$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E19A0BCC458A8B79C10780DE212FA269EC745A1E.cer File: E19A0BCC458A8B79C10780DE212FA269EC745A1E.cer (raw, json) Hash identifier: WZEVxdpzL+jkldzQ8aEcxnKHS2O2Li+R6vcLt4fZTVc= Subject key identifier: E1:9A:0B:CC:45:8A:8B:79:C1:07:80:DE:21:2F:A2:69:EC:74:5A:1E Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 572C79CCEA478B2B7CC3E36D45465007BC0787ED Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/439B445917F6A0460C25556DF8AB4CD115C16DD841EF545A26B555EE82DE8302/0/E19A0BCC458A8B79C10780DE212FA269EC745A1E.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/439B445917F6A0460C25556DF8AB4CD115C16DD841EF545A26B555EE82DE8302/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 27 Jan 2026 19:50:34 +0000 Certificate not after: Tue 26 Jan 2027 19:55:34 +0000 Subordinate resources: AS: 266811 IP: 160.20.246.0/24 IP: 2803:58a0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:2c:79:cc:ea:47:8b:2b:7c:c3:e3:6d:45:46:50:07:bc:07:87:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 27 19:50:34 2026 GMT Not After : Jan 26 19:55:34 2027 GMT Subject: CN=E19A0BCC458A8B79C10780DE212FA269EC745A1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e3:b5:3b:28:cd:14:b7:c8:ae:5f:ae:82:11: 6a:28:76:62:ac:29:e6:bc:ad:23:ef:36:6c:f6:a6: 03:7d:de:c9:4b:bd:c1:01:13:82:07:0b:c3:49:6c: 9f:00:eb:10:77:e2:c2:f3:16:ed:27:45:2f:c5:fd: bc:35:33:bf:46:5b:e0:15:81:54:f9:cd:1d:5b:35: a0:8a:13:4f:e7:4f:4c:a9:51:01:29:fc:40:9c:52: 62:9d:a5:65:3e:55:a4:a4:9c:77:5d:5e:00:77:d2: 41:0c:68:7a:85:4a:dd:12:c6:71:90:78:ee:0b:70: d5:66:15:25:4c:9e:eb:61:57:9a:0a:4b:48:41:b5: cc:e4:b1:95:c7:75:4b:ae:01:8c:d3:81:51:25:97: 36:b1:d0:cc:10:41:db:03:9b:52:f2:12:27:06:94: ba:5e:d7:3c:86:5d:ee:5c:2a:ed:a9:ae:81:b1:a3: c5:a5:e9:bb:eb:22:59:b3:db:de:bc:68:ee:fc:4a: b8:4a:00:9f:48:6e:22:a2:d1:9e:bb:b6:07:35:bb: b8:43:02:24:9c:35:1a:70:f1:ec:48:33:07:c8:db: 9a:db:2c:a5:b8:c4:f0:7a:d4:ca:81:18:7c:2b:3a: 6b:2d:d6:ad:a5:56:40:27:c1:b5:6c:6e:7f:31:9a: 8c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E1:9A:0B:CC:45:8A:8B:79:C1:07:80:DE:21:2F:A2:69:EC:74:5A:1E X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/439B445917F6A0460C25556DF8AB4CD115C16DD841EF545A26B555EE82DE8302/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/439B445917F6A0460C25556DF8AB4CD115C16DD841EF545A26B555EE82DE8302/0/E19A0BCC458A8B79C10780DE212FA269EC745A1E.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.20.246.0/24 IPv6: 2803:58a0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266811 Signature Algorithm: sha256WithRSAEncryption 60:7b:17:8e:06:5a:40:4e:e1:52:83:47:52:70:b4:35:29:18: 61:7e:30:8e:4e:c1:aa:23:d3:a0:c7:04:74:19:4b:f0:e0:94: 73:74:d7:04:89:1a:17:cc:a3:e6:54:6f:16:d3:ac:4c:4f:63: 20:15:70:a7:25:bc:e1:c1:f9:e5:3b:24:1a:5b:9b:bc:af:99: cd:62:85:41:c0:30:67:21:a6:66:78:e6:5b:90:8f:30:a3:7a: 36:f5:df:3b:63:95:3e:dc:ab:21:e3:43:df:ce:46:18:76:26: 3a:0e:b7:74:3f:b6:8e:50:16:0b:4e:c6:28:dc:d5:a7:52:72: 58:4e:4e:52:8d:3e:f5:bc:79:c8:b1:0f:65:08:32:06:1e:3d: 0f:11:0e:15:66:35:e6:af:7b:70:fb:58:b5:00:ac:c9:cd:ce: aa:2b:1a:b2:3d:06:03:c0:f2:90:0f:ca:8b:a7:58:0e:ac:0d: 5f:b6:c3:2b:ba:34:fd:28:ff:64:84:ee:c2:ee:c5:06:63:71: 3c:60:7c:29:7c:c0:89:4d:55:33:bf:23:f4:40:6e:1b:fb:81: 6c:2a:b9:53:4e:9c:b4:c9:1d:a8:3b:1a:20:3b:60:0e:ec:b1: 5a:6a:2c:04:af:1a:95:37:cb:bb:88:13:b0:93:b5:a3:32:b5: 60:cf:7a:03 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUVyx5zOpHiyt8w+NtRUZQB7wHh+0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjcxOTUwMzRaFw0yNzAxMjYxOTU1MzRaMDMxMTAvBgNV BAMTKEUxOUEwQkNDNDU4QThCNzlDMTA3ODBERTIxMkZBMjY5RUM3NDVBMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm47U7KM0Ut8iuX66CEWoodmKs Kea8rSPvNmz2pgN93slLvcEBE4IHC8NJbJ8A6xB34sLzFu0nRS/F/bw1M79GW+AV gVT5zR1bNaCKE0/nT0ypUQEp/ECcUmKdpWU+VaSknHddXgB30kEMaHqFSt0SxnGQ eO4LcNVmFSVMnuthV5oKS0hBtczksZXHdUuuAYzTgVEllzax0MwQQdsDm1LyEicG lLpe1zyGXe5cKu2proGxo8Wl6bvrIlmz2968aO78SrhKAJ9IbiKi0Z67tgc1u7hD AiScNRpw8exIMwfI25rbLKW4xPB61MqBGHwrOmst1q2lVkAnwbVsbn8xmowZAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBThmgvMRYqLecEH gN4hL6Jp7HRaHjAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNDM5QjQ0NTkxN0Y2QTA0NjBDMjU1NTZE RjhBQjRDRDExNUMxNkREODQxRUY1NDVBMjZCNTU1RUU4MkRFODMwMi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80MzlCNDQ1OTE3RjZBMDQ2MEMyNTU1NkRGOEFCNENEMTE1QzE2REQ4NDFF RjU0NUEyNkI1NTVFRTgyREU4MzAyLzAvRTE5QTBCQ0M0NThBOEI3OUMxMDc4MERF MjEyRkEyNjlFQzc0NUExRS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAoBT2MA0EAgAC MAcDBQAoA1igMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQSOzANBgkqhkiG9w0B AQsFAAOCAQEAYHsXjgZaQE7hUoNHUnC0NSkYYX4wjk7BqiPToMcEdBlL8OCUc3TX BIkaF8yj5lRvFtOsTE9jIBVwpyW84cH55TskGlubvK+ZzWKFQcAwZyGmZnjmW5CP MKN6NvXfO2OVPtyrIeND385GGHYmOg63dD+2jlAWC07GKNzVp1JyWE5OUo0+9bx5 yLEPZQgyBh49DxEOFWY15q97cPtYtQCsyc3Oqisasj0GA8DykA/Ki6dYDqwNX7bD K7o0/Sj/ZITuwu7FBmNxPGB8KXzAiU1VM78j9EBuG/uBbCq5U06ctMkdqDsaIDtg DuyxWmosBK8alTfLu4gTsJO1ozK1YM96Aw== -----END CERTIFICATE-----Generated at Mon Mar 2 21:45:42 2026 by rpki-client