$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A336D3A6848D9FCFC33C29FA222E93389C236D0B.cer File: A336D3A6848D9FCFC33C29FA222E93389C236D0B.cer (raw, json) Hash identifier: DYA/6G7YJgKutVt+vnwKSOixJ0jBLPj3sxF1LaoYKdE= Subject key identifier: A3:36:D3:A6:84:8D:9F:CF:C3:3C:29:FA:22:2E:93:38:9C:23:6D:0B Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 23992C1FD6BEA6C84FC49C436D2D1B14800CA610 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/8DB8F65B180EB280A6CF86D1CBA388A96308840BE26735199AC3D2D24A4ED4C3/0/A336D3A6848D9FCFC33C29FA222E93389C236D0B.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/8DB8F65B180EB280A6CF86D1CBA388A96308840BE26735199AC3D2D24A4ED4C3/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Thu 29 Jan 2026 04:02:05 +0000 Certificate not after: Thu 28 Jan 2027 04:07:05 +0000 Subordinate resources: AS: 264782 IP: 207.248.81.0/24 IP: 2801:0:2e0::/48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:99:2c:1f:d6:be:a6:c8:4f:c4:9c:43:6d:2d:1b:14:80:0c:a6:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 29 04:02:05 2026 GMT Not After : Jan 28 04:07:05 2027 GMT Subject: CN=A336D3A6848D9FCFC33C29FA222E93389C236D0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c5:59:6a:cd:6d:6a:e6:3c:3d:70:1b:04:07: e1:a1:67:dd:90:a6:74:a8:b1:1b:ca:04:7b:91:5d: 8a:6b:37:ab:21:52:3d:90:a0:d6:30:0d:95:e1:92: 73:15:40:d2:b1:d4:9f:94:7a:65:65:1a:51:b1:9c: b8:06:1b:39:c5:39:d8:6c:1f:49:cc:cb:df:0b:f2: 8c:84:05:8e:af:ea:ef:da:63:2d:4f:c3:0f:77:f6: f7:b2:b7:5d:67:3f:84:b4:53:36:c6:f5:63:9c:0f: a0:64:9e:a2:01:7b:70:45:04:df:92:46:b5:71:5d: 36:30:ce:f4:3f:fe:25:08:cf:70:67:bd:16:f9:f2: ab:07:cc:d0:0c:63:3a:d0:2f:0a:54:cb:8a:75:8c: c9:e5:5b:64:20:b3:0e:37:9d:82:e8:9b:33:16:22: ab:5a:a8:01:77:97:bb:b1:bc:b5:77:e6:a7:c0:97: 10:1c:53:87:f5:02:6e:8f:f3:d9:72:97:b4:2d:0b: 53:7b:df:c5:e5:ba:65:39:76:80:91:4e:c3:f9:67: d4:d1:80:27:fd:17:0f:61:d1:df:b5:41:b0:87:b3: 5a:b4:c5:a6:66:32:2b:0f:d1:d3:e1:2b:ee:37:6c: f4:41:1d:77:8b:4f:0b:6e:f8:55:05:3c:a7:95:89: 41:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A3:36:D3:A6:84:8D:9F:CF:C3:3C:29:FA:22:2E:93:38:9C:23:6D:0B X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/8DB8F65B180EB280A6CF86D1CBA388A96308840BE26735199AC3D2D24A4ED4C3/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/8DB8F65B180EB280A6CF86D1CBA388A96308840BE26735199AC3D2D24A4ED4C3/0/A336D3A6848D9FCFC33C29FA222E93389C236D0B.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 207.248.81.0/24 IPv6: 2801:0:2e0::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264782 Signature Algorithm: sha256WithRSAEncryption 89:0b:07:2a:11:db:51:be:ee:17:8f:9f:39:35:43:d8:05:e7: c7:e8:7e:68:72:c7:af:6f:59:84:3b:c3:45:fb:00:9b:bd:e0: e3:bf:e0:72:ea:39:a8:d0:19:33:23:85:e7:2b:cb:1d:e1:b3: 93:98:fd:62:56:6e:8a:29:a0:ec:ea:b3:3f:0b:f1:9a:22:a2: 2f:ca:0f:45:f0:d9:09:9c:ad:e0:d5:9d:bc:7c:ca:b1:7b:0e: e0:41:98:b8:a8:d7:1d:62:f4:45:b8:05:46:e7:b5:b4:08:2a: 7c:3a:71:2d:a6:fc:6a:f1:41:05:ec:1f:89:51:82:ab:dc:30: 32:47:1e:13:38:f2:84:21:9c:c5:84:9c:a1:b3:67:1a:f8:48: d5:74:2e:cc:7d:7a:67:34:07:da:3d:5b:f3:70:dc:34:89:53: 00:d4:79:75:3d:a9:d4:25:7a:f5:9f:c3:d2:13:87:97:70:1c: cc:33:b5:80:55:f6:67:7b:3a:39:cc:89:fa:51:a3:fb:21:f6: 3b:e1:d5:38:4e:cf:a1:57:9c:0f:9d:b3:ec:90:a9:cf:c8:92: 28:a3:83:03:5a:fe:bd:0e:d9:67:ac:87:5f:17:4e:9d:38:e3: 15:53:90:7f:ab:35:4d:af:5c:36:b3:5a:3e:ca:71:01:e2:72: 81:3f:bf:97 -----BEGIN CERTIFICATE----- MIIGpzCCBY+gAwIBAgIUI5ksH9a+pshPxJxDbS0bFIAMphAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjkwNDAyMDVaFw0yNzAxMjgwNDA3MDVaMDMxMTAvBgNV BAMTKEEzMzZEM0E2ODQ4RDlGQ0ZDMzNDMjlGQTIyMkU5MzM4OUMyMzZEMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7xVlqzW1q5jw9cBsEB+GhZ92Q pnSosRvKBHuRXYprN6shUj2QoNYwDZXhknMVQNKx1J+UemVlGlGxnLgGGznFOdhs H0nMy98L8oyEBY6v6u/aYy1Pww939veyt11nP4S0UzbG9WOcD6BknqIBe3BFBN+S RrVxXTYwzvQ//iUIz3BnvRb58qsHzNAMYzrQLwpUy4p1jMnlW2Qgsw43nYLomzMW IqtaqAF3l7uxvLV35qfAlxAcU4f1Am6P89lyl7QtC1N738XlumU5doCRTsP5Z9TR gCf9Fw9h0d+1QbCHs1q0xaZmMisP0dPhK+43bPRBHXeLTwtu+FUFPKeViUG5AgMB AAGjggOxMIIDrTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSjNtOmhI2fz8M8 KfoiLpM4nCNtCzAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvOERCOEY2NUIxODBFQjI4MEE2Q0Y4NkQx Q0JBMzg4QTk2MzA4ODQwQkUyNjczNTE5OUFDM0QyRDI0QTRFRDRDMy8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy84REI4RjY1QjE4MEVCMjgwQTZDRjg2RDFDQkEzODhBOTYzMDg4NDBCRTI2 NzM1MTk5QUMzRDJEMjRBNEVENEMzLzAvQTMzNkQzQTY4NDhEOUZDRkMzM0MyOUZB MjIyRTkzMzg5QzIzNkQwQi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAz/hRMA8EAgAC MAkDBwAoAQAAAuAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBApOMA0GCSqGSIb3 DQEBCwUAA4IBAQCJCwcqEdtRvu4Xj585NUPYBefH6H5ocsevb1mEO8NF+wCbveDj v+By6jmo0BkzI4XnK8sd4bOTmP1iVm6KKaDs6rM/C/GaIqIvyg9F8NkJnK3g1Z28 fMqxew7gQZi4qNcdYvRFuAVG57W0CCp8OnEtpvxq8UEF7B+JUYKr3DAyRx4TOPKE IZzFhJyhs2ca+EjVdC7MfXpnNAfaPVvzcNw0iVMA1Hl1PanUJXr1n8PSE4eXcBzM M7WAVfZnezo5zIn6UaP7IfY74dU4Ts+hV5wPnbPskKnPyJIoo4MDWv69DtlnrIdf F06dOOMVU5B/qzVNr1w2s1o+ynEB4nKBP7+X -----END CERTIFICATE-----Generated at Mon Mar 2 14:47:40 2026 by rpki-client