$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A046A17FBDC23F220B11EE08ACA1DECE39FE81D8.cer File: A046A17FBDC23F220B11EE08ACA1DECE39FE81D8.cer (raw, json) Hash identifier: TrrfsqPkEhsHHVjwoAuDEsVlG/4Pdvp8Yd0P9N/EWTA= Subject key identifier: A0:46:A1:7F:BD:C2:3F:22:0B:11:EE:08:AC:A1:DE:CE:39:FE:81:D8 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 53CA8719329D01625F2A7CF17302DC4CE96CF4CE Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/035AE87F0F53727F69EE2BDF44AAE7E4E8A1498D3032349D39B8FA70E245663E/0/A046A17FBDC23F220B11EE08ACA1DECE39FE81D8.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/035AE87F0F53727F69EE2BDF44AAE7E4E8A1498D3032349D39B8FA70E245663E/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 14:25:37 +0000 Certificate not after: Wed 27 Jan 2027 14:30:37 +0000 Subordinate resources: AS: 263728 IP: 131.72.232.0/22 IP: 2803:380::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:ca:87:19:32:9d:01:62:5f:2a:7c:f1:73:02:dc:4c:e9:6c:f4:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 14:25:37 2026 GMT Not After : Jan 27 14:30:37 2027 GMT Subject: CN=A046A17FBDC23F220B11EE08ACA1DECE39FE81D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:21:63:37:a6:53:07:57:52:82:e8:b2:97:43: fc:b1:24:4e:ff:3b:6e:7c:fc:75:fe:e4:e9:2c:0a: 58:a5:f9:a2:ae:b7:31:4c:a2:ca:da:cb:99:b0:56: 10:85:ed:ed:de:c1:cd:39:7b:70:1c:f3:0c:c9:eb: ef:b4:d9:33:5c:cc:8e:e2:16:a9:d3:95:2c:bc:9b: 6b:28:54:13:4d:f4:9e:a9:6c:e6:9b:d0:30:af:40: b8:ca:50:de:94:81:dc:26:9a:dc:98:f9:0a:1f:75: 39:08:96:c5:4a:14:38:e3:4d:9f:51:7e:db:10:17: 4b:50:55:32:2c:8f:9d:5e:50:58:a9:96:e7:c3:53: fe:9e:ca:b0:1c:fb:c0:06:c3:03:11:70:32:1e:01: 6b:c6:63:47:e0:8d:15:de:b6:84:28:32:71:3b:b9: 31:32:86:3c:eb:f1:5c:23:cb:32:17:ac:6f:24:c1: 6a:a2:5b:24:0e:6d:02:c5:19:6e:d2:f7:9d:a1:24: f9:11:5d:2a:ea:fb:24:cc:2b:8e:1c:12:ce:7f:37: 64:21:fa:0d:9f:18:92:7f:95:b2:c4:bc:67:7a:3b: c3:e3:bf:9e:8e:df:e7:b5:93:5d:11:0c:c7:73:4c: 5e:8b:93:29:68:6f:34:d7:80:a6:97:95:5b:f4:f0: db:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A0:46:A1:7F:BD:C2:3F:22:0B:11:EE:08:AC:A1:DE:CE:39:FE:81:D8 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/035AE87F0F53727F69EE2BDF44AAE7E4E8A1498D3032349D39B8FA70E245663E/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/035AE87F0F53727F69EE2BDF44AAE7E4E8A1498D3032349D39B8FA70E245663E/0/A046A17FBDC23F220B11EE08ACA1DECE39FE81D8.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.72.232.0/22 IPv6: 2803:380::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263728 Signature Algorithm: sha256WithRSAEncryption 5f:c1:21:a8:41:4b:91:b9:f8:fe:21:ca:61:e8:02:31:fe:d6: 47:6a:a0:df:b8:db:14:df:87:22:23:44:af:e9:b1:49:96:31: 3e:02:b5:d3:43:a2:d1:63:58:2b:a4:35:4b:0f:37:de:43:b4: f5:7c:fe:ec:95:ed:12:f3:94:fe:4e:a2:ec:1b:5c:eb:27:3a: 15:8e:1a:8a:d9:2f:e2:ee:6f:ea:51:d3:49:37:6d:08:ff:50: 9c:7e:ed:bf:ed:03:01:21:da:c7:55:af:0c:1d:6b:82:42:21: d0:04:da:82:1e:02:33:44:8c:56:52:b1:9e:a6:fa:71:0c:bd: 9d:90:8c:c1:80:ae:93:e4:a3:6c:7a:49:12:05:2e:64:27:63: 6f:d1:05:6d:de:de:79:9b:bc:c9:c4:33:f5:96:3f:55:8e:ad: 70:49:79:29:a2:b9:5f:cc:05:ba:41:1f:4e:1b:bf:97:20:89: ec:7d:da:d7:bf:3c:be:3f:53:b9:96:05:b6:10:36:2b:73:e4: c9:63:ed:65:7d:3d:71:44:6e:f8:c9:b3:ed:ec:a6:c3:d6:b1: 50:5f:40:15:c2:fe:b4:1b:74:82:ba:25:2f:c7:3b:b8:62:98: ff:c3:cb:af:0c:17:7e:0e:ab:f2:29:95:ae:0f:8c:67:e0:36: 7f:90:15:ef -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUU8qHGTKdAWJfKnzxcwLcTOls9M4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgxNDI1MzdaFw0yNzAxMjcxNDMwMzdaMDMxMTAvBgNV BAMTKEEwNDZBMTdGQkRDMjNGMjIwQjExRUUwOEFDQTFERUNFMzlGRTgxRDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcIWM3plMHV1KC6LKXQ/yxJE7/ O258/HX+5OksClil+aKutzFMosray5mwVhCF7e3ewc05e3Ac8wzJ6++02TNczI7i FqnTlSy8m2soVBNN9J6pbOab0DCvQLjKUN6UgdwmmtyY+QofdTkIlsVKFDjjTZ9R ftsQF0tQVTIsj51eUFiplufDU/6eyrAc+8AGwwMRcDIeAWvGY0fgjRXetoQoMnE7 uTEyhjzr8VwjyzIXrG8kwWqiWyQObQLFGW7S952hJPkRXSrq+yTMK44cEs5/N2Qh +g2fGJJ/lbLEvGd6O8Pjv56O3+e1k10RDMdzTF6LkylobzTXgKaXlVv08NtbAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSgRqF/vcI/IgsR 7gisod7OOf6B2DAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMDM1QUU4N0YwRjUzNzI3RjY5RUUyQkRG NDRBQUU3RTRFOEExNDk4RDMwMzIzNDlEMzlCOEZBNzBFMjQ1NjYzRS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8wMzVBRTg3RjBGNTM3MjdGNjlFRTJCREY0NEFBRTdFNEU4QTE0OThEMzAz MjM0OUQzOUI4RkE3MEUyNDU2NjNFLzAvQTA0NkExN0ZCREMyM0YyMjBCMTFFRTA4 QUNBMURFQ0UzOUZFODFEOC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCg0joMA0EAgAC MAcDBQAoAwOAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQGMDANBgkqhkiG9w0B AQsFAAOCAQEAX8EhqEFLkbn4/iHKYegCMf7WR2qg37jbFN+HIiNEr+mxSZYxPgK1 00Oi0WNYK6Q1Sw833kO09Xz+7JXtEvOU/k6i7Btc6yc6FY4aitkv4u5v6lHTSTdt CP9QnH7tv+0DASHax1WvDB1rgkIh0ATagh4CM0SMVlKxnqb6cQy9nZCMwYCuk+Sj bHpJEgUuZCdjb9EFbd7eeZu8ycQz9ZY/VY6tcEl5KaK5X8wFukEfThu/lyCJ7H3a 1788vj9TuZYFthA2K3PkyWPtZX09cURu+Mmz7eymw9axUF9AFcL+tBt0grolL8c7 uGKY/8PLrwwXfg6r8imVrg+MZ+A2f5AV7w== -----END CERTIFICATE-----Generated at Mon Mar 2 14:47:49 2026 by rpki-client