$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B4C3626E6F6928DC3655F1ED05EB7827A4FBB9.cer File: D8B4C3626E6F6928DC3655F1ED05EB7827A4FBB9.cer (raw, json) Hash identifier: cYGSPS49VBd04hAdIAukjGlB35P0lzdt9XprCqrzo24= Subject key identifier: D8:B4:C3:62:6E:6F:69:28:DC:36:55:F1:ED:05:EB:78:27:A4:FB:B9 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 0EA3519C1F7DF15A113B8A184A23FE3C5F634EE6 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/F207CCF97F44CDD65B7B130389FDBC9E32213F8E9E8671D59BAD81080264A6D1/0/D8B4C3626E6F6928DC3655F1ED05EB7827A4FBB9.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/F207CCF97F44CDD65B7B130389FDBC9E32213F8E9E8671D59BAD81080264A6D1/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 03:44:51 +0000 Certificate not after: Wed 27 Jan 2027 03:49:51 +0000 Subordinate resources: AS: 264690 IP: 200.10.156.0/23 IP: 2801:16:9000::/48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:a3:51:9c:1f:7d:f1:5a:11:3b:8a:18:4a:23:fe:3c:5f:63:4e:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 03:44:51 2026 GMT Not After : Jan 27 03:49:51 2027 GMT Subject: CN=D8B4C3626E6F6928DC3655F1ED05EB7827A4FBB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:81:af:c3:b2:65:aa:f1:18:ff:89:64:71:42: 83:7f:6f:91:8d:8c:8c:ad:a8:5e:ff:ab:0d:80:d7: f9:a5:18:b0:f5:48:66:cd:56:34:c6:fd:c5:ed:e4: 8d:83:de:11:f4:ed:55:d4:88:ff:f5:e8:10:1f:fc: eb:e5:34:83:e9:9c:09:04:b8:5d:49:8d:38:11:66: a2:06:6a:0d:74:a4:ad:1c:d9:bd:09:bb:13:2f:56: 56:e1:de:a4:32:0c:3a:96:64:1a:cd:b0:7e:47:12: 29:c6:91:d4:a0:60:a0:29:e2:9f:f7:6e:c2:5d:63: 56:fe:34:7e:fe:2c:68:c2:40:3c:0d:5e:a3:b4:40: dd:60:5e:18:86:c2:72:b0:d8:66:ac:78:ac:7a:02: 9c:7d:ea:95:aa:6c:8b:a5:90:bf:16:ef:4d:2e:75: 12:94:c6:4e:92:9a:a5:e3:6a:a6:96:91:ec:8d:c7: 9a:66:f1:5c:68:54:e1:60:a4:f8:ce:2c:e5:e3:9a: ba:1c:da:cb:14:48:6f:76:b5:fd:61:43:4e:54:08: 62:63:02:ea:dd:38:82:80:71:f6:8a:e6:ff:c3:c4: 72:54:83:00:d9:60:79:8c:51:8e:92:b8:6b:4c:dd: f9:6b:6e:2c:20:18:df:8a:f0:98:f6:d3:f3:53:9f: 63:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D8:B4:C3:62:6E:6F:69:28:DC:36:55:F1:ED:05:EB:78:27:A4:FB:B9 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/F207CCF97F44CDD65B7B130389FDBC9E32213F8E9E8671D59BAD81080264A6D1/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/F207CCF97F44CDD65B7B130389FDBC9E32213F8E9E8671D59BAD81080264A6D1/0/D8B4C3626E6F6928DC3655F1ED05EB7827A4FBB9.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.10.156.0/23 IPv6: 2801:16:9000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264690 Signature Algorithm: sha256WithRSAEncryption 27:3b:cd:1f:f1:46:03:b1:e2:d5:c8:ef:5b:d6:03:82:0c:89: 19:f3:73:f4:b0:36:0c:fd:0a:b9:4d:1f:9c:ac:2e:e8:81:7f: 30:33:98:c2:54:ee:01:e2:2c:1a:5f:e5:38:3c:38:eb:2a:42: 18:05:2c:69:00:b3:3d:10:0f:cd:dc:bb:be:98:74:2b:f6:30: 12:15:e8:d5:dd:46:a8:4b:52:47:f5:8d:10:bd:10:a7:e5:8e: b7:55:6f:19:0a:ad:91:11:2a:2b:c1:b0:2c:dc:13:86:56:84: 2d:1f:04:67:c3:0e:9d:f6:0b:3f:e4:de:78:30:26:6b:c0:c0: 87:4e:4f:d3:26:6a:c2:69:38:6d:2c:3d:10:0d:5c:95:9c:6f: 6f:92:db:fb:ae:96:30:d8:ae:e6:53:5c:d9:00:e9:d7:db:16: 86:b6:d1:75:16:da:68:56:c6:0e:ce:8d:03:97:75:f5:1c:03: 48:04:fa:f0:74:01:7e:45:c9:f2:95:f9:ea:29:a7:51:bd:bd: 87:33:57:1d:0e:4d:4e:d1:ca:b3:0d:c5:a9:1f:8a:94:6b:c4: 16:27:2c:00:a9:ac:1a:9d:44:0e:84:39:86:54:15:be:ad:32: 42:c4:ef:2f:39:0b:91:fd:ce:b9:ef:93:f1:8c:60:ca:b8:39: 04:7e:a8:56 -----BEGIN CERTIFICATE----- MIIGpzCCBY+gAwIBAgIUDqNRnB998VoRO4oYSiP+PF9jTuYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgwMzQ0NTFaFw0yNzAxMjcwMzQ5NTFaMDMxMTAvBgNV BAMTKEQ4QjRDMzYyNkU2RjY5MjhEQzM2NTVGMUVEMDVFQjc4MjdBNEZCQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnga/DsmWq8Rj/iWRxQoN/b5GN jIytqF7/qw2A1/mlGLD1SGbNVjTG/cXt5I2D3hH07VXUiP/16BAf/OvlNIPpnAkE uF1JjTgRZqIGag10pK0c2b0JuxMvVlbh3qQyDDqWZBrNsH5HEinGkdSgYKAp4p/3 bsJdY1b+NH7+LGjCQDwNXqO0QN1gXhiGwnKw2GaseKx6Apx96pWqbIulkL8W700u dRKUxk6SmqXjaqaWkeyNx5pm8VxoVOFgpPjOLOXjmroc2ssUSG92tf1hQ05UCGJj AurdOIKAcfaK5v/DxHJUgwDZYHmMUY6SuGtM3flrbiwgGN+K8Jj20/NTn2PTAgMB AAGjggOxMIIDrTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTYtMNibm9pKNw2 VfHtBet4J6T7uTAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRjIwN0NDRjk3RjQ0Q0RENjVCN0IxMzAz ODlGREJDOUUzMjIxM0Y4RTlFODY3MUQ1OUJBRDgxMDgwMjY0QTZEMS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9GMjA3Q0NGOTdGNDRDREQ2NUI3QjEzMDM4OUZEQkM5RTMyMjEzRjhFOUU4 NjcxRDU5QkFEODEwODAyNjRBNkQxLzAvRDhCNEMzNjI2RTZGNjkyOERDMzY1NUYx RUQwNUVCNzgyN0E0RkJCOS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQByAqcMA8EAgAC MAkDBwAoAQAWkAAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAnyMA0GCSqGSIb3 DQEBCwUAA4IBAQAnO80f8UYDseLVyO9b1gOCDIkZ83P0sDYM/Qq5TR+crC7ogX8w M5jCVO4B4iwaX+U4PDjrKkIYBSxpALM9EA/N3Lu+mHQr9jASFejV3UaoS1JH9Y0Q vRCn5Y63VW8ZCq2RESorwbAs3BOGVoQtHwRnww6d9gs/5N54MCZrwMCHTk/TJmrC aThtLD0QDVyVnG9vktv7rpYw2K7mU1zZAOnX2xaGttF1FtpoVsYOzo0Dl3X1HANI BPrwdAF+RcnylfnqKadRvb2HM1cdDk1O0cqzDcWpH4qUa8QWJywAqawanUQOhDmG VBW+rTJCxO8vOQuR/c6575PxjGDKuDkEfqhW -----END CERTIFICATE-----Generated at Mon Mar 2 17:29:48 2026 by rpki-client