$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B7A6CEE70D63D95CB10C03D66656FE5FBC42F8B2.cer File: B7A6CEE70D63D95CB10C03D66656FE5FBC42F8B2.cer (raw, json) Hash identifier: 1vhvjSBfA9gTjWmTD8l+BI2v+Ofc8G4QztrxJKn3Pfc= Subject key identifier: B7:A6:CE:E7:0D:63:D9:5C:B1:0C:03:D6:66:56:FE:5F:BC:42:F8:B2 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 27EED9A296014F25FE26677DAFC1516B5526FDF2 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/07D39DCDD6D9E96335C50A32743BFE126267F5A35B10588C2C72A2414EFE881F/0/B7A6CEE70D63D95CB10C03D66656FE5FBC42F8B2.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/07D39DCDD6D9E96335C50A32743BFE126267F5A35B10588C2C72A2414EFE881F/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 04:50:16 +0000 Certificate not after: Wed 27 Jan 2027 04:55:16 +0000 Subordinate resources: AS: 272912 IP: 148.227.167.0/24 IP: 2803:ce90::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:ee:d9:a2:96:01:4f:25:fe:26:67:7d:af:c1:51:6b:55:26:fd:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 04:50:16 2026 GMT Not After : Jan 27 04:55:16 2027 GMT Subject: CN=B7A6CEE70D63D95CB10C03D66656FE5FBC42F8B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:c5:1c:21:6b:c8:03:df:68:1e:b4:bd:a7:45: 55:e5:a5:92:ae:ff:bc:b0:81:11:96:50:4b:7e:b4: 0c:a3:04:11:a8:91:57:7c:f8:c8:cf:91:58:bc:4b: a6:36:b7:20:a8:a3:da:6e:96:7f:ae:26:a8:66:1e: b5:21:d7:8e:02:c1:7c:3e:b6:21:a6:45:de:2d:e5: c4:a6:29:68:a5:ad:a0:96:47:17:9a:79:2b:8b:63: b7:0b:4a:40:ef:4d:70:38:07:f3:0e:f7:1d:1c:21: 40:e6:a6:95:ee:6b:e7:ff:d0:de:fd:a1:11:be:cd: 81:05:bd:66:d9:68:f5:94:cb:ea:90:a8:04:ee:d9: f2:e8:81:79:b7:a8:ed:8c:0a:de:bb:7a:76:fa:1b: d7:17:3a:00:b6:66:76:6f:2e:da:69:82:38:a6:ca: 90:15:09:25:0a:24:e2:bf:15:2f:09:ea:c8:f1:f4: ec:64:52:31:42:27:fb:78:a4:ba:9e:f0:0b:14:0e: c6:ed:fc:6b:24:72:38:7b:2b:5a:9a:28:55:08:bd: ea:f8:8c:5e:62:71:d5:17:40:ba:2c:50:fe:54:8f: 9c:cd:36:71:e7:86:8c:a7:39:cc:40:18:07:18:a1: 53:da:90:7e:c9:88:11:78:35:46:07:cf:50:6e:05: 6d:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B7:A6:CE:E7:0D:63:D9:5C:B1:0C:03:D6:66:56:FE:5F:BC:42:F8:B2 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/07D39DCDD6D9E96335C50A32743BFE126267F5A35B10588C2C72A2414EFE881F/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/07D39DCDD6D9E96335C50A32743BFE126267F5A35B10588C2C72A2414EFE881F/0/B7A6CEE70D63D95CB10C03D66656FE5FBC42F8B2.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 148.227.167.0/24 IPv6: 2803:ce90::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 272912 Signature Algorithm: sha256WithRSAEncryption 49:00:de:52:81:9d:29:87:e3:e2:bd:54:99:ef:65:4d:80:fe: a1:80:7a:a9:df:92:5a:b6:18:d2:49:a7:2c:14:59:81:79:09: 71:73:45:34:2b:bf:41:ef:50:22:d6:82:04:59:d2:71:a9:51: eb:70:d4:e1:db:f1:79:56:52:7e:fc:27:85:27:80:f8:ae:8f: b7:cd:94:c5:00:8e:af:0f:a0:fc:65:a0:50:4e:42:dc:4e:b1: 74:b7:31:80:c1:58:8a:06:10:55:ab:c7:21:cc:b8:80:ce:9e: f9:70:c5:de:44:25:5b:79:00:8d:59:1f:32:86:fd:20:cf:73: b0:8c:27:b8:c2:ac:d8:be:c1:33:02:14:82:f6:fc:72:c5:8e: ad:98:06:77:05:8b:c8:6b:2d:c3:7f:8b:1a:41:6b:08:93:c1: 73:e0:c0:f6:7b:1f:33:b7:31:4c:c3:f9:52:c8:91:f5:90:9f: 2b:61:44:a3:f5:83:6e:e6:71:c6:49:62:b9:80:b4:ed:f9:30: 1e:b6:4e:71:16:30:9d:f8:1c:92:6c:30:96:9e:a5:e5:ad:e9: 06:a5:e8:c2:3a:e2:79:8d:2e:10:fb:20:a7:4e:6b:5d:bb:af: 56:97:45:2d:60:3a:be:4b:16:79:88:e2:76:ab:42:87:64:39: 17:23:93:7b -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUJ+7ZopYBTyX+Jmd9r8FRa1Um/fIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgwNDUwMTZaFw0yNzAxMjcwNDU1MTZaMDMxMTAvBgNV BAMTKEI3QTZDRUU3MEQ2M0Q5NUNCMTBDMDNENjY2NTZGRTVGQkM0MkY4QjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRxRwha8gD32getL2nRVXlpZKu /7ywgRGWUEt+tAyjBBGokVd8+MjPkVi8S6Y2tyCoo9puln+uJqhmHrUh144CwXw+ tiGmRd4t5cSmKWilraCWRxeaeSuLY7cLSkDvTXA4B/MO9x0cIUDmppXua+f/0N79 oRG+zYEFvWbZaPWUy+qQqATu2fLogXm3qO2MCt67enb6G9cXOgC2ZnZvLtppgjim ypAVCSUKJOK/FS8J6sjx9OxkUjFCJ/t4pLqe8AsUDsbt/Gskcjh7K1qaKFUIver4 jF5icdUXQLosUP5Uj5zNNnHnhoynOcxAGAcYoVPakH7JiBF4NUYHz1BuBW2xAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS3ps7nDWPZXLEM A9ZmVv5fvEL4sjAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMDdEMzlEQ0RENkQ5RTk2MzM1QzUwQTMy NzQzQkZFMTI2MjY3RjVBMzVCMTA1ODhDMkM3MkEyNDE0RUZFODgxRi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8wN0QzOURDREQ2RDlFOTYzMzVDNTBBMzI3NDNCRkUxMjYyNjdGNUEzNUIx MDU4OEMyQzcyQTI0MTRFRkU4ODFGLzAvQjdBNkNFRTcwRDYzRDk1Q0IxMEMwM0Q2 NjY1NkZFNUZCQzQyRjhCMi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAlOOnMA0EAgAC MAcDBQAoA86QMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQqEDANBgkqhkiG9w0B AQsFAAOCAQEASQDeUoGdKYfj4r1Ume9lTYD+oYB6qd+SWrYY0kmnLBRZgXkJcXNF NCu/Qe9QItaCBFnScalR63DU4dvxeVZSfvwnhSeA+K6Pt82UxQCOrw+g/GWgUE5C 3E6xdLcxgMFYigYQVavHIcy4gM6e+XDF3kQlW3kAjVkfMob9IM9zsIwnuMKs2L7B MwIUgvb8csWOrZgGdwWLyGstw3+LGkFrCJPBc+DA9nsfM7cxTMP5UsiR9ZCfK2FE o/WDbuZxxkliuYC07fkwHrZOcRYwnfgckmwwlp6l5a3pBqXowjrieY0uEPsgp05r XbuvVpdFLWA6vksWeYjidqtCh2Q5FyOTew== -----END CERTIFICATE-----Generated at Mon Mar 2 23:25:26 2026 by rpki-client