$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6.cer File: AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6.cer (raw, json) Hash identifier: pMwt7pEIIQFaCAwn3KEknQ0yKC2yOLvny0uaTBGXc8s= Subject key identifier: AF:3F:9A:6B:D1:49:BB:2C:B7:62:7F:3B:2E:5B:74:29:C5:5B:7B:F6 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 2FED29A4A9B7DFD8854FD34394C8D0254C01FC87 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/F5E52B7B2E39B1BEFD92F6DA5E0C5E6414396BD8C1335E234062C29F76A38F3A/0/AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/F5E52B7B2E39B1BEFD92F6DA5E0C5E6414396BD8C1335E234062C29F76A38F3A/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Thu 29 Jan 2026 00:14:48 +0000 Certificate not after: Thu 28 Jan 2027 00:19:48 +0000 Subordinate resources: AS: 27792 IP: 143.202.24.0/22 IP: 170.84.212.0/22 IP: 181.189.192.0/19 IP: 190.6.96.0 -- 190.6.119.255 IP: 200.2.120.0/21 IP: 2800:5a0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:ed:29:a4:a9:b7:df:d8:85:4f:d3:43:94:c8:d0:25:4c:01:fc:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 29 00:14:48 2026 GMT Not After : Jan 28 00:19:48 2027 GMT Subject: CN=AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:d5:44:72:ff:1f:14:d3:26:7c:9b:81:64:25: c8:42:f6:a2:8d:c5:db:66:c8:31:8d:4f:e2:d2:6f: f8:7b:7f:3a:36:65:57:b2:48:9c:68:af:77:10:dd: 4d:dc:c6:fd:d6:d8:b9:b7:b3:e2:54:94:c4:ae:0e: 05:6f:20:6b:91:56:bd:00:45:6b:dd:79:83:a1:c6: b6:0e:aa:d1:55:31:c4:8e:60:6b:8b:2d:95:6b:c5: 3d:6b:89:e1:d2:b7:f6:fc:5d:12:ca:3f:ab:33:67: 03:ab:26:5e:31:0d:f9:5d:46:85:e0:b0:1f:3e:89: c1:12:65:0d:4c:4c:14:10:26:9d:26:f4:45:fe:9e: 8c:83:8f:54:e1:16:51:51:84:33:f1:3e:ce:ac:37: c9:8f:03:65:1d:b9:f6:6a:86:a3:64:04:07:f5:44: 34:5f:cb:11:43:3f:c3:ba:44:9c:3a:02:28:64:8f: 08:3a:ea:db:bd:fc:ce:4e:db:1b:3a:b3:e6:f8:2f: fb:f6:d2:7e:c3:1e:f0:c2:b6:32:4f:96:ae:a0:75: 92:50:22:de:fb:62:ba:27:bf:cd:ee:f7:7d:c4:92: ac:76:b1:3e:19:6c:59:df:8d:e1:6d:e5:b0:cc:43: 8d:fa:94:cf:78:9b:a8:cd:aa:e0:3b:5b:d2:07:19: 0f:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AF:3F:9A:6B:D1:49:BB:2C:B7:62:7F:3B:2E:5B:74:29:C5:5B:7B:F6 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/F5E52B7B2E39B1BEFD92F6DA5E0C5E6414396BD8C1335E234062C29F76A38F3A/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/F5E52B7B2E39B1BEFD92F6DA5E0C5E6414396BD8C1335E234062C29F76A38F3A/0/AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.202.24.0/22 170.84.212.0/22 181.189.192.0/19 190.6.96.0-190.6.119.255 200.2.120.0/21 IPv6: 2800:5a0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 27792 Signature Algorithm: sha256WithRSAEncryption 38:75:5c:13:ef:4e:25:fd:eb:3b:01:38:f5:e2:ad:63:71:24: ae:55:bf:59:79:04:9d:f7:55:49:ba:3a:6e:a0:68:ed:fd:a0: c3:89:d8:5c:88:c6:9c:de:fb:21:db:71:d7:03:c9:d0:dc:f9: 46:b9:4b:7f:77:59:43:53:c8:9e:9d:fc:ed:31:85:b3:85:f7: 49:1c:e9:30:92:56:97:6a:32:e7:a0:d5:1a:9b:0a:20:d1:9d: 19:78:69:fd:83:a4:cf:cb:c0:30:92:36:7d:e4:52:6c:07:e6: 14:ec:9a:10:60:97:84:2e:21:b6:91:c1:2f:a1:9a:35:bd:77: f7:b1:4c:4c:0b:d8:9a:2e:6b:6d:ad:14:8a:b7:28:c0:85:21: 8d:56:fe:4b:6e:d9:da:1a:85:7d:07:16:b3:a3:55:a5:1b:4f: cc:86:e3:a0:4a:88:22:ff:75:92:b5:81:2a:6f:bf:23:ac:97: 9e:5f:0d:d5:27:0c:a0:53:73:cd:da:69:a2:c7:a3:d5:25:61: c4:c9:bc:f3:2d:a7:93:5a:9c:76:ef:2c:b3:dc:52:58:5e:d2: 2f:e5:58:0e:c4:4f:39:23:7a:ec:e7:25:05:52:fa:fc:3b:13: 66:42:1c:7d:2f:15:a2:7b:c9:88:b7:99:31:9d:5a:a6:7e:a4: 7b:06:5b:e2 -----BEGIN CERTIFICATE----- MIIGxDCCBaygAwIBAgIUL+0ppKm339iFT9NDlMjQJUwB/IcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjkwMDE0NDhaFw0yNzAxMjgwMDE5NDhaMDMxMTAvBgNV BAMTKEFGM0Y5QTZCRDE0OUJCMkNCNzYyN0YzQjJFNUI3NDI5QzU1QjdCRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU1URy/x8U0yZ8m4FkJchC9qKN xdtmyDGNT+LSb/h7fzo2ZVeySJxor3cQ3U3cxv3W2Lm3s+JUlMSuDgVvIGuRVr0A RWvdeYOhxrYOqtFVMcSOYGuLLZVrxT1rieHSt/b8XRLKP6szZwOrJl4xDfldRoXg sB8+icESZQ1MTBQQJp0m9EX+noyDj1ThFlFRhDPxPs6sN8mPA2UdufZqhqNkBAf1 RDRfyxFDP8O6RJw6Aihkjwg66tu9/M5O2xs6s+b4L/v20n7DHvDCtjJPlq6gdZJQ It77Yronv83u933Ekqx2sT4ZbFnfjeFt5bDMQ436lM94m6jNquA7W9IHGQ/pAgMB AAGjggPOMIIDyjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSvP5pr0Um7LLdi fzsuW3QpxVt79jAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRjVFNTJCN0IyRTM5QjFCRUZEOTJGNkRB NUUwQzVFNjQxNDM5NkJEOEMxMzM1RTIzNDA2MkMyOUY3NkEzOEYzQS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9GNUU1MkI3QjJFMzlCMUJFRkQ5MkY2REE1RTBDNUU2NDE0Mzk2QkQ4QzEz MzVFMjM0MDYyQzI5Rjc2QTM4RjNBLzAvQUYzRjlBNkJEMTQ5QkIyQ0I3NjI3RjNC MkU1Qjc0MjlDNTVCN0JGNi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CME4GCCsGAQUFBwEHAQH/BD8wPTAsBAIAATAmAwQCj8oYAwQCqlTU AwQFtb3AMAwDBAW+BmADBAO+BnADBAPIAngwDQQCAAIwBwMFACgABaAwGQYIKwYB BQUHAQgBAf8ECjAIoAYwBAICbJAwDQYJKoZIhvcNAQELBQADggEBADh1XBPvTiX9 6zsBOPXirWNxJK5Vv1l5BJ33VUm6Om6gaO39oMOJ2FyIxpze+yHbcdcDydDc+Ua5 S393WUNTyJ6d/O0xhbOF90kc6TCSVpdqMueg1RqbCiDRnRl4af2DpM/LwDCSNn3k UmwH5hTsmhBgl4QuIbaRwS+hmjW9d/exTEwL2Joua22tFIq3KMCFIY1W/ktu2doa hX0HFrOjVaUbT8yG46BKiCL/dZK1gSpvvyOsl55fDdUnDKBTc83aaaLHo9UlYcTJ vPMtp5NanHbvLLPcUlhe0i/lWA7ETzkjeuznJQVS+vw7E2ZCHH0vFaJ7yYi3mTGd WqZ+pHsGW+I= -----END CERTIFICATE-----Generated at Mon Mar 2 15:44:22 2026 by rpki-client