$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B7D7A40FB3E2DE957B3CA05B5BE4973FFA106DAE.cer File: B7D7A40FB3E2DE957B3CA05B5BE4973FFA106DAE.cer (raw, json) Hash identifier: G5u5utD3lCn0BIoNu9O/x0ml8db9N+InigtaTUw4vZI= Subject key identifier: B7:D7:A4:0F:B3:E2:DE:95:7B:3C:A0:5B:5B:E4:97:3F:FA:10:6D:AE Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 236F86F46FD8A81A63FD75DE92193A90B59B8BA5 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/C7E9B15714F825E3190DFAA7F6801BADCAF23CC8B212BC5C61259915D3122374/0/B7D7A40FB3E2DE957B3CA05B5BE4973FFA106DAE.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/C7E9B15714F825E3190DFAA7F6801BADCAF23CC8B212BC5C61259915D3122374/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 14:28:15 +0000 Certificate not after: Wed 27 Jan 2027 14:33:15 +0000 Subordinate resources: AS: 52235 IP: 190.99.64.0/21 IP: 2800:610::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:6f:86:f4:6f:d8:a8:1a:63:fd:75:de:92:19:3a:90:b5:9b:8b:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 14:28:15 2026 GMT Not After : Jan 27 14:33:15 2027 GMT Subject: CN=B7D7A40FB3E2DE957B3CA05B5BE4973FFA106DAE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:7b:00:bf:21:3f:b9:bf:55:73:52:9f:cb:1b: d6:a1:60:04:31:47:3d:f2:1f:81:b9:fc:39:d7:be: 35:91:f9:1f:61:c1:74:f2:47:fd:83:22:46:41:d8: a4:46:15:49:68:3d:23:de:b4:a4:36:b3:ee:c9:ed: 7c:7c:4c:7b:68:bc:ac:47:f1:4f:42:72:bb:d3:89: 4f:f4:a3:4d:fa:d7:5d:b1:ac:d3:4d:d6:62:89:74: ad:67:89:ea:a6:54:b0:e1:4a:e3:bd:ed:77:f7:c6: 2f:0f:31:5b:a6:00:2b:cc:66:fe:91:75:b0:48:04: 1f:50:2f:3b:ec:e7:ff:81:0e:e7:66:1f:ff:10:71: 28:c6:db:ac:ff:f3:32:b3:94:fe:69:fa:d8:d4:47: fd:0c:49:7c:de:e6:6f:66:1c:fa:4d:0e:ad:37:75: 34:30:6f:f5:20:f9:c2:2e:5f:88:c0:71:69:3b:bd: e0:e6:db:c4:ad:77:94:d8:4f:41:7f:7b:70:63:2f: e3:ba:6b:39:68:10:7d:3b:47:73:ee:c9:3e:8a:ca: 5d:2a:f0:14:4d:62:77:69:1d:9e:ae:cf:be:82:8a: 04:28:a1:e9:cf:fd:02:23:e2:d4:06:1b:a9:53:cc: 83:e4:8d:68:cb:95:cd:d3:7b:b5:2a:c3:f2:87:01: 10:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B7:D7:A4:0F:B3:E2:DE:95:7B:3C:A0:5B:5B:E4:97:3F:FA:10:6D:AE X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/C7E9B15714F825E3190DFAA7F6801BADCAF23CC8B212BC5C61259915D3122374/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/C7E9B15714F825E3190DFAA7F6801BADCAF23CC8B212BC5C61259915D3122374/0/B7D7A40FB3E2DE957B3CA05B5BE4973FFA106DAE.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 190.99.64.0/21 IPv6: 2800:610::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52235 Signature Algorithm: sha256WithRSAEncryption 0a:fc:ca:a6:e7:d2:54:4f:14:53:cb:63:96:2b:8f:87:e9:ad: 08:9c:bb:6d:5e:2a:56:87:cd:95:cf:ba:9b:81:e6:99:5f:a1: 50:23:b7:79:09:74:c4:97:ee:d5:9e:35:79:95:4c:e7:56:45: a7:69:7f:5b:70:ff:12:15:a2:93:78:aa:da:a3:cf:cd:04:53: 7e:6b:67:47:d9:52:1a:2e:6c:52:34:47:2b:b1:21:44:86:f7: e8:ab:55:e1:0b:78:e1:16:df:2b:62:c0:cf:b5:16:84:26:ff: 7f:d3:38:c1:5f:81:dd:03:14:bf:7a:55:bc:c4:47:42:39:de: 9f:9f:23:bc:40:23:3c:e3:6b:51:9e:22:03:b8:64:06:64:1d: ef:c0:96:34:2c:cf:b8:2c:4d:71:ff:0f:00:0d:d1:53:cb:6f: a8:62:a6:45:14:b5:b1:47:4e:17:d7:6c:8c:3c:b2:e9:9f:aa: 82:d8:32:cf:76:24:de:21:46:f2:01:50:34:d4:f8:86:13:c3: 31:89:ae:aa:af:8e:10:3c:2a:14:09:64:b3:0f:49:f0:bd:c9: fe:6b:b6:f5:39:58:a9:e3:fa:e7:b7:bf:6e:de:8c:10:06:29: d5:39:f7:9b:0c:ca:f0:9f:e0:ed:29:0f:1a:4f:38:f0:1e:45: 3a:65:6b:70 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUI2+G9G/YqBpj/XXekhk6kLWbi6UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgxNDI4MTVaFw0yNzAxMjcxNDMzMTVaMDMxMTAvBgNV BAMTKEI3RDdBNDBGQjNFMkRFOTU3QjNDQTA1QjVCRTQ5NzNGRkExMDZEQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAewC/IT+5v1VzUp/LG9ahYAQx Rz3yH4G5/DnXvjWR+R9hwXTyR/2DIkZB2KRGFUloPSPetKQ2s+7J7Xx8THtovKxH 8U9CcrvTiU/0o036112xrNNN1mKJdK1nieqmVLDhSuO97Xf3xi8PMVumACvMZv6R dbBIBB9QLzvs5/+BDudmH/8QcSjG26z/8zKzlP5p+tjUR/0MSXze5m9mHPpNDq03 dTQwb/Ug+cIuX4jAcWk7veDm28Std5TYT0F/e3BjL+O6azloEH07R3PuyT6Kyl0q 8BRNYndpHZ6uz76CigQooenP/QIj4tQGG6lTzIPkjWjLlc3Te7Uqw/KHARDXAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS316QPs+LelXs8 oFtb5Jc/+hBtrjAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQzdFOUIxNTcxNEY4MjVFMzE5MERGQUE3 RjY4MDFCQURDQUYyM0NDOEIyMTJCQzVDNjEyNTk5MTVEMzEyMjM3NC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9DN0U5QjE1NzE0RjgyNUUzMTkwREZBQTdGNjgwMUJBRENBRjIzQ0M4QjIx MkJDNUM2MTI1OTkxNUQzMTIyMzc0LzAvQjdEN0E0MEZCM0UyREU5NTdCM0NBMDVC NUJFNDk3M0ZGQTEwNkRBRS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDvmNAMA0EAgAC MAcDBQAoAAYQMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDMCzANBgkqhkiG9w0B AQsFAAOCAQEACvzKpufSVE8UU8tjliuPh+mtCJy7bV4qVofNlc+6m4HmmV+hUCO3 eQl0xJfu1Z41eZVM51ZFp2l/W3D/EhWik3iq2qPPzQRTfmtnR9lSGi5sUjRHK7Eh RIb36KtV4Qt44RbfK2LAz7UWhCb/f9M4wV+B3QMUv3pVvMRHQjnen58jvEAjPONr UZ4iA7hkBmQd78CWNCzPuCxNcf8PAA3RU8tvqGKmRRS1sUdOF9dsjDyy6Z+qgtgy z3Yk3iFG8gFQNNT4hhPDMYmuqq+OEDwqFAlksw9J8L3J/mu29TlYqeP657e/bt6M EAYp1Tn3mwzK8J/g7SkPGk848B5FOmVrcA== -----END CERTIFICATE-----Generated at Mon Mar 2 15:38:27 2026 by rpki-client