$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A532A5617E35D5F0364199A8CD84D10C17493179.cer File: A532A5617E35D5F0364199A8CD84D10C17493179.cer (raw, json) Hash identifier: q4rintNjRGeI5llS0V2a+/EhcJuXJK3u7Bgem/+k1ss= Subject key identifier: A5:32:A5:61:7E:35:D5:F0:36:41:99:A8:CD:84:D1:0C:17:49:31:79 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 3216D7296244BAB6A9144FBDE58392776A131EC0 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/ACC213E8AC969258161F3A0484B0B9A832D04E5D7733E934EA436569865C6E30/0/A532A5617E35D5F0364199A8CD84D10C17493179.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/ACC213E8AC969258161F3A0484B0B9A832D04E5D7733E934EA436569865C6E30/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 27 Jan 2026 19:59:02 +0000 Certificate not after: Tue 26 Jan 2027 20:04:02 +0000 Subordinate resources: AS: 264648 IP: 200.10.164.0/24 IP: 2801:170::/36 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:16:d7:29:62:44:ba:b6:a9:14:4f:bd:e5:83:92:77:6a:13:1e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 27 19:59:02 2026 GMT Not After : Jan 26 20:04:02 2027 GMT Subject: CN=A532A5617E35D5F0364199A8CD84D10C17493179 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:98:66:74:2f:68:d0:4d:14:36:76:01:ed:d4: d6:58:d4:29:d2:b6:ef:16:a4:fa:69:13:2f:ca:23: 04:5b:f3:81:2b:c1:10:a4:9d:db:f0:d6:59:e9:c7: 18:c6:c9:33:37:7b:4e:42:f0:1b:10:ec:88:c0:87: e7:43:0d:53:71:64:4f:e6:35:29:67:c0:a6:76:91: 06:6d:a2:9c:49:ac:e2:8a:21:63:d4:97:e8:a4:fe: 13:6a:f6:52:d4:fb:2d:97:e7:c7:06:a0:4a:6a:7b: 60:78:50:19:98:f3:e9:17:03:0c:13:6f:17:22:61: 0e:1a:3f:5b:ef:68:ee:84:18:b8:b8:69:a6:cd:7f: de:17:40:a1:f5:31:f9:d1:08:53:16:70:84:92:8a: 14:06:60:b6:98:08:19:aa:85:a7:96:a1:20:b9:ff: e5:6c:d0:27:61:75:b6:12:e5:9a:f8:ae:11:e4:f7: a3:05:c1:5b:19:9f:b0:f1:09:c7:b4:ba:b5:c2:05: 4e:3d:7b:6e:c5:2e:cf:89:b3:7d:e8:49:ac:3b:4c: be:d3:d2:f5:4b:6f:ba:fd:96:e9:8a:f5:6d:cd:10: 91:f5:39:f6:a6:6c:d0:54:f3:af:f9:93:e1:ba:50: 60:c9:cd:f9:75:2e:7c:ab:7a:5b:16:33:20:4f:01: 1c:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A5:32:A5:61:7E:35:D5:F0:36:41:99:A8:CD:84:D1:0C:17:49:31:79 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/ACC213E8AC969258161F3A0484B0B9A832D04E5D7733E934EA436569865C6E30/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/ACC213E8AC969258161F3A0484B0B9A832D04E5D7733E934EA436569865C6E30/0/A532A5617E35D5F0364199A8CD84D10C17493179.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.10.164.0/24 IPv6: 2801:170::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264648 Signature Algorithm: sha256WithRSAEncryption 25:ad:c3:ab:22:43:fc:da:8d:c9:12:8f:84:03:46:a0:03:e6: 8d:d6:a6:ad:e5:3f:cd:61:fd:d6:33:d2:bf:c9:bb:65:a5:a1: ce:38:14:09:b8:09:1b:80:a2:26:06:bd:a1:d4:9b:ac:66:0d: 3f:11:7e:4d:10:fb:25:6f:aa:72:11:ff:d1:20:1d:29:40:9e: 24:5e:02:b7:2f:8b:ec:2a:b8:fe:b6:39:db:40:f7:c1:d0:a6: 8d:06:7e:f6:e4:e4:35:be:94:c8:84:35:f1:ee:28:87:60:4f: da:84:f4:3f:f4:87:46:0e:bc:cb:44:2b:af:68:e4:b4:5e:f1: ef:97:8b:04:8d:b5:24:e2:07:ef:5e:5d:ae:27:fa:07:b0:b3: a7:51:c2:62:75:b6:e1:86:85:e5:48:49:0c:56:96:95:15:e9: 37:d1:b3:8f:86:09:32:33:86:10:c6:2b:ad:c5:18:c9:c5:a9: 56:5f:25:7e:cc:e8:95:bf:a5:87:d7:bb:ba:21:05:03:ef:ac: e0:e0:6c:07:6c:2f:6f:fc:66:e1:76:49:26:a7:bb:22:ab:95: 08:1a:0e:f1:f3:da:8d:23:f4:2b:03:da:51:84:05:59:1b:27: 59:53:3f:bd:b0:4c:d8:fc:07:de:22:d6:27:b4:45:67:a5:ca: e4:42:b9:5b -----BEGIN CERTIFICATE----- MIIGpjCCBY6gAwIBAgIUMhbXKWJEurapFE+95YOSd2oTHsAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjcxOTU5MDJaFw0yNzAxMjYyMDA0MDJaMDMxMTAvBgNV BAMTKEE1MzJBNTYxN0UzNUQ1RjAzNjQxOTlBOENEODREMTBDMTc0OTMxNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqmGZ0L2jQTRQ2dgHt1NZY1CnS tu8WpPppEy/KIwRb84ErwRCkndvw1lnpxxjGyTM3e05C8BsQ7IjAh+dDDVNxZE/m NSlnwKZ2kQZtopxJrOKKIWPUl+ik/hNq9lLU+y2X58cGoEpqe2B4UBmY8+kXAwwT bxciYQ4aP1vvaO6EGLi4aabNf94XQKH1MfnRCFMWcISSihQGYLaYCBmqhaeWoSC5 /+Vs0CdhdbYS5Zr4rhHk96MFwVsZn7DxCce0urXCBU49e27FLs+Js33oSaw7TL7T 0vVLb7r9lumK9W3NEJH1OfambNBU86/5k+G6UGDJzfl1LnyrelsWMyBPARzdAgMB AAGjggOwMIIDrDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSlMqVhfjXV8DZB majNhNEMF0kxeTAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQUNDMjEzRThBQzk2OTI1ODE2MUYzQTA0 ODRCMEI5QTgzMkQwNEU1RDc3MzNFOTM0RUE0MzY1Njk4NjVDNkUzMC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9BQ0MyMTNFOEFDOTY5MjU4MTYxRjNBMDQ4NEIwQjlBODMyRDA0RTVENzcz M0U5MzRFQTQzNjU2OTg2NUM2RTMwLzAvQTUzMkE1NjE3RTM1RDVGMDM2NDE5OUE4 Q0Q4NEQxMEMxNzQ5MzE3OS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAyAqkMA4EAgAC MAgDBgQoAQFwADAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMECcgwDQYJKoZIhvcN AQELBQADggEBACWtw6siQ/zajckSj4QDRqAD5o3Wpq3lP81h/dYz0r/Ju2Wloc44 FAm4CRuAoiYGvaHUm6xmDT8Rfk0Q+yVvqnIR/9EgHSlAniReArcvi+wquP62OdtA 98HQpo0Gfvbk5DW+lMiENfHuKIdgT9qE9D/0h0YOvMtEK69o5LRe8e+XiwSNtSTi B+9eXa4n+gews6dRwmJ1tuGGheVISQxWlpUV6TfRs4+GCTIzhhDGK63FGMnFqVZf JX7M6JW/pYfXu7ohBQPvrODgbAdsL2/8ZuF2SSanuyKrlQgaDvHz2o0j9CsD2lGE BVkbJ1lTP72wTNj8B94i1ie0RWelyuRCuVs= -----END CERTIFICATE-----Generated at Mon Mar 2 15:43:23 2026 by rpki-client