$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC553BD05B33548C342568566291E719B4FA73B9.cer File: DC553BD05B33548C342568566291E719B4FA73B9.cer (raw, json) Hash identifier: Kh/b5hDHBrL2SKOgSDTmOTvg92f3akPX/8NCGXs1t3E= Subject key identifier: DC:55:3B:D0:5B:33:54:8C:34:25:68:56:62:91:E7:19:B4:FA:73:B9 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 1B4346F45A829FDEF6049E41D33ACE0BEC6A0888 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/DAC2BC754BFDD4535D49F99D0671743C3C0825A6B6D57B48E7350451BA87E9EF/0/DC553BD05B33548C342568566291E719B4FA73B9.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/DAC2BC754BFDD4535D49F99D0671743C3C0825A6B6D57B48E7350451BA87E9EF/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 12:11:40 +0000 Certificate not after: Wed 27 Jan 2027 12:16:40 +0000 Subordinate resources: IP: 138.36.144.0/23 IP: 138.36.147.0/24 IP: 181.199.128.0/20 IP: 186.64.124.0/22 IP: 201.158.52.0/22 IP: 2803:6500::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:43:46:f4:5a:82:9f:de:f6:04:9e:41:d3:3a:ce:0b:ec:6a:08:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 12:11:40 2026 GMT Not After : Jan 27 12:16:40 2027 GMT Subject: CN=DC553BD05B33548C342568566291E719B4FA73B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e3:be:98:6f:88:b3:4b:2d:2b:af:52:67:3b: c0:b4:73:99:f9:8d:ac:c8:87:fa:1a:31:4c:65:fd: 46:07:3d:69:bd:8c:b8:77:74:94:0b:04:ce:e5:33: fe:11:e1:c4:ba:d7:f9:7c:42:41:5c:54:f6:a9:9a: 26:72:33:9d:6d:0b:85:bf:64:61:b8:52:47:42:30: db:03:74:8e:bb:48:46:fe:b5:09:af:c2:aa:6a:d4: c8:ff:02:d3:12:83:fd:0c:09:2c:0b:1e:f7:bd:66: 15:26:f0:4c:d7:74:5c:d0:94:f9:54:92:f1:41:03: 33:8b:e2:d6:11:8c:8d:a4:0c:fa:d9:88:7c:3c:20: e5:ff:69:54:fd:9e:64:1d:ca:42:00:d2:a5:0a:78: e0:72:9f:37:f4:c0:b1:12:05:bf:0c:5f:9a:80:45: 6e:1e:a6:9c:f0:37:bd:ab:27:fd:d1:41:84:e8:a4: 03:73:74:83:22:16:f9:9e:6a:76:7f:81:19:11:dc: 39:d1:39:76:b8:ab:27:66:b7:09:9a:f3:c5:56:13: 1b:19:bf:e2:21:b2:76:56:1f:8d:fd:f5:cd:7c:32: 6d:c8:4c:17:73:e7:fa:df:52:84:c5:75:60:e2:7d: 5e:d4:52:43:bf:72:ef:dc:b8:b3:c4:a0:01:2d:1c: c2:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DC:55:3B:D0:5B:33:54:8C:34:25:68:56:62:91:E7:19:B4:FA:73:B9 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/DAC2BC754BFDD4535D49F99D0671743C3C0825A6B6D57B48E7350451BA87E9EF/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/DAC2BC754BFDD4535D49F99D0671743C3C0825A6B6D57B48E7350451BA87E9EF/0/DC553BD05B33548C342568566291E719B4FA73B9.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.36.144.0/23 138.36.147.0/24 181.199.128.0/20 186.64.124.0/22 201.158.52.0/22 IPv6: 2803:6500::/32 Signature Algorithm: sha256WithRSAEncryption 5b:3e:f7:b4:c8:0e:07:6e:d0:d1:00:15:6e:ad:78:f7:c9:16: 23:14:af:da:8a:e9:13:d8:52:5a:dd:94:b7:03:95:68:6d:16: 65:38:60:aa:6d:f2:b1:ef:6d:0c:b9:3b:ed:cd:fe:1f:58:5e: 46:7c:14:b9:2c:20:97:08:02:e5:da:75:3b:a1:14:19:ce:dc: cb:45:5e:f8:ca:c9:a3:88:5e:65:f0:13:9c:a2:79:85:30:86: 81:3c:68:42:08:62:ba:c5:cd:3f:81:84:4b:54:53:60:5a:e5: e9:cb:a8:cb:1e:5b:dc:5f:c7:81:0b:3a:41:6e:e5:f3:b8:d1: f5:3e:9a:f4:d3:1d:59:3d:5d:d4:a9:27:b5:ce:67:fe:55:2d: 13:04:ce:72:02:13:56:48:b5:2d:1a:28:b2:a3:d0:0b:df:4d: 4b:07:54:1d:5c:8e:21:01:6c:17:75:c6:fd:d5:b8:a3:1d:ec: 1b:f1:ac:dc:4b:06:45:95:3f:fa:20:b9:c9:a8:4f:0f:bd:39: d4:fd:a0:54:6b:6a:91:3e:00:e2:d2:ad:d6:eb:09:bf:ad:6d: db:d4:84:4f:8a:61:2b:dd:5d:9e:cb:7e:06:47:87:5b:f7:2a: 38:ae:c1:2d:69:2f:09:1d:7b:dd:f3:8b:d0:a6:50:bb:df:42: 0a:b4:05:4c -----BEGIN CERTIFICATE----- MIIGoTCCBYmgAwIBAgIUG0NG9FqCn972BJ5B0zrOC+xqCIgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgxMjExNDBaFw0yNzAxMjcxMjE2NDBaMDMxMTAvBgNV BAMTKERDNTUzQkQwNUIzMzU0OEMzNDI1Njg1NjYyOTFFNzE5QjRGQTczQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+476Yb4izSy0rr1JnO8C0c5n5 jazIh/oaMUxl/UYHPWm9jLh3dJQLBM7lM/4R4cS61/l8QkFcVPapmiZyM51tC4W/ ZGG4UkdCMNsDdI67SEb+tQmvwqpq1Mj/AtMSg/0MCSwLHve9ZhUm8EzXdFzQlPlU kvFBAzOL4tYRjI2kDPrZiHw8IOX/aVT9nmQdykIA0qUKeOBynzf0wLESBb8MX5qA RW4eppzwN72rJ/3RQYTopANzdIMiFvmeanZ/gRkR3DnROXa4qydmtwma88VWExsZ v+IhsnZWH4399c18Mm3ITBdz5/rfUoTFdWDifV7UUkO/cu/cuLPEoAEtHMJxAgMB AAGjggOrMIIDpzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTcVTvQWzNUjDQl aFZikecZtPpzuTAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvREFDMkJDNzU0QkZERDQ1MzVENDlGOTlE MDY3MTc0M0MzQzA4MjVBNkI2RDU3QjQ4RTczNTA0NTFCQTg3RTlFRi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9EQUMyQkM3NTRCRkRENDUzNUQ0OUY5OUQwNjcxNzQzQzNDMDgyNUE2QjZE NTdCNDhFNzM1MDQ1MUJBODdFOUVGLzAvREM1NTNCRDA1QjMzNTQ4QzM0MjU2ODU2 NjI5MUU3MTlCNEZBNzNCOS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQBiiSQAwQAiiST AwQEtceAAwQCukB8AwQCyZ40MA0EAgACMAcDBQAoA2UAMA0GCSqGSIb3DQEBCwUA A4IBAQBbPve0yA4HbtDRABVurXj3yRYjFK/aiukT2FJa3ZS3A5VobRZlOGCqbfKx 720MuTvtzf4fWF5GfBS5LCCXCALl2nU7oRQZztzLRV74ysmjiF5l8BOconmFMIaB PGhCCGK6xc0/gYRLVFNgWuXpy6jLHlvcX8eBCzpBbuXzuNH1Ppr00x1ZPV3UqSe1 zmf+VS0TBM5yAhNWSLUtGiiyo9AL301LB1QdXI4hAWwXdcb91bijHewb8azcSwZF lT/6ILnJqE8PvTnU/aBUa2qRPgDi0q3W6wm/rW3b1IRPimEr3V2ey34GR4db9yo4 rsEtaS8JHXvd84vQplC730IKtAVM -----END CERTIFICATE-----Generated at Mon Mar 2 17:59:34 2026 by rpki-client