$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C9B896C87111F7C54CBCB5E23DFD630DE627F566.cer File: C9B896C87111F7C54CBCB5E23DFD630DE627F566.cer (raw, json) Hash identifier: 2e85stSUgqb+R+RsWBvCXb1n7wubYTK3BUCt2qCnQzI= Subject key identifier: C9:B8:96:C8:71:11:F7:C5:4C:BC:B5:E2:3D:FD:63:0D:E6:27:F5:66 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 5C639FF8EF6410156AEA889958FA4B82817E412C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/E59B3D76B8ECE589E0C179E462B7024203BB6DD0CBFCA701FFD462184038F7F7/0/C9B896C87111F7C54CBCB5E23DFD630DE627F566.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/E59B3D76B8ECE589E0C179E462B7024203BB6DD0CBFCA701FFD462184038F7F7/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 27 Jan 2026 18:35:46 +0000 Certificate not after: Tue 26 Jan 2027 18:40:46 +0000 Subordinate resources: AS: 265713 IP: 170.246.20.0/22 IP: 170.254.92.0/22 IP: 2803:f740::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:63:9f:f8:ef:64:10:15:6a:ea:88:99:58:fa:4b:82:81:7e:41:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 27 18:35:46 2026 GMT Not After : Jan 26 18:40:46 2027 GMT Subject: CN=C9B896C87111F7C54CBCB5E23DFD630DE627F566 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d9:74:c9:25:43:7b:d3:27:6e:31:9d:29:a5: 00:e3:56:c1:18:37:59:99:44:11:34:d9:b4:90:3b: de:7a:15:cc:ed:3a:83:f5:e2:17:3b:07:f1:0a:d6: 2a:ae:8a:fe:9f:55:c4:61:87:29:8a:c0:0f:64:9b: 31:b4:8c:38:e4:81:d5:d1:ef:12:27:d2:20:0a:83: e8:e6:98:28:bd:d3:66:2d:c8:88:92:e1:b6:89:f9: 3e:a4:46:67:9d:11:9c:37:41:cd:60:cf:8b:13:58: 19:a8:6f:09:ec:c5:b9:7b:07:a0:f9:ce:0a:ea:5d: a1:de:c6:4a:36:de:e2:38:5c:c3:28:39:63:af:20: 0f:51:cf:c2:e7:63:5d:d1:ea:b6:d5:11:c9:c6:6f: e8:3c:0d:c8:2a:42:7a:bd:21:14:3e:77:56:80:16: b2:57:9f:6e:29:13:e1:fd:ed:93:47:69:48:06:45: f2:00:a3:6c:9e:05:5a:b2:f6:25:93:07:20:ce:91: 8f:a5:8d:5d:ab:5c:1f:2f:2d:c7:89:48:db:e1:f8: 69:95:13:39:76:02:b4:b1:06:1c:67:e4:57:1d:bd: 75:31:09:01:fa:a4:9b:66:4c:e5:24:0f:fc:79:10: c9:ba:21:1d:ab:80:cb:c0:d0:1d:f8:29:7d:d3:c4: cf:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C9:B8:96:C8:71:11:F7:C5:4C:BC:B5:E2:3D:FD:63:0D:E6:27:F5:66 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/E59B3D76B8ECE589E0C179E462B7024203BB6DD0CBFCA701FFD462184038F7F7/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/E59B3D76B8ECE589E0C179E462B7024203BB6DD0CBFCA701FFD462184038F7F7/0/C9B896C87111F7C54CBCB5E23DFD630DE627F566.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.246.20.0/22 170.254.92.0/22 IPv6: 2803:f740::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265713 Signature Algorithm: sha256WithRSAEncryption 7b:85:ac:b8:18:5a:3a:34:af:30:e0:23:99:9a:d2:b7:f7:d6: 08:72:d7:5a:13:b1:37:91:cf:69:da:47:de:2b:2c:08:85:3e: 01:bf:5a:62:7b:eb:40:a5:40:91:63:d7:a1:dd:04:06:6d:75: 27:dc:28:e0:61:61:ba:27:23:85:e6:bc:e3:c7:2d:4c:a5:f4: 74:13:92:d6:23:1f:61:02:ce:6c:77:29:6e:01:96:5e:54:68: 89:85:71:d1:2b:a5:56:2c:d6:81:47:6b:c2:6f:c3:54:f8:e7: 61:e5:00:e6:9a:e7:41:07:43:ac:15:0e:40:47:c0:28:35:0b: 67:4b:d9:99:b6:6f:8d:78:a6:66:ec:ee:96:3f:57:04:d2:79: 43:31:26:00:35:b6:4f:80:24:a8:45:eb:b6:d7:8f:92:ef:6b: fa:cb:8c:c2:2c:16:f9:e6:02:5f:3f:cb:6b:f7:e6:02:bb:bf: bb:c0:e0:3c:67:26:04:80:a2:b2:66:ed:71:ea:9a:41:ab:83: dd:2f:86:60:5b:18:94:ca:8d:f3:d4:23:18:42:92:ff:71:a4: 34:ac:ef:b6:74:9f:3c:1a:21:dd:e9:ec:03:77:49:80:64:88: 57:a5:83:b0:52:0d:27:37:a0:e9:aa:78:5d:a4:5e:55:e1:e9: 9b:c2:24:df -----BEGIN CERTIFICATE----- MIIGqzCCBZOgAwIBAgIUXGOf+O9kEBVq6oiZWPpLgoF+QSwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjcxODM1NDZaFw0yNzAxMjYxODQwNDZaMDMxMTAvBgNV BAMTKEM5Qjg5NkM4NzExMUY3QzU0Q0JDQjVFMjNERkQ2MzBERTYyN0Y1NjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ2XTJJUN70yduMZ0ppQDjVsEY N1mZRBE02bSQO956FcztOoP14hc7B/EK1iquiv6fVcRhhymKwA9kmzG0jDjkgdXR 7xIn0iAKg+jmmCi902YtyIiS4baJ+T6kRmedEZw3Qc1gz4sTWBmobwnsxbl7B6D5 zgrqXaHexko23uI4XMMoOWOvIA9Rz8LnY13R6rbVEcnGb+g8DcgqQnq9IRQ+d1aA FrJXn24pE+H97ZNHaUgGRfIAo2yeBVqy9iWTByDOkY+ljV2rXB8vLceJSNvh+GmV Ezl2ArSxBhxn5FcdvXUxCQH6pJtmTOUkD/x5EMm6IR2rgMvA0B34KX3TxM97AgMB AAGjggO1MIIDsTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTJuJbIcRH3xUy8 teI9/WMN5if1ZjAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTU5QjNENzZCOEVDRTU4OUUwQzE3OUU0 NjJCNzAyNDIwM0JCNkREMENCRkNBNzAxRkZENDYyMTg0MDM4RjdGNy8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9FNTlCM0Q3NkI4RUNFNTg5RTBDMTc5RTQ2MkI3MDI0MjAzQkI2REQwQ0JG Q0E3MDFGRkQ0NjIxODQwMzhGN0Y3LzAvQzlCODk2Qzg3MTExRjdDNTRDQkNCNUUy M0RGRDYzMERFNjI3RjU2Ni5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCqvYUAwQCqv5c MA0EAgACMAcDBQAoA/dAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQN8TANBgkq hkiG9w0BAQsFAAOCAQEAe4WsuBhaOjSvMOAjmZrSt/fWCHLXWhOxN5HPadpH3iss CIU+Ab9aYnvrQKVAkWPXod0EBm11J9wo4GFhuicjhea848ctTKX0dBOS1iMfYQLO bHcpbgGWXlRoiYVx0SulVizWgUdrwm/DVPjnYeUA5prnQQdDrBUOQEfAKDULZ0vZ mbZvjXimZuzulj9XBNJ5QzEmADW2T4AkqEXrttePku9r+suMwiwW+eYCXz/La/fm Aru/u8DgPGcmBICismbtceqaQauD3S+GYFsYlMqN89QjGEKS/3GkNKzvtnSfPBoh 3ensA3dJgGSIV6WDsFINJzeg6ap4XaReVeHpm8Ik3w== -----END CERTIFICATE-----Generated at Mon Mar 2 14:12:49 2026 by rpki-client