$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8D44DD84F3FDBD732870581DB91456D40862FA2.cer File: D8D44DD84F3FDBD732870581DB91456D40862FA2.cer (raw, json) Hash identifier: mBorjYF5shMl2s7ld71+Fb0h53jIceCao/8IM8Swswo= Subject key identifier: D8:D4:4D:D8:4F:3F:DB:D7:32:87:05:81:DB:91:45:6D:40:86:2F:A2 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 3F38F80F5C441404397248EE79CA91AEC2BCA545 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/DCD67801167D0EF074FF13AE5977B421687A21F08DFD1541521481D4D8E35A05/0/D8D44DD84F3FDBD732870581DB91456D40862FA2.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/DCD67801167D0EF074FF13AE5977B421687A21F08DFD1541521481D4D8E35A05/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 27 Jan 2026 17:54:54 +0000 Certificate not after: Tue 26 Jan 2027 17:59:54 +0000 Subordinate resources: AS: 52419 IP: 181.192.64.0/20 IP: 200.31.240.0/20 IP: 2803:3480::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 05 Mar 2026 11:41:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:38:f8:0f:5c:44:14:04:39:72:48:ee:79:ca:91:ae:c2:bc:a5:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 27 17:54:54 2026 GMT Not After : Jan 26 17:59:54 2027 GMT Subject: CN=D8D44DD84F3FDBD732870581DB91456D40862FA2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:c7:9d:3b:24:0f:f5:69:d5:88:0b:96:7c:08: ae:8c:92:4f:c8:d1:0d:67:53:a1:32:13:e7:b2:28: cc:33:30:ef:9e:5b:f2:d6:ac:d9:11:30:8f:1b:bc: 34:1e:20:36:d6:74:38:80:7a:7e:c8:16:e1:ec:aa: 28:a2:eb:b0:08:75:a5:d0:63:c8:01:bb:8f:77:f0: bb:75:4d:c9:9c:4d:c7:70:cc:5d:11:14:89:e0:47: fe:60:3e:4b:03:fb:25:c2:55:24:22:bc:61:f1:d8: 2f:db:87:6b:82:3e:e1:07:00:f4:98:31:4e:9b:ed: c8:b1:bb:cb:66:0e:e0:8e:af:0e:54:02:00:f6:bd: 18:33:ba:f3:8d:ba:b0:be:3e:08:00:df:0e:3e:66: 0c:73:44:31:1f:65:72:e2:5e:a9:2b:e4:06:5c:1c: c9:56:24:aa:52:e6:d0:49:2e:82:22:46:20:79:36: 77:15:be:5c:39:ef:8a:5e:15:7f:93:a3:dd:bf:fe: 22:8c:37:d6:6c:43:33:67:bd:b1:dc:5d:df:89:63: cf:aa:6e:3e:b1:5b:11:43:a3:61:56:df:08:3c:e7: 79:74:a5:cf:12:ff:c7:d2:51:95:93:78:d1:23:19: 01:53:c1:26:22:8a:10:56:ee:0f:64:37:ce:0f:9b: fd:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D8:D4:4D:D8:4F:3F:DB:D7:32:87:05:81:DB:91:45:6D:40:86:2F:A2 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/DCD67801167D0EF074FF13AE5977B421687A21F08DFD1541521481D4D8E35A05/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/DCD67801167D0EF074FF13AE5977B421687A21F08DFD1541521481D4D8E35A05/0/D8D44DD84F3FDBD732870581DB91456D40862FA2.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 181.192.64.0/20 200.31.240.0/20 IPv6: 2803:3480::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52419 Signature Algorithm: sha256WithRSAEncryption 2c:ba:98:97:48:3b:e0:b5:65:51:3a:98:8a:e7:1d:99:00:be: b3:cc:1b:a2:b5:60:f2:07:2b:27:a5:5f:be:e9:e3:10:88:0a: d1:a6:5c:f8:99:4f:78:72:30:52:ce:d8:31:20:c4:b9:50:17: 19:af:4c:ff:b4:ed:6c:73:56:a2:2a:dc:99:b4:8f:a8:1d:bc: 54:69:31:f9:9c:3d:a9:16:24:3f:82:4c:c1:c3:5e:8b:c9:5d: 1d:97:a4:84:d7:dd:1f:3b:b8:75:7b:74:9b:80:17:01:36:87: 20:2d:a9:22:22:2f:a2:c3:33:2e:e4:61:f1:b7:e5:fe:63:e4: 42:eb:11:6d:e0:9e:f0:6f:63:e9:18:41:a8:bb:c4:22:95:c8: d1:fa:3d:a0:58:02:73:0f:ab:3e:15:ce:c8:56:08:e0:f0:39: 08:74:d0:ef:cb:3f:f1:02:79:09:62:c3:7f:50:d2:61:21:a4: 78:71:bb:53:3c:fd:4f:ce:63:7d:54:b7:8a:15:81:26:55:ec: dd:9e:b5:f8:99:6e:94:1f:d5:15:c7:ea:f5:54:e6:41:73:5f: f0:54:df:59:82:86:2e:a2:10:0d:6d:e3:47:26:16:dc:0c:71: b7:df:91:b8:44:e7:dc:db:ec:82:9c:53:c8:5a:18:db:b1:a7: 6f:d5:73:00 -----BEGIN CERTIFICATE----- MIIGqzCCBZOgAwIBAgIUPzj4D1xEFAQ5ckjuecqRrsK8pUUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjcxNzU0NTRaFw0yNzAxMjYxNzU5NTRaMDMxMTAvBgNV BAMTKEQ4RDQ0REQ4NEYzRkRCRDczMjg3MDU4MURCOTE0NTZENDA4NjJGQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUx507JA/1adWIC5Z8CK6Mkk/I 0Q1nU6EyE+eyKMwzMO+eW/LWrNkRMI8bvDQeIDbWdDiAen7IFuHsqiii67AIdaXQ Y8gBu4938Lt1TcmcTcdwzF0RFIngR/5gPksD+yXCVSQivGHx2C/bh2uCPuEHAPSY MU6b7cixu8tmDuCOrw5UAgD2vRgzuvONurC+PggA3w4+ZgxzRDEfZXLiXqkr5AZc HMlWJKpS5tBJLoIiRiB5NncVvlw574peFX+To92//iKMN9ZsQzNnvbHcXd+JY8+q bj6xWxFDo2FW3wg853l0pc8S/8fSUZWTeNEjGQFTwSYiihBW7g9kN84Pm/1xAgMB AAGjggO1MIIDsTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTY1E3YTz/b1zKH BYHbkUVtQIYvojAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRENENjc4MDExNjdEMEVGMDc0RkYxM0FF NTk3N0I0MjE2ODdBMjFGMDhERkQxNTQxNTIxNDgxRDREOEUzNUEwNS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9EQ0Q2NzgwMTE2N0QwRUYwNzRGRjEzQUU1OTc3QjQyMTY4N0EyMUYwOERG RDE1NDE1MjE0ODFENEQ4RTM1QTA1LzAvRDhENDRERDg0RjNGREJENzMyODcwNTgx REI5MTQ1NkQ0MDg2MkZBMi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQEtcBAAwQEyB/w MA0EAgACMAcDBQAoAzSAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDMwzANBgkq hkiG9w0BAQsFAAOCAQEALLqYl0g74LVlUTqYiucdmQC+s8wborVg8gcrJ6Vfvunj EIgK0aZc+JlPeHIwUs7YMSDEuVAXGa9M/7TtbHNWoircmbSPqB28VGkx+Zw9qRYk P4JMwcNei8ldHZekhNfdHzu4dXt0m4AXATaHIC2pIiIvosMzLuRh8bfl/mPkQusR beCe8G9j6RhBqLvEIpXI0fo9oFgCcw+rPhXOyFYI4PA5CHTQ78s/8QJ5CWLDf1DS YSGkeHG7Uzz9T85jfVS3ihWBJlXs3Z61+JlulB/VFcfq9VTmQXNf8FTfWYKGLqIQ DW3jRyYW3Axxt9+RuETn3NvsgpxTyFoY27Gnb9VzAA== -----END CERTIFICATE-----Generated at Mon Mar 2 09:47:10 2026 by rpki-client