$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A79979549298C107B25C6C7E7FC2C7DBB295FC02.cer File: A79979549298C107B25C6C7E7FC2C7DBB295FC02.cer (raw, json) Hash identifier: tzCn+khI7sl+CNk/kci656fzbqkeSHkrcAyAV3Zf7AQ= Subject key identifier: A7:99:79:54:92:98:C1:07:B2:5C:6C:7E:7F:C2:C7:DB:B2:95:FC:02 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 7BAC00414CD1D46727B1098A442FCF6B10C8A5AE Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/4F75C5DD42F618DE30876EDFECA2D3910CEF8D1AF22AF4EC460290515F1A8887/0/A79979549298C107B25C6C7E7FC2C7DBB295FC02.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/4F75C5DD42F618DE30876EDFECA2D3910CEF8D1AF22AF4EC460290515F1A8887/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 21:37:20 +0000 Certificate not after: Wed 27 Jan 2027 21:42:20 +0000 Subordinate resources: AS: 52268 IP: 138.59.168.0/22 IP: 170.233.176.0/22 IP: 190.104.64.0/20 IP: 190.112.196.0/22 IP: 190.113.236.0/22 IP: 2800:a80::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 05 Mar 2026 11:41:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:ac:00:41:4c:d1:d4:67:27:b1:09:8a:44:2f:cf:6b:10:c8:a5:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 21:37:20 2026 GMT Not After : Jan 27 21:42:20 2027 GMT Subject: CN=A79979549298C107B25C6C7E7FC2C7DBB295FC02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c4:17:35:06:c5:69:6b:fe:79:c2:04:58:00: b6:73:a8:04:dc:f0:5e:e2:1b:e7:0a:f6:de:f0:9d: 59:ca:68:f7:76:b2:a5:5c:5d:df:54:4e:1e:5c:33: 94:40:de:e3:e4:30:11:c7:94:8c:b3:82:40:02:55: a9:a2:13:f8:be:88:cf:58:67:69:1b:00:5c:1c:83: 94:2f:34:59:0d:e3:8c:4c:c1:e3:9b:fb:cc:21:91: 29:6c:c8:ed:ea:35:3e:08:c2:21:12:b9:d5:2d:2c: 8f:98:f6:ef:4b:5f:8c:25:d0:7f:e8:00:7a:6b:2f: 62:f7:a9:81:ac:e1:a9:80:9c:22:47:2f:3c:26:60: 54:4f:39:9c:80:1e:9e:0a:2f:31:e0:b2:21:3e:f4: 25:3d:f9:6a:b6:19:d6:c8:b6:73:43:bc:9d:32:89: 5a:62:d0:15:e6:12:8a:34:32:4a:f6:2d:87:cc:22: f6:ab:b1:36:b3:1d:69:e8:f4:b5:e6:bf:ee:21:d8: 7d:37:ba:f4:1b:c7:15:80:27:69:73:1d:4f:f8:a6: 0f:18:9d:41:39:b7:d9:65:82:c3:c7:56:1e:46:2a: e4:60:61:e0:ae:f7:98:e3:bc:f8:c5:00:a8:3d:cb: 96:48:eb:9f:e3:99:c1:f8:9c:f9:6e:1d:dd:6c:1e: ed:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A7:99:79:54:92:98:C1:07:B2:5C:6C:7E:7F:C2:C7:DB:B2:95:FC:02 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/4F75C5DD42F618DE30876EDFECA2D3910CEF8D1AF22AF4EC460290515F1A8887/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/4F75C5DD42F618DE30876EDFECA2D3910CEF8D1AF22AF4EC460290515F1A8887/0/A79979549298C107B25C6C7E7FC2C7DBB295FC02.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.59.168.0/22 170.233.176.0/22 190.104.64.0/20 190.112.196.0/22 190.113.236.0/22 IPv6: 2800:a80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52268 Signature Algorithm: sha256WithRSAEncryption 50:12:aa:d2:ba:e3:06:6e:f1:97:2b:9f:2f:9c:cd:c3:fd:40: 7c:41:9d:61:5d:32:fc:69:48:2d:7f:65:e1:5f:2e:bd:52:87: f9:03:45:63:3f:82:f8:b7:b7:e8:3a:7a:23:00:60:a7:1b:15: 9b:db:80:cf:1c:d4:a6:dc:96:7d:af:47:e4:24:97:61:24:44: 86:8d:f9:78:df:ac:45:43:72:2e:1e:64:d1:14:f1:eb:ba:f4: db:f4:b8:e9:ce:7c:8e:aa:84:61:07:1b:b5:82:66:d8:38:8a: 63:83:2e:7d:f2:5f:bb:7d:a3:69:71:d4:43:0c:d4:a4:82:ad: b6:0e:d7:df:d6:41:1b:e3:60:14:ba:45:60:4a:e3:84:3b:4b: a4:d9:98:c0:e3:4e:db:87:7d:86:26:52:48:fa:36:26:3e:23: 05:ce:e8:ce:74:75:e1:19:35:a7:b3:88:6b:b6:46:4e:1f:08: ca:02:28:75:75:33:fb:56:8c:9d:71:4c:b0:db:de:5c:f5:dc: 45:f3:99:22:18:bf:25:05:34:44:74:3e:be:82:8c:98:85:08: f3:25:df:dc:11:8c:cf:ee:e3:9f:dd:18:81:f2:c8:45:f9:81: 25:03:1b:46:52:b3:62:e0:89:6a:08:0d:f0:8b:0a:f9:bc:80: 5b:19:d1:91 -----BEGIN CERTIFICATE----- MIIGvTCCBaWgAwIBAgIUe6wAQUzR1GcnsQmKRC/PaxDIpa4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgyMTM3MjBaFw0yNzAxMjcyMTQyMjBaMDMxMTAvBgNV BAMTKEE3OTk3OTU0OTI5OEMxMDdCMjVDNkM3RTdGQzJDN0RCQjI5NUZDMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrxBc1BsVpa/55wgRYALZzqATc 8F7iG+cK9t7wnVnKaPd2sqVcXd9UTh5cM5RA3uPkMBHHlIyzgkACVamiE/i+iM9Y Z2kbAFwcg5QvNFkN44xMweOb+8whkSlsyO3qNT4IwiESudUtLI+Y9u9LX4wl0H/o AHprL2L3qYGs4amAnCJHLzwmYFRPOZyAHp4KLzHgsiE+9CU9+Wq2GdbItnNDvJ0y iVpi0BXmEoo0Mkr2LYfMIvarsTazHWno9LXmv+4h2H03uvQbxxWAJ2lzHU/4pg8Y nUE5t9llgsPHVh5GKuRgYeCu95jjvPjFAKg9y5ZI65/jmcH4nPluHd1sHu2tAgMB AAGjggPHMIIDwzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSnmXlUkpjBB7Jc bH5/wsfbspX8AjAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNEY3NUM1REQ0MkY2MThERTMwODc2RURG RUNBMkQzOTEwQ0VGOEQxQUYyMkFGNEVDNDYwMjkwNTE1RjFBODg4Ny8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80Rjc1QzVERDQyRjYxOERFMzA4NzZFREZFQ0EyRDM5MTBDRUY4RDFBRjIy QUY0RUM0NjAyOTA1MTVGMUE4ODg3LzAvQTc5OTc5NTQ5Mjk4QzEwN0IyNUM2QzdF N0ZDMkM3REJCMjk1RkMwMi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQCijuoAwQCqumw AwQEvmhAAwQCvnDEAwQCvnHsMA0EAgACMAcDBQAoAAqAMBoGCCsGAQUFBwEIAQH/ BAswCaAHMAUCAwDMLDANBgkqhkiG9w0BAQsFAAOCAQEAUBKq0rrjBm7xlyufL5zN w/1AfEGdYV0y/GlILX9l4V8uvVKH+QNFYz+C+Le36Dp6IwBgpxsVm9uAzxzUptyW fa9H5CSXYSREho35eN+sRUNyLh5k0RTx67r02/S46c58jqqEYQcbtYJm2DiKY4Mu ffJfu32jaXHUQwzUpIKttg7X39ZBG+NgFLpFYErjhDtLpNmYwONO24d9hiZSSPo2 Jj4jBc7oznR14Rk1p7OIa7ZGTh8IygIodXUz+1aMnXFMsNveXPXcRfOZIhi/JQU0 RHQ+voKMmIUI8yXf3BGMz+7jn90YgfLIRfmBJQMbRlKzYuCJaggN8IsK+byAWxnR kQ== -----END CERTIFICATE-----Generated at Mon Mar 2 09:46:32 2026 by rpki-client