$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36E394FF60385C16C192FB6EF5B14A8F9183098.cer File: B36E394FF60385C16C192FB6EF5B14A8F9183098.cer (raw, json) Hash identifier: Tk81k70cRd8cxPz/QkhNe2s3FqCItcr3xWeFnWo2/Xw= Subject key identifier: B3:6E:39:4F:F6:03:85:C1:6C:19:2F:B6:EF:5B:14:A8:F9:18:30:98 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 77680CB82B6B97D8A32D17382D6AAE726F83C309 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/E4023E297EDB037C87E20476F44A1B999618A6F4946DFFBBD637622372CA7B56/0/B36E394FF60385C16C192FB6EF5B14A8F9183098.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/E4023E297EDB037C87E20476F44A1B999618A6F4946DFFBBD637622372CA7B56/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Thu 29 Jan 2026 03:27:19 +0000 Certificate not after: Thu 28 Jan 2027 03:32:19 +0000 Subordinate resources: AS: 28049 IP: 190.121.192.0/20 IP: 2803:c540::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:68:0c:b8:2b:6b:97:d8:a3:2d:17:38:2d:6a:ae:72:6f:83:c3:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 29 03:27:19 2026 GMT Not After : Jan 28 03:32:19 2027 GMT Subject: CN=B36E394FF60385C16C192FB6EF5B14A8F9183098 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:06:02:91:5b:7c:17:f1:c7:fe:4f:50:40:5c: b0:a1:85:5b:b0:7f:48:31:8d:86:e7:6e:41:b0:a8: a8:76:d0:c0:db:b6:88:28:ad:1d:a0:96:ac:d0:72: ef:57:43:72:34:3e:b5:89:65:ba:23:4d:dd:f2:a0: e1:07:d5:c4:17:68:cc:a6:b9:d2:90:dc:71:a1:d6: 8b:e2:ed:55:d7:c1:ee:69:74:4c:90:0d:61:bf:17: 43:de:c3:f7:6f:6b:66:7b:cf:f7:ed:2d:95:da:58: 47:6f:84:99:8f:1e:7c:c3:3a:f3:e3:68:5b:3a:e6: 15:bd:84:4e:35:ec:b9:db:dd:e6:f7:fd:f5:28:87: 3e:28:a9:cf:11:a6:7a:8e:4b:38:ac:83:f7:81:2a: ed:a0:08:da:95:7c:88:9e:ca:3e:72:16:49:74:32: 26:2a:22:59:c9:de:69:0b:c3:68:b5:ea:94:f5:ac: 09:a8:22:2e:90:cc:e2:16:a4:83:e3:c2:12:13:8e: 7c:24:ef:cc:c8:e1:2e:61:e6:55:13:c1:78:e5:e8: 0b:fd:9c:fe:c2:a1:33:1d:01:3b:cd:40:b7:b7:b4: dd:fa:bb:83:3f:8b:b0:f2:7a:c6:b8:9f:1f:94:39: db:3a:64:2d:4c:9a:1d:41:51:af:2f:96:3f:47:7d: a6:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B3:6E:39:4F:F6:03:85:C1:6C:19:2F:B6:EF:5B:14:A8:F9:18:30:98 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/E4023E297EDB037C87E20476F44A1B999618A6F4946DFFBBD637622372CA7B56/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/E4023E297EDB037C87E20476F44A1B999618A6F4946DFFBBD637622372CA7B56/0/B36E394FF60385C16C192FB6EF5B14A8F9183098.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 190.121.192.0/20 IPv6: 2803:c540::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28049 Signature Algorithm: sha256WithRSAEncryption 6b:12:8d:69:50:cb:37:3b:ad:a6:b5:c3:10:6f:50:c5:fb:a4: 11:f7:1c:fc:53:a4:4c:6c:5a:44:e1:ca:43:fb:0c:2f:cd:67: 55:58:6f:37:3c:b5:86:46:5f:27:90:42:b3:d9:b4:65:5c:9b: 5c:f1:cb:c6:63:da:19:30:3f:87:a0:77:2f:b2:60:15:8a:8a: 00:d0:32:cb:43:61:74:a8:63:b5:96:9b:d0:65:b5:71:cf:3e: d1:ac:95:72:69:f8:57:3e:3d:75:71:9a:23:cf:15:89:f8:3d: e7:52:8a:51:5d:f2:45:10:ec:3b:a7:b7:28:d1:93:64:2d:c0: bf:1c:e4:42:e4:ef:b1:9e:8e:b2:47:b7:51:10:1b:2b:c6:43: 87:e0:8b:d7:a8:e5:77:ae:09:72:f8:3e:6b:5e:87:ce:2e:ee: 8f:46:d0:f9:6a:d5:b2:d7:68:48:4d:34:86:d4:15:4f:f5:4c: e4:ff:dc:3f:09:6d:76:f9:ff:95:0c:67:6c:3d:60:11:0e:ec: d5:7d:a6:6a:34:3f:4a:39:f8:52:49:e2:b1:3c:51:93:49:b0: a8:3f:11:55:95:6d:d8:63:7f:1a:30:64:11:e6:80:a6:ee:53: 2b:d7:3b:3f:68:23:b4:b5:1f:62:89:31:1e:14:33:e0:73:c1: 90:2c:c3:fb -----BEGIN CERTIFICATE----- MIIGpDCCBYygAwIBAgIUd2gMuCtrl9ijLRc4LWqucm+DwwkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjkwMzI3MTlaFw0yNzAxMjgwMzMyMTlaMDMxMTAvBgNV BAMTKEIzNkUzOTRGRjYwMzg1QzE2QzE5MkZCNkVGNUIxNEE4RjkxODMwOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9BgKRW3wX8cf+T1BAXLChhVuw f0gxjYbnbkGwqKh20MDbtogorR2glqzQcu9XQ3I0PrWJZbojTd3yoOEH1cQXaMym udKQ3HGh1ovi7VXXwe5pdEyQDWG/F0Pew/dva2Z7z/ftLZXaWEdvhJmPHnzDOvPj aFs65hW9hE417Lnb3eb3/fUohz4oqc8RpnqOSzisg/eBKu2gCNqVfIieyj5yFkl0 MiYqIlnJ3mkLw2i16pT1rAmoIi6QzOIWpIPjwhITjnwk78zI4S5h5lUTwXjl6Av9 nP7CoTMdATvNQLe3tN36u4M/i7Dyesa4nx+UOds6ZC1Mmh1BUa8vlj9HfaZ/AgMB AAGjggOuMIIDqjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSzbjlP9gOFwWwZ L7bvWxSo+RgwmDAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTQwMjNFMjk3RURCMDM3Qzg3RTIwNDc2 RjQ0QTFCOTk5NjE4QTZGNDk0NkRGRkJCRDYzNzYyMjM3MkNBN0I1Ni8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9FNDAyM0UyOTdFREIwMzdDODdFMjA0NzZGNDRBMUI5OTk2MThBNkY0OTQ2 REZGQkJENjM3NjIyMzcyQ0E3QjU2LzAvQjM2RTM5NEZGNjAzODVDMTZDMTkyRkI2 RUY1QjE0QThGOTE4MzA5OC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQEvnnAMA0EAgAC MAcDBQAoA8VAMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAm2RMA0GCSqGSIb3DQEB CwUAA4IBAQBrEo1pUMs3O62mtcMQb1DF+6QR9xz8U6RMbFpE4cpD+wwvzWdVWG83 PLWGRl8nkEKz2bRlXJtc8cvGY9oZMD+HoHcvsmAViooA0DLLQ2F0qGO1lpvQZbVx zz7RrJVyafhXPj11cZojzxWJ+D3nUopRXfJFEOw7p7co0ZNkLcC/HORC5O+xno6y R7dREBsrxkOH4IvXqOV3rgly+D5rXofOLu6PRtD5atWy12hITTSG1BVP9Uzk/9w/ CW12+f+VDGdsPWARDuzVfaZqND9KOfhSSeKxPFGTSbCoPxFVlW3YY38aMGQR5oCm 7lMr1zs/aCO0tR9iiTEeFDPgc8GQLMP7 -----END CERTIFICATE-----Generated at Mon Mar 2 15:57:02 2026 by rpki-client