$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.cer File: CEFE34210764BCD42CB6C0FCD93828A016623EF1.cer (raw, json) Hash identifier: 7VrvtTW0M5HFY8MwAQequ3Dv2bSF/ESmgVlCL+y+jJA= Subject key identifier: CE:FE:34:21:07:64:BC:D4:2C:B6:C0:FC:D9:38:28:A0:16:62:3E:F1 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 12BFF3D5944AEC6F8C96FE607A59A5993D01CD6D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 16:11:23 +0000 Certificate not after: Wed 27 Jan 2027 16:16:23 +0000 Subordinate resources: AS: 14187 IP: 190.1.64.0/19 IP: 200.47.172.0/22 IP: 200.47.216.0/22 IP: 200.85.224.0/19 IP: 201.220.32.0/19 IP: 2800:1d0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:bf:f3:d5:94:4a:ec:6f:8c:96:fe:60:7a:59:a5:99:3d:01:cd:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 16:11:23 2026 GMT Not After : Jan 27 16:16:23 2027 GMT Subject: CN=CEFE34210764BCD42CB6C0FCD93828A016623EF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:01:37:c4:de:84:37:b8:57:c3:f6:c3:dd:29: 07:a7:96:3d:3b:15:b6:40:5d:53:60:3f:56:61:ae: 2c:53:c1:3f:05:fc:7e:38:36:42:e5:80:00:04:94: cc:de:3e:a4:a4:f0:36:9a:77:0c:b5:3d:65:ed:97: 62:65:e0:01:2d:b3:05:19:de:69:f0:2a:a7:2b:fe: d8:f3:29:d4:35:a6:57:7a:a7:1f:9e:a8:b7:51:ac: 57:6c:22:00:bb:25:13:3e:03:1e:68:83:4e:2c:9e: c9:1a:34:b7:2c:b7:0c:86:fd:32:6b:71:32:70:7a: de:98:80:dd:c9:8e:45:08:fa:2b:72:1e:58:c4:7c: 6a:50:e2:9e:84:f3:d6:9a:3e:59:94:fb:dd:10:4c: a3:15:2d:ec:8d:f7:a8:dc:c6:d0:a9:44:d4:a1:01: d6:1d:85:2b:5d:58:eb:68:01:b3:c7:be:a0:01:69: ce:e3:0a:dc:3e:43:65:9d:85:1c:10:f6:c3:1f:ff: 80:49:f3:f1:26:a6:41:33:28:8d:8b:13:e3:1c:52: 19:1f:66:b4:e4:f8:23:d7:77:dc:b0:21:f5:5f:2c: cf:85:df:8e:c1:62:16:57:9e:c4:5e:69:c4:58:69: 9b:9c:3d:49:fe:02:6f:40:ba:48:cc:99:b2:2d:40: b0:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CE:FE:34:21:07:64:BC:D4:2C:B6:C0:FC:D9:38:28:A0:16:62:3E:F1 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 190.1.64.0/19 200.47.172.0/22 200.47.216.0/22 200.85.224.0/19 201.220.32.0/19 IPv6: 2800:1d0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 14187 Signature Algorithm: sha256WithRSAEncryption 2f:9c:32:f1:16:2a:55:e2:4d:f3:d0:4e:94:1c:26:56:90:6e: 24:25:35:c9:1e:7d:9a:8a:64:47:f5:73:24:f2:98:8d:c1:68: f6:8e:2f:1f:89:d5:2e:e9:41:e9:7b:30:1c:e7:9c:4b:c4:76: 51:1b:13:2f:11:35:0d:07:6b:85:8b:08:38:53:fb:03:7a:d6: 4d:01:8a:ab:a8:a4:67:a4:49:2f:43:65:38:fc:d6:0a:e0:45: 31:97:22:fc:96:ff:cf:3c:b9:3b:6b:9b:c5:5a:51:d4:20:42: bf:ab:3b:78:86:c5:21:12:f0:8b:b8:35:5e:e3:fe:08:79:85: 21:1e:93:4e:16:83:bf:65:4c:61:57:03:30:ca:0b:4b:af:9d: 02:1c:98:86:82:d7:b3:99:94:91:52:c3:f0:27:ee:2c:f4:9a: c8:bd:57:8d:f7:8c:a5:21:f8:fd:e0:94:a3:3c:42:73:ad:cf: 66:dc:be:7a:60:2d:37:d4:3d:d5:26:cd:43:e7:b9:28:16:9c: 0c:7b:18:76:fb:f1:a4:a4:38:6a:0a:8f:e7:93:88:54:70:c3: fc:b0:92:11:be:a6:0c:88:9d:4b:e6:86:7a:1a:b1:50:06:3d: 88:67:46:04:e6:2c:29:7c:4e:19:7f:d9:58:fa:e8:75:86:58: 07:13:63:67 -----BEGIN CERTIFICATE----- MIIGvDCCBaSgAwIBAgIUEr/z1ZRK7G+Mlv5gelmlmT0BzW0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgxNjExMjNaFw0yNzAxMjcxNjE2MjNaMDMxMTAvBgNV BAMTKENFRkUzNDIxMDc2NEJDRDQyQ0I2QzBGQ0Q5MzgyOEEwMTY2MjNFRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyATfE3oQ3uFfD9sPdKQenlj07 FbZAXVNgP1ZhrixTwT8F/H44NkLlgAAElMzePqSk8Daadwy1PWXtl2Jl4AEtswUZ 3mnwKqcr/tjzKdQ1pld6px+eqLdRrFdsIgC7JRM+Ax5og04snskaNLcstwyG/TJr cTJwet6YgN3JjkUI+ityHljEfGpQ4p6E89aaPlmU+90QTKMVLeyN96jcxtCpRNSh AdYdhStdWOtoAbPHvqABac7jCtw+Q2WdhRwQ9sMf/4BJ8/EmpkEzKI2LE+McUhkf ZrTk+CPXd9ywIfVfLM+F347BYhZXnsReacRYaZucPUn+Am9AukjMmbItQLDFAgMB AAGjggPGMIIDwjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTO/jQhB2S81Cy2 wPzZOCigFmI+8TAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQ0U4Nzg3NTc5NUQ1MDE1NUZFNzRDNDVF RUI1MTE2MDdCRDA1NDM1NjBCRkU5MTgxNDBGMjVFRTI1NDhCMzRFNS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9DRTg3ODc1Nzk1RDUwMTU1RkU3NEM0NUVFQjUxMTYwN0JEMDU0MzU2MEJG RTkxODE0MEYyNUVFMjU0OEIzNEU1LzAvQ0VGRTM0MjEwNzY0QkNENDJDQjZDMEZD RDkzODI4QTAxNjYyM0VGMS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQFvgFAAwQCyC+s AwQCyC/YAwQFyFXgAwQFydwgMA0EAgACMAcDBQAoAAHQMBkGCCsGAQUFBwEIAQH/ BAowCKAGMAQCAjdrMA0GCSqGSIb3DQEBCwUAA4IBAQAvnDLxFipV4k3z0E6UHCZW kG4kJTXJHn2aimRH9XMk8piNwWj2ji8fidUu6UHpezAc55xLxHZRGxMvETUNB2uF iwg4U/sDetZNAYqrqKRnpEkvQ2U4/NYK4EUxlyL8lv/PPLk7a5vFWlHUIEK/qzt4 hsUhEvCLuDVe4/4IeYUhHpNOFoO/ZUxhVwMwygtLr50CHJiGgtezmZSRUsPwJ+4s 9JrIvVeN94ylIfj94JSjPEJzrc9m3L56YC031D3VJs1D57koFpwMexh2+/GkpDhq Co/nk4hUcMP8sJIRvqYMiJ1L5oZ6GrFQBj2IZ0YE5iwpfE4Zf9lY+uh1hlgHE2Nn -----END CERTIFICATE-----Generated at Mon Mar 2 21:25:34 2026 by rpki-client