$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E0E7CD1353F10CB00107B13CB5F25F283F514497.cer File: E0E7CD1353F10CB00107B13CB5F25F283F514497.cer (raw, json) Hash identifier: SAxas3dGIVaVpA0CWEZkvxowwratz0l3fM85zKtE5O0= Subject key identifier: E0:E7:CD:13:53:F1:0C:B0:01:07:B1:3C:B5:F2:5F:28:3F:51:44:97 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 7B7B5A3259693EAED8315A6BD8D57B028D4BC105 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/0E6D8B623C55A6B5BD8A9E9C82D42C59416813E0A04562777718635C37C7BCD1/0/E0E7CD1353F10CB00107B13CB5F25F283F514497.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/0E6D8B623C55A6B5BD8A9E9C82D42C59416813E0A04562777718635C37C7BCD1/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 27 Jan 2026 19:32:31 +0000 Certificate not after: Tue 26 Jan 2027 19:37:31 +0000 Subordinate resources: AS: 272086 IP: 189.85.40.0/22 IP: 2803:21e0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:7b:5a:32:59:69:3e:ae:d8:31:5a:6b:d8:d5:7b:02:8d:4b:c1:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 27 19:32:31 2026 GMT Not After : Jan 26 19:37:31 2027 GMT Subject: CN=E0E7CD1353F10CB00107B13CB5F25F283F514497 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:88:34:b0:ef:d4:51:0e:47:06:b5:a9:7c:a8: 87:f7:36:06:e6:df:2d:de:bc:88:41:70:b3:79:48: 7c:1c:b3:09:1a:c6:5a:79:1f:36:4f:17:45:42:d5: 9d:f2:7e:da:1e:b6:ef:56:ad:43:ee:dd:2c:d7:bd: d8:5e:68:0d:a4:07:66:ee:b3:97:59:b9:e7:ea:69: d1:d3:89:81:55:29:a6:3a:f2:7a:99:34:d2:8c:3c: e4:9c:8c:a8:79:3a:16:84:b6:16:70:88:ed:bf:0c: fe:43:45:c1:e1:a8:58:3c:cb:24:fc:ad:f4:e4:aa: 5b:92:55:be:ba:14:3a:a9:1e:e2:16:37:0c:45:36: 97:40:93:76:53:33:2f:07:eb:e6:87:0f:b0:6a:51: d4:45:a3:69:d2:92:42:04:a2:f4:8e:c8:f6:13:22: 20:fb:cf:9b:77:3e:4f:aa:a8:07:59:2d:2c:4a:06: 1e:fa:da:07:7a:ef:30:2d:a5:8e:61:cb:f7:fe:54: 8b:4f:98:62:b5:2c:e4:1b:45:bf:da:1f:c7:45:47: 19:0c:89:ab:bb:23:e4:47:e0:68:8b:34:a2:f4:0e: ed:fc:10:bf:2a:f7:b5:03:ff:86:b8:35:ce:22:97: 27:6f:3f:34:26:b6:1d:05:51:b4:b1:67:11:62:14: f7:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E0:E7:CD:13:53:F1:0C:B0:01:07:B1:3C:B5:F2:5F:28:3F:51:44:97 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0E6D8B623C55A6B5BD8A9E9C82D42C59416813E0A04562777718635C37C7BCD1/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0E6D8B623C55A6B5BD8A9E9C82D42C59416813E0A04562777718635C37C7BCD1/0/E0E7CD1353F10CB00107B13CB5F25F283F514497.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 189.85.40.0/22 IPv6: 2803:21e0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 272086 Signature Algorithm: sha256WithRSAEncryption 11:0f:6a:d1:fc:65:b4:a6:9a:8d:22:74:fb:3c:9c:49:9e:38: 07:c7:96:6b:ae:fb:f3:5a:27:86:15:05:c2:2e:87:40:c0:dc: 54:2b:7b:e7:81:b7:e9:8e:cf:fe:38:04:85:55:a6:07:08:77: 28:11:02:33:24:5c:22:25:21:ba:3e:ce:00:e4:90:f2:8d:ba: 51:5b:c4:63:94:d4:27:35:29:73:7d:9d:2d:53:db:9c:f8:63: 4a:96:20:eb:d6:0a:aa:b6:62:cb:dd:ef:8e:1f:1c:8b:67:5e: 95:93:e3:fb:d9:7a:63:70:6c:d4:4c:96:b3:ea:d0:a7:b8:4b: 50:f9:dd:a6:05:db:ad:7b:fd:0f:d8:aa:e7:e4:6c:68:48:4f: 32:b5:41:2a:24:df:01:ea:0c:e4:a5:3f:66:07:d9:f6:11:d5: ef:a4:68:ba:f1:be:9f:cf:76:17:bf:2b:fb:bd:d8:d7:75:4d: e4:fb:aa:19:71:73:de:10:ba:38:11:df:1c:24:d9:02:99:66: 9c:f4:32:4c:5b:a3:4b:a5:be:38:54:01:84:f3:0f:07:e4:58: 47:95:53:c1:93:5d:d4:62:52:ef:73:00:c0:1d:48:fc:b4:a0: 1d:fa:c3:fb:e7:73:86:77:b3:4a:c0:25:64:86:3b:ed:bf:e2: ed:7e:21:40 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUe3taMllpPq7YMVpr2NV7Ao1LwQUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjcxOTMyMzFaFw0yNzAxMjYxOTM3MzFaMDMxMTAvBgNV BAMTKEUwRTdDRDEzNTNGMTBDQjAwMTA3QjEzQ0I1RjI1RjI4M0Y1MTQ0OTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwiDSw79RRDkcGtal8qIf3Ngbm 3y3evIhBcLN5SHwcswkaxlp5HzZPF0VC1Z3yftoetu9WrUPu3SzXvdheaA2kB2bu s5dZuefqadHTiYFVKaY68nqZNNKMPOScjKh5OhaEthZwiO2/DP5DRcHhqFg8yyT8 rfTkqluSVb66FDqpHuIWNwxFNpdAk3ZTMy8H6+aHD7BqUdRFo2nSkkIEovSOyPYT IiD7z5t3Pk+qqAdZLSxKBh762gd67zAtpY5hy/f+VItPmGK1LOQbRb/aH8dFRxkM iau7I+RH4GiLNKL0Du38EL8q97UD/4a4Nc4ilydvPzQmth0FUbSxZxFiFPfxAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTg580TU/EMsAEH sTy18l8oP1FElzAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMEU2RDhCNjIzQzU1QTZCNUJEOEE5RTlD ODJENDJDNTk0MTY4MTNFMEEwNDU2Mjc3NzcxODYzNUMzN0M3QkNEMS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8wRTZEOEI2MjNDNTVBNkI1QkQ4QTlFOUM4MkQ0MkM1OTQxNjgxM0UwQTA0 NTYyNzc3NzE4NjM1QzM3QzdCQ0QxLzAvRTBFN0NEMTM1M0YxMENCMDAxMDdCMTND QjVGMjVGMjgzRjUxNDQ5Ny5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCvVUoMA0EAgAC MAcDBQAoAyHgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQm1jANBgkqhkiG9w0B AQsFAAOCAQEAEQ9q0fxltKaajSJ0+zycSZ44B8eWa67781onhhUFwi6HQMDcVCt7 54G36Y7P/jgEhVWmBwh3KBECMyRcIiUhuj7OAOSQ8o26UVvEY5TUJzUpc32dLVPb nPhjSpYg69YKqrZiy93vjh8ci2delZPj+9l6Y3Bs1EyWs+rQp7hLUPndpgXbrXv9 D9iq5+RsaEhPMrVBKiTfAeoM5KU/ZgfZ9hHV76RouvG+n892F78r+73Y13VN5Puq GXFz3hC6OBHfHCTZAplmnPQyTFujS6W+OFQBhPMPB+RYR5VTwZNd1GJS73MAwB1I /LSgHfrD++dzhnezSsAlZIY77b/i7X4hQA== -----END CERTIFICATE-----Generated at Mon Mar 2 14:44:04 2026 by rpki-client