$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A4EC8475F98014B965F34B25A2A68F58AAEE199B.cer File: A4EC8475F98014B965F34B25A2A68F58AAEE199B.cer (raw, json) Hash identifier: LTVvUZC2ebvjJwMc95AW3czzcl5M9MQB1PthV7R2YMQ= Subject key identifier: A4:EC:84:75:F9:80:14:B9:65:F3:4B:25:A2:A6:8F:58:AA:EE:19:9B Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 58429A95D25167528010239D0B11D8BDDF74EAF1 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/0C966AF2D667C71DB8F7DC6CBE7AA3B54C9A1341ACA871B57B438DF8EAC761DC/0/A4EC8475F98014B965F34B25A2A68F58AAEE199B.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/0C966AF2D667C71DB8F7DC6CBE7AA3B54C9A1341ACA871B57B438DF8EAC761DC/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Thu 29 Jan 2026 01:42:52 +0000 Certificate not after: Thu 28 Jan 2027 01:47:52 +0000 Subordinate resources: AS: 263248 IP: 170.84.108.0/22 IP: 200.192.236.0/22 IP: 2803:980::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 05 Mar 2026 11:41:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:42:9a:95:d2:51:67:52:80:10:23:9d:0b:11:d8:bd:df:74:ea:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 29 01:42:52 2026 GMT Not After : Jan 28 01:47:52 2027 GMT Subject: CN=A4EC8475F98014B965F34B25A2A68F58AAEE199B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:0d:2e:35:08:74:03:91:71:eb:75:e1:25:a4: 22:ed:a3:1c:3f:98:d2:f4:57:fd:4e:49:d8:af:c6: bf:7d:dc:0f:df:a0:b7:1a:ca:96:ff:f3:e5:cf:85: d0:56:c9:fa:cd:f8:c0:0b:bc:16:9a:7b:a8:9a:ae: 69:84:2b:42:b0:d7:3a:42:cd:95:92:a3:cd:99:7a: 0c:07:1f:f5:45:f4:84:53:b5:0a:ac:a7:6c:f9:43: 7f:cb:0b:6b:f5:53:ae:5e:ea:f8:94:a0:5c:06:c6: f0:ab:df:09:c5:35:af:e6:3a:c4:81:d5:39:11:5c: 38:96:4e:ad:77:20:2e:2e:63:5c:da:ef:8d:91:93: 5f:b1:56:4c:11:d0:f7:c8:33:3f:1e:26:8c:bd:06: fb:2d:b6:7a:27:5e:6d:8f:5a:db:3d:43:20:74:a1: 32:fa:6b:15:ce:03:1a:7c:70:49:f5:07:51:0f:6a: fd:2b:ad:eb:37:cd:8c:1a:aa:1b:1d:87:5c:39:04: 60:30:89:b6:dc:dc:af:f1:08:13:ba:00:2b:3b:7b: 93:83:34:58:14:47:c8:23:92:de:d8:4f:be:95:94: 03:71:11:b0:42:9e:fa:b5:4e:d0:ef:1c:e8:67:85: 65:89:70:5a:7e:37:07:0f:e5:fd:59:38:09:c7:3c: 7d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A4:EC:84:75:F9:80:14:B9:65:F3:4B:25:A2:A6:8F:58:AA:EE:19:9B X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0C966AF2D667C71DB8F7DC6CBE7AA3B54C9A1341ACA871B57B438DF8EAC761DC/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0C966AF2D667C71DB8F7DC6CBE7AA3B54C9A1341ACA871B57B438DF8EAC761DC/0/A4EC8475F98014B965F34B25A2A68F58AAEE199B.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.84.108.0/22 200.192.236.0/22 IPv6: 2803:980::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263248 Signature Algorithm: sha256WithRSAEncryption 44:03:0e:5a:7f:4d:60:07:4a:ee:0e:7f:d1:b2:0a:1a:22:28: 96:cc:dc:a9:55:44:3e:b5:4d:68:44:31:f0:83:23:80:64:a3: db:a3:bc:13:cf:90:88:06:c9:15:3a:02:dc:2a:51:8b:d6:69: 00:64:df:92:00:a9:fd:fc:45:ca:e5:e3:22:d5:fb:f9:83:55: 6d:55:e2:d1:24:06:2a:b3:62:aa:bb:b0:9e:da:49:a8:79:3e: b6:77:ee:7b:df:e6:85:9a:95:22:42:4f:5f:a6:43:e3:20:f1: 89:ed:f4:de:ba:98:6a:49:1a:25:5c:28:d1:94:b2:8b:55:03: 09:03:48:95:61:3d:1d:8e:78:90:2f:d0:dc:73:64:14:c4:bc: e4:4f:dc:ac:86:28:73:5e:87:6b:ae:d8:6c:ce:f2:8f:ac:56: ec:ae:40:5f:a9:d4:13:8b:b1:33:20:86:71:a2:de:19:6d:b6: dc:28:7f:8b:1a:f1:77:e9:77:c0:1c:39:93:de:52:74:86:f3: 7e:0c:e0:03:e2:e1:40:e6:43:aa:14:d8:dd:c8:14:4a:a2:43: 40:f3:df:cf:60:3d:f8:0a:1e:de:27:e8:05:f5:1c:f7:8f:04: e7:5f:42:53:d4:57:8a:78:d7:60:60:6f:65:fc:8e:9f:99:62: 97:60:a8:18 -----BEGIN CERTIFICATE----- MIIGqzCCBZOgAwIBAgIUWEKaldJRZ1KAECOdCxHYvd906vEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjkwMTQyNTJaFw0yNzAxMjgwMTQ3NTJaMDMxMTAvBgNV BAMTKEE0RUM4NDc1Rjk4MDE0Qjk2NUYzNEIyNUEyQTY4RjU4QUFFRTE5OUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2DS41CHQDkXHrdeElpCLtoxw/ mNL0V/1OSdivxr993A/foLcaypb/8+XPhdBWyfrN+MALvBaae6iarmmEK0Kw1zpC zZWSo82ZegwHH/VF9IRTtQqsp2z5Q3/LC2v1U65e6viUoFwGxvCr3wnFNa/mOsSB 1TkRXDiWTq13IC4uY1za742Rk1+xVkwR0PfIMz8eJoy9BvsttnonXm2PWts9QyB0 oTL6axXOAxp8cEn1B1EPav0rres3zYwaqhsdh1w5BGAwibbc3K/xCBO6ACs7e5OD NFgUR8gjkt7YT76VlANxEbBCnvq1TtDvHOhnhWWJcFp+NwcP5f1ZOAnHPH35AgMB AAGjggO1MIIDsTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSk7IR1+YAUuWXz SyWipo9Yqu4ZmzAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMEM5NjZBRjJENjY3QzcxREI4RjdEQzZD QkU3QUEzQjU0QzlBMTM0MUFDQTg3MUI1N0I0MzhERjhFQUM3NjFEQy8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8wQzk2NkFGMkQ2NjdDNzFEQjhGN0RDNkNCRTdBQTNCNTRDOUExMzQxQUNB ODcxQjU3QjQzOERGOEVBQzc2MURDLzAvQTRFQzg0NzVGOTgwMTRCOTY1RjM0QjI1 QTJBNjhGNThBQUVFMTk5Qi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCqlRsAwQCyMDs MA0EAgACMAcDBQAoAwmAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQEUDANBgkq hkiG9w0BAQsFAAOCAQEARAMOWn9NYAdK7g5/0bIKGiIolszcqVVEPrVNaEQx8IMj gGSj26O8E8+QiAbJFToC3CpRi9ZpAGTfkgCp/fxFyuXjItX7+YNVbVXi0SQGKrNi qruwntpJqHk+tnfue9/mhZqVIkJPX6ZD4yDxie303rqYakkaJVwo0ZSyi1UDCQNI lWE9HY54kC/Q3HNkFMS85E/crIYoc16Ha67YbM7yj6xW7K5AX6nUE4uxMyCGcaLe GW223Ch/ixrxd+l3wBw5k95SdIbzfgzgA+LhQOZDqhTY3cgUSqJDQPPfz2A9+Aoe 3ifoBfUc948E519CU9RXinjXYGBvZfyOn5lil2CoGA== -----END CERTIFICATE-----Generated at Mon Mar 2 12:25:27 2026 by rpki-client