$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A029AD07335F67E8BA47C64CB7192EFA5CC38203.cer File: A029AD07335F67E8BA47C64CB7192EFA5CC38203.cer (raw, json) Hash identifier: b1kjJN0tXin0pLAoyZa6Wov3XqnnHgKR8WByjFtRmoo= Subject key identifier: A0:29:AD:07:33:5F:67:E8:BA:47:C6:4C:B7:19:2E:FA:5C:C3:82:03 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 4DCC44E063B82E6A780E529ACDCAA04A294DE849 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/54A22E7312347008EA5CC5B398D8E32F2D51B2D846B0BF8889613185D66E5ABD/0/A029AD07335F67E8BA47C64CB7192EFA5CC38203.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/54A22E7312347008EA5CC5B398D8E32F2D51B2D846B0BF8889613185D66E5ABD/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 00:45:07 +0000 Certificate not after: Wed 27 Jan 2027 00:50:07 +0000 Subordinate resources: AS: 273979 IP: 181.232.192.0/22 IP: 2803:f0d0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:cc:44:e0:63:b8:2e:6a:78:0e:52:9a:cd:ca:a0:4a:29:4d:e8:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 00:45:07 2026 GMT Not After : Jan 27 00:50:07 2027 GMT Subject: CN=A029AD07335F67E8BA47C64CB7192EFA5CC38203 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:77:89:53:ed:6f:5b:e3:c7:d5:a6:a8:38:9c: b6:8b:a7:e2:ad:17:0b:2b:2e:df:e9:e2:a8:ea:4e: 36:83:44:c0:92:55:03:cf:0a:17:48:da:be:ff:38: 5d:04:82:f8:90:c4:dd:57:e1:2b:aa:1e:e6:90:07: 3c:74:f7:77:14:08:16:1b:8c:f6:ea:04:bf:78:b3: b1:b7:28:70:59:b1:1d:06:43:9f:c0:32:d3:aa:2e: 9a:f2:40:ff:b1:0c:3f:9a:a1:c2:a1:fd:f7:40:f7: 58:b1:e9:df:29:50:5a:96:66:e8:9c:aa:ef:00:19: 9b:d4:e3:8d:a5:a6:83:bc:e5:09:55:f5:f7:5d:01: 53:de:e0:8c:28:c1:41:f2:13:dc:bd:9a:68:cc:3d: 2f:df:c6:b2:5d:27:5d:24:fa:e1:bc:a0:c6:b9:24: 46:10:7d:0e:32:13:47:5b:96:e8:3f:83:7d:ca:54: aa:fe:b9:6d:18:b2:1f:2e:ee:f5:fe:35:a9:8a:db: 69:a7:fb:35:ab:c3:40:f3:f3:f6:d2:37:c1:46:ba: 21:83:22:9e:27:3f:a0:9f:c2:81:4a:65:29:d7:cf: 6c:dd:92:36:90:47:06:d2:a6:f2:8e:97:3c:d8:02: 43:d8:3c:91:ad:6a:4b:8c:3f:13:72:a4:02:fc:99: 0f:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A0:29:AD:07:33:5F:67:E8:BA:47:C6:4C:B7:19:2E:FA:5C:C3:82:03 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/54A22E7312347008EA5CC5B398D8E32F2D51B2D846B0BF8889613185D66E5ABD/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/54A22E7312347008EA5CC5B398D8E32F2D51B2D846B0BF8889613185D66E5ABD/0/A029AD07335F67E8BA47C64CB7192EFA5CC38203.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 181.232.192.0/22 IPv6: 2803:f0d0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273979 Signature Algorithm: sha256WithRSAEncryption 11:80:de:6f:16:83:cc:59:b2:2c:98:5a:64:6a:6e:fd:d4:b4: 62:91:22:12:f9:27:1c:9e:af:48:02:16:5a:2f:17:be:0e:45: bc:cb:77:36:a8:11:ff:da:36:b8:84:d4:74:1b:04:55:a4:cb: 53:8b:25:c9:ce:6b:c3:6c:f1:aa:8c:03:0a:02:82:dd:dd:6b: dd:89:7f:0b:e4:ac:ac:e3:4a:76:75:af:f8:af:57:c6:db:ea: f8:a9:64:7a:6c:6e:9a:d8:c3:fa:94:a3:cd:06:7b:33:71:11: 9e:2d:5c:28:1a:58:51:41:10:04:16:dd:35:ab:73:57:ef:20: 1b:66:a8:c7:53:1f:0e:9a:7d:f8:81:c4:1d:ac:b2:31:76:4b: 9a:bd:d9:2f:40:dd:d2:46:70:55:bb:92:a8:f1:df:d8:58:57: 80:5d:d0:1b:f9:cd:30:33:0f:38:5a:ad:0b:83:9a:b0:ae:e9: ce:3c:88:6c:83:61:c2:62:18:9d:15:f3:01:d6:53:72:21:cc: 53:ee:4e:d1:40:09:32:dc:d1:44:3d:e4:02:f7:c7:35:b4:72: ef:6f:cb:e5:53:10:5e:1f:f7:4b:3b:37:50:e7:22:47:da:e0: 4e:7f:1e:15:ca:d7:b1:9d:d9:75:0a:18:4c:34:0b:9a:dd:4e: 65:03:72:89 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUTcxE4GO4Lmp4DlKazcqgSilN6EkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgwMDQ1MDdaFw0yNzAxMjcwMDUwMDdaMDMxMTAvBgNV BAMTKEEwMjlBRDA3MzM1RjY3RThCQTQ3QzY0Q0I3MTkyRUZBNUNDMzgyMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFd4lT7W9b48fVpqg4nLaLp+Kt FwsrLt/p4qjqTjaDRMCSVQPPChdI2r7/OF0EgviQxN1X4SuqHuaQBzx093cUCBYb jPbqBL94s7G3KHBZsR0GQ5/AMtOqLpryQP+xDD+aocKh/fdA91ix6d8pUFqWZuic qu8AGZvU442lpoO85QlV9fddAVPe4IwowUHyE9y9mmjMPS/fxrJdJ10k+uG8oMa5 JEYQfQ4yE0dblug/g33KVKr+uW0Ysh8u7vX+NamK22mn+zWrw0Dz8/bSN8FGuiGD Ip4nP6CfwoFKZSnXz2zdkjaQRwbSpvKOlzzYAkPYPJGtakuMPxNypAL8mQ+vAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSgKa0HM19n6LpH xky3GS76XMOCAzAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNTRBMjJFNzMxMjM0NzAwOEVBNUNDNUIz OThEOEUzMkYyRDUxQjJEODQ2QjBCRjg4ODk2MTMxODVENjZFNUFCRC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy81NEEyMkU3MzEyMzQ3MDA4RUE1Q0M1QjM5OEQ4RTMyRjJENTFCMkQ4NDZC MEJGODg4OTYxMzE4NUQ2NkU1QUJELzAvQTAyOUFEMDczMzVGNjdFOEJBNDdDNjRD QjcxOTJFRkE1Q0MzODIwMy5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCtejAMA0EAgAC MAcDBQAoA/DQMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQuOzANBgkqhkiG9w0B AQsFAAOCAQEAEYDebxaDzFmyLJhaZGpu/dS0YpEiEvknHJ6vSAIWWi8Xvg5FvMt3 NqgR/9o2uITUdBsEVaTLU4slyc5rw2zxqowDCgKC3d1r3Yl/C+SsrONKdnWv+K9X xtvq+KlkemxumtjD+pSjzQZ7M3ERni1cKBpYUUEQBBbdNatzV+8gG2aox1MfDpp9 +IHEHayyMXZLmr3ZL0Dd0kZwVbuSqPHf2FhXgF3QG/nNMDMPOFqtC4OasK7pzjyI bINhwmIYnRXzAdZTciHMU+5O0UAJMtzRRD3kAvfHNbRy72/L5VMQXh/3Szs3UOci R9rgTn8eFcrXsZ3ZdQoYTDQLmt1OZQNyiQ== -----END CERTIFICATE-----Generated at Mon Mar 2 17:16:03 2026 by rpki-client