$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B2866080BB7E2072C6871B23409ACE82D8A3551A.cer File: B2866080BB7E2072C6871B23409ACE82D8A3551A.cer (raw, json) Hash identifier: 4dKR7t4HF9v6lr6idwFq7vBCZYzqzoUlyZG9e+UIY6M= Subject key identifier: B2:86:60:80:BB:7E:20:72:C6:87:1B:23:40:9A:CE:82:D8:A3:55:1A Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 2D636BD89F606A42C4F7CEAB1BC0CE8C7591CF4A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/490B4CE30BADF2521157A75B6CB77848B87AB75EFF8B826DB0FF813BC6429982/0/B2866080BB7E2072C6871B23409ACE82D8A3551A.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/490B4CE30BADF2521157A75B6CB77848B87AB75EFF8B826DB0FF813BC6429982/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 17:24:57 +0000 Certificate not after: Wed 27 Jan 2027 17:29:57 +0000 Subordinate resources: AS: 28009 IP: 190.93.192.0/19 IP: 200.85.176.0/21 IP: 2803:4440::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:63:6b:d8:9f:60:6a:42:c4:f7:ce:ab:1b:c0:ce:8c:75:91:cf:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 17:24:57 2026 GMT Not After : Jan 27 17:29:57 2027 GMT Subject: CN=B2866080BB7E2072C6871B23409ACE82D8A3551A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:03:18:23:fd:b9:66:8e:b7:8a:6a:78:83:5e: 8e:5f:2a:9a:bf:7d:a3:50:f3:38:4d:74:3a:0a:70: 12:dd:88:96:7f:3c:90:15:bb:e2:f8:1f:dd:5c:57: 9f:63:38:a7:98:10:16:77:96:fd:28:42:08:7e:34: 38:98:f9:13:bb:0a:e6:ab:dd:b1:7a:76:ce:94:a6: 0f:07:60:ef:25:3f:9e:dc:c6:49:39:9f:9e:81:b4: 2b:2a:f7:15:c2:f9:c7:d4:a8:0a:c2:10:17:57:14: 3a:a8:f7:03:28:b9:9a:eb:0e:30:24:77:3b:45:66: 89:9b:ec:e3:9b:79:85:1c:5d:a2:3e:20:b3:e5:10: 77:30:60:b1:ce:0d:15:96:dd:6b:7c:2d:37:0b:d8: 0a:70:dd:de:19:4c:08:f0:f6:2d:ce:99:28:58:cb: 02:64:8f:4c:da:e4:3c:a4:1e:ab:b8:70:57:0e:86: cd:7c:65:16:af:f8:65:3a:db:8c:85:4f:f7:68:86: f4:93:f9:dc:02:bf:7f:2d:dc:3a:f4:01:0a:d4:e3: 0b:34:6a:2a:17:c5:5a:88:4d:a3:d7:2a:a3:3f:e3: 49:49:53:b2:51:3b:25:1d:55:c0:09:3e:52:7b:c6: 6f:e9:f0:e8:2e:a5:50:d5:63:a1:a8:22:6a:95:df: c4:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B2:86:60:80:BB:7E:20:72:C6:87:1B:23:40:9A:CE:82:D8:A3:55:1A X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/490B4CE30BADF2521157A75B6CB77848B87AB75EFF8B826DB0FF813BC6429982/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/490B4CE30BADF2521157A75B6CB77848B87AB75EFF8B826DB0FF813BC6429982/0/B2866080BB7E2072C6871B23409ACE82D8A3551A.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 190.93.192.0/19 200.85.176.0/21 IPv6: 2803:4440::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28009 Signature Algorithm: sha256WithRSAEncryption 02:05:15:15:33:89:8c:d2:c9:42:35:fe:e5:49:de:83:83:f6: 61:e4:fc:17:d5:84:15:be:7c:73:b1:28:fc:50:d7:5b:81:ce: 0b:23:4d:32:4e:13:17:dc:16:34:ab:8e:1a:04:f4:55:3a:e4: 41:cd:42:1b:05:b2:c2:dd:23:79:5b:ee:73:e6:39:bb:34:73: 18:23:6d:de:dd:13:0a:f1:1d:52:e1:6d:d5:99:6c:de:18:b9: 83:c2:1e:42:33:53:7c:22:06:d6:91:90:5d:3d:03:a0:aa:9f: bd:91:c3:e9:ea:4f:dc:99:81:36:49:f9:09:58:8e:7c:21:99: 88:4f:27:dd:0a:64:6f:4d:dc:32:8e:2e:57:a9:2d:ba:df:a7: 55:63:4d:ad:50:8b:ab:aa:d7:0f:4d:f3:64:d0:ca:13:8b:75: b6:8f:38:f8:27:f8:75:11:69:58:73:9d:f7:c2:04:95:77:29: 2f:35:62:71:c6:78:9d:2c:66:cc:1b:79:01:73:12:51:f7:38: a3:68:2c:ea:33:2a:54:ec:65:83:a4:29:35:06:c4:33:1d:7a: 2b:8f:ab:ff:a8:fa:f6:d3:f7:f1:11:4d:84:94:b4:46:7e:de: 9a:14:05:77:64:d3:cb:6f:33:49:4d:dc:9e:b8:18:e5:4f:a4: e0:ed:9b:11 -----BEGIN CERTIFICATE----- MIIGqjCCBZKgAwIBAgIULWNr2J9gakLE986rG8DOjHWRz0owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgxNzI0NTdaFw0yNzAxMjcxNzI5NTdaMDMxMTAvBgNV BAMTKEIyODY2MDgwQkI3RTIwNzJDNjg3MUIyMzQwOUFDRTgyRDhBMzU1MUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiAxgj/blmjreKaniDXo5fKpq/ faNQ8zhNdDoKcBLdiJZ/PJAVu+L4H91cV59jOKeYEBZ3lv0oQgh+NDiY+RO7Cuar 3bF6ds6Upg8HYO8lP57cxkk5n56BtCsq9xXC+cfUqArCEBdXFDqo9wMouZrrDjAk dztFZomb7OObeYUcXaI+ILPlEHcwYLHODRWW3Wt8LTcL2Apw3d4ZTAjw9i3OmShY ywJkj0za5DykHqu4cFcOhs18ZRav+GU624yFT/dohvST+dwCv38t3Dr0AQrU4ws0 aioXxVqITaPXKqM/40lJU7JROyUdVcAJPlJ7xm/p8OgupVDVY6GoImqV38RFAgMB AAGjggO0MIIDsDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSyhmCAu34gcsaH GyNAms6C2KNVGjAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNDkwQjRDRTMwQkFERjI1MjExNTdBNzVC NkNCNzc4NDhCODdBQjc1RUZGOEI4MjZEQjBGRjgxM0JDNjQyOTk4Mi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OTBCNENFMzBCQURGMjUyMTE1N0E3NUI2Q0I3Nzg0OEI4N0FCNzVFRkY4 QjgyNkRCMEZGODEzQkM2NDI5OTgyLzAvQjI4NjYwODBCQjdFMjA3MkM2ODcxQjIz NDA5QUNFODJEOEEzNTUxQS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQFvl3AAwQDyFWw MA0EAgACMAcDBQAoA0RAMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAm1pMA0GCSqG SIb3DQEBCwUAA4IBAQACBRUVM4mM0slCNf7lSd6Dg/Zh5PwX1YQVvnxzsSj8UNdb gc4LI00yThMX3BY0q44aBPRVOuRBzUIbBbLC3SN5W+5z5jm7NHMYI23e3RMK8R1S 4W3VmWzeGLmDwh5CM1N8IgbWkZBdPQOgqp+9kcPp6k/cmYE2SfkJWI58IZmITyfd CmRvTdwyji5XqS2636dVY02tUIurqtcPTfNk0MoTi3W2jzj4J/h1EWlYc533wgSV dykvNWJxxnidLGbMG3kBcxJR9zijaCzqMypU7GWDpCk1BsQzHXorj6v/qPr20/fx EU2ElLRGft6aFAV3ZNPLbzNJTdyeuBjlT6Tg7ZsR -----END CERTIFICATE-----Generated at Mon Mar 2 15:44:26 2026 by rpki-client