$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B57B438CFF3F02CD31FFA267CFD03FC2140E1C17.cer File: B57B438CFF3F02CD31FFA267CFD03FC2140E1C17.cer (raw, json) Hash identifier: +pprp7qbM74bB8TwwVCSOcugYSqf+dDhFCA9Bq6bWPw= Subject key identifier: B5:7B:43:8C:FF:3F:02:CD:31:FF:A2:67:CF:D0:3F:C2:14:0E:1C:17 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 7E2290FA48E6F2F56EFEDDA56EB022A84C78951A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/B6B5E4684BEE1F7763249A49CBAB846BE8CF475056C8D564BFF46B3996938AB6/0/B57B438CFF3F02CD31FFA267CFD03FC2140E1C17.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/B6B5E4684BEE1F7763249A49CBAB846BE8CF475056C8D564BFF46B3996938AB6/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 05:16:53 +0000 Certificate not after: Wed 27 Jan 2027 05:21:53 +0000 Subordinate resources: AS: 263700 IP: 132.255.68.0/22 IP: 138.121.168.0/22 IP: 170.239.152.0/23 IP: 2803:db80::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 05 Mar 2026 11:41:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:22:90:fa:48:e6:f2:f5:6e:fe:dd:a5:6e:b0:22:a8:4c:78:95:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 05:16:53 2026 GMT Not After : Jan 27 05:21:53 2027 GMT Subject: CN=B57B438CFF3F02CD31FFA267CFD03FC2140E1C17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:20:71:60:fa:d1:83:00:1f:ef:bd:4d:ff:a3: a0:96:d8:e0:bf:b1:6d:4d:49:bf:47:32:db:d7:b9: 7e:4b:db:75:84:f4:a2:39:b4:12:e0:b7:e0:33:7c: 77:b9:6c:e8:50:f8:24:b0:32:07:22:09:23:d5:ec: ad:6a:f3:00:bd:39:87:c9:c7:7e:6c:9a:fd:0c:04: 38:68:81:25:9a:d8:a1:3c:44:7a:97:30:ee:0a:34: 81:5a:d3:50:7d:31:1f:9e:76:bb:50:91:89:00:0b: ba:3d:7d:69:7e:67:30:e9:a3:89:43:26:49:20:ef: b0:46:10:49:c7:06:5e:af:23:55:1a:a0:6a:d9:c9: 86:45:9b:b4:be:dd:14:02:5c:da:02:80:98:77:e1: 91:71:68:0e:f1:36:dd:3d:92:fd:6e:a4:f6:df:4e: d5:83:db:0d:85:7b:fb:b1:90:d4:e1:98:87:fd:70: 12:d5:17:67:9d:92:70:72:cf:00:0c:c1:57:d2:e8: 02:9a:fe:01:b0:ef:25:d1:f5:5f:b7:ca:6a:14:1b: 88:22:33:e7:16:e5:3f:da:3c:a0:a9:f1:b5:d8:0b: 3d:0c:50:0a:7d:6b:82:c6:20:79:c4:ff:ab:e0:27: 72:8b:4e:34:00:60:c5:93:3b:58:07:57:55:f4:6b: 78:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B5:7B:43:8C:FF:3F:02:CD:31:FF:A2:67:CF:D0:3F:C2:14:0E:1C:17 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/B6B5E4684BEE1F7763249A49CBAB846BE8CF475056C8D564BFF46B3996938AB6/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/B6B5E4684BEE1F7763249A49CBAB846BE8CF475056C8D564BFF46B3996938AB6/0/B57B438CFF3F02CD31FFA267CFD03FC2140E1C17.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 132.255.68.0/22 138.121.168.0/22 170.239.152.0/23 IPv6: 2803:db80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263700 Signature Algorithm: sha256WithRSAEncryption 5d:41:13:19:5f:a4:db:c0:8f:da:5f:9f:81:02:f6:4a:91:36: a0:7c:6e:1a:b5:d3:39:f9:bd:4f:19:77:22:3c:8c:c5:f6:93: 90:89:82:af:ad:3d:ec:f1:c8:e0:d4:3e:9c:0b:31:98:da:9a: 60:c6:78:8e:1f:00:e6:45:0c:c1:fa:93:0f:67:3f:48:76:a0: 88:96:04:12:47:01:20:79:5e:ee:ca:c0:40:0d:10:22:c6:a6: 51:d3:f5:b1:5b:65:fd:5c:47:06:01:98:95:81:eb:67:ba:9c: ff:5a:06:62:09:16:5a:03:d1:3c:78:ea:92:5f:0a:92:15:a1: 11:84:2f:e2:ba:6d:90:c5:a6:ce:b3:a5:5c:7e:fd:ea:ce:22: 63:e9:81:63:11:d7:b5:cb:32:a6:64:75:dd:a4:38:74:5c:e4: 26:3f:d8:74:cf:37:15:2b:06:26:c0:35:c7:f0:be:0c:a1:96: af:69:9a:de:83:2d:b0:f8:10:3f:3f:30:f0:9a:b5:41:ca:ef: 83:05:5d:02:d8:d7:79:58:ee:ba:7d:6f:42:62:fc:6a:3f:51: c2:aa:59:67:69:e5:c8:e3:c0:3d:cf:94:3c:46:42:f6:42:ee: d9:ca:c0:96:e7:de:6e:1b:19:4a:a4:68:81:39:01:ed:e0:7f: d8:20:ba:9b -----BEGIN CERTIFICATE----- MIIGsTCCBZmgAwIBAgIUfiKQ+kjm8vVu/t2lbrAiqEx4lRowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgwNTE2NTNaFw0yNzAxMjcwNTIxNTNaMDMxMTAvBgNV BAMTKEI1N0I0MzhDRkYzRjAyQ0QzMUZGQTI2N0NGRDAzRkMyMTQwRTFDMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSIHFg+tGDAB/vvU3/o6CW2OC/ sW1NSb9HMtvXuX5L23WE9KI5tBLgt+AzfHe5bOhQ+CSwMgciCSPV7K1q8wC9OYfJ x35smv0MBDhogSWa2KE8RHqXMO4KNIFa01B9MR+edrtQkYkAC7o9fWl+ZzDpo4lD Jkkg77BGEEnHBl6vI1UaoGrZyYZFm7S+3RQCXNoCgJh34ZFxaA7xNt09kv1upPbf TtWD2w2Fe/uxkNThmIf9cBLVF2edknByzwAMwVfS6AKa/gGw7yXR9V+3ymoUG4gi M+cW5T/aPKCp8bXYCz0MUAp9a4LGIHnE/6vgJ3KLTjQAYMWTO1gHV1X0a3jvAgMB AAGjggO7MIIDtzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS1e0OM/z8CzTH/ omfP0D/CFA4cFzAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQjZCNUU0Njg0QkVFMUY3NzYzMjQ5QTQ5 Q0JBQjg0NkJFOENGNDc1MDU2QzhENTY0QkZGNDZCMzk5NjkzOEFCNi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9CNkI1RTQ2ODRCRUUxRjc3NjMyNDlBNDlDQkFCODQ2QkU4Q0Y0NzUwNTZD OEQ1NjRCRkY0NkIzOTk2OTM4QUI2LzAvQjU3QjQzOENGRjNGMDJDRDMxRkZBMjY3 Q0ZEMDNGQzIxNDBFMUMxNy5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQChP9EAwQCinmo AwQBqu+YMA0EAgACMAcDBQAoA9uAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQG FDANBgkqhkiG9w0BAQsFAAOCAQEAXUETGV+k28CP2l+fgQL2SpE2oHxuGrXTOfm9 Txl3IjyMxfaTkImCr6097PHI4NQ+nAsxmNqaYMZ4jh8A5kUMwfqTD2c/SHagiJYE EkcBIHle7srAQA0QIsamUdP1sVtl/VxHBgGYlYHrZ7qc/1oGYgkWWgPRPHjqkl8K khWhEYQv4rptkMWmzrOlXH796s4iY+mBYxHXtcsypmR13aQ4dFzkJj/YdM83FSsG JsA1x/C+DKGWr2ma3oMtsPgQPz8w8Jq1QcrvgwVdAtjXeVjuun1vQmL8aj9RwqpZ Z2nlyOPAPc+UPEZC9kLu2crAlufebhsZSqRogTkB7eB/2CC6mw== -----END CERTIFICATE-----Generated at Mon Mar 2 09:49:21 2026 by rpki-client