$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E13DF25932B461EA2CDEF6604083F2D237A0A51F.cer File: E13DF25932B461EA2CDEF6604083F2D237A0A51F.cer (raw, json) Hash identifier: iZatHYWhJ+vPRHwPopOk11Bg1V9qZH+VwTF6zEMXcyA= Subject key identifier: E1:3D:F2:59:32:B4:61:EA:2C:DE:F6:60:40:83:F2:D2:37:A0:A5:1F Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 7E02B4149D6272B0CC9AB1935A21594B4DA8CCE3 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/05A1F4E6E240A287B53DD1A8072B56DF02C20D0839C10B86ADE780AF14C8A06F/0/E13DF25932B461EA2CDEF6604083F2D237A0A51F.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/05A1F4E6E240A287B53DD1A8072B56DF02C20D0839C10B86ADE780AF14C8A06F/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 13:04:36 +0000 Certificate not after: Wed 27 Jan 2027 13:09:36 +0000 Subordinate resources: AS: 264650 IP: 200.10.191.0/24 IP: 2801:1d:1000::/48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 05 Mar 2026 11:41:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:02:b4:14:9d:62:72:b0:cc:9a:b1:93:5a:21:59:4b:4d:a8:cc:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 13:04:36 2026 GMT Not After : Jan 27 13:09:36 2027 GMT Subject: CN=E13DF25932B461EA2CDEF6604083F2D237A0A51F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:f9:c6:fb:fd:c4:9d:92:de:c5:f8:da:f5:a1: e9:fd:51:a5:b3:fe:fb:c1:37:4a:23:cf:29:27:2a: 07:c1:00:14:cd:5f:f8:1e:b2:93:19:09:a2:7b:65: 47:03:5c:1b:8e:5d:7d:1e:ef:ea:d7:4c:d3:04:ce: da:76:fe:f0:e3:34:8f:70:65:af:9c:01:65:f5:d5: b0:00:4e:8a:b8:18:3c:a7:cd:1e:44:5b:d2:e7:db: 5e:44:23:cd:00:b9:8a:15:9c:07:c9:f4:24:80:f0: a0:24:91:26:63:9b:43:af:71:f1:55:61:24:2b:57: ea:9b:39:27:7a:31:3e:bc:86:04:2d:2c:81:9c:f1: b3:ad:d1:23:a5:79:55:e8:54:6f:33:47:ed:b9:31: ca:53:b3:8f:c6:fe:0b:cf:e9:8a:d8:6c:ad:18:8d: ea:06:72:75:f8:8f:2b:e0:7d:95:b2:f8:03:e7:65: b0:08:90:51:a7:c0:23:25:a6:38:1c:1d:47:c8:4f: 26:47:df:b4:a8:7a:60:c1:ed:4d:01:18:46:c2:b9: 82:97:43:68:fb:69:21:10:a1:2b:2c:6b:0c:f9:ac: 89:34:43:97:86:bd:96:93:32:68:73:ef:c1:71:5a: d9:6f:a1:40:98:92:4f:67:fe:f8:34:7c:74:4c:04: fb:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E1:3D:F2:59:32:B4:61:EA:2C:DE:F6:60:40:83:F2:D2:37:A0:A5:1F X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/05A1F4E6E240A287B53DD1A8072B56DF02C20D0839C10B86ADE780AF14C8A06F/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/05A1F4E6E240A287B53DD1A8072B56DF02C20D0839C10B86ADE780AF14C8A06F/0/E13DF25932B461EA2CDEF6604083F2D237A0A51F.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.10.191.0/24 IPv6: 2801:1d:1000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264650 Signature Algorithm: sha256WithRSAEncryption 06:13:d0:d2:22:34:9f:e3:cb:45:26:bd:07:f0:57:89:b7:19: d5:4a:e9:02:fb:3d:11:d9:5f:70:16:a9:b7:a4:0b:c4:0d:85: 99:89:b9:c8:54:01:3f:5d:0e:34:d5:72:68:ce:cd:0b:07:84: 5c:65:ae:09:a0:0c:4c:9b:83:f8:8c:53:22:e5:f6:43:69:4a: 53:de:cd:52:1b:16:31:f7:63:42:37:52:5f:e9:c6:ce:95:ca: 0f:13:4a:bf:20:d7:ac:d1:2b:23:56:36:6a:2c:fa:b6:fe:96: 62:0d:bf:ba:6d:91:6d:43:bd:99:8f:6e:8b:98:e1:77:70:10: 62:d4:70:80:e9:8d:22:9b:24:90:6d:e5:40:57:89:08:1f:24: c1:65:cc:28:e5:ce:16:a9:6a:aa:17:48:7e:3f:00:8f:8d:3b: e7:ba:79:10:b3:6f:0a:61:3d:1b:8e:1c:7c:c4:0c:ab:15:e3: c6:e6:c3:56:73:a5:9e:17:e5:bf:8f:6b:67:3f:02:da:e8:fb: 20:08:4a:32:b4:48:ea:19:a1:27:e1:8f:87:41:ad:6a:0b:47: 0d:c3:52:8a:94:7a:26:c9:0d:1b:d3:fa:52:ac:7e:dd:2d:67: 4d:08:c1:52:4e:ab:bd:e4:61:e4:b2:52:13:13:27:ca:5f:89: 97:41:65:83 -----BEGIN CERTIFICATE----- MIIGpzCCBY+gAwIBAgIUfgK0FJ1icrDMmrGTWiFZS02ozOMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgxMzA0MzZaFw0yNzAxMjcxMzA5MzZaMDMxMTAvBgNV BAMTKEUxM0RGMjU5MzJCNDYxRUEyQ0RFRjY2MDQwODNGMkQyMzdBMEE1MUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDy+cb7/cSdkt7F+Nr1oen9UaWz /vvBN0ojzyknKgfBABTNX/gespMZCaJ7ZUcDXBuOXX0e7+rXTNMEztp2/vDjNI9w Za+cAWX11bAAToq4GDynzR5EW9Ln215EI80AuYoVnAfJ9CSA8KAkkSZjm0OvcfFV YSQrV+qbOSd6MT68hgQtLIGc8bOt0SOleVXoVG8zR+25McpTs4/G/gvP6YrYbK0Y jeoGcnX4jyvgfZWy+APnZbAIkFGnwCMlpjgcHUfITyZH37SoemDB7U0BGEbCuYKX Q2j7aSEQoSssawz5rIk0Q5eGvZaTMmhz78FxWtlvoUCYkk9n/vg0fHRMBPsLAgMB AAGjggOxMIIDrTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBThPfJZMrRh6ize 9mBAg/LSN6ClHzAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMDVBMUY0RTZFMjQwQTI4N0I1M0REMUE4 MDcyQjU2REYwMkMyMEQwODM5QzEwQjg2QURFNzgwQUYxNEM4QTA2Ri8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8wNUExRjRFNkUyNDBBMjg3QjUzREQxQTgwNzJCNTZERjAyQzIwRDA4MzlD MTBCODZBREU3ODBBRjE0QzhBMDZGLzAvRTEzREYyNTkzMkI0NjFFQTJDREVGNjYw NDA4M0YyRDIzN0EwQTUxRi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAyAq/MA8EAgAC MAkDBwAoAQAdEAAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAnKMA0GCSqGSIb3 DQEBCwUAA4IBAQAGE9DSIjSf48tFJr0H8FeJtxnVSukC+z0R2V9wFqm3pAvEDYWZ ibnIVAE/XQ401XJozs0LB4RcZa4JoAxMm4P4jFMi5fZDaUpT3s1SGxYx92NCN1Jf 6cbOlcoPE0q/INes0SsjVjZqLPq2/pZiDb+6bZFtQ72Zj26LmOF3cBBi1HCA6Y0i mySQbeVAV4kIHyTBZcwo5c4WqWqqF0h+PwCPjTvnunkQs28KYT0bjhx8xAyrFePG 5sNWc6WeF+W/j2tnPwLa6PsgCEoytEjqGaEn4Y+HQa1qC0cNw1KKlHomyQ0b0/pS rH7dLWdNCMFSTqu95GHkslITEyfKX4mXQWWD -----END CERTIFICATE-----Generated at Mon Mar 2 13:54:59 2026 by rpki-client