$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A4EAE61F1B8952AFAD5693A1FC168A752D346DF1.cer File: A4EAE61F1B8952AFAD5693A1FC168A752D346DF1.cer (raw, json) Hash identifier: WCe4e922nctiPc+whG1g7/An/BKk7DgODYy6LmD08qA= Subject key identifier: A4:EA:E6:1F:1B:89:52:AF:AD:56:93:A1:FC:16:8A:75:2D:34:6D:F1 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 283F3D417DA63DCA21B45EC4EE10597BC0E9F86F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/FAD551EA17A5757AB68EFB2A65B5C86C48572DB8D1C268B850B06A9BCBDA3E1F/0/A4EAE61F1B8952AFAD5693A1FC168A752D346DF1.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/FAD551EA17A5757AB68EFB2A65B5C86C48572DB8D1C268B850B06A9BCBDA3E1F/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 27 Jan 2026 23:08:46 +0000 Certificate not after: Tue 26 Jan 2027 23:13:46 +0000 Subordinate resources: AS: 273074 IP: 45.239.107.0/24 IP: 200.33.28.0/24 IP: 2803:2f90::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 05 Mar 2026 11:41:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:3f:3d:41:7d:a6:3d:ca:21:b4:5e:c4:ee:10:59:7b:c0:e9:f8:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 27 23:08:46 2026 GMT Not After : Jan 26 23:13:46 2027 GMT Subject: CN=A4EAE61F1B8952AFAD5693A1FC168A752D346DF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ec:f7:c0:25:d5:34:41:f2:bc:18:a3:9c:f3: 97:3c:8e:90:20:62:25:a6:ed:70:cc:ec:46:38:a0: 68:25:bc:e0:ef:bf:aa:8a:c2:12:94:8a:00:00:73: b1:d7:84:d3:f3:4a:8c:bc:db:d9:22:e3:c1:4c:f0: b8:bb:6d:98:f6:11:59:50:f6:0d:76:1b:41:52:8a: d5:d8:33:ba:04:4c:64:82:63:7b:e3:89:1a:0e:de: 14:cd:e7:5d:01:e1:6d:f2:a4:ca:5c:d9:95:87:d5: 73:af:09:e5:36:a4:5b:e7:8d:88:9f:32:98:73:e3: 15:18:76:1f:86:11:5b:08:9a:16:b3:5e:c0:f3:bc: dc:fa:1a:1a:48:07:39:4c:28:7f:31:5d:8c:66:e4: 8b:81:9e:6a:c9:f1:4c:34:f7:c1:88:ff:65:ca:ef: 9c:32:77:71:db:e6:7f:d8:89:c2:0c:5d:fc:56:eb: 27:0d:3d:7d:83:cd:9f:ef:52:ed:43:fa:34:27:de: d4:00:e7:5e:1c:53:13:6e:f8:ed:7a:0a:30:83:9d: 5b:21:8e:97:1b:6e:3b:5d:1e:01:f5:f6:7a:4f:71: 7e:81:a4:52:88:de:56:f4:83:ba:f4:28:a8:7b:1c: 0a:c6:40:c9:e8:74:60:15:d7:35:48:88:9c:8b:25: 3a:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A4:EA:E6:1F:1B:89:52:AF:AD:56:93:A1:FC:16:8A:75:2D:34:6D:F1 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/FAD551EA17A5757AB68EFB2A65B5C86C48572DB8D1C268B850B06A9BCBDA3E1F/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/FAD551EA17A5757AB68EFB2A65B5C86C48572DB8D1C268B850B06A9BCBDA3E1F/0/A4EAE61F1B8952AFAD5693A1FC168A752D346DF1.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.239.107.0/24 200.33.28.0/24 IPv6: 2803:2f90::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273074 Signature Algorithm: sha256WithRSAEncryption 78:80:2b:6b:03:93:c5:03:fc:03:dd:02:ca:21:da:02:4c:62: f5:62:15:a8:83:c3:5a:e2:a9:34:fa:66:2e:48:c6:25:a5:26: e5:dd:5f:ab:1a:3b:00:3f:d9:9b:3b:92:fd:53:47:64:2d:04: 80:c9:81:bb:47:28:8f:cc:14:b6:8a:c5:55:9c:98:c6:69:5d: 7f:a3:39:0e:c2:23:e2:2c:ca:3b:68:51:12:75:b1:02:d6:9c: 5a:2f:40:9b:28:c6:12:4a:17:13:e1:3a:cc:29:83:d0:74:9b: 1c:2b:d8:b5:ed:56:4e:f6:1a:7f:c3:e2:bc:30:07:e2:ad:6d: af:57:26:06:44:b9:c8:46:cb:92:b1:32:f2:47:9b:3a:c8:ca: 92:d4:eb:52:91:77:93:0f:c4:ee:5f:81:87:5a:9c:62:0a:d0: 13:1f:9a:e1:7d:a2:30:d6:2f:54:d7:ab:09:f2:18:58:17:71: 9f:c8:9f:7a:3a:34:2a:05:84:5a:b4:eb:1b:43:7f:b7:c4:e2: 27:d9:ac:81:19:bc:ff:b0:86:b8:34:7f:87:5d:f2:76:5a:43: 23:2a:4b:9f:09:c8:2f:01:e6:53:04:c3:d5:bf:f1:6d:6b:21: 46:03:e8:c7:2c:07:26:c7:78:ab:ef:ec:1a:b4:70:2b:f7:c0: b4:f8:e5:6b -----BEGIN CERTIFICATE----- MIIGqzCCBZOgAwIBAgIUKD89QX2mPcohtF7E7hBZe8Dp+G8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjcyMzA4NDZaFw0yNzAxMjYyMzEzNDZaMDMxMTAvBgNV BAMTKEE0RUFFNjFGMUI4OTUyQUZBRDU2OTNBMUZDMTY4QTc1MkQzNDZERjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv7PfAJdU0QfK8GKOc85c8jpAg YiWm7XDM7EY4oGglvODvv6qKwhKUigAAc7HXhNPzSoy829ki48FM8Li7bZj2EVlQ 9g12G0FSitXYM7oETGSCY3vjiRoO3hTN510B4W3ypMpc2ZWH1XOvCeU2pFvnjYif Mphz4xUYdh+GEVsImhazXsDzvNz6GhpIBzlMKH8xXYxm5IuBnmrJ8Uw098GI/2XK 75wyd3Hb5n/YicIMXfxW6ycNPX2DzZ/vUu1D+jQn3tQA514cUxNu+O16CjCDnVsh jpcbbjtdHgH19npPcX6BpFKI3lb0g7r0KKh7HArGQMnodGAV1zVIiJyLJTrPAgMB AAGjggO1MIIDsTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSk6uYfG4lSr61W k6H8Fop1LTRt8TAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRkFENTUxRUExN0E1NzU3QUI2OEVGQjJB NjVCNUM4NkM0ODU3MkRCOEQxQzI2OEI4NTBCMDZBOUJDQkRBM0UxRi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9GQUQ1NTFFQTE3QTU3NTdBQjY4RUZCMkE2NUI1Qzg2QzQ4NTcyREI4RDFD MjY4Qjg1MEIwNkE5QkNCREEzRTFGLzAvQTRFQUU2MUYxQjg5NTJBRkFENTY5M0Ex RkMxNjhBNzUyRDM0NkRGMS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQALe9rAwQAyCEc MA0EAgACMAcDBQAoAy+QMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQqsjANBgkq hkiG9w0BAQsFAAOCAQEAeIArawOTxQP8A90CyiHaAkxi9WIVqIPDWuKpNPpmLkjG JaUm5d1fqxo7AD/ZmzuS/VNHZC0EgMmBu0coj8wUtorFVZyYxmldf6M5DsIj4izK O2hREnWxAtacWi9AmyjGEkoXE+E6zCmD0HSbHCvYte1WTvYaf8PivDAH4q1tr1cm BkS5yEbLkrEy8kebOsjKktTrUpF3kw/E7l+Bh1qcYgrQEx+a4X2iMNYvVNerCfIY WBdxn8ifejo0KgWEWrTrG0N/t8TiJ9msgRm8/7CGuDR/h13ydlpDIypLnwnILwHm UwTD1b/xbWshRgPoxywHJsd4q+/sGrRwK/fAtPjlaw== -----END CERTIFICATE-----Generated at Mon Mar 2 13:02:18 2026 by rpki-client