$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A7609411553A13F77720D41E9900C489E902257F.cer File: A7609411553A13F77720D41E9900C489E902257F.cer (raw, json) Hash identifier: DM/Y5ohhJu8ba6d7tex7AG02vx4DalhuAkXD6s+1dq8= Subject key identifier: A7:60:94:11:55:3A:13:F7:77:20:D4:1E:99:00:C4:89:E9:02:25:7F Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 4CCD7ADCD9A2A5CF7FBD6CA4C83AB0DB1D129656 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/B1CD4E6DEF8FFBE1787C2144022B9E78E78F2799FBDA59EFA8F3BEF31B95EF29/0/A7609411553A13F77720D41E9900C489E902257F.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/B1CD4E6DEF8FFBE1787C2144022B9E78E78F2799FBDA59EFA8F3BEF31B95EF29/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 02:40:45 +0000 Certificate not after: Wed 27 Jan 2027 02:45:45 +0000 Subordinate resources: AS: 52511 IP: 138.186.8.0/22 IP: 2803:8240::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:cd:7a:dc:d9:a2:a5:cf:7f:bd:6c:a4:c8:3a:b0:db:1d:12:96:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 02:40:45 2026 GMT Not After : Jan 27 02:45:45 2027 GMT Subject: CN=A7609411553A13F77720D41E9900C489E902257F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:59:67:02:d2:56:16:91:b2:66:d4:97:7d:be: 4b:71:41:f9:23:8f:5e:c1:22:21:b7:b6:63:d2:d4: 55:14:f7:57:74:d9:00:da:0e:7c:04:c4:13:e0:c7: 4c:b4:9d:63:81:e2:c8:cd:38:59:aa:b0:06:71:25: 34:08:fd:e4:69:fc:d1:12:c4:79:bf:79:dc:81:eb: de:bc:63:29:0e:64:40:06:a6:c7:a1:ce:7b:1d:d1: ea:ec:86:81:bc:8d:06:0e:7e:f5:5d:5a:2d:9f:f4: b9:de:2c:72:6a:2c:34:b3:7a:8a:ab:19:31:10:d9: 4e:a8:49:b3:8e:dd:56:cf:c5:25:c2:3e:7f:be:e7: 0b:d6:d9:49:e9:d8:f1:05:69:7c:f5:e3:64:7f:c2: 3a:d5:e5:b8:2a:91:27:11:83:ae:19:34:3c:a6:f7: db:96:77:46:64:b3:16:e4:be:95:a3:43:4c:4f:a4: 68:ec:60:f0:cd:3c:24:1a:0b:d3:e2:9b:00:51:d9: 26:bb:90:17:65:e2:75:9f:db:52:92:31:aa:98:d1: be:2f:f8:38:95:fe:35:df:ce:a1:b0:15:a2:47:db: 9f:b9:70:71:61:9b:7c:d9:d9:1e:0b:52:33:5a:6c: a2:08:fa:13:e9:70:96:86:ca:23:d0:e2:13:06:5e: a1:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A7:60:94:11:55:3A:13:F7:77:20:D4:1E:99:00:C4:89:E9:02:25:7F X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/B1CD4E6DEF8FFBE1787C2144022B9E78E78F2799FBDA59EFA8F3BEF31B95EF29/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/B1CD4E6DEF8FFBE1787C2144022B9E78E78F2799FBDA59EFA8F3BEF31B95EF29/0/A7609411553A13F77720D41E9900C489E902257F.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.186.8.0/22 IPv6: 2803:8240::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52511 Signature Algorithm: sha256WithRSAEncryption 11:cc:d9:4e:2f:18:3f:da:2a:f9:c5:f1:9b:57:cc:bd:0d:bb: 91:3c:98:6f:3d:f3:d6:da:f0:1b:84:9a:4b:c6:8b:14:a0:3e: 17:cb:31:f2:61:67:73:88:4f:32:d3:83:0a:b2:14:13:cc:ea: dd:01:d7:36:73:9f:e4:5f:6c:56:78:6f:ec:05:f5:62:0a:58: d7:11:b0:a6:65:5b:06:4b:df:5b:35:87:34:df:64:76:fd:63: d1:d1:6e:04:f3:4b:1c:59:60:05:4b:85:7a:12:be:c0:74:2f: e4:f4:8a:6b:d0:d6:48:62:4e:1c:cb:61:b1:32:18:ac:4c:b0: 94:82:01:4d:29:6c:eb:c0:ad:81:ef:0f:ce:5c:4c:a6:63:d8: 69:cf:21:d1:ef:fb:be:b6:d7:8d:7f:80:90:da:74:5a:a7:04: c6:9e:82:ea:9e:ac:8e:de:0d:43:a4:50:0e:1e:24:ef:ae:26: 94:3b:64:62:2c:07:44:6e:12:c3:d8:88:e5:d4:11:cd:22:40: d9:1d:f6:ca:2e:bd:b0:07:27:34:6f:fd:80:eb:ef:88:80:a1: 1d:11:ef:86:68:8f:ab:5b:27:29:2a:37:95:f1:fb:01:fe:71: 90:94:4c:2e:8d:bc:5c:32:51:a8:45:14:91:19:ac:6b:54:29: 35:3d:3b:7e -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUTM163Nmipc9/vWykyDqw2x0SllYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgwMjQwNDVaFw0yNzAxMjcwMjQ1NDVaMDMxMTAvBgNV BAMTKEE3NjA5NDExNTUzQTEzRjc3NzIwRDQxRTk5MDBDNDg5RTkwMjI1N0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1WWcC0lYWkbJm1Jd9vktxQfkj j17BIiG3tmPS1FUU91d02QDaDnwExBPgx0y0nWOB4sjNOFmqsAZxJTQI/eRp/NES xHm/edyB6968YykOZEAGpsehznsd0ershoG8jQYOfvVdWi2f9LneLHJqLDSzeoqr GTEQ2U6oSbOO3VbPxSXCPn++5wvW2Unp2PEFaXz142R/wjrV5bgqkScRg64ZNDym 99uWd0ZksxbkvpWjQ0xPpGjsYPDNPCQaC9PimwBR2Sa7kBdl4nWf21KSMaqY0b4v +DiV/jXfzqGwFaJH25+5cHFhm3zZ2R4LUjNabKII+hPpcJaGyiPQ4hMGXqHhAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSnYJQRVToT93cg 1B6ZAMSJ6QIlfzAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQjFDRDRFNkRFRjhGRkJFMTc4N0MyMTQ0 MDIyQjlFNzhFNzhGMjc5OUZCREE1OUVGQThGM0JFRjMxQjk1RUYyOS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9CMUNENEU2REVGOEZGQkUxNzg3QzIxNDQwMjJCOUU3OEU3OEYyNzk5RkJE QTU5RUZBOEYzQkVGMzFCOTVFRjI5LzAvQTc2MDk0MTE1NTNBMTNGNzc3MjBENDFF OTkwMEM0ODlFOTAyMjU3Ri5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCiroIMA0EAgAC MAcDBQAoA4JAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDNHzANBgkqhkiG9w0B AQsFAAOCAQEAEczZTi8YP9oq+cXxm1fMvQ27kTyYbz3z1trwG4SaS8aLFKA+F8sx 8mFnc4hPMtODCrIUE8zq3QHXNnOf5F9sVnhv7AX1YgpY1xGwpmVbBkvfWzWHNN9k dv1j0dFuBPNLHFlgBUuFehK+wHQv5PSKa9DWSGJOHMthsTIYrEywlIIBTSls68Ct ge8PzlxMpmPYac8h0e/7vrbXjX+AkNp0WqcExp6C6p6sjt4NQ6RQDh4k764mlDtk YiwHRG4Sw9iI5dQRzSJA2R32yi69sAcnNG/9gOvviIChHRHvhmiPq1snKSo3lfH7 Af5xkJRMLo28XDJRqEUUkRmsa1QpNT07fg== -----END CERTIFICATE-----Generated at Mon Mar 2 19:45:53 2026 by rpki-client