$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D92DE7483F5F2240F29979B8392E8D7ABF8F9BB1.cer File: D92DE7483F5F2240F29979B8392E8D7ABF8F9BB1.cer (raw, json) Hash identifier: GGNFXWdLytX/n9HFhHaa00kI+xUkTBS9kincZvgHBEM= Subject key identifier: D9:2D:E7:48:3F:5F:22:40:F2:99:79:B8:39:2E:8D:7A:BF:8F:9B:B1 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 5843AE4322C03C019716ABAB7B88278B99F1EB3B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/F82CFAC1425682B4BA8F05EBEBA7C49B012825C04D266472223A97B310468021/0/D92DE7483F5F2240F29979B8392E8D7ABF8F9BB1.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/F82CFAC1425682B4BA8F05EBEBA7C49B012825C04D266472223A97B310468021/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Thu 29 Jan 2026 00:22:34 +0000 Certificate not after: Thu 28 Jan 2027 00:27:34 +0000 Subordinate resources: AS: 264752 IP: 168.195.36.0/22 IP: 2803:9f40::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:43:ae:43:22:c0:3c:01:97:16:ab:ab:7b:88:27:8b:99:f1:eb:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 29 00:22:34 2026 GMT Not After : Jan 28 00:27:34 2027 GMT Subject: CN=D92DE7483F5F2240F29979B8392E8D7ABF8F9BB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:39:a0:c7:a8:d6:c3:b6:49:e9:c2:86:b2:ff: b3:77:66:b2:72:41:bd:91:92:5d:51:ba:fd:95:e8: b1:b2:73:cb:f4:32:ed:17:0a:fd:a3:52:9d:0d:80: 3c:09:62:3b:41:e2:6a:b6:ed:f0:3c:c7:3d:dd:c2: d9:3b:01:ec:d4:dc:4f:03:b0:70:89:ab:b7:84:55: 6e:4e:c5:84:b1:a8:81:09:b4:5d:24:53:fc:35:79: 6b:5f:cc:20:1f:7b:7c:b5:c8:f8:85:d6:10:88:a9: a5:da:e0:97:4d:a1:d2:5a:3a:a0:f7:2b:b6:eb:9a: e9:34:2c:ba:7a:16:ac:16:60:fc:5c:d6:65:0b:48: cc:96:f0:6d:4b:af:e9:00:e3:2e:f5:a0:81:dd:d7: 74:4c:a6:7c:a1:ac:42:6b:77:d1:0e:87:fc:29:ba: b6:5a:de:01:3e:99:e7:fb:e4:50:bd:ad:25:ff:4f: fe:41:1e:83:50:70:f6:e0:6d:59:f8:72:85:0c:03: 2b:36:10:fb:e6:9d:3d:dd:29:52:cc:6d:0a:c8:34: 61:c4:ee:58:8c:fb:0f:0e:16:54:10:7c:b8:58:88: dc:36:8d:99:c2:19:d4:fc:bb:98:6d:27:b5:d6:15: 30:9b:f9:07:a0:fd:61:61:68:5f:ac:11:2f:e1:7a: ed:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D9:2D:E7:48:3F:5F:22:40:F2:99:79:B8:39:2E:8D:7A:BF:8F:9B:B1 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/F82CFAC1425682B4BA8F05EBEBA7C49B012825C04D266472223A97B310468021/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/F82CFAC1425682B4BA8F05EBEBA7C49B012825C04D266472223A97B310468021/0/D92DE7483F5F2240F29979B8392E8D7ABF8F9BB1.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.195.36.0/22 IPv6: 2803:9f40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264752 Signature Algorithm: sha256WithRSAEncryption 3a:1b:28:d6:1e:b8:91:1f:14:8a:10:8f:ff:5f:1c:14:fe:82: b9:52:6b:81:87:cc:33:9b:f9:ef:c0:40:37:83:0a:45:b4:cc: bf:a1:33:46:d8:4e:4e:49:1a:91:41:93:74:62:1b:30:cb:76: 55:1d:1a:4d:24:78:30:a4:80:42:c8:89:48:a8:07:e5:fa:de: 89:bd:0f:6d:38:59:3a:73:7a:e4:25:e4:cd:c4:5a:61:04:33: 5f:2d:77:d6:25:e0:55:2a:a7:bf:49:65:06:b9:0f:c0:42:57: 84:89:8c:ba:41:77:8e:b9:8e:ec:af:e5:21:88:3b:ee:59:fd: 27:6f:ba:08:48:73:a8:29:13:c2:34:60:2b:fb:5c:70:b8:19: 8b:59:d5:c9:6a:df:95:25:8c:d0:f0:60:79:cd:d1:86:ea:ae: b0:f5:67:0c:88:7d:97:a3:ae:4e:f3:23:0a:09:cf:bd:12:96: 28:70:40:ed:f9:8f:28:34:1a:49:5c:73:6d:f3:3b:e3:bd:7b: 67:21:8a:ef:e4:ff:f6:c0:79:26:9f:d9:d7:4e:d9:4f:e4:74: c5:64:db:34:b3:35:e4:48:92:52:38:d5:70:35:e1:8b:1f:41: 2e:2b:2f:f9:e8:04:41:f5:85:ab:bd:15:ca:57:ef:8a:f6:95: 84:3c:29:98 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUWEOuQyLAPAGXFqure4gni5nx6zswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjkwMDIyMzRaFw0yNzAxMjgwMDI3MzRaMDMxMTAvBgNV BAMTKEQ5MkRFNzQ4M0Y1RjIyNDBGMjk5NzlCODM5MkU4RDdBQkY4RjlCQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDOaDHqNbDtknpwoay/7N3ZrJy Qb2Rkl1Ruv2V6LGyc8v0Mu0XCv2jUp0NgDwJYjtB4mq27fA8xz3dwtk7AezU3E8D sHCJq7eEVW5OxYSxqIEJtF0kU/w1eWtfzCAfe3y1yPiF1hCIqaXa4JdNodJaOqD3 K7brmuk0LLp6FqwWYPxc1mULSMyW8G1Lr+kA4y71oIHd13RMpnyhrEJrd9EOh/wp urZa3gE+mef75FC9rSX/T/5BHoNQcPbgbVn4coUMAys2EPvmnT3dKVLMbQrINGHE 7liM+w8OFlQQfLhYiNw2jZnCGdT8u5htJ7XWFTCb+Qeg/WFhaF+sES/heu29AgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTZLedIP18iQPKZ ebg5Lo16v4+bsTAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRjgyQ0ZBQzE0MjU2ODJCNEJBOEYwNUVC RUJBN0M0OUIwMTI4MjVDMDREMjY2NDcyMjIzQTk3QjMxMDQ2ODAyMS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9GODJDRkFDMTQyNTY4MkI0QkE4RjA1RUJFQkE3QzQ5QjAxMjgyNUMwNEQy NjY0NzIyMjNBOTdCMzEwNDY4MDIxLzAvRDkyREU3NDgzRjVGMjI0MEYyOTk3OUI4 MzkyRThEN0FCRjhGOUJCMS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCqMMkMA0EAgAC MAcDBQAoA59AMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQKMDANBgkqhkiG9w0B AQsFAAOCAQEAOhso1h64kR8UihCP/18cFP6CuVJrgYfMM5v578BAN4MKRbTMv6Ez RthOTkkakUGTdGIbMMt2VR0aTSR4MKSAQsiJSKgH5freib0PbThZOnN65CXkzcRa YQQzXy131iXgVSqnv0llBrkPwEJXhImMukF3jrmO7K/lIYg77ln9J2+6CEhzqCkT wjRgK/tccLgZi1nVyWrflSWM0PBgec3RhuqusPVnDIh9l6OuTvMjCgnPvRKWKHBA 7fmPKDQaSVxzbfM74717ZyGK7+T/9sB5Jp/Z107ZT+R0xWTbNLM15EiSUjjVcDXh ix9BLisv+egEQfWFq70VylfvivaVhDwpmA== -----END CERTIFICATE-----Generated at Mon Mar 2 17:16:24 2026 by rpki-client