMxMTAvBgNV BAMTKDlFNTUyRURBM0JGOEE1QjZDQURDNTMzRTQwMzUzN0I2REM3Mjk5MzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGxEd1z1WOVLFZF2XLd3g3T1fb c6yGDwCr5EQbCKm2YRFqZ6XynUFlw7iCZ6oQ3DWzJB+xec8LH3rZjFy1yxLUuGgS wp4L+sEuPFaSD9Ua6tmH7LsfhxrCmTVf3bzXaxhAotK7DjzRMKhi8tVYp580poU8 9KUIWfLCoEjK2XdsGRwd/4LXSLvtI+kvbBu7rKsI5XUSuGpdWd2rQuVrgzNPqZJK qwDyw5T67c7+QEQf7jvIqi8H8LEC4fXyX1XjpWe24lZ2LC0G3+cXS+aHqatFZ3Qn YxgLR12xoM3oNnQ+DckJ86WKzYVA5z1bE1FIWGjbHEYhp1H/NRD9y9zONomVAgMB AAGjggPYMIID1DAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSeVS7aO/iltsrc Uz5ANTe23HKZODAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQUVDMzc5ODMxRDJBRTdBNUQ1NkFGNkE5 MEQ5QUY5MTVGQjYzNzdFRTlGRjlCMkEyNUZFOTA5NzAwRThBM0M3Ri8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9BRUMzNzk4MzFEMkFFN0E1RDU2QUY2QTkwRDlBRjkxNUZCNjM3N0VFOUZG OUIyQTI1RkU5MDk3MDBFOEEzQzdGLzAvOUU1NTJFREEzQkY4QTVCNkNBREM1MzNF NDAzNTM3QjZEQzcyOTkzOC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFgGCCsGAQUFBwEHAQH/BEkwRzA2BAIAATAwAwQCg2yoAwQCinrI AwQCqOMAAwQCqlEYAwQHuhuAAwQGvgHAAwQHvmOAAwQFyB1gMA0EAgACMAcDBQAo AAlQMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAig7MA0GCSqGSIb3DQEBCwUAA4IB AQBTSqvPfs9xCtpvWbgFcSFyZOUyOPtdNsFX9TXkasftYAeN4SDZ0EupAK2qPDfr mcumiETc5gKzB6HKiDhrw95Im0B/HtQ+DFzrx2fCHAXLHjWenOKq/bLRL1lWWuxh GIMETSHPk+uouMOHEaZ44Nj19Pjkrd31ZgKZPpCSZv5xhrJRx1JKCmRClBZ1LO0s RsLcEl+/1vKbPqhf5KLXtij499tIVM/YkdQQqCUkVFGDcmB088ZL5UR6r2lZ0unY ijTOtjt/QKEaBckzhBU/hLFp6Z6zrxhkgPfIb1s87dlW5vLgGt9FSs2P7KXKht0/ oiJMhOdq5DT8PXJ+UoSmeGPz -----END CERTIFICATE-----Generated at Mon Mar 2 16:49:17 2026 by rpki-client