$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C74171B033E063E7EA4A449BA4F4401ED0F4FFBF.cer File: C74171B033E063E7EA4A449BA4F4401ED0F4FFBF.cer (raw, json) Hash identifier: 6Xqnf5zLkSiX85+dA8N7ozsTLn4y/SAxwPbLaPybZdk= Subject key identifier: C7:41:71:B0:33:E0:63:E7:EA:4A:44:9B:A4:F4:40:1E:D0:F4:FF:BF Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 1E5795D74944352C95D143083D9536A94BBD239A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/8F24110CFB8EE0818D70EE66E175D28A6A71C2778464BC67C97214214BC0F41A/0/C74171B033E063E7EA4A449BA4F4401ED0F4FFBF.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/8F24110CFB8EE0818D70EE66E175D28A6A71C2778464BC67C97214214BC0F41A/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 27 Jan 2026 22:16:06 +0000 Certificate not after: Tue 26 Jan 2027 22:21:06 +0000 Subordinate resources: AS: 262212 IP: 190.96.104.0/21 IP: 192.188.57.0/24 IP: 2801:0:270::/48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 05 Mar 2026 11:41:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:57:95:d7:49:44:35:2c:95:d1:43:08:3d:95:36:a9:4b:bd:23:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 27 22:16:06 2026 GMT Not After : Jan 26 22:21:06 2027 GMT Subject: CN=C74171B033E063E7EA4A449BA4F4401ED0F4FFBF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:2d:30:79:b7:62:eb:c1:2f:2c:b9:08:97:4b: bf:07:da:89:4e:15:9e:e3:ed:59:54:3b:8c:88:f9: 01:9a:d5:15:12:d6:2e:17:18:ce:04:53:7c:99:3b: 46:b0:5a:ba:96:6c:5b:ab:59:53:6d:bf:74:48:28: 23:da:d7:21:ca:70:3d:9a:96:79:e7:ae:de:db:c4: 9d:be:b9:06:86:13:41:16:ba:44:1b:97:45:fe:90: c8:d0:a9:28:b2:1b:d8:94:7d:3e:ad:37:5a:82:30: fd:50:2e:d3:40:f7:3a:4d:7a:c0:ef:c4:97:78:7c: b3:c1:23:bf:8d:b4:f0:de:de:ad:98:f5:f2:3b:e5: 2d:4c:08:18:28:90:d2:e7:68:d7:8d:2b:26:bc:73: 73:67:e1:ec:99:ba:d9:e9:c8:ff:84:16:e6:4c:51: 68:e2:2b:2c:fd:92:90:85:38:cf:80:5c:bf:ab:27: 09:6f:d1:28:0d:b1:90:81:94:9e:4f:71:76:c9:da: 4f:11:c0:f1:3c:32:0d:fc:9c:e1:e5:8f:ad:ff:0f: 39:03:f1:64:02:f8:a1:f0:8c:5a:e1:e1:03:de:2b: c7:e9:de:d5:51:dc:99:85:f7:8a:11:23:05:85:d4: ac:bc:9b:5d:10:4d:90:81:79:57:4b:31:6f:b0:06: ef:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C7:41:71:B0:33:E0:63:E7:EA:4A:44:9B:A4:F4:40:1E:D0:F4:FF:BF X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/8F24110CFB8EE0818D70EE66E175D28A6A71C2778464BC67C97214214BC0F41A/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/8F24110CFB8EE0818D70EE66E175D28A6A71C2778464BC67C97214214BC0F41A/0/C74171B033E063E7EA4A449BA4F4401ED0F4FFBF.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 190.96.104.0/21 192.188.57.0/24 IPv6: 2801:0:270::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 262212 Signature Algorithm: sha256WithRSAEncryption 23:1c:92:28:47:e0:14:54:88:63:03:e0:71:bd:90:5d:10:d8: 3d:b3:e4:cf:0c:ae:22:68:91:49:e6:b6:57:1f:aa:48:18:8e: d1:4b:75:64:26:4b:fa:7d:6c:4c:51:ce:f5:2e:8f:57:32:d2: 0f:c9:2b:89:ff:3a:7b:36:3f:d9:13:04:62:6a:d1:e5:60:b9: 28:96:be:fd:97:41:64:ef:d8:85:40:0e:40:ea:c0:db:ec:5a: 6f:ec:73:b5:f4:ec:d9:ba:0f:46:cf:8b:52:cc:e6:63:a8:f9: b2:12:26:43:ae:82:37:9c:4b:d9:77:b1:74:b8:98:60:2e:3c: af:09:99:3e:ac:8f:95:15:b8:ff:e8:fc:8c:8d:21:36:c7:e8: 4d:36:9e:01:7b:fb:ac:ff:fc:59:f8:2e:95:77:ca:99:65:b5: e7:79:97:de:8e:7a:9c:30:e0:8d:71:9b:29:e8:40:72:0c:a1: d6:a7:4e:3a:d0:cc:25:28:cb:46:7b:07:1a:1f:83:ed:d1:10: 53:81:c4:70:e6:2a:59:c7:08:33:ee:6d:03:97:24:01:cb:85: b3:c7:53:be:a2:05:48:4e:8d:53:53:0f:d0:b6:8c:91:db:63: aa:87:a8:04:89:96:bf:79:bc:88:b1:3f:5c:7a:28:d6:d4:4f: ca:c5:1d:a8 -----BEGIN CERTIFICATE----- MIIGrTCCBZWgAwIBAgIUHleV10lENSyV0UMIPZU2qUu9I5owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjcyMjE2MDZaFw0yNzAxMjYyMjIxMDZaMDMxMTAvBgNV BAMTKEM3NDE3MUIwMzNFMDYzRTdFQTRBNDQ5QkE0RjQ0MDFFRDBGNEZGQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDILTB5t2LrwS8suQiXS78H2olO FZ7j7VlUO4yI+QGa1RUS1i4XGM4EU3yZO0awWrqWbFurWVNtv3RIKCPa1yHKcD2a lnnnrt7bxJ2+uQaGE0EWukQbl0X+kMjQqSiyG9iUfT6tN1qCMP1QLtNA9zpNesDv xJd4fLPBI7+NtPDe3q2Y9fI75S1MCBgokNLnaNeNKya8c3Nn4eyZutnpyP+EFuZM UWjiKyz9kpCFOM+AXL+rJwlv0SgNsZCBlJ5PcXbJ2k8RwPE8Mg38nOHlj63/DzkD 8WQC+KHwjFrh4QPeK8fp3tVR3JmF94oRIwWF1Ky8m10QTZCBeVdLMW+wBu/RAgMB AAGjggO3MIIDszAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTHQXGwM+Bj5+pK RJuk9EAe0PT/vzAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvOEYyNDExMENGQjhFRTA4MThENzBFRTY2 RTE3NUQyOEE2QTcxQzI3Nzg0NjRCQzY3Qzk3MjE0MjE0QkMwRjQxQS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy84RjI0MTEwQ0ZCOEVFMDgxOEQ3MEVFNjZFMTc1RDI4QTZBNzFDMjc3ODQ2 NEJDNjdDOTcyMTQyMTRCQzBGNDFBLzAvQzc0MTcxQjAzM0UwNjNFN0VBNEE0NDlC QTRGNDQwMUVEMEY0RkZCRi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQDvmBoAwQAwLw5 MA8EAgACMAkDBwAoAQAAAnAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBABEMA0G CSqGSIb3DQEBCwUAA4IBAQAjHJIoR+AUVIhjA+BxvZBdENg9s+TPDK4iaJFJ5rZX H6pIGI7RS3VkJkv6fWxMUc71Lo9XMtIPySuJ/zp7Nj/ZEwRiatHlYLkolr79l0Fk 79iFQA5A6sDb7Fpv7HO19OzZug9Gz4tSzOZjqPmyEiZDroI3nEvZd7F0uJhgLjyv CZk+rI+VFbj/6PyMjSE2x+hNNp4Be/us//xZ+C6Vd8qZZbXneZfejnqcMOCNcZsp 6EByDKHWp0460MwlKMtGewcaH4Pt0RBTgcRw5ipZxwgz7m0DlyQBy4Wzx1O+ogVI To1TUw/QtoyR22Oqh6gEiZa/ebyIsT9ceijW1E/KxR2o -----END CERTIFICATE-----Generated at Mon Mar 2 11:24:33 2026 by rpki-client