$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C80C94C3F5A161401A8EA61F1FA92C95BE2B04B7.cer File: C80C94C3F5A161401A8EA61F1FA92C95BE2B04B7.cer (raw, json) Hash identifier: 2d7EaGolCRh7tmfttHcLwWvJQAzzEN6ddzc5/ailFVQ= Subject key identifier: C8:0C:94:C3:F5:A1:61:40:1A:8E:A6:1F:1F:A9:2C:95:BE:2B:04:B7 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 28E1E69FE9FA97177ED98D2328AF11678BE35A41 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/322B47F9A75A9A97A2B7C6BE0D763E02059272A6BCB223A76BCCD34A3506FF5D/0/C80C94C3F5A161401A8EA61F1FA92C95BE2B04B7.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/322B47F9A75A9A97A2B7C6BE0D763E02059272A6BCB223A76BCCD34A3506FF5D/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 19:24:15 +0000 Certificate not after: Wed 27 Jan 2027 19:29:15 +0000 Subordinate resources: IP: 168.121.36.0/22 IP: 2803:e540::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:e1:e6:9f:e9:fa:97:17:7e:d9:8d:23:28:af:11:67:8b:e3:5a:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 19:24:15 2026 GMT Not After : Jan 27 19:29:15 2027 GMT Subject: CN=C80C94C3F5A161401A8EA61F1FA92C95BE2B04B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:67:96:e8:cd:cc:81:43:3b:eb:3c:93:ef:a2: f0:0a:3e:98:a2:8a:3f:59:37:57:96:71:84:b2:7f: f5:42:10:b7:48:21:d9:6b:56:72:42:bb:10:c7:dd: 00:08:b7:43:21:c7:57:88:6e:d8:3f:b4:50:55:6f: 70:22:ff:cb:06:19:08:7b:38:8d:f7:d4:58:f2:0e: 98:04:54:fe:8b:a8:87:ec:57:9c:c6:97:66:66:86: 5f:ff:2c:54:50:06:8d:68:f9:f9:76:77:39:20:5f: 6c:02:35:94:2a:1d:3d:02:ee:a9:b5:52:2d:98:17: 68:ca:4a:9e:e1:96:4e:3d:46:16:60:b6:fe:c0:7b: 86:00:e8:27:1c:80:15:e2:f0:75:f0:84:20:8a:da: ed:92:8e:51:68:f3:02:60:5b:db:03:1e:eb:6f:81: b5:5c:20:04:49:1d:ce:66:6b:c7:29:cd:cb:2f:64: 6e:ec:4c:18:82:88:d0:76:c0:91:5e:b3:75:68:65: a8:42:9d:d7:9c:4b:30:15:aa:0c:84:47:36:ec:f7: c9:ea:bb:b2:ed:f6:6d:34:ac:78:7e:54:7f:98:b3: 51:b2:27:b2:a8:ab:9c:4e:31:c1:e4:ba:79:e2:c0: 0b:0e:b5:97:00:9a:a5:ae:4a:18:eb:43:c0:7f:40: 00:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C8:0C:94:C3:F5:A1:61:40:1A:8E:A6:1F:1F:A9:2C:95:BE:2B:04:B7 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/322B47F9A75A9A97A2B7C6BE0D763E02059272A6BCB223A76BCCD34A3506FF5D/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/322B47F9A75A9A97A2B7C6BE0D763E02059272A6BCB223A76BCCD34A3506FF5D/0/C80C94C3F5A161401A8EA61F1FA92C95BE2B04B7.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.121.36.0/22 IPv6: 2803:e540::/32 Signature Algorithm: sha256WithRSAEncryption 33:e1:b5:43:77:4f:d0:b7:cd:ee:b4:5c:f4:29:aa:9f:8d:b7: e3:5e:88:1b:72:23:4f:43:0f:9e:20:7b:fa:25:88:40:7e:41: 48:e1:1f:de:78:42:4e:27:6a:28:56:0c:3c:e0:a5:f7:bb:65: ba:0f:c0:5c:10:23:0b:47:26:a1:2a:f9:c6:71:34:98:c3:a2: 82:bc:d4:71:19:58:f5:c4:c0:a4:fa:a9:0b:c4:b1:4f:50:9c: 4d:49:26:df:82:5b:91:a7:e2:dc:8e:be:c5:91:6a:c3:0b:59: d7:1b:1d:97:06:46:ee:6e:cf:97:fd:9c:43:1e:be:b3:65:cb: 19:50:a8:86:27:be:3c:83:35:4a:ba:38:ce:53:42:ea:5c:5e: 9e:f0:a2:96:a7:38:91:c5:4c:b2:0d:bf:b7:cf:bf:82:82:20: 2c:7f:56:66:e4:72:4f:26:3a:33:dd:84:45:3f:8e:96:61:d7: ce:aa:11:fd:84:28:d0:c9:b1:30:ff:be:f4:4a:53:59:52:f1: e4:03:dd:ab:bd:f0:5b:97:fc:73:59:6a:ff:a8:fb:aa:3f:7e: fa:d5:4b:59:cd:f7:f3:21:f8:0f:2e:7e:b2:01:1c:79:84:c1: a6:7a:c5:d1:87:06:a3:ac:29:06:d9:63:50:1e:03:0c:7c:4c: 03:93:bc:71 -----BEGIN CERTIFICATE----- MIIGiTCCBXGgAwIBAgIUKOHmn+n6lxd+2Y0jKK8RZ4vjWkEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgxOTI0MTVaFw0yNzAxMjcxOTI5MTVaMDMxMTAvBgNV BAMTKEM4MEM5NEMzRjVBMTYxNDAxQThFQTYxRjFGQTkyQzk1QkUyQjA0QjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoZ5bozcyBQzvrPJPvovAKPpii ij9ZN1eWcYSyf/VCELdIIdlrVnJCuxDH3QAIt0Mhx1eIbtg/tFBVb3Ai/8sGGQh7 OI331FjyDpgEVP6LqIfsV5zGl2Zmhl//LFRQBo1o+fl2dzkgX2wCNZQqHT0C7qm1 Ui2YF2jKSp7hlk49RhZgtv7Ae4YA6CccgBXi8HXwhCCK2u2SjlFo8wJgW9sDHutv gbVcIARJHc5ma8cpzcsvZG7sTBiCiNB2wJFes3VoZahCndecSzAVqgyERzbs98nq u7Lt9m00rHh+VH+Ys1GyJ7Koq5xOMcHkunniwAsOtZcAmqWuShjrQ8B/QACHAgMB AAGjggOTMIIDjzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTIDJTD9aFhQBqO ph8fqSyVvisEtzAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMzIyQjQ3RjlBNzVBOUE5N0EyQjdDNkJF MEQ3NjNFMDIwNTkyNzJBNkJDQjIyM0E3NkJDQ0QzNEEzNTA2RkY1RC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8zMjJCNDdGOUE3NUE5QTk3QTJCN0M2QkUwRDc2M0UwMjA1OTI3MkE2QkNC MjIzQTc2QkNDRDM0QTM1MDZGRjVELzAvQzgwQzk0QzNGNUExNjE0MDFBOEVBNjFG MUZBOTJDOTVCRTJCMDRCNy5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCqHkkMA0EAgAC MAcDBQAoA+VAMA0GCSqGSIb3DQEBCwUAA4IBAQAz4bVDd0/Qt83utFz0Kaqfjbfj XogbciNPQw+eIHv6JYhAfkFI4R/eeEJOJ2ooVgw84KX3u2W6D8BcECMLRyahKvnG cTSYw6KCvNRxGVj1xMCk+qkLxLFPUJxNSSbfgluRp+Lcjr7FkWrDC1nXGx2XBkbu bs+X/ZxDHr6zZcsZUKiGJ748gzVKujjOU0LqXF6e8KKWpziRxUyyDb+3z7+CgiAs f1Zm5HJPJjoz3YRFP46WYdfOqhH9hCjQybEw/770SlNZUvHkA92rvfBbl/xzWWr/ qPuqP3761UtZzffzIfgPLn6yARx5hMGmesXRhwajrCkG2WNQHgMMfEwDk7xx -----END CERTIFICATE-----Generated at Mon Mar 2 14:29:49 2026 by rpki-client