$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D636489E9694DE73AF7AED57962E848C6463F92F.cer File: D636489E9694DE73AF7AED57962E848C6463F92F.cer (raw, json) Hash identifier: 2P7w77kzOVVeyu8pgVeetyT9cmtFXTLiu65e4kxeqK4= Subject key identifier: D6:36:48:9E:96:94:DE:73:AF:7A:ED:57:96:2E:84:8C:64:63:F9:2F Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 47573FBD5B863E132FA703C7BC49EE752E383A6D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/B3BE3C4731C212A65BEA251671CDE1A3CA544C0FEC54D95877353C8835F5F299/0/D636489E9694DE73AF7AED57962E848C6463F92F.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/B3BE3C4731C212A65BEA251671CDE1A3CA544C0FEC54D95877353C8835F5F299/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 27 Jan 2026 17:50:44 +0000 Certificate not after: Tue 26 Jan 2027 17:55:44 +0000 Subordinate resources: AS: 61481 IP: 131.100.88.0/22 IP: 2803:1d80::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:57:3f:bd:5b:86:3e:13:2f:a7:03:c7:bc:49:ee:75:2e:38:3a:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 27 17:50:44 2026 GMT Not After : Jan 26 17:55:44 2027 GMT Subject: CN=D636489E9694DE73AF7AED57962E848C6463F92F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:1e:51:8c:1e:43:be:c9:ac:28:47:de:45:80: a8:bc:0b:1b:cd:45:6f:62:52:2e:34:92:51:68:71: 03:bf:aa:e8:a4:08:b8:c7:48:31:18:2b:c4:fe:fa: ff:da:b6:c2:59:a7:21:4a:0b:0c:ea:88:d8:f5:b2: 07:8e:05:84:81:4f:3b:a6:ef:e1:14:af:d1:d3:8f: 0b:db:6b:d5:4b:fc:f4:63:5e:a1:11:1a:23:90:41: f9:af:93:54:fe:a9:5a:18:81:f9:6f:36:94:c9:aa: 35:d0:fe:10:3a:ff:ac:bd:cf:cd:3f:cf:7b:11:6d: 19:01:10:63:ba:9b:51:6a:3e:64:93:f4:a2:c6:a5: 85:69:b7:51:a7:6f:33:aa:97:27:1c:03:a4:b8:1f: 64:7a:d9:24:84:9c:56:1b:7b:e1:ec:0a:5c:99:f5: 27:86:6f:bf:d1:14:e9:ce:2c:68:f8:96:ea:bc:19: 87:48:a9:fa:4d:92:ad:7f:4a:8b:3e:40:23:39:79: b0:13:2b:b4:17:8d:de:2d:2b:12:ce:e4:ab:90:5e: ce:bf:4c:b3:30:27:fc:c9:26:6e:c7:b7:9d:31:fd: ea:1f:f6:17:8b:d5:54:e8:a2:97:0e:35:bb:75:08: fa:96:d3:1a:df:04:39:ea:fc:ae:8c:02:54:df:ab: 7f:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D6:36:48:9E:96:94:DE:73:AF:7A:ED:57:96:2E:84:8C:64:63:F9:2F X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/B3BE3C4731C212A65BEA251671CDE1A3CA544C0FEC54D95877353C8835F5F299/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/B3BE3C4731C212A65BEA251671CDE1A3CA544C0FEC54D95877353C8835F5F299/0/D636489E9694DE73AF7AED57962E848C6463F92F.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.100.88.0/22 IPv6: 2803:1d80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 61481 Signature Algorithm: sha256WithRSAEncryption 6a:f9:10:60:18:fa:22:45:a5:a2:00:67:4d:e7:63:b6:59:b4: 96:45:62:18:5d:26:b8:af:e8:e5:7e:ac:b0:64:29:f2:31:12: 5f:38:c8:e1:c8:b3:0a:86:81:89:ba:91:44:98:03:09:e7:f2: 2c:b7:a7:66:0c:63:22:7c:e3:f7:28:c5:14:7d:5f:d1:a8:45: 4d:e3:78:21:0f:51:d8:18:f1:5c:13:a1:08:01:52:ec:71:50: da:dd:17:85:f3:e5:6b:f1:b1:e4:8d:54:a3:29:6b:e7:23:88: 17:a6:04:02:db:29:94:0d:79:c4:ca:b7:ae:43:25:1f:22:cd: 73:59:7a:fa:8a:df:bf:6e:0c:a2:3e:78:6f:59:76:37:c6:41: e7:5f:5f:31:54:fb:e7:b8:fb:4c:7a:c4:42:73:69:d2:bb:cb: 8e:49:07:7d:dd:d3:a8:0d:cd:d4:e9:e6:c2:22:ad:8c:98:18: d0:c0:d9:bc:11:97:62:2f:60:f8:ef:4d:13:e7:3a:9f:d4:77: 37:4d:f1:35:a8:9f:d1:3f:b6:29:33:1e:20:b0:f9:db:ed:35: bb:9c:01:64:4b:f7:66:c4:89:a5:04:75:1a:96:5a:d2:2a:64: 68:3f:25:92:e3:6b:ec:da:71:c7:a9:aa:c1:ee:0a:33:2e:c4: 2a:92:63:bc -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUR1c/vVuGPhMvpwPHvEnudS44Om0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjcxNzUwNDRaFw0yNzAxMjYxNzU1NDRaMDMxMTAvBgNV BAMTKEQ2MzY0ODlFOTY5NERFNzNBRjdBRUQ1Nzk2MkU4NDhDNjQ2M0Y5MkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiHlGMHkO+yawoR95FgKi8CxvN RW9iUi40klFocQO/quikCLjHSDEYK8T++v/atsJZpyFKCwzqiNj1sgeOBYSBTzum 7+EUr9HTjwvba9VL/PRjXqERGiOQQfmvk1T+qVoYgflvNpTJqjXQ/hA6/6y9z80/ z3sRbRkBEGO6m1FqPmST9KLGpYVpt1GnbzOqlyccA6S4H2R62SSEnFYbe+HsClyZ 9SeGb7/RFOnOLGj4luq8GYdIqfpNkq1/Sos+QCM5ebATK7QXjd4tKxLO5KuQXs6/ TLMwJ/zJJm7Ht50x/eof9heL1VToopcONbt1CPqW0xrfBDnq/K6MAlTfq3/xAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTWNkielpTec696 7VeWLoSMZGP5LzAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQjNCRTNDNDczMUMyMTJBNjVCRUEyNTE2 NzFDREUxQTNDQTU0NEMwRkVDNTREOTU4NzczNTNDODgzNUY1RjI5OS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9CM0JFM0M0NzMxQzIxMkE2NUJFQTI1MTY3MUNERTFBM0NBNTQ0QzBGRUM1 NEQ5NTg3NzM1M0M4ODM1RjVGMjk5LzAvRDYzNjQ4OUU5Njk0REU3M0FGN0FFRDU3 OTYyRTg0OEM2NDYzRjkyRi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCg2RYMA0EAgAC MAcDBQAoAx2AMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDwKTANBgkqhkiG9w0B AQsFAAOCAQEAavkQYBj6IkWlogBnTedjtlm0lkViGF0muK/o5X6ssGQp8jESXzjI 4cizCoaBibqRRJgDCefyLLenZgxjInzj9yjFFH1f0ahFTeN4IQ9R2BjxXBOhCAFS 7HFQ2t0XhfPla/Gx5I1Uoylr5yOIF6YEAtsplA15xMq3rkMlHyLNc1l6+orfv24M oj54b1l2N8ZB519fMVT757j7THrEQnNp0rvLjkkHfd3TqA3N1OnmwiKtjJgY0MDZ vBGXYi9g+O9NE+c6n9R3N03xNaif0T+2KTMeILD52+01u5wBZEv3ZsSJpQR1GpZa 0ipkaD8lkuNr7Npxx6mqwe4KMy7EKpJjvA== -----END CERTIFICATE-----Generated at Mon Mar 2 15:37:43 2026 by rpki-client