$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5B8B52FD6258095D945592595E66EF9C4A0AB7A.cer File: A5B8B52FD6258095D945592595E66EF9C4A0AB7A.cer (raw, json) Hash identifier: EU/NGWgwIlI1xK3E3E8gj62ePB0vkExR9TvQLjijKSk= Subject key identifier: A5:B8:B5:2F:D6:25:80:95:D9:45:59:25:95:E6:6E:F9:C4:A0:AB:7A Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 6D5789E5F2DFCAC01935A4810C472D9E92A1EEB4 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/07C5AF55435153994DB1E51D0AE310F05307124134560DF6B2427744D689926E/0/A5B8B52FD6258095D945592595E66EF9C4A0AB7A.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/07C5AF55435153994DB1E51D0AE310F05307124134560DF6B2427744D689926E/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 27 Jan 2026 23:39:07 +0000 Certificate not after: Tue 26 Jan 2027 23:44:07 +0000 Subordinate resources: AS: 27744 IP: 200.105.120.0/21 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:57:89:e5:f2:df:ca:c0:19:35:a4:81:0c:47:2d:9e:92:a1:ee:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 27 23:39:07 2026 GMT Not After : Jan 26 23:44:07 2027 GMT Subject: CN=A5B8B52FD6258095D945592595E66EF9C4A0AB7A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:2c:e3:0e:49:6d:d0:c5:33:ea:09:be:60:5b: 43:ee:bf:a2:1c:1b:e7:9d:7d:2c:ed:2c:3c:e8:7f: 9e:96:52:d9:d6:a6:17:97:2a:6b:d1:b2:17:28:55: 66:fd:7f:b5:20:64:de:a0:36:92:39:00:a7:13:1c: 2e:7b:23:c3:ad:ea:00:82:94:59:c3:7c:1f:c0:5e: 26:03:e4:8a:85:02:2f:85:12:d8:c3:53:7a:3c:a4: b4:10:7f:87:c2:dd:ef:bd:4c:ac:e8:e3:77:f0:eb: 27:90:2b:4c:fd:8e:ae:13:99:e7:c4:75:12:12:5f: ac:dc:6d:72:8f:83:94:d3:21:bf:81:81:0b:c3:06: da:33:44:fb:86:d9:73:ce:b6:b7:83:b4:bd:78:d0: 24:27:17:f0:38:d1:8c:58:48:51:e3:0f:59:20:8c: 01:b4:fd:0f:bd:fb:dc:13:64:24:2f:d5:44:f4:41: 88:48:45:b3:49:c7:52:d1:76:51:1e:04:6b:95:8a: c0:1e:f6:08:e3:55:b1:c2:ca:5b:2f:15:b2:ef:d1: a4:67:9c:d0:2e:e1:bd:df:d9:85:db:e4:41:01:32: 0e:e0:db:50:e7:c8:29:06:e6:43:b3:ad:ec:8d:25: de:0c:89:b2:f2:67:dd:7e:f6:e6:c8:43:e9:5d:5d: 31:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A5:B8:B5:2F:D6:25:80:95:D9:45:59:25:95:E6:6E:F9:C4:A0:AB:7A X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/07C5AF55435153994DB1E51D0AE310F05307124134560DF6B2427744D689926E/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/07C5AF55435153994DB1E51D0AE310F05307124134560DF6B2427744D689926E/0/A5B8B52FD6258095D945592595E66EF9C4A0AB7A.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.105.120.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 27744 Signature Algorithm: sha256WithRSAEncryption 3f:6e:40:5f:a2:55:95:e5:73:8a:b7:da:ef:b8:0a:3d:ec:ce: a3:48:1b:27:3a:00:1e:5e:20:54:14:f1:00:31:b8:80:d7:36: a1:bf:c0:cb:ae:2b:9f:4a:5c:4f:93:89:35:a3:ee:7a:14:22: 78:0c:18:63:5b:5f:33:92:eb:e7:c4:d5:94:97:f5:96:d5:ec: 28:99:80:c3:bf:f5:cb:91:38:97:9a:18:d1:a3:db:2d:d2:11: 7f:cf:d3:0a:94:00:4c:6f:ea:76:d8:a4:5b:93:0b:d9:c6:a5: 1e:45:52:f3:ae:4b:e3:77:25:69:69:ca:c9:dd:4f:4c:18:81: 01:de:a1:48:11:5d:0e:d2:eb:11:ce:e3:2b:53:2a:52:d6:67: bb:e7:10:1c:4b:bd:fb:39:98:2d:86:5d:9c:52:dd:01:b1:8f: 2c:58:b0:aa:7d:22:dd:ab:24:57:83:3e:e8:59:45:8c:5a:ed: a6:c8:d8:12:64:7b:d4:45:33:43:49:ef:6b:26:18:ba:2b:dc: 68:35:1f:24:88:30:96:4e:da:ac:26:da:3a:9a:dd:2e:f4:b5: 44:44:04:1f:e8:0a:7b:d4:d1:3e:31:24:8e:3e:db:28:37:df: cb:c2:a6:1e:42:c1:21:94:06:7b:22:97:d0:10:82:60:2a:81: 2c:18:11:d3 -----BEGIN CERTIFICATE----- MIIGlTCCBX2gAwIBAgIUbVeJ5fLfysAZNaSBDEctnpKh7rQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjcyMzM5MDdaFw0yNzAxMjYyMzQ0MDdaMDMxMTAvBgNV BAMTKEE1QjhCNTJGRDYyNTgwOTVEOTQ1NTkyNTk1RTY2RUY5QzRBMEFCN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyLOMOSW3QxTPqCb5gW0Puv6Ic G+edfSztLDzof56WUtnWpheXKmvRshcoVWb9f7UgZN6gNpI5AKcTHC57I8Ot6gCC lFnDfB/AXiYD5IqFAi+FEtjDU3o8pLQQf4fC3e+9TKzo43fw6yeQK0z9jq4TmefE dRISX6zcbXKPg5TTIb+BgQvDBtozRPuG2XPOtreDtL140CQnF/A40YxYSFHjD1kg jAG0/Q+9+9wTZCQv1UT0QYhIRbNJx1LRdlEeBGuVisAe9gjjVbHCylsvFbLv0aRn nNAu4b3f2YXb5EEBMg7g21DnyCkG5kOzreyNJd4MibLyZ91+9ubIQ+ldXTGpAgMB AAGjggOfMIIDmzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSluLUv1iWAldlF WSWV5m75xKCrejAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMDdDNUFGNTU0MzUxNTM5OTREQjFFNTFE MEFFMzEwRjA1MzA3MTI0MTM0NTYwREY2QjI0Mjc3NDRENjg5OTI2RS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8wN0M1QUY1NTQzNTE1Mzk5NERCMUU1MUQwQUUzMTBGMDUzMDcxMjQxMzQ1 NjBERjZCMjQyNzc0NEQ2ODk5MjZFLzAvQTVCOEI1MkZENjI1ODA5NUQ5NDU1OTI1 OTVFNjZFRjlDNEEwQUI3QS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDyGl4MBkGCCsG AQUFBwEIAQH/BAowCKAGMAQCAmxgMA0GCSqGSIb3DQEBCwUAA4IBAQA/bkBfolWV 5XOKt9rvuAo97M6jSBsnOgAeXiBUFPEAMbiA1zahv8DLriufSlxPk4k1o+56FCJ4 DBhjW18zkuvnxNWUl/WW1ewomYDDv/XLkTiXmhjRo9st0hF/z9MKlABMb+p22KRb kwvZxqUeRVLzrkvjdyVpacrJ3U9MGIEB3qFIEV0O0usRzuMrUypS1me75xAcS737 OZgthl2cUt0BsY8sWLCqfSLdqyRXgz7oWUWMWu2myNgSZHvURTNDSe9rJhi6K9xo NR8kiDCWTtqsJto6mt0u9LVERAQf6Ap71NE+MSSOPtsoN9/LwqYeQsEhlAZ7IpfQ EIJgKoEsGBHT -----END CERTIFICATE-----Generated at Mon Mar 2 15:42:29 2026 by rpki-client