$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA9CE332EEAB17EF6270B269990D948099DD5049.cer File: DA9CE332EEAB17EF6270B269990D948099DD5049.cer (raw, json) Hash identifier: GrmZXGb1wyDWtLaS+9Byu2LlJuQRxCO/BRQXDwo+MTU= Subject key identifier: DA:9C:E3:32:EE:AB:17:EF:62:70:B2:69:99:0D:94:80:99:DD:50:49 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 623D7F2C35F9743CB64FC33610A89F1C7E3C9FE2 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/D999D3A68842F99FBB597F38B2C3EBFAEE804D61D600863CE6797F253484C45B/0/DA9CE332EEAB17EF6270B269990D948099DD5049.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/D999D3A68842F99FBB597F38B2C3EBFAEE804D61D600863CE6797F253484C45B/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Thu 29 Jan 2026 02:41:04 +0000 Certificate not after: Thu 28 Jan 2027 02:46:04 +0000 Subordinate resources: IP: 200.23.53.0/24 IP: 200.23.168.0 -- 200.23.170.255 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:3d:7f:2c:35:f9:74:3c:b6:4f:c3:36:10:a8:9f:1c:7e:3c:9f:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 29 02:41:04 2026 GMT Not After : Jan 28 02:46:04 2027 GMT Subject: CN=DA9CE332EEAB17EF6270B269990D948099DD5049 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:ec:cf:ff:53:4a:da:5e:e8:68:79:ec:78:f6: 70:5e:7d:5e:5a:e5:bd:fa:f7:47:fc:f8:fc:39:b2: c5:76:44:36:37:f0:a7:b6:aa:f2:48:e5:80:a8:75: db:db:69:98:07:99:99:28:7d:85:ed:49:40:55:36: 95:80:23:10:0f:80:34:98:e4:24:10:ea:4c:d6:52: 29:eb:b4:74:c7:50:79:26:f2:f5:19:0a:98:fb:92: d6:fb:7b:1d:82:ff:bf:75:ad:df:19:61:ac:1e:35: 4d:1b:ae:25:24:9f:54:db:08:93:3e:be:15:e4:d9: 77:93:17:53:04:8d:90:14:f1:c6:15:90:72:d5:7d: c8:5b:8c:b5:7f:bd:63:30:91:f6:9a:e3:84:d1:43: 2f:a6:42:6c:89:2d:ea:53:07:b7:12:ce:50:70:43: 89:45:c2:25:54:e0:64:14:77:c6:26:6e:e9:d5:fb: 3c:dd:2c:9a:08:d3:7f:ac:87:69:a3:f9:a0:0d:25: 81:85:d8:db:39:85:33:8e:3b:26:ca:c2:ee:69:00: 6c:b9:fd:c9:c4:7e:b9:af:4b:c4:73:4e:14:b5:76: 22:3b:8a:85:fa:61:46:c7:a6:35:84:06:3e:78:e4: b2:31:4d:a4:85:99:1a:06:0d:ba:04:cb:9c:8a:4c: 62:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DA:9C:E3:32:EE:AB:17:EF:62:70:B2:69:99:0D:94:80:99:DD:50:49 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/D999D3A68842F99FBB597F38B2C3EBFAEE804D61D600863CE6797F253484C45B/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/D999D3A68842F99FBB597F38B2C3EBFAEE804D61D600863CE6797F253484C45B/0/DA9CE332EEAB17EF6270B269990D948099DD5049.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.23.53.0/24 200.23.168.0-200.23.170.255 Signature Algorithm: sha256WithRSAEncryption 22:26:f4:90:4b:a0:76:d0:74:9f:90:04:15:8e:12:9e:03:93: ad:23:ab:57:47:05:a4:e5:67:00:8e:9e:ef:f7:20:12:1a:39: 17:6d:c9:c5:45:c9:e1:4c:d1:25:02:07:bd:bb:b4:b1:3d:ea: 72:27:ae:2d:4f:27:2f:41:f8:71:f8:cb:12:ae:3f:1d:72:b1: 07:20:6c:17:67:a8:7f:42:8c:12:73:ce:c3:d3:9d:8c:b8:a3: b7:55:96:67:92:14:27:0b:7f:01:a4:9c:0f:f6:bd:7e:2c:4c: ee:6a:56:ef:06:53:69:5d:fd:c4:f2:ee:db:ac:0d:f5:38:85: dd:22:db:fc:92:83:37:eb:d4:c3:f7:9b:22:b9:88:e7:6e:19: 3a:03:4d:c1:38:a5:0d:62:73:a4:46:67:1f:9f:8c:53:de:81: ca:dc:66:cc:64:d8:eb:10:bb:db:6f:f2:88:0c:b0:a3:7f:ab: 5f:ee:99:93:46:52:98:0a:7c:23:3a:2e:ed:51:9f:12:9c:4f: ea:08:27:de:0e:a7:21:a1:07:da:5e:00:96:19:a9:00:b6:27: fb:a8:58:ae:8f:d6:56:5a:25:ca:0b:38:f8:30:2f:fa:b0:5d: bc:4e:02:67:b1:9c:89:01:f3:92:03:7d:cf:62:6d:8f:cd:1c: 7a:58:c5:2c -----BEGIN CERTIFICATE----- MIIGiDCCBXCgAwIBAgIUYj1/LDX5dDy2T8M2EKifHH48n+IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjkwMjQxMDRaFw0yNzAxMjgwMjQ2MDRaMDMxMTAvBgNV BAMTKERBOUNFMzMyRUVBQjE3RUY2MjcwQjI2OTk5MEQ5NDgwOTlERDUwNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDi7M//U0raXuhoeex49nBefV5a 5b3690f8+Pw5ssV2RDY38Ke2qvJI5YCoddvbaZgHmZkofYXtSUBVNpWAIxAPgDSY 5CQQ6kzWUinrtHTHUHkm8vUZCpj7ktb7ex2C/791rd8ZYaweNU0briUkn1TbCJM+ vhXk2XeTF1MEjZAU8cYVkHLVfchbjLV/vWMwkfaa44TRQy+mQmyJLepTB7cSzlBw Q4lFwiVU4GQUd8YmbunV+zzdLJoI03+sh2mj+aANJYGF2Ns5hTOOOybKwu5pAGy5 /cnEfrmvS8RzThS1diI7ioX6YUbHpjWEBj545LIxTaSFmRoGDboEy5yKTGLBAgMB AAGjggOSMIIDjjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTanOMy7qsX72Jw smmZDZSAmd1QSTAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRDk5OUQzQTY4ODQyRjk5RkJCNTk3RjM4 QjJDM0VCRkFFRTgwNEQ2MUQ2MDA4NjNDRTY3OTdGMjUzNDg0QzQ1Qi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9EOTk5RDNBNjg4NDJGOTlGQkI1OTdGMzhCMkMzRUJGQUVFODA0RDYxRDYw MDg2M0NFNjc5N0YyNTM0ODRDNDVCLzAvREE5Q0UzMzJFRUFCMTdFRjYyNzBCMjY5 OTkwRDk0ODA5OURENTA0OS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAyBc1MAwDBAPI F6gDBADIF6owDQYJKoZIhvcNAQELBQADggEBACIm9JBLoHbQdJ+QBBWOEp4Dk60j q1dHBaTlZwCOnu/3IBIaORdtycVFyeFM0SUCB727tLE96nInri1PJy9B+HH4yxKu Px1ysQcgbBdnqH9CjBJzzsPTnYy4o7dVlmeSFCcLfwGknA/2vX4sTO5qVu8GU2ld /cTy7tusDfU4hd0i2/ySgzfr1MP3myK5iOduGToDTcE4pQ1ic6RGZx+fjFPegcrc Zsxk2OsQu9tv8ogMsKN/q1/umZNGUpgKfCM6Lu1RnxKcT+oIJ94OpyGhB9peAJYZ qQC2J/uoWK6P1lZaJcoLOPgwL/qwXbxOAmexnIkB85IDfc9ibY/NHHpYxSw= -----END CERTIFICATE-----Generated at Mon Mar 2 17:15:17 2026 by rpki-client