$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8B396C17C90DFE052D24EB8A035A959AA99A930.cer File: B8B396C17C90DFE052D24EB8A035A959AA99A930.cer (raw, json) Hash identifier: 69SRsvB3+hJRFoMEAZCsAgYuyJ6sxulGPC9TGbkpu4U= Subject key identifier: B8:B3:96:C1:7C:90:DF:E0:52:D2:4E:B8:A0:35:A9:59:AA:99:A9:30 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 3FC70C9464E6E8C7056F69CA5D17C3E794BF8C01 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/F51E3DF853DE2B50D505C68B08498111250402B7D58CE7A9FE4CE9DC3EA22152/0/B8B396C17C90DFE052D24EB8A035A959AA99A930.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/F51E3DF853DE2B50D505C68B08498111250402B7D58CE7A9FE4CE9DC3EA22152/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 06:08:22 +0000 Certificate not after: Wed 27 Jan 2027 06:13:22 +0000 Subordinate resources: AS: 26605 IP: 200.16.117.0 -- 200.16.119.255 IP: 2801:0:280::/48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:c7:0c:94:64:e6:e8:c7:05:6f:69:ca:5d:17:c3:e7:94:bf:8c:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 06:08:22 2026 GMT Not After : Jan 27 06:13:22 2027 GMT Subject: CN=B8B396C17C90DFE052D24EB8A035A959AA99A930 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:34:19:2c:49:0a:a2:6a:f6:be:e3:b7:00:cf: d7:6e:e9:f7:f6:bc:52:2a:71:74:d8:3b:bf:1d:85: f9:14:50:a3:c8:2d:e1:2f:90:bc:d6:7a:b9:0b:5b: be:0a:41:73:f8:b7:18:c0:02:b9:be:fb:c4:13:54: a1:de:18:9c:6f:69:b5:11:cf:ef:45:de:40:52:90: 60:ec:e6:3f:c6:75:9a:31:d5:99:c6:5d:8d:e9:f1: ae:b9:7c:2c:96:4b:82:c8:8b:2b:f4:98:06:20:c9: 03:19:4f:fb:26:82:b3:eb:41:19:18:b4:ee:b7:0e: be:4d:fc:ee:01:1f:f6:68:04:dd:93:83:28:92:65: 36:6e:5c:0e:4f:cb:c9:2d:dd:34:02:cc:f7:c6:2e: a4:aa:ca:fb:1e:a1:9d:61:0d:91:3e:12:e2:6d:4b: ee:27:03:83:7b:5f:9a:0d:ad:a0:df:08:5c:e8:cd: 26:70:0e:23:b9:ee:a1:f8:50:82:22:9d:32:c0:67: 7a:9d:e6:cf:a3:52:ef:1d:a3:e1:f2:f1:31:68:c0: fc:44:df:28:df:bf:5d:66:8b:79:80:a3:d5:7d:85: dd:4e:cf:5e:4f:1e:8e:a1:d2:a1:b1:9c:fd:64:5e: c2:5a:bf:1b:f8:b7:81:8b:c0:2a:0f:1c:c5:77:cd: 29:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B8:B3:96:C1:7C:90:DF:E0:52:D2:4E:B8:A0:35:A9:59:AA:99:A9:30 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/F51E3DF853DE2B50D505C68B08498111250402B7D58CE7A9FE4CE9DC3EA22152/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/F51E3DF853DE2B50D505C68B08498111250402B7D58CE7A9FE4CE9DC3EA22152/0/B8B396C17C90DFE052D24EB8A035A959AA99A930.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.16.117.0-200.16.119.255 IPv6: 2801:0:280::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 26605 Signature Algorithm: sha256WithRSAEncryption 70:ce:23:8a:4e:86:a9:e1:7f:f7:9e:b9:7b:12:38:b1:bc:1c: 84:26:3d:3f:e4:e4:9e:3e:dd:ca:f0:80:c9:5d:98:ee:ea:c2: 34:52:75:6a:c7:71:56:65:84:7d:c5:48:9a:77:de:84:89:ed: 43:b0:52:d3:e2:e7:4a:a0:7a:29:8a:94:ab:de:ac:8c:69:72: 47:16:45:02:62:0a:b0:65:2e:77:4b:aa:bc:7c:99:0f:07:d2: 49:48:39:58:02:a8:f4:8c:c5:ee:40:df:43:84:bd:20:5e:5f: 59:fb:12:c3:9f:ee:65:01:e9:63:43:bd:07:80:4b:a7:3c:87: 02:2d:76:80:e0:e6:a6:5b:de:54:a9:7d:ac:47:56:98:d8:fc: df:01:10:3a:d9:31:53:b4:6f:60:4e:cb:22:60:fe:4c:7b:b2: 43:cc:b8:37:52:e5:04:ed:85:ee:4d:38:12:4f:0d:06:b3:49: 1f:99:00:a7:c6:fe:c3:6b:7b:2b:1f:7b:f3:33:22:db:fa:83: ee:a7:64:03:2c:10:70:28:8a:ca:30:6a:0c:75:77:ca:62:20: d3:f6:04:d9:af:cd:95:ab:36:78:3f:de:9d:a9:4d:56:8c:77: a9:e8:8b:69:cb:d0:fa:a4:df:15:63:aa:4b:1c:5f:1a:47:a7: da:0f:70:3d -----BEGIN CERTIFICATE----- MIIGrjCCBZagAwIBAgIUP8cMlGTm6McFb2nKXRfD55S/jAEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgwNjA4MjJaFw0yNzAxMjcwNjEzMjJaMDMxMTAvBgNV BAMTKEI4QjM5NkMxN0M5MERGRTA1MkQyNEVCOEEwMzVBOTU5QUE5OUE5MzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVNBksSQqiava+47cAz9du6ff2 vFIqcXTYO78dhfkUUKPILeEvkLzWerkLW74KQXP4txjAArm++8QTVKHeGJxvabUR z+9F3kBSkGDs5j/GdZox1ZnGXY3p8a65fCyWS4LIiyv0mAYgyQMZT/smgrPrQRkY tO63Dr5N/O4BH/ZoBN2TgyiSZTZuXA5Py8kt3TQCzPfGLqSqyvseoZ1hDZE+EuJt S+4nA4N7X5oNraDfCFzozSZwDiO57qH4UIIinTLAZ3qd5s+jUu8do+Hy8TFowPxE 3yjfv11mi3mAo9V9hd1Oz15PHo6h0qGxnP1kXsJavxv4t4GLwCoPHMV3zSmvAgMB AAGjggO4MIIDtDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS4s5bBfJDf4FLS TrigNalZqpmpMDAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRjUxRTNERjg1M0RFMkI1MEQ1MDVDNjhC MDg0OTgxMTEyNTA0MDJCN0Q1OENFN0E5RkU0Q0U5REMzRUEyMjE1Mi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9GNTFFM0RGODUzREUyQjUwRDUwNUM2OEIwODQ5ODExMTI1MDQwMkI3RDU4 Q0U3QTlGRTRDRTlEQzNFQTIyMTUyLzAvQjhCMzk2QzE3QzkwREZFMDUyRDI0RUI4 QTAzNUE5NTlBQTk5QTkzMC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDgGCCsGAQUFBwEHAQH/BCkwJzAUBAIAATAOMAwDBADIEHUDBAPI EHAwDwQCAAIwCQMHACgBAAACgDAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgJn7TAN BgkqhkiG9w0BAQsFAAOCAQEAcM4jik6GqeF/9565exI4sbwchCY9P+Tknj7dyvCA yV2Y7urCNFJ1asdxVmWEfcVImnfehIntQ7BS0+LnSqB6KYqUq96sjGlyRxZFAmIK sGUud0uqvHyZDwfSSUg5WAKo9IzF7kDfQ4S9IF5fWfsSw5/uZQHpY0O9B4BLpzyH Ai12gODmplveVKl9rEdWmNj83wEQOtkxU7RvYE7LImD+THuyQ8y4N1LlBO2F7k04 Ek8NBrNJH5kAp8b+w2t7Kx978zMi2/qD7qdkAywQcCiKyjBqDHV3ymIg0/YE2a/N las2eD/enalNVox3qeiLacvQ+qTfFWOqSxxfGken2g9wPQ== -----END CERTIFICATE-----Generated at Mon Mar 2 18:31:00 2026 by rpki-client