$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ABA235F8E2EFBF10D89E96447F61BBA90CF14811.cer File: ABA235F8E2EFBF10D89E96447F61BBA90CF14811.cer (raw, json) Hash identifier: rZH/152JfrSBi20oupBwFfs1TZ4ai4beQEjl9G6n8K4= Subject key identifier: AB:A2:35:F8:E2:EF:BF:10:D8:9E:96:44:7F:61:BB:A9:0C:F1:48:11 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 20A2D3009A13F76A137C33B799DF0BEB5C966258 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/DBA0FABD52A9F8DA866D7E03EC69D070DD9A56E65B7CB39EE517D6571765D4CC/0/ABA235F8E2EFBF10D89E96447F61BBA90CF14811.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/DBA0FABD52A9F8DA866D7E03EC69D070DD9A56E65B7CB39EE517D6571765D4CC/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 21:18:31 +0000 Certificate not after: Wed 27 Jan 2027 21:23:31 +0000 Subordinate resources: AS: 28386 IP: 201.131.3.0/24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:a2:d3:00:9a:13:f7:6a:13:7c:33:b7:99:df:0b:eb:5c:96:62:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 21:18:31 2026 GMT Not After : Jan 27 21:23:31 2027 GMT Subject: CN=ABA235F8E2EFBF10D89E96447F61BBA90CF14811 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:13:2d:a7:2c:44:61:b5:e8:d6:15:ec:a3:b6: 93:85:e8:3d:f6:7c:19:7f:06:06:59:75:01:96:4f: d5:f7:9a:ad:bd:b9:ca:d4:f5:31:2f:82:05:71:c9: 1d:b7:8c:cd:f5:61:1f:41:45:62:18:ed:27:51:bd: fb:91:be:62:06:83:44:73:6e:03:7d:8e:ac:f6:d6: 4c:84:47:bc:60:13:c8:e7:63:0d:35:42:56:c1:e7: 36:6b:c6:d7:6c:cb:ce:ae:85:e2:9d:4f:e8:9f:a0: 54:05:e1:48:19:a2:b1:80:81:f4:88:72:90:79:35: 63:6f:f2:dd:51:0c:0f:f2:96:ca:fe:3f:79:61:39: d2:cc:7f:9d:e3:a0:c7:99:a3:66:30:88:89:d8:ba: 5d:d5:bb:d8:47:f1:59:16:1e:5a:42:b5:42:98:a6: 83:4c:39:67:d1:e4:c6:77:67:12:dc:e2:5a:f4:b1: 7b:4a:cc:c0:1e:3b:b6:24:1a:31:cf:f5:f3:aa:a2: 04:0b:18:30:73:0e:c6:eb:f3:48:43:cc:a4:ca:5c: 4e:d0:89:f9:53:08:d1:a5:bb:38:b3:81:15:85:93: 98:3e:bb:5c:78:85:e4:27:ea:32:90:6c:ba:50:0d: 5d:a1:7d:5c:bf:86:7d:b1:3e:e6:8f:8b:80:5e:a6: a6:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AB:A2:35:F8:E2:EF:BF:10:D8:9E:96:44:7F:61:BB:A9:0C:F1:48:11 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/DBA0FABD52A9F8DA866D7E03EC69D070DD9A56E65B7CB39EE517D6571765D4CC/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/DBA0FABD52A9F8DA866D7E03EC69D070DD9A56E65B7CB39EE517D6571765D4CC/0/ABA235F8E2EFBF10D89E96447F61BBA90CF14811.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 201.131.3.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28386 Signature Algorithm: sha256WithRSAEncryption 56:40:c9:50:a7:a7:76:3a:dc:c5:7b:f1:f2:4f:e2:fc:ee:4d: b7:73:33:29:23:93:65:d7:e3:60:b1:62:6d:ed:a9:26:11:eb: ca:3e:f0:ba:21:12:dc:2c:ce:1e:da:88:5a:aa:5f:42:d8:d7: a2:40:2f:64:a5:84:1f:c7:99:36:53:2a:24:42:0e:c9:09:79: 6d:d8:5c:8d:75:41:20:27:7c:ce:76:fe:c3:22:f3:cc:07:a7: 63:d3:41:48:e3:bd:d9:84:34:0e:39:e2:37:32:22:d5:ca:0d: 03:9c:89:ff:c7:29:10:69:fb:fa:4f:91:bc:cd:3e:51:c6:f7: b5:b9:9f:64:24:cf:2d:b3:8b:79:44:5f:33:18:4f:1c:cb:e2: 5e:eb:81:46:39:9d:7a:60:e0:d9:4a:94:8a:96:74:de:8c:d1: 7f:c4:87:0d:ea:66:17:ec:2e:af:67:4b:a5:fd:66:ea:54:0c: ba:69:88:72:fb:33:13:39:a1:4c:02:1f:8c:fb:e8:00:e9:5f: f8:1e:63:bb:73:9b:65:c3:a9:e7:1a:10:a2:3f:7c:f0:9a:62: 08:e0:89:a9:d0:c0:3a:f1:7c:96:64:94:ef:a3:de:c4:25:5e: 2b:a2:f6:83:82:f9:d6:5b:4f:59:e2:32:6a:01:6c:99:94:21: a7:d6:bb:50 -----BEGIN CERTIFICATE----- MIIGlTCCBX2gAwIBAgIUIKLTAJoT92oTfDO3md8L61yWYlgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgyMTE4MzFaFw0yNzAxMjcyMTIzMzFaMDMxMTAvBgNV BAMTKEFCQTIzNUY4RTJFRkJGMTBEODlFOTY0NDdGNjFCQkE5MENGMTQ4MTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcEy2nLERhtejWFeyjtpOF6D32 fBl/BgZZdQGWT9X3mq29ucrU9TEvggVxyR23jM31YR9BRWIY7SdRvfuRvmIGg0Rz bgN9jqz21kyER7xgE8jnYw01QlbB5zZrxtdsy86uheKdT+ifoFQF4UgZorGAgfSI cpB5NWNv8t1RDA/ylsr+P3lhOdLMf53joMeZo2YwiInYul3Vu9hH8VkWHlpCtUKY poNMOWfR5MZ3ZxLc4lr0sXtKzMAeO7YkGjHP9fOqogQLGDBzDsbr80hDzKTKXE7Q iflTCNGluzizgRWFk5g+u1x4heQn6jKQbLpQDV2hfVy/hn2xPuaPi4BepqYjAgMB AAGjggOfMIIDmzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSrojX44u+/ENie lkR/YbupDPFIETAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvREJBMEZBQkQ1MkE5RjhEQTg2NkQ3RTAz RUM2OUQwNzBERDlBNTZFNjVCN0NCMzlFRTUxN0Q2NTcxNzY1RDRDQy8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9EQkEwRkFCRDUyQTlGOERBODY2RDdFMDNFQzY5RDA3MEREOUE1NkU2NUI3 Q0IzOUVFNTE3RDY1NzE3NjVENENDLzAvQUJBMjM1RjhFMkVGQkYxMEQ4OUU5NjQ0 N0Y2MUJCQTkwQ0YxNDgxMS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyYMDMBkGCCsG AQUFBwEIAQH/BAowCKAGMAQCAm7iMA0GCSqGSIb3DQEBCwUAA4IBAQBWQMlQp6d2 OtzFe/HyT+L87k23czMpI5Nl1+NgsWJt7akmEevKPvC6IRLcLM4e2ohaql9C2Nei QC9kpYQfx5k2UyokQg7JCXlt2FyNdUEgJ3zOdv7DIvPMB6dj00FI473ZhDQOOeI3 MiLVyg0DnIn/xykQafv6T5G8zT5Rxve1uZ9kJM8ts4t5RF8zGE8cy+Je64FGOZ16 YODZSpSKlnTejNF/xIcN6mYX7C6vZ0ul/WbqVAy6aYhy+zMTOaFMAh+M++gA6V/4 HmO7c5tlw6nnGhCiP3zwmmII4Imp0MA68XyWZJTvo97EJV4rovaDgvnWW09Z4jJq AWyZlCGn1rtQ -----END CERTIFICATE-----Generated at Mon Mar 2 16:49:33 2026 by rpki-client