$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5CE76D28752F832AE1AAB4AB6EB8C383BFB2134.cer File: C5CE76D28752F832AE1AAB4AB6EB8C383BFB2134.cer (raw, json) Hash identifier: 192oYxKxUrAopBWo7MwhHPowJOprU9MkNSKTGsYcHKU= Subject key identifier: C5:CE:76:D2:87:52:F8:32:AE:1A:AB:4A:B6:EB:8C:38:3B:FB:21:34 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 09798DAA0D5A251CF4FBCB0127C34B82A2A17B97 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/A47045AB6F67075398C3756E05481A9B16F1C7D24A101DF6C85E9EEAC185B1AA/0/C5CE76D28752F832AE1AAB4AB6EB8C383BFB2134.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/A47045AB6F67075398C3756E05481A9B16F1C7D24A101DF6C85E9EEAC185B1AA/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 27 Jan 2026 19:33:47 +0000 Certificate not after: Tue 26 Jan 2027 19:38:47 +0000 Subordinate resources: AS: 270033 IP: 177.200.236.0/23 IP: 2801:15:2800::/48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:79:8d:aa:0d:5a:25:1c:f4:fb:cb:01:27:c3:4b:82:a2:a1:7b:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 27 19:33:47 2026 GMT Not After : Jan 26 19:38:47 2027 GMT Subject: CN=C5CE76D28752F832AE1AAB4AB6EB8C383BFB2134 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:26:cf:e4:83:16:4c:d1:61:2b:6e:73:ef:ed: 36:76:35:63:f1:83:2d:62:89:99:bb:d4:02:07:da: 63:05:05:59:aa:20:99:b2:a4:10:4a:fd:f6:69:7a: e9:60:23:6e:16:e0:dc:9a:08:7a:51:e5:e1:18:c1: ab:37:e7:f7:c7:c7:2c:d6:a8:50:30:2c:1f:40:61: c7:fb:8c:d9:82:b9:3a:3f:2e:62:e0:78:62:83:34: 3c:ee:87:c1:40:36:8c:24:3f:2a:10:8b:bb:40:c3: 7a:a8:c0:5c:c0:65:29:b0:25:2f:47:36:eb:b6:eb: 07:c2:93:a1:7c:29:20:29:47:2c:28:11:03:c1:5b: 9e:94:e5:a3:7f:e5:74:e1:8b:a0:04:0b:ad:76:e4: 51:2e:3c:7d:14:ed:8f:6c:9a:88:86:33:d2:12:e1: dd:cd:dd:9d:b5:8b:55:4b:0d:3e:ac:12:24:13:d3: 35:85:54:c3:2f:61:d3:91:61:74:f9:19:5b:ea:10: d4:37:8b:f3:60:88:2d:ae:a4:87:51:37:bf:94:5a: c8:74:13:02:14:54:70:d6:ac:44:6e:19:0d:b2:dd: 7f:e2:7d:8d:40:f7:75:eb:3f:3d:2f:bf:d3:c2:0d: c7:96:dc:54:00:f8:e7:a3:62:a6:74:67:78:5c:8b: fd:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C5:CE:76:D2:87:52:F8:32:AE:1A:AB:4A:B6:EB:8C:38:3B:FB:21:34 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/A47045AB6F67075398C3756E05481A9B16F1C7D24A101DF6C85E9EEAC185B1AA/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/A47045AB6F67075398C3756E05481A9B16F1C7D24A101DF6C85E9EEAC185B1AA/0/C5CE76D28752F832AE1AAB4AB6EB8C383BFB2134.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.200.236.0/23 IPv6: 2801:15:2800::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 270033 Signature Algorithm: sha256WithRSAEncryption 52:00:bd:c8:83:1c:87:1b:27:fc:c1:99:c6:97:f8:f5:85:19: 48:31:b6:47:a7:bf:58:88:ce:6e:dc:4e:62:0f:90:d3:02:c2: 32:0d:f5:2b:c1:a6:5a:2f:c8:3b:70:b1:fe:1c:b0:a7:e1:d8: 57:83:6a:35:0f:85:20:ed:d3:60:30:76:6f:99:54:8b:93:76: 4d:f4:0a:fa:24:63:c9:13:2b:12:76:47:63:02:47:6b:31:77: e7:a1:85:9d:8c:5f:15:e2:b7:59:a1:75:b3:90:1f:bf:8c:c0: 51:7b:5b:50:b9:1a:9f:0c:c9:04:44:d3:5d:6c:0b:5b:3f:b4: fe:86:dc:ea:c7:b9:15:a1:73:e4:11:35:d8:5e:aa:24:e7:21: 96:4d:19:39:d6:c1:78:32:61:e7:23:cd:51:08:c4:4c:fa:9e: a6:49:3a:cc:f2:f8:86:18:54:50:e3:0f:90:d6:3c:c2:42:d8: 90:b8:bb:79:d1:ba:dc:18:23:fc:5c:e2:d4:bf:19:f5:d6:5a: f4:21:60:f8:7d:b3:4d:4f:5f:f1:03:31:4a:18:85:64:63:15: 0b:d0:93:02:0d:a8:c5:0f:ab:5e:e3:9d:f5:df:a1:4a:12:e6: b6:ac:37:32:b6:a0:76:8c:f5:87:ca:74:99:5f:36:c0:5d:c7: 7d:a2:de:71 -----BEGIN CERTIFICATE----- MIIGpzCCBY+gAwIBAgIUCXmNqg1aJRz0+8sBJ8NLgqKhe5cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjcxOTMzNDdaFw0yNzAxMjYxOTM4NDdaMDMxMTAvBgNV BAMTKEM1Q0U3NkQyODc1MkY4MzJBRTFBQUI0QUI2RUI4QzM4M0JGQjIxMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpJs/kgxZM0WErbnPv7TZ2NWPx gy1iiZm71AIH2mMFBVmqIJmypBBK/fZpeulgI24W4NyaCHpR5eEYwas35/fHxyzW qFAwLB9AYcf7jNmCuTo/LmLgeGKDNDzuh8FANowkPyoQi7tAw3qowFzAZSmwJS9H Nuu26wfCk6F8KSApRywoEQPBW56U5aN/5XThi6AEC6125FEuPH0U7Y9smoiGM9IS 4d3N3Z21i1VLDT6sEiQT0zWFVMMvYdORYXT5GVvqENQ3i/NgiC2upIdRN7+UWsh0 EwIUVHDWrERuGQ2y3X/ifY1A93XrPz0vv9PCDceW3FQA+OejYqZ0Z3hci/27AgMB AAGjggOxMIIDrTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTFznbSh1L4Mq4a q0q264w4O/shNDAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQTQ3MDQ1QUI2RjY3MDc1Mzk4QzM3NTZF MDU0ODFBOUIxNkYxQzdEMjRBMTAxREY2Qzg1RTlFRUFDMTg1QjFBQS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9BNDcwNDVBQjZGNjcwNzUzOThDMzc1NkUwNTQ4MUE5QjE2RjFDN0QyNEEx MDFERjZDODVFOUVFQUMxODVCMUFBLzAvQzVDRTc2RDI4NzUyRjgzMkFFMUFBQjRB QjZFQjhDMzgzQkZCMjEzNC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBscjsMA8EAgAC MAkDBwAoAQAVKAAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBB7RMA0GCSqGSIb3 DQEBCwUAA4IBAQBSAL3IgxyHGyf8wZnGl/j1hRlIMbZHp79YiM5u3E5iD5DTAsIy DfUrwaZaL8g7cLH+HLCn4dhXg2o1D4Ug7dNgMHZvmVSLk3ZN9Ar6JGPJEysSdkdj AkdrMXfnoYWdjF8V4rdZoXWzkB+/jMBRe1tQuRqfDMkERNNdbAtbP7T+htzqx7kV oXPkETXYXqok5yGWTRk51sF4MmHnI81RCMRM+p6mSTrM8viGGFRQ4w+Q1jzCQtiQ uLt50brcGCP8XOLUvxn11lr0IWD4fbNNT1/xAzFKGIVkYxUL0JMCDajFD6te4531 36FKEua2rDcytqB2jPWHynSZXzbAXcd9ot5x -----END CERTIFICATE-----Generated at Mon Mar 2 17:10:30 2026 by rpki-client