$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F86AA463B2D9774971AFAFA0E549C35F3743BB9.cer File: 9F86AA463B2D9774971AFAFA0E549C35F3743BB9.cer (raw, json) Hash identifier: F4elZyfctyviEi6XncyNDtnTshJZWdUpQwMEMr8U638= Subject key identifier: 9F:86:AA:46:3B:2D:97:74:97:1A:FA:FA:0E:54:9C:35:F3:74:3B:B9 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 49030209C302266B6BA25E6634090A57DE859073 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/1AE0975595A7E20CBA689C661AC2A3747D870C2A8CF08F9F223D942E40F70C73/0/9F86AA463B2D9774971AFAFA0E549C35F3743BB9.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/1AE0975595A7E20CBA689C661AC2A3747D870C2A8CF08F9F223D942E40F70C73/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 00:30:33 +0000 Certificate not after: Wed 27 Jan 2027 00:35:33 +0000 Subordinate resources: IP: 200.1.144.0/21 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:03:02:09:c3:02:26:6b:6b:a2:5e:66:34:09:0a:57:de:85:90:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 00:30:33 2026 GMT Not After : Jan 27 00:35:33 2027 GMT Subject: CN=9F86AA463B2D9774971AFAFA0E549C35F3743BB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:9f:74:df:91:b7:aa:dd:aa:e4:6d:55:24:e5: ee:8b:e4:69:cd:d2:1f:c8:e0:49:de:85:95:ed:5a: cd:f3:88:04:f4:33:10:0d:eb:a9:2b:99:4c:b0:11: 17:46:2d:a2:c7:33:46:d1:83:cc:39:68:d3:75:40: 65:59:a8:8e:7a:46:b7:21:79:d1:7b:7b:86:f2:8d: b4:7d:4f:8e:8c:f4:99:13:31:10:96:48:57:7c:52: 93:3d:2c:8f:1a:78:c0:34:54:ad:fe:90:94:30:ea: 65:3c:54:e9:49:e8:5f:b2:c0:c4:a4:22:0b:4f:aa: 98:fe:d0:65:3c:f9:b3:1f:ae:69:18:68:60:23:43: 34:bc:5a:5d:75:d3:b9:66:09:69:3d:66:87:bb:2e: bb:be:79:ec:db:cb:3c:3e:74:45:1d:d3:c5:a8:23: 59:2a:37:d2:0f:c3:f7:d0:56:53:19:06:62:d0:c8: ba:c1:74:d9:03:a6:b6:a2:3a:cf:cb:df:a5:5b:e6: 01:df:15:ef:58:6d:eb:a4:f3:a4:c0:53:b5:2f:8a: 2a:03:1b:2d:b6:bc:c9:68:d0:1f:04:e2:92:72:cc: b3:c6:14:26:5d:0b:1e:85:70:65:df:f2:66:8e:01: 4c:d8:f4:d5:e4:21:60:ee:72:97:13:39:fc:b3:ce: b3:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9F:86:AA:46:3B:2D:97:74:97:1A:FA:FA:0E:54:9C:35:F3:74:3B:B9 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1AE0975595A7E20CBA689C661AC2A3747D870C2A8CF08F9F223D942E40F70C73/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1AE0975595A7E20CBA689C661AC2A3747D870C2A8CF08F9F223D942E40F70C73/0/9F86AA463B2D9774971AFAFA0E549C35F3743BB9.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.1.144.0/21 Signature Algorithm: sha256WithRSAEncryption 39:d0:35:1a:b0:1d:aa:b7:71:a3:b2:e5:34:43:af:ef:f5:70: 05:11:d5:61:67:7b:13:cc:7a:76:88:8a:fc:50:5e:06:5d:e7: d7:9a:1f:0e:23:e5:c5:51:12:df:b5:93:67:6d:16:c8:8e:09: 10:94:d6:d9:44:8d:6f:3a:28:0e:c6:73:90:09:99:72:3f:10: 7c:07:21:89:f7:ea:a2:0c:aa:37:5f:07:33:15:de:f7:4f:a4: 3d:39:76:fe:6f:ce:3a:d4:4e:1e:83:0a:4a:15:13:62:0c:a0: a8:14:4f:12:cf:a1:72:5d:0b:e6:c7:c7:b1:b7:06:8c:13:be: 90:cf:30:5c:26:58:bd:cf:d8:8d:58:76:d6:15:3c:32:fc:85: 3a:01:5f:a3:fe:94:81:9c:19:f0:51:36:4d:c1:ab:d0:6f:23: b9:29:12:47:57:84:39:96:12:65:24:85:76:61:09:33:e6:f4: dc:ca:a1:79:0e:8f:50:6d:91:21:2f:1a:e8:91:80:45:33:c6: 86:05:b2:a7:0e:0d:8c:63:2e:cd:e7:86:f7:b4:9f:27:68:a2: e8:7a:11:10:79:63:b5:18:da:e8:8b:ee:dc:5d:83:6f:2c:ff: fc:17:48:6f:e0:db:b6:90:15:67:af:84:5f:1d:99:10:44:d9: 4e:dc:f7:ff -----BEGIN CERTIFICATE----- MIIGejCCBWKgAwIBAgIUSQMCCcMCJmtrol5mNAkKV96FkHMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgwMDMwMzNaFw0yNzAxMjcwMDM1MzNaMDMxMTAvBgNV BAMTKDlGODZBQTQ2M0IyRDk3NzQ5NzFBRkFGQTBFNTQ5QzM1RjM3NDNCQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVn3Tfkbeq3arkbVUk5e6L5GnN 0h/I4EnehZXtWs3ziAT0MxAN66krmUywERdGLaLHM0bRg8w5aNN1QGVZqI56Rrch edF7e4byjbR9T46M9JkTMRCWSFd8UpM9LI8aeMA0VK3+kJQw6mU8VOlJ6F+ywMSk IgtPqpj+0GU8+bMfrmkYaGAjQzS8Wl1107lmCWk9Zoe7Lru+eezbyzw+dEUd08Wo I1kqN9IPw/fQVlMZBmLQyLrBdNkDpraiOs/L36Vb5gHfFe9Ybeuk86TAU7UviioD Gy22vMlo0B8E4pJyzLPGFCZdCx6FcGXf8maOAUzY9NXkIWDucpcTOfyzzrOhAgMB AAGjggOEMIIDgDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSfhqpGOy2XdJca +voOVJw183Q7uTAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMUFFMDk3NTU5NUE3RTIwQ0JBNjg5QzY2 MUFDMkEzNzQ3RDg3MEMyQThDRjA4RjlGMjIzRDk0MkU0MEY3MEM3My8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8xQUUwOTc1NTk1QTdFMjBDQkE2ODlDNjYxQUMyQTM3NDdEODcwQzJBOENG MDhGOUYyMjNEOTQyRTQwRjcwQzczLzAvOUY4NkFBNDYzQjJEOTc3NDk3MUFGQUZB MEU1NDlDMzVGMzc0M0JCOS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDyAGQMA0GCSqG SIb3DQEBCwUAA4IBAQA50DUasB2qt3GjsuU0Q6/v9XAFEdVhZ3sTzHp2iIr8UF4G XefXmh8OI+XFURLftZNnbRbIjgkQlNbZRI1vOigOxnOQCZlyPxB8ByGJ9+qiDKo3 XwczFd73T6Q9OXb+b8461E4egwpKFRNiDKCoFE8Sz6FyXQvmx8extwaME76QzzBc Jli9z9iNWHbWFTwy/IU6AV+j/pSBnBnwUTZNwavQbyO5KRJHV4Q5lhJlJIV2YQkz 5vTcyqF5Do9QbZEhLxrokYBFM8aGBbKnDg2MYy7N54b3tJ8naKLoehEQeWO1GNro i+7cXYNvLP/8F0hv4Nu2kBVnr4RfHZkQRNlO3Pf/ -----END CERTIFICATE-----Generated at Mon Mar 2 14:16:13 2026 by rpki-client