$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CE9B6041658E7187B06A984F435470A36286EB73.cer File: CE9B6041658E7187B06A984F435470A36286EB73.cer (raw, json) Hash identifier: uIubpeBzbC+TlunLFZV1Ii3DqlEB870BDVKYgqfU+ic= Subject key identifier: CE:9B:60:41:65:8E:71:87:B0:6A:98:4F:43:54:70:A3:62:86:EB:73 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 02E35C86945A93E1329105C83F09E39B15889F1E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/8DC20F63D08ABDD92FBEF39DCB3D5C0DB29ABED46603EBDE93F27842AF97FD22/0/CE9B6041658E7187B06A984F435470A36286EB73.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/8DC20F63D08ABDD92FBEF39DCB3D5C0DB29ABED46603EBDE93F27842AF97FD22/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 22:55:36 +0000 Certificate not after: Wed 27 Jan 2027 23:00:36 +0000 Subordinate resources: AS: 265515 IP: 170.78.188.0/22 IP: 2806:283::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:e3:5c:86:94:5a:93:e1:32:91:05:c8:3f:09:e3:9b:15:88:9f:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 22:55:36 2026 GMT Not After : Jan 27 23:00:36 2027 GMT Subject: CN=CE9B6041658E7187B06A984F435470A36286EB73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c6:98:a1:75:ee:13:1b:00:ad:c5:bf:89:28: 6e:98:b5:83:fe:f8:97:bc:2e:1f:0b:e9:eb:f1:63: 5a:d6:1b:49:1d:fc:2f:43:99:d0:66:a0:bb:e7:15: 25:68:fd:d4:21:ce:68:27:19:d5:d9:8f:eb:bd:70: 48:4a:31:ad:a4:2d:fc:97:de:c6:af:d3:e7:f2:d9: 6b:0f:12:e8:ed:2a:9a:ce:52:c4:c4:ce:74:0b:51: 4d:5d:d1:5f:eb:27:e7:5b:11:48:d1:45:a0:9c:76: 00:44:15:a2:91:41:75:03:02:5a:79:2e:48:93:6a: 31:94:5e:28:da:eb:4b:f3:ea:33:4a:9d:0f:69:cd: cc:81:4f:2c:85:5a:00:cd:10:34:74:00:14:b0:13: 0f:b0:41:1a:96:c4:53:80:07:c6:1c:f2:56:80:66: 0c:43:89:f3:4a:64:1d:eb:64:e6:02:b4:54:97:a6: 37:62:76:18:8a:6c:df:a1:b6:ca:e1:28:88:10:03: a0:f1:39:e4:61:9a:ca:40:c5:2d:fc:a5:e4:8d:33: f5:0f:1e:1a:66:3d:75:9c:dc:99:ba:97:22:d9:3e: 0b:20:c3:40:50:ab:26:63:74:6f:7e:7c:5b:0e:48: a6:ea:b4:25:93:a5:01:bf:23:f7:b6:b9:c2:d6:a2: de:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CE:9B:60:41:65:8E:71:87:B0:6A:98:4F:43:54:70:A3:62:86:EB:73 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/8DC20F63D08ABDD92FBEF39DCB3D5C0DB29ABED46603EBDE93F27842AF97FD22/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/8DC20F63D08ABDD92FBEF39DCB3D5C0DB29ABED46603EBDE93F27842AF97FD22/0/CE9B6041658E7187B06A984F435470A36286EB73.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.78.188.0/22 IPv6: 2806:283::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265515 Signature Algorithm: sha256WithRSAEncryption 6e:a4:23:47:bd:0d:6e:c9:59:60:c6:93:12:32:a0:b9:8a:c6: 43:2b:c0:90:8a:58:db:e1:a9:c4:84:fe:65:b6:b2:ce:40:b9: 5b:af:b3:e8:33:d1:7e:30:73:bb:bb:e3:1c:6e:b2:dc:c8:20: 56:1f:38:89:72:f6:77:78:fa:49:1d:f1:31:55:e9:5b:62:c6: 50:39:db:43:cf:78:05:2a:69:37:f9:fa:6d:13:fa:75:42:69: 51:d6:f9:07:11:06:f9:93:47:5b:f3:50:e1:d7:e4:51:11:e2: ea:98:15:f6:e6:0e:01:76:58:96:cc:19:0a:ea:77:19:48:18: 98:3c:05:49:62:ad:97:b2:89:d8:07:85:e5:04:e0:bf:99:ff: 6d:4d:09:cf:83:ec:0d:75:34:14:64:7d:f2:a5:5c:53:5e:6d: d9:cf:8f:01:59:3c:a3:d8:d1:d3:12:bf:bc:a1:fc:4b:7e:0d: ff:d6:01:ba:73:5d:fe:64:ad:5b:f9:2a:a1:a6:0a:5e:09:18: 53:a9:e5:b0:99:51:04:03:68:f7:a1:4b:87:38:a3:28:f4:b9: fc:70:33:af:de:70:5b:f0:f2:2f:f8:ab:4e:72:b7:c6:ae:51: 69:a5:9f:e2:47:fe:6a:5a:d1:fb:0d:b9:31:e4:38:50:29:23: 5b:c1:21:8c -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUAuNchpRak+EykQXIPwnjmxWInx4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgyMjU1MzZaFw0yNzAxMjcyMzAwMzZaMDMxMTAvBgNV BAMTKENFOUI2MDQxNjU4RTcxODdCMDZBOTg0RjQzNTQ3MEEzNjI4NkVCNzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnxpihde4TGwCtxb+JKG6YtYP+ +Je8Lh8L6evxY1rWG0kd/C9DmdBmoLvnFSVo/dQhzmgnGdXZj+u9cEhKMa2kLfyX 3sav0+fy2WsPEujtKprOUsTEznQLUU1d0V/rJ+dbEUjRRaCcdgBEFaKRQXUDAlp5 LkiTajGUXija60vz6jNKnQ9pzcyBTyyFWgDNEDR0ABSwEw+wQRqWxFOAB8Yc8laA ZgxDifNKZB3rZOYCtFSXpjdidhiKbN+htsrhKIgQA6DxOeRhmspAxS38peSNM/UP HhpmPXWc3Jm6lyLZPgsgw0BQqyZjdG9+fFsOSKbqtCWTpQG/I/e2ucLWot5rAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTOm2BBZY5xh7Bq mE9DVHCjYobrczAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvOERDMjBGNjNEMDhBQkREOTJGQkVGMzlE Q0IzRDVDMERCMjlBQkVENDY2MDNFQkRFOTNGMjc4NDJBRjk3RkQyMi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy84REMyMEY2M0QwOEFCREQ5MkZCRUYzOURDQjNENUMwREIyOUFCRUQ0NjYw M0VCREU5M0YyNzg0MkFGOTdGRDIyLzAvQ0U5QjYwNDE2NThFNzE4N0IwNkE5ODRG NDM1NDcwQTM2Mjg2RUI3My5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCqk68MA0EAgAC MAcDBQAoBgKDMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQNKzANBgkqhkiG9w0B AQsFAAOCAQEAbqQjR70NbslZYMaTEjKguYrGQyvAkIpY2+GpxIT+ZbayzkC5W6+z 6DPRfjBzu7vjHG6y3MggVh84iXL2d3j6SR3xMVXpW2LGUDnbQ894BSppN/n6bRP6 dUJpUdb5BxEG+ZNHW/NQ4dfkURHi6pgV9uYOAXZYlswZCup3GUgYmDwFSWKtl7KJ 2AeF5QTgv5n/bU0Jz4PsDXU0FGR98qVcU15t2c+PAVk8o9jR0xK/vKH8S34N/9YB unNd/mStW/kqoaYKXgkYU6nlsJlRBANo96FLhzijKPS5/HAzr95wW/DyL/irTnK3 xq5RaaWf4kf+alrR+w25MeQ4UCkjW8EhjA== -----END CERTIFICATE-----Generated at Mon Mar 2 17:17:40 2026 by rpki-client