$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D90D4EBE37D6BB163A0862C08C60BF8163DA0194.cer File: D90D4EBE37D6BB163A0862C08C60BF8163DA0194.cer (raw, json) Hash identifier: +DWG1Pi6iDARagDQaK4iT9lcIPgBxrHh/c+c+CvebF8= Subject key identifier: D9:0D:4E:BE:37:D6:BB:16:3A:08:62:C0:8C:60:BF:81:63:DA:01:94 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 7DB2EB56D29D77909C9D31081BE7729B28B951CC Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/A6CD0CCCB653DB5BC51D479B18736C53DC65CEC0DF039622A227EA1648EDCF80/0/D90D4EBE37D6BB163A0862C08C60BF8163DA0194.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/A6CD0CCCB653DB5BC51D479B18736C53DC65CEC0DF039622A227EA1648EDCF80/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 15:49:44 +0000 Certificate not after: Wed 27 Jan 2027 15:54:44 +0000 Subordinate resources: AS: 27883 IP: 190.114.192.0/19 IP: 2801:11d::/36 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:b2:eb:56:d2:9d:77:90:9c:9d:31:08:1b:e7:72:9b:28:b9:51:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 15:49:44 2026 GMT Not After : Jan 27 15:54:44 2027 GMT Subject: CN=D90D4EBE37D6BB163A0862C08C60BF8163DA0194 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:7f:fa:e8:45:00:d5:36:f3:a0:8e:19:90:53: 91:d3:40:90:35:13:6a:29:77:64:54:56:9a:48:9a: 0a:31:c2:8a:5c:9b:25:72:7b:7d:86:96:10:9e:17: 3e:0e:8e:49:33:76:ff:29:5e:b3:f8:3a:3c:93:8c: 7e:2e:66:67:08:1d:5c:eb:f2:69:64:0f:45:38:e3: bc:f5:12:e2:db:be:aa:f4:10:1f:88:25:53:09:67: 6e:31:c1:d1:da:73:dd:6a:02:f0:38:40:69:30:b5: 08:c6:9b:1e:14:2e:95:53:07:c2:c3:74:1d:7d:ff: aa:97:ae:ac:9f:26:3b:48:36:03:93:e4:54:ff:f5: ff:af:72:8f:0f:07:74:4e:03:f8:1f:c2:63:c7:28: 0c:46:97:02:13:91:cb:55:d9:05:56:af:00:28:1c: e8:92:5c:50:cb:d2:dc:c6:90:3e:83:73:a8:eb:b1: 7d:0a:ef:26:51:2c:a3:cb:c7:59:b3:7a:f4:11:e4: 79:06:cd:e9:99:11:68:86:cb:95:b1:a2:d0:cc:da: 6d:9e:7d:76:f1:54:d9:1c:90:a5:f7:3a:ae:be:a3: a1:ca:cf:ec:db:c0:d1:b5:71:e9:45:9e:d8:ac:cb: e2:b4:de:d0:66:fa:91:a7:8d:48:14:15:ca:80:53: e7:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D9:0D:4E:BE:37:D6:BB:16:3A:08:62:C0:8C:60:BF:81:63:DA:01:94 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/A6CD0CCCB653DB5BC51D479B18736C53DC65CEC0DF039622A227EA1648EDCF80/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/A6CD0CCCB653DB5BC51D479B18736C53DC65CEC0DF039622A227EA1648EDCF80/0/D90D4EBE37D6BB163A0862C08C60BF8163DA0194.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 190.114.192.0/19 IPv6: 2801:11d::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 27883 Signature Algorithm: sha256WithRSAEncryption 03:57:14:b6:5b:cb:cc:ba:fd:63:35:6b:03:64:cd:ff:cb:7a: c8:2d:de:49:fc:64:2c:38:5c:71:09:01:a9:53:56:15:c9:46: 04:40:9d:78:d4:24:1d:3f:f5:c4:2f:b8:80:05:a6:29:8b:1d: 77:6e:ed:f1:dd:cb:5d:69:b6:5e:50:8d:a6:28:56:a1:fe:12: 9c:8b:44:57:dd:e2:d2:38:c2:09:13:b9:ee:44:f6:39:19:60: 5b:c5:8c:a0:46:5d:62:bc:54:39:b3:44:38:e4:31:8b:fd:b8: 89:fa:14:55:30:a4:64:c7:a9:fe:70:9b:54:88:3c:f2:6e:cd: fd:9c:4c:57:05:e8:9f:7b:9c:63:35:59:2c:18:0a:e2:29:08: 60:6e:1c:70:f7:99:ee:1c:4e:ce:1e:bd:bf:0e:8f:81:39:1d: f3:4b:ff:67:24:98:e8:f9:85:ac:36:4f:8e:c3:e2:14:24:12: 9c:d8:0a:34:13:98:30:e8:2c:41:78:b1:35:70:bb:ff:b2:d6: a4:92:11:8c:2a:c1:3a:7a:e8:79:8a:38:e9:85:e5:d5:e7:4c: 02:6c:30:47:2f:cd:4b:22:7d:77:75:6d:9a:64:cb:7e:69:47: dd:39:31:48:fd:a2:55:be:b3:5b:d4:97:d3:00:07:c6:a0:24: 53:1f:31:3c -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUfbLrVtKdd5CcnTEIG+dymyi5UcwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgxNTQ5NDRaFw0yNzAxMjcxNTU0NDRaMDMxMTAvBgNV BAMTKEQ5MEQ0RUJFMzdENkJCMTYzQTA4NjJDMDhDNjBCRjgxNjNEQTAxOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9f/roRQDVNvOgjhmQU5HTQJA1 E2opd2RUVppImgoxwopcmyVye32GlhCeFz4Ojkkzdv8pXrP4OjyTjH4uZmcIHVzr 8mlkD0U447z1EuLbvqr0EB+IJVMJZ24xwdHac91qAvA4QGkwtQjGmx4ULpVTB8LD dB19/6qXrqyfJjtINgOT5FT/9f+vco8PB3ROA/gfwmPHKAxGlwITkctV2QVWrwAo HOiSXFDL0tzGkD6Dc6jrsX0K7yZRLKPLx1mzevQR5HkGzemZEWiGy5WxotDM2m2e fXbxVNkckKX3Oq6+o6HKz+zbwNG1celFntisy+K03tBm+pGnjUgUFcqAU+ebAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTZDU6+N9a7FjoI YsCMYL+BY9oBlDAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQTZDRDBDQ0NCNjUzREI1QkM1MUQ0NzlC MTg3MzZDNTNEQzY1Q0VDMERGMDM5NjIyQTIyN0VBMTY0OEVEQ0Y4MC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9BNkNEMENDQ0I2NTNEQjVCQzUxRDQ3OUIxODczNkM1M0RDNjVDRUMwREYw Mzk2MjJBMjI3RUExNjQ4RURDRjgwLzAvRDkwRDRFQkUzN0Q2QkIxNjNBMDg2MkMw OEM2MEJGODE2M0RBMDE5NC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQFvnLAMA4EAgAC MAgDBgQoAQEdADAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgJs6zANBgkqhkiG9w0B AQsFAAOCAQEAA1cUtlvLzLr9YzVrA2TN/8t6yC3eSfxkLDhccQkBqVNWFclGBECd eNQkHT/1xC+4gAWmKYsdd27t8d3LXWm2XlCNpihWof4SnItEV93i0jjCCRO57kT2 ORlgW8WMoEZdYrxUObNEOOQxi/24ifoUVTCkZMep/nCbVIg88m7N/ZxMVwXon3uc YzVZLBgK4ikIYG4ccPeZ7hxOzh69vw6PgTkd80v/ZySY6PmFrDZPjsPiFCQSnNgK NBOYMOgsQXixNXC7/7LWpJIRjCrBOnroeYo46YXl1edMAmwwRy/NSyJ9d3VtmmTL fmlH3TkxSP2iVb6zW9SX0wAHxqAkUx8xPA== -----END CERTIFICATE-----Generated at Mon Mar 2 15:42:54 2026 by rpki-client