$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3602955B698225B69B7EAD22B122D3DA9AC7F8F.cer File: B3602955B698225B69B7EAD22B122D3DA9AC7F8F.cer (raw, json) Hash identifier: Lr+dfbwoOmtwar8dRcgCXiHVgNrE9NRnwVsekGyJXAY= Subject key identifier: B3:60:29:55:B6:98:22:5B:69:B7:EA:D2:2B:12:2D:3D:A9:AC:7F:8F Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 111F52DB79A3364F3FAF191B902AFA2E20C0CD82 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/C991FBEA607D69824986C46D46719A1E2B9D1BD7947F12EF74499333EE2BECF4/0/B3602955B698225B69B7EAD22B122D3DA9AC7F8F.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/C991FBEA607D69824986C46D46719A1E2B9D1BD7947F12EF74499333EE2BECF4/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 13:43:24 +0000 Certificate not after: Wed 27 Jan 2027 13:48:24 +0000 Subordinate resources: AS: 263792 IP: 138.122.108.0/22 IP: 2803:ec40::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:1f:52:db:79:a3:36:4f:3f:af:19:1b:90:2a:fa:2e:20:c0:cd:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 13:43:24 2026 GMT Not After : Jan 27 13:48:24 2027 GMT Subject: CN=B3602955B698225B69B7EAD22B122D3DA9AC7F8F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:45:9f:02:ac:6c:b8:24:d5:29:3c:b0:9c:10: 47:9e:f6:e0:d8:e9:db:46:fe:fd:cf:af:ae:cf:b6: ee:24:5c:89:13:fc:14:8a:6f:2c:21:c1:f2:df:00: 78:b9:94:de:a6:91:68:9b:20:50:53:a4:5a:c2:75: f9:43:b2:4f:e0:f8:4e:6c:43:a3:21:0e:ae:dc:6e: 11:36:be:94:be:55:ba:ca:5e:a9:33:76:2a:82:37: cc:a2:53:8d:85:8f:05:a4:0a:af:53:1e:f4:16:97: 68:8b:3e:dc:08:d6:73:d8:ab:51:a9:b9:83:70:78: 94:a5:bf:bd:11:30:d3:3c:7b:90:7d:b6:59:b4:1c: 72:e8:45:01:1c:3b:b8:10:56:86:ed:dc:04:e5:46: 3c:92:2f:1c:3b:a1:9d:56:15:3b:5c:7a:45:71:91: 0f:28:2c:55:59:fc:bc:a4:fe:46:d2:d7:17:f8:82: 65:48:43:e3:e5:ff:69:2f:34:34:f4:19:1b:1e:a5: f1:23:d4:ec:74:08:6b:1d:33:63:9f:1e:66:3f:5e: af:0e:67:d4:8c:98:bf:d4:94:de:15:1e:57:75:09: 20:13:49:48:4e:0a:ea:2a:69:32:43:d4:ff:d3:f2: f0:e8:66:38:4c:3c:21:0e:de:da:ce:16:26:63:2a: 30:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B3:60:29:55:B6:98:22:5B:69:B7:EA:D2:2B:12:2D:3D:A9:AC:7F:8F X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/C991FBEA607D69824986C46D46719A1E2B9D1BD7947F12EF74499333EE2BECF4/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/C991FBEA607D69824986C46D46719A1E2B9D1BD7947F12EF74499333EE2BECF4/0/B3602955B698225B69B7EAD22B122D3DA9AC7F8F.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.122.108.0/22 IPv6: 2803:ec40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263792 Signature Algorithm: sha256WithRSAEncryption 2b:ea:24:80:dd:12:f2:1b:0e:ad:a9:15:b8:73:7a:47:4a:44: fd:de:01:06:22:5d:20:dd:5f:f5:99:8f:de:a2:2d:9a:3d:7c: c4:14:d1:6e:bd:aa:fe:21:75:51:87:c5:ab:95:92:d8:a2:12: 9f:19:da:40:c2:fd:6c:ed:dc:3d:78:45:28:8e:c6:74:80:bf: eb:9f:0f:ee:85:b5:e8:25:4b:31:76:4d:59:29:a8:e4:aa:18: 5b:d6:03:c3:32:de:b7:00:f0:8c:33:5a:71:63:61:f0:5b:e9: c1:86:33:d6:27:08:2f:00:46:ba:5e:37:d3:28:9a:01:3d:c3: 84:f3:3e:14:82:78:8f:6b:44:c1:32:ba:ac:7c:ba:2a:4e:6b: 73:72:4a:78:26:ca:bc:49:5c:09:82:73:ae:bf:fe:0b:6c:d7: 1c:07:23:59:f6:18:95:a0:17:11:6b:cd:ff:22:7a:da:3f:c7: f2:d7:14:74:83:31:8a:9c:6c:71:48:f3:80:2d:58:e0:28:ea: 3c:7b:54:59:b2:84:bd:73:c4:46:d0:4c:37:92:82:21:a2:73: 4d:8c:cf:e8:cb:48:fd:8c:8d:a0:e8:ad:24:e5:fa:36:4f:e7: c4:15:37:34:9c:0f:a6:55:6d:40:4b:fd:58:68:e8:d4:81:6b: 6e:60:9d:4c -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUER9S23mjNk8/rxkbkCr6LiDAzYIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgxMzQzMjRaFw0yNzAxMjcxMzQ4MjRaMDMxMTAvBgNV BAMTKEIzNjAyOTU1QjY5ODIyNUI2OUI3RUFEMjJCMTIyRDNEQTlBQzdGOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLRZ8CrGy4JNUpPLCcEEee9uDY 6dtG/v3Pr67Ptu4kXIkT/BSKbywhwfLfAHi5lN6mkWibIFBTpFrCdflDsk/g+E5s Q6MhDq7cbhE2vpS+VbrKXqkzdiqCN8yiU42FjwWkCq9THvQWl2iLPtwI1nPYq1Gp uYNweJSlv70RMNM8e5B9tlm0HHLoRQEcO7gQVobt3ATlRjySLxw7oZ1WFTtcekVx kQ8oLFVZ/Lyk/kbS1xf4gmVIQ+Pl/2kvNDT0GRsepfEj1Ox0CGsdM2OfHmY/Xq8O Z9SMmL/UlN4VHld1CSATSUhOCuoqaTJD1P/T8vDoZjhMPCEO3trOFiZjKjDRAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSzYClVtpgiW2m3 6tIrEi09qax/jzAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQzk5MUZCRUE2MDdENjk4MjQ5ODZDNDZE NDY3MTlBMUUyQjlEMUJENzk0N0YxMkVGNzQ0OTkzMzNFRTJCRUNGNC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9DOTkxRkJFQTYwN0Q2OTgyNDk4NkM0NkQ0NjcxOUExRTJCOUQxQkQ3OTQ3 RjEyRUY3NDQ5OTMzM0VFMkJFQ0Y0LzAvQjM2MDI5NTVCNjk4MjI1QjY5QjdFQUQy MkIxMjJEM0RBOUFDN0Y4Ri5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCinpsMA0EAgAC MAcDBQAoA+xAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQGcDANBgkqhkiG9w0B AQsFAAOCAQEAK+okgN0S8hsOrakVuHN6R0pE/d4BBiJdIN1f9ZmP3qItmj18xBTR br2q/iF1UYfFq5WS2KISnxnaQML9bO3cPXhFKI7GdIC/658P7oW16CVLMXZNWSmo 5KoYW9YDwzLetwDwjDNacWNh8FvpwYYz1icILwBGul430yiaAT3DhPM+FIJ4j2tE wTK6rHy6Kk5rc3JKeCbKvElcCYJzrr/+C2zXHAcjWfYYlaAXEWvN/yJ62j/H8tcU dIMxipxscUjzgC1Y4CjqPHtUWbKEvXPERtBMN5KCIaJzTYzP6MtI/YyNoOitJOX6 Nk/nxBU3NJwPplVtQEv9WGjo1IFrbmCdTA== -----END CERTIFICATE-----Generated at Mon Mar 2 17:28:22 2026 by rpki-client