$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E7F2EB76A05A952625CB92EA40D238CA348F718.cer File: 9E7F2EB76A05A952625CB92EA40D238CA348F718.cer (raw, json) Hash identifier: w4rsKRdINNqH6ck00z5EOqOmmFg81FAptXVbOus4hw0= Subject key identifier: 9E:7F:2E:B7:6A:05:A9:52:62:5C:B9:2E:A4:0D:23:8C:A3:48:F7:18 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 37ACF285468CFBCB85AFFFE767DBD46F07A5AA3D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/DB7B8B4B4E6E8C43722E958F037046B89E9E27F0DF2AA08EB3DFD9DCCECF1247/0/9E7F2EB76A05A952625CB92EA40D238CA348F718.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/DB7B8B4B4E6E8C43722E958F037046B89E9E27F0DF2AA08EB3DFD9DCCECF1247/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 27 Jan 2026 21:30:36 +0000 Certificate not after: Tue 26 Jan 2027 21:35:36 +0000 Subordinate resources: AS: 27981 IP: 170.80.24.0/22 IP: 200.0.182.0/23 IP: 2801:1d:5000::/48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:ac:f2:85:46:8c:fb:cb:85:af:ff:e7:67:db:d4:6f:07:a5:aa:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 27 21:30:36 2026 GMT Not After : Jan 26 21:35:36 2027 GMT Subject: CN=9E7F2EB76A05A952625CB92EA40D238CA348F718 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:38:51:f9:a6:20:04:0b:f2:8a:d5:b1:7b:1c: ba:74:8e:49:b6:c1:bf:c2:6f:7f:8a:4d:8d:e7:b4: 0a:a4:15:0e:a7:dd:e2:b5:7d:38:22:0f:a8:dc:2a: 9e:e5:b3:3d:35:72:46:f9:05:2c:b9:0d:1c:f5:ca: 78:97:56:f9:0d:37:51:97:13:1b:8c:00:5a:ef:ae: 48:d7:a6:6c:b1:8b:c1:87:d4:91:07:86:29:9e:5b: d6:4c:32:36:f6:a9:71:ab:5b:89:0f:27:55:fa:c4: bb:21:ce:db:d1:2a:f1:92:06:7d:f7:64:0f:f5:4e: e4:58:ea:7c:89:b2:df:96:55:16:10:cd:fb:5f:a6: 74:89:76:6e:64:36:13:8a:53:b3:8f:56:76:40:cf: 74:0d:9b:91:bb:cc:7c:f4:83:dc:a8:bf:f5:d6:fc: 50:78:31:ce:20:e4:b8:c5:13:a8:6c:32:fb:35:bb: e5:60:27:5e:f9:70:4c:16:f7:98:d1:5d:95:60:c4: d0:2c:e0:c0:2d:d7:4f:9c:f9:62:dc:5b:b7:ba:ab: 40:87:85:26:ad:de:b8:a3:b7:17:02:d1:9c:95:70: c3:9f:47:0c:db:27:11:66:72:8b:8b:ba:1f:82:20: fd:fb:40:6a:1b:39:9e:70:6c:dd:91:79:e3:c8:eb: f5:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9E:7F:2E:B7:6A:05:A9:52:62:5C:B9:2E:A4:0D:23:8C:A3:48:F7:18 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/DB7B8B4B4E6E8C43722E958F037046B89E9E27F0DF2AA08EB3DFD9DCCECF1247/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/DB7B8B4B4E6E8C43722E958F037046B89E9E27F0DF2AA08EB3DFD9DCCECF1247/0/9E7F2EB76A05A952625CB92EA40D238CA348F718.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.80.24.0/22 200.0.182.0/23 IPv6: 2801:1d:5000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 27981 Signature Algorithm: sha256WithRSAEncryption 54:10:6a:66:61:90:0e:88:9e:86:dd:40:d0:e4:15:14:e7:95: 59:40:a0:a4:6c:05:f2:8f:a8:c3:25:81:af:82:e2:86:38:68: 65:7e:65:90:e8:f3:1a:57:80:3e:76:60:b9:97:72:60:2b:de: 71:c8:cc:a7:1b:db:91:0e:89:ee:c0:a4:93:45:f5:9a:6a:ff: ac:8d:cf:3f:f9:de:98:ef:2f:0d:07:96:41:3e:b1:32:9a:bb: 7d:16:f9:cc:26:5d:91:8a:ff:c3:ee:74:29:75:cb:66:9a:6e: 89:f9:ba:0a:8f:a9:31:55:13:e0:8b:e8:60:98:fa:2b:23:66: 31:53:03:b0:c4:45:38:c5:4a:3c:60:87:00:77:df:b2:81:00: 64:fd:da:7e:5b:36:6c:43:0f:47:9c:b4:8c:1d:65:15:dc:ab: fe:47:f5:4c:ed:39:07:b6:ef:2c:6c:26:14:62:0d:45:31:6b: 24:88:2f:5e:01:18:28:06:7c:06:25:a8:f3:62:4d:bd:16:e9: 56:2a:03:eb:3c:e0:e5:64:f9:ce:64:c1:64:cc:97:f2:b9:4f: 61:cf:d4:71:1c:3a:95:99:f7:02:43:64:1f:8f:6b:0c:f5:c6: 4f:be:60:46:b1:0f:6a:22:72:60:1e:5b:1d:ac:bb:11:2e:8a: c4:06:43:ff -----BEGIN CERTIFICATE----- MIIGrDCCBZSgAwIBAgIUN6zyhUaM+8uFr//nZ9vUbwelqj0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjcyMTMwMzZaFw0yNzAxMjYyMTM1MzZaMDMxMTAvBgNV BAMTKDlFN0YyRUI3NkEwNUE5NTI2MjVDQjkyRUE0MEQyMzhDQTM0OEY3MTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpOFH5piAEC/KK1bF7HLp0jkm2 wb/Cb3+KTY3ntAqkFQ6n3eK1fTgiD6jcKp7lsz01ckb5BSy5DRz1yniXVvkNN1GX ExuMAFrvrkjXpmyxi8GH1JEHhimeW9ZMMjb2qXGrW4kPJ1X6xLshztvRKvGSBn33 ZA/1TuRY6nyJst+WVRYQzftfpnSJdm5kNhOKU7OPVnZAz3QNm5G7zHz0g9yov/XW /FB4Mc4g5LjFE6hsMvs1u+VgJ175cEwW95jRXZVgxNAs4MAt10+c+WLcW7e6q0CH hSat3rijtxcC0ZyVcMOfRwzbJxFmcouLuh+CIP37QGobOZ5wbN2ReePI6/WfAgMB AAGjggO2MIIDsjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSefy63agWpUmJc uS6kDSOMo0j3GDAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvREI3QjhCNEI0RTZFOEM0MzcyMkU5NThG MDM3MDQ2Qjg5RTlFMjdGMERGMkFBMDhFQjNERkQ5RENDRUNGMTI0Ny8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9EQjdCOEI0QjRFNkU4QzQzNzIyRTk1OEYwMzcwNDZCODlFOUUyN0YwREYy QUEwOEVCM0RGRDlEQ0NFQ0YxMjQ3LzAvOUU3RjJFQjc2QTA1QTk1MjYyNUNCOTJF QTQwRDIzOENBMzQ4RjcxOC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQCqlAYAwQByAC2 MA8EAgACMAkDBwAoAQAdUAAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICbU0wDQYJ KoZIhvcNAQELBQADggEBAFQQamZhkA6InobdQNDkFRTnlVlAoKRsBfKPqMMlga+C 4oY4aGV+ZZDo8xpXgD52YLmXcmAr3nHIzKcb25EOie7ApJNF9Zpq/6yNzz/53pjv Lw0HlkE+sTKau30W+cwmXZGK/8PudCl1y2aabon5ugqPqTFVE+CL6GCY+isjZjFT A7DERTjFSjxghwB337KBAGT92n5bNmxDD0ectIwdZRXcq/5H9UztOQe27yxsJhRi DUUxaySIL14BGCgGfAYlqPNiTb0W6VYqA+s84OVk+c5kwWTMl/K5T2HP1HEcOpWZ 9wJDZB+Pawz1xk++YEaxD2oicmAeWx2suxEuisQGQ/8= -----END CERTIFICATE-----Generated at Mon Mar 2 20:18:30 2026 by rpki-client