$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.cer File: C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.cer (raw, json) Hash identifier: 0ByxamPYTiZ8A32r/uO2sg91PUdgvIkXqHxuRkGZZrM= Subject key identifier: C2:96:7F:F3:10:9E:0A:A7:EE:5E:C1:C6:40:30:0D:5A:00:FF:41:B0 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 7F5FE0F060846E690AF089D689BB79679C4CE2F8 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 23:00:18 +0000 Certificate not after: Wed 27 Jan 2027 23:05:18 +0000 Subordinate resources: IP: 66.231.64.0/20 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:5f:e0:f0:60:84:6e:69:0a:f0:89:d6:89:bb:79:67:9c:4c:e2:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 23:00:18 2026 GMT Not After : Jan 27 23:05:18 2027 GMT Subject: CN=C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:4d:fc:02:50:29:83:ee:16:38:0a:4e:20:9e: 37:99:1f:69:ef:ac:2b:1c:13:b9:e1:4a:9f:44:7b: be:52:9c:7b:ed:0a:71:74:f7:44:20:ca:b8:8b:b0: 6c:bd:1f:1d:1b:8d:2e:48:4d:ab:fe:3e:a5:a0:ce: 35:95:83:df:2d:20:0d:4d:b7:57:6c:6a:83:8d:a1: 15:77:0e:6f:79:0d:d4:70:93:9c:13:5b:f6:78:4d: ad:64:a1:1e:da:35:56:44:8b:1c:ba:6f:83:56:b6: 5e:4c:3c:00:69:0b:b6:27:ba:6a:75:af:ff:d2:da: 6a:6a:e1:51:3a:fe:6a:5a:76:7e:02:f1:d4:35:74: 7a:2f:04:8e:10:85:48:ae:68:af:79:80:63:37:51: 49:f8:25:2e:f1:a5:8a:7b:2a:0e:5e:59:9f:69:2a: 27:70:ca:ba:71:15:bb:51:ce:45:77:ab:27:3a:f8: 52:64:9e:cf:72:ee:37:11:61:e6:5c:b7:c9:3a:8b: 8b:c1:9d:de:8b:67:12:ba:bb:62:13:a5:ba:46:61: d8:cf:21:e4:11:f8:64:3c:fc:72:59:28:a9:e6:2f: 50:f6:fa:7b:ce:6d:cd:f5:92:1a:b9:58:63:cc:eb: ee:07:02:0d:11:67:72:80:5b:9d:72:0e:b9:8b:6d: 7f:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C2:96:7F:F3:10:9E:0A:A7:EE:5E:C1:C6:40:30:0D:5A:00:FF:41:B0 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 66.231.64.0/20 Signature Algorithm: sha256WithRSAEncryption 49:25:e9:fc:ea:aa:a9:80:a7:74:ec:b8:1b:0a:66:af:ba:78: 7a:29:19:d0:b4:17:e3:9b:b0:c5:9d:64:b2:e3:25:81:40:7c: 52:af:df:c9:77:15:29:37:5b:c6:7f:f4:48:03:de:d1:1f:af: ac:71:a0:55:6a:15:64:e4:e4:b3:91:ab:e1:8e:06:6a:e9:66: 1d:c5:e6:77:84:5b:fe:1c:ec:31:91:5e:66:c3:f3:fb:e4:9c: 1f:91:6f:64:02:d9:b8:d9:50:b4:68:97:f8:b5:93:4c:27:42: 79:ce:4f:22:1b:99:86:44:f2:33:1e:df:a3:99:43:1f:aa:27: 7f:1e:dc:51:54:60:dc:40:c3:3c:d8:9f:45:0d:07:c3:05:e5: 5d:ba:04:44:9f:f4:5f:a9:75:11:e4:51:58:da:f8:9f:ec:2b: a1:b3:fb:30:d3:6f:0a:b2:21:9a:13:da:2e:b3:a4:59:aa:13: 5d:81:06:20:2b:76:da:ca:a5:ae:f0:ac:e4:d7:3a:09:19:96: 28:52:48:7f:f2:03:05:71:90:9d:b3:c2:09:e7:af:bd:9d:e6: 1f:eb:76:f4:32:04:cd:93:68:57:94:27:25:7c:19:49:b4:11: 9a:ce:bd:e0:73:98:31:c5:06:07:14:15:18:0c:44:aa:60:a0: 53:12:6c:a1 -----BEGIN CERTIFICATE----- MIIGejCCBWKgAwIBAgIUf1/g8GCEbmkK8InWibt5Z5xM4vgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgyMzAwMThaFw0yNzAxMjcyMzA1MThaMDMxMTAvBgNV BAMTKEMyOTY3RkYzMTA5RTBBQTdFRTVFQzFDNjQwMzAwRDVBMDBGRjQxQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7TfwCUCmD7hY4Ck4gnjeZH2nv rCscE7nhSp9Ee75SnHvtCnF090QgyriLsGy9Hx0bjS5ITav+PqWgzjWVg98tIA1N t1dsaoONoRV3Dm95DdRwk5wTW/Z4Ta1koR7aNVZEixy6b4NWtl5MPABpC7Ynump1 r//S2mpq4VE6/mpadn4C8dQ1dHovBI4QhUiuaK95gGM3UUn4JS7xpYp7Kg5eWZ9p KidwyrpxFbtRzkV3qyc6+FJkns9y7jcRYeZct8k6i4vBnd6LZxK6u2ITpbpGYdjP IeQR+GQ8/HJZKKnmL1D2+nvObc31khq5WGPM6+4HAg0RZ3KAW51yDrmLbX9xAgMB AAGjggOEMIIDgDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTCln/zEJ4Kp+5e wcZAMA1aAP9BsDAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvREExMDRENzc3N0IwMjlFREE3ODJEQUE2 QTZGNzQzNEZEQjc3N0NFNjhBMDk0OTc5NzgxNDY0RUM1OUZGOEE5QS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9EQTEwNEQ3Nzc3QjAyOUVEQTc4MkRBQTZBNkY3NDM0RkRCNzc3Q0U2OEEw OTQ5Nzk3ODE0NjRFQzU5RkY4QTlBLzAvQzI5NjdGRjMxMDlFMEFBN0VFNUVDMUM2 NDAzMDBENUEwMEZGNDFCMC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQudAMA0GCSqG SIb3DQEBCwUAA4IBAQBJJen86qqpgKd07LgbCmavunh6KRnQtBfjm7DFnWSy4yWB QHxSr9/JdxUpN1vGf/RIA97RH6+scaBVahVk5OSzkavhjgZq6WYdxeZ3hFv+HOwx kV5mw/P75JwfkW9kAtm42VC0aJf4tZNMJ0J5zk8iG5mGRPIzHt+jmUMfqid/HtxR VGDcQMM82J9FDQfDBeVdugREn/RfqXUR5FFY2vif7Cuhs/sw028KsiGaE9ous6RZ qhNdgQYgK3bayqWu8Kzk1zoJGZYoUkh/8gMFcZCds8IJ56+9neYf63b0MgTNk2hX lCclfBlJtBGazr3gc5gxxQYHFBUYDESqYKBTEmyh -----END CERTIFICATE-----Generated at Mon Mar 2 19:29:41 2026 by rpki-client