$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D84B72D9DA12C72CCE6A15DDF850F1CC5D63122F.cer File: D84B72D9DA12C72CCE6A15DDF850F1CC5D63122F.cer (raw, json) Hash identifier: hEqbLmWegUKG1kjcnRzAXznZndHoLqnVJZn8dVhtjRg= Subject key identifier: D8:4B:72:D9:DA:12:C7:2C:CE:6A:15:DD:F8:50:F1:CC:5D:63:12:2F Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 3A5F9D054FA207D9BD6C0D5C53E19ADB1943DC7B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/B99DE551A85129D230349456EB5C39EFB11AA3B33BDDD2B5A823435D41265A97/0/D84B72D9DA12C72CCE6A15DDF850F1CC5D63122F.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/B99DE551A85129D230349456EB5C39EFB11AA3B33BDDD2B5A823435D41265A97/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 10:56:13 +0000 Certificate not after: Wed 27 Jan 2027 11:01:13 +0000 Subordinate resources: AS: 265772 IP: 131.196.80.0/22 IP: 2803:37c0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 05 Mar 2026 11:41:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:5f:9d:05:4f:a2:07:d9:bd:6c:0d:5c:53:e1:9a:db:19:43:dc:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 10:56:13 2026 GMT Not After : Jan 27 11:01:13 2027 GMT Subject: CN=D84B72D9DA12C72CCE6A15DDF850F1CC5D63122F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:6c:bb:af:85:5b:a9:6c:3b:48:fd:f8:22:b7: 32:92:aa:94:62:d4:d9:9e:b5:eb:ea:c8:21:7a:2e: 30:be:f6:89:9a:bd:3a:f0:9f:0e:6c:1f:00:db:23: cd:95:7c:4b:91:51:aa:14:88:89:e5:5d:1e:3d:e7: d2:d4:5f:91:46:de:61:e8:26:c1:25:d2:2d:c3:39: f5:4d:28:2a:47:c1:ae:27:4d:32:6d:49:86:dc:96: 5f:9c:57:74:70:30:7c:9d:25:e2:ce:e2:77:64:bf: d2:ca:5c:cf:79:99:5f:6c:83:07:4d:f3:43:e4:8a: 7f:96:5e:04:65:3b:58:1d:6e:94:e7:04:79:92:49: e2:1e:cc:57:c9:45:e0:35:5b:de:aa:f0:05:a6:19: c9:95:a6:c4:36:af:ce:57:64:f1:82:01:91:a4:5c: d2:41:6d:91:23:ef:32:16:b2:7d:69:e0:05:bf:f8: 3c:3e:5b:77:78:1e:71:4d:32:7d:0c:98:7b:b8:5f: 2f:ec:c5:d2:86:f4:28:32:5c:cd:c3:2b:05:e0:08: 11:71:5d:d7:82:2f:c7:fe:cd:61:1d:02:eb:f2:53: 96:db:4b:bd:e8:48:f7:51:b6:ef:fd:f8:d5:01:d4: ba:7a:02:01:9e:69:6e:ff:74:63:fd:cf:07:e3:73: 29:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D8:4B:72:D9:DA:12:C7:2C:CE:6A:15:DD:F8:50:F1:CC:5D:63:12:2F X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/B99DE551A85129D230349456EB5C39EFB11AA3B33BDDD2B5A823435D41265A97/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/B99DE551A85129D230349456EB5C39EFB11AA3B33BDDD2B5A823435D41265A97/0/D84B72D9DA12C72CCE6A15DDF850F1CC5D63122F.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.196.80.0/22 IPv6: 2803:37c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265772 Signature Algorithm: sha256WithRSAEncryption 23:75:e1:0e:c9:e6:12:14:f1:eb:74:fd:5b:2a:e8:b3:31:48: a9:dc:00:5d:ee:f9:92:2d:79:f8:c2:f6:6e:c9:b1:7d:b7:5c: 8b:a9:2c:68:45:00:cc:9e:c5:0e:3a:fd:75:78:75:31:c2:8b: 2f:2f:17:20:7c:af:0c:e4:1f:eb:e2:b7:08:e2:d0:a5:89:30: 17:c5:cb:b8:e0:ba:02:04:75:9b:5b:1a:87:3e:fe:f4:c4:84: 6b:12:1e:c3:c3:69:97:1f:91:22:3e:a8:f5:de:b9:3b:81:f4: 58:84:9b:21:f0:21:76:1d:bd:36:6b:b0:b8:ba:bd:ff:31:06: 3f:54:32:14:ab:c7:bf:09:5b:ab:01:71:0e:64:41:fc:92:c3: d7:19:1b:a3:e1:85:06:98:df:bd:2f:53:47:1b:18:8a:48:61: 18:b8:25:37:67:a3:55:c9:c4:e0:25:e4:ae:4d:34:03:08:1f: 51:74:aa:37:eb:cb:89:fd:9c:40:54:3d:32:fc:89:25:6a:95: f7:20:89:b2:17:06:b0:bd:b9:b2:35:ae:b9:e8:6e:e5:86:ec: aa:d1:c7:3c:01:2c:61:03:fc:de:61:ec:d2:9e:38:27:d7:c3: 23:d8:67:88:62:da:80:58:bb:10:76:5a:b0:d6:d0:1f:f5:84: f9:fa:f0:4f -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUOl+dBU+iB9m9bA1cU+Ga2xlD3HswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgxMDU2MTNaFw0yNzAxMjcxMTAxMTNaMDMxMTAvBgNV BAMTKEQ4NEI3MkQ5REExMkM3MkNDRTZBMTVEREY4NTBGMUNDNUQ2MzEyMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXbLuvhVupbDtI/fgitzKSqpRi 1NmetevqyCF6LjC+9omavTrwnw5sHwDbI82VfEuRUaoUiInlXR4959LUX5FG3mHo JsEl0i3DOfVNKCpHwa4nTTJtSYbcll+cV3RwMHydJeLO4ndkv9LKXM95mV9sgwdN 80Pkin+WXgRlO1gdbpTnBHmSSeIezFfJReA1W96q8AWmGcmVpsQ2r85XZPGCAZGk XNJBbZEj7zIWsn1p4AW/+Dw+W3d4HnFNMn0MmHu4Xy/sxdKG9CgyXM3DKwXgCBFx XdeCL8f+zWEdAuvyU5bbS73oSPdRtu/9+NUB1Lp6AgGeaW7/dGP9zwfjcykpAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTYS3LZ2hLHLM5q Fd34UPHMXWMSLzAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQjk5REU1NTFBODUxMjlEMjMwMzQ5NDU2 RUI1QzM5RUZCMTFBQTNCMzNCREREMkI1QTgyMzQzNUQ0MTI2NUE5Ny8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9COTlERTU1MUE4NTEyOUQyMzAzNDk0NTZFQjVDMzlFRkIxMUFBM0IzM0JE REQyQjVBODIzNDM1RDQxMjY1QTk3LzAvRDg0QjcyRDlEQTEyQzcyQ0NFNkExNURE Rjg1MEYxQ0M1RDYzMTIyRi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCg8RQMA0EAgAC MAcDBQAoAzfAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQOLDANBgkqhkiG9w0B AQsFAAOCAQEAI3XhDsnmEhTx63T9WyroszFIqdwAXe75ki15+ML2bsmxfbdci6ks aEUAzJ7FDjr9dXh1McKLLy8XIHyvDOQf6+K3COLQpYkwF8XLuOC6AgR1m1sahz7+ 9MSEaxIew8Nplx+RIj6o9d65O4H0WISbIfAhdh29NmuwuLq9/zEGP1QyFKvHvwlb qwFxDmRB/JLD1xkbo+GFBpjfvS9TRxsYikhhGLglN2ejVcnE4CXkrk00AwgfUXSq N+vLif2cQFQ9MvyJJWqV9yCJshcGsL25sjWuuehu5YbsqtHHPAEsYQP83mHs0p44 J9fDI9hniGLagFi7EHZasNbQH/WE+frwTw== -----END CERTIFICATE-----Generated at Mon Mar 2 13:19:38 2026 by rpki-client