$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D73871448A193F4B351257D5A2A9AA22FCFECBB4.cer File: D73871448A193F4B351257D5A2A9AA22FCFECBB4.cer (raw, json) Hash identifier: b9hcSlN24QJVyO8qb7VyO/fp2Ape0Wd8wgMn35penWQ= Subject key identifier: D7:38:71:44:8A:19:3F:4B:35:12:57:D5:A2:A9:AA:22:FC:FE:CB:B4 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 59DE64D958868ADD81EC5CFBF3C3446701144D38 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/BDEA63C960B2FCA831D48432258A14C5EF2B4AD646EE9452D6357F4C7BBF0D54/0/D73871448A193F4B351257D5A2A9AA22FCFECBB4.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/BDEA63C960B2FCA831D48432258A14C5EF2B4AD646EE9452D6357F4C7BBF0D54/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 05:39:47 +0000 Certificate not after: Wed 27 Jan 2027 05:44:47 +0000 Subordinate resources: IP: 192.188.53.0/24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:de:64:d9:58:86:8a:dd:81:ec:5c:fb:f3:c3:44:67:01:14:4d:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 05:39:47 2026 GMT Not After : Jan 27 05:44:47 2027 GMT Subject: CN=D73871448A193F4B351257D5A2A9AA22FCFECBB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:db:92:78:d6:c9:10:8c:d6:22:7c:71:ab:aa: e6:ed:e5:60:cc:b2:2c:d8:a0:73:62:15:e4:30:59: dc:80:15:80:e5:51:bf:ff:bd:e8:8e:b2:12:a0:fa: 62:71:21:57:24:e8:7c:53:58:1e:62:19:ba:04:63: 75:cf:b3:5b:d7:62:5b:e3:94:87:c4:9e:65:da:49: 90:33:25:50:25:31:8b:d0:b1:df:e2:fd:52:16:c2: 42:77:47:96:6c:90:62:7c:1c:79:36:cc:56:43:77: 08:99:fd:be:ae:eb:3c:5b:4a:d5:76:36:3b:79:f2: c4:45:cc:18:36:46:79:90:08:fb:4e:ad:20:20:f8: 85:c2:83:df:6c:76:4f:74:23:95:1a:f9:85:50:73: ce:f1:44:ba:d0:18:d9:30:01:9b:ae:3c:1e:fc:95: f9:1d:1b:53:5d:e1:2d:33:b0:14:2c:06:a8:c6:c4: 4c:95:76:b9:07:71:08:59:15:a8:4d:05:f1:81:cb: 23:bc:19:34:6f:9e:c6:5d:f0:90:d5:52:3a:9e:84: bc:3e:aa:8b:25:cb:c0:b4:16:7b:ef:58:86:14:ad: cb:39:11:e6:70:23:28:27:2e:b4:6b:1c:28:8f:27: 46:c2:aa:44:6d:dd:52:61:98:cc:c7:9b:68:b6:22: 5e:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D7:38:71:44:8A:19:3F:4B:35:12:57:D5:A2:A9:AA:22:FC:FE:CB:B4 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/BDEA63C960B2FCA831D48432258A14C5EF2B4AD646EE9452D6357F4C7BBF0D54/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/BDEA63C960B2FCA831D48432258A14C5EF2B4AD646EE9452D6357F4C7BBF0D54/0/D73871448A193F4B351257D5A2A9AA22FCFECBB4.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.188.53.0/24 Signature Algorithm: sha256WithRSAEncryption 60:67:36:b9:07:6a:b3:46:63:e8:59:ed:bd:d1:3a:a5:b5:09: c5:45:13:6c:11:a7:0a:9b:64:28:dd:a3:d2:d3:7d:a7:61:54: a5:be:d9:39:8c:24:f2:70:74:16:dc:8c:ee:3c:ec:8d:c5:21: 94:b7:ea:b2:97:e6:04:24:62:74:4f:e4:c0:4f:dd:31:d4:45: 4f:8e:4c:6e:ec:53:e6:8d:26:6b:62:c8:f5:4a:2a:a8:c1:59: 42:cf:20:3b:44:9c:fe:97:7a:2e:f9:55:3f:35:82:a6:1a:68: bd:11:6c:f8:44:70:8e:f2:97:69:a5:ee:20:e8:d0:d3:0f:cc: 8a:21:6a:28:eb:1b:11:78:9a:b0:6b:8b:5a:7b:44:d5:c5:49: e8:9b:e8:60:32:af:84:43:4a:e4:92:a1:d3:23:3e:f1:79:70: e2:15:a1:09:f0:13:43:1d:cf:5b:d7:1d:c7:a1:fe:45:de:15: 3f:0c:cb:fa:5e:55:a8:54:26:c5:0a:2b:fc:9c:5b:a3:6c:5d: b8:e9:70:9c:91:8f:5d:31:75:5d:2f:72:97:a4:26:85:c4:83: 17:2f:d8:ea:bb:04:05:8f:47:20:01:f7:48:2c:6d:63:a9:af: a2:fb:79:cb:3d:90:4c:fe:17:28:fc:76:d7:35:8c:41:17:ee: eb:a3:62:56 -----BEGIN CERTIFICATE----- MIIGejCCBWKgAwIBAgIUWd5k2ViGit2B7Fz788NEZwEUTTgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgwNTM5NDdaFw0yNzAxMjcwNTQ0NDdaMDMxMTAvBgNV BAMTKEQ3Mzg3MTQ0OEExOTNGNEIzNTEyNTdENUEyQTlBQTIyRkNGRUNCQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp25J41skQjNYifHGrqubt5WDM sizYoHNiFeQwWdyAFYDlUb//veiOshKg+mJxIVck6HxTWB5iGboEY3XPs1vXYlvj lIfEnmXaSZAzJVAlMYvQsd/i/VIWwkJ3R5ZskGJ8HHk2zFZDdwiZ/b6u6zxbStV2 Njt58sRFzBg2RnmQCPtOrSAg+IXCg99sdk90I5Ua+YVQc87xRLrQGNkwAZuuPB78 lfkdG1Nd4S0zsBQsBqjGxEyVdrkHcQhZFahNBfGByyO8GTRvnsZd8JDVUjqehLw+ qosly8C0FnvvWIYUrcs5EeZwIygnLrRrHCiPJ0bCqkRt3VJhmMzHm2i2Il7FAgMB AAGjggOEMIIDgDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTXOHFEihk/SzUS V9Wiqaoi/P7LtDAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQkRFQTYzQzk2MEIyRkNBODMxRDQ4NDMy MjU4QTE0QzVFRjJCNEFENjQ2RUU5NDUyRDYzNTdGNEM3QkJGMEQ1NC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9CREVBNjNDOTYwQjJGQ0E4MzFENDg0MzIyNThBMTRDNUVGMkI0QUQ2NDZF RTk0NTJENjM1N0Y0QzdCQkYwRDU0LzAvRDczODcxNDQ4QTE5M0Y0QjM1MTI1N0Q1 QTJBOUFBMjJGQ0ZFQ0JCNC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLw1MA0GCSqG SIb3DQEBCwUAA4IBAQBgZza5B2qzRmPoWe290TqltQnFRRNsEacKm2Qo3aPS032n YVSlvtk5jCTycHQW3IzuPOyNxSGUt+qyl+YEJGJ0T+TAT90x1EVPjkxu7FPmjSZr Ysj1SiqowVlCzyA7RJz+l3ou+VU/NYKmGmi9EWz4RHCO8pdppe4g6NDTD8yKIWoo 6xsReJqwa4tae0TVxUnom+hgMq+EQ0rkkqHTIz7xeXDiFaEJ8BNDHc9b1x3Hof5F 3hU/DMv6XlWoVCbFCiv8nFujbF246XCckY9dMXVdL3KXpCaFxIMXL9jquwQFj0cg AfdILG1jqa+i+3nLPZBM/hco/HbXNYxBF+7ro2JW -----END CERTIFICATE-----Generated at Mon Mar 2 14:31:02 2026 by rpki-client