$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E545F04AB379D8134DE636206977A39FA5008712.cer File: E545F04AB379D8134DE636206977A39FA5008712.cer (raw, json) Hash identifier: kxcMBzwSBu6lssTsyun+p2RFU0IfR3NAgnfzWeM5LTA= Subject key identifier: E5:45:F0:4A:B3:79:D8:13:4D:E6:36:20:69:77:A3:9F:A5:00:87:12 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 4FE4099590959DD3E6DBD3B4F936D37A939EFB0F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/685D74E7B9DDC4DA6522992D46C0E68F8F7B62FE759C79B27F4D3958F4291EF6/0/E545F04AB379D8134DE636206977A39FA5008712.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/685D74E7B9DDC4DA6522992D46C0E68F8F7B62FE759C79B27F4D3958F4291EF6/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 27 Jan 2026 19:04:17 +0000 Certificate not after: Tue 26 Jan 2027 19:09:17 +0000 Subordinate resources: AS: 28048 IP: 190.112.64.0/18 IP: 191.103.0.0/18 IP: 200.91.32.0/21 IP: 2803:ea80::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:e4:09:95:90:95:9d:d3:e6:db:d3:b4:f9:36:d3:7a:93:9e:fb:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 27 19:04:17 2026 GMT Not After : Jan 26 19:09:17 2027 GMT Subject: CN=E545F04AB379D8134DE636206977A39FA5008712 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:9f:f1:20:4f:f7:b0:55:69:ec:05:1a:0e:87: b3:39:24:df:54:cb:37:28:dd:5f:75:df:43:25:fc: eb:77:a0:27:a2:20:be:5f:61:64:10:b8:ff:87:71: f7:d8:8a:9f:9a:1b:0b:51:2e:2c:6b:fc:90:8d:85: 87:7f:64:8a:b4:d3:3f:5e:ce:8b:82:ae:ed:6e:94: d6:c8:f5:4c:12:6d:c2:6e:a6:fa:1a:a9:c9:2b:ac: 59:5f:dc:66:93:b2:74:e5:27:fe:94:d9:0c:ff:2e: a7:e1:58:83:33:1f:c4:09:59:81:71:43:79:f0:1d: db:94:7a:1c:37:3b:fd:3e:d5:89:e1:cd:08:46:43: 4a:d1:f2:d9:11:21:00:d8:33:a9:30:65:6e:73:9c: 11:26:b1:98:4b:53:5a:bd:e9:f5:2f:60:d9:ce:95: ea:42:00:b4:b4:8f:53:d0:74:2d:2b:b5:0b:8c:d1: c7:f9:f1:15:fd:4c:00:d1:32:d1:3c:f7:08:3c:2b: 83:3c:4c:e0:5c:2d:39:87:ee:23:7f:22:c5:a4:c3: f6:b5:c5:1e:b8:f5:68:31:a5:d5:db:94:a9:79:df: 9e:03:08:49:6e:62:ff:a0:b8:35:ab:e0:8f:6b:b3: 92:7d:c3:fa:ec:3c:ee:be:8d:64:5e:ef:cc:1b:4d: 8b:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E5:45:F0:4A:B3:79:D8:13:4D:E6:36:20:69:77:A3:9F:A5:00:87:12 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/685D74E7B9DDC4DA6522992D46C0E68F8F7B62FE759C79B27F4D3958F4291EF6/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/685D74E7B9DDC4DA6522992D46C0E68F8F7B62FE759C79B27F4D3958F4291EF6/0/E545F04AB379D8134DE636206977A39FA5008712.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 190.112.64.0/18 191.103.0.0/18 200.91.32.0/21 IPv6: 2803:ea80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28048 Signature Algorithm: sha256WithRSAEncryption 74:af:31:0f:2b:e6:e5:ed:47:13:89:d1:eb:26:d7:1a:27:58: bb:3d:1b:6a:d1:5c:39:9c:9b:4e:bb:0a:82:24:c2:cc:c1:d8: 27:c0:4c:5e:24:58:d7:17:be:10:fe:c8:1b:ed:de:06:0f:45: 40:3c:f8:34:a0:7a:e8:36:4d:f1:0b:16:80:e1:5f:f6:c6:3f: f7:9a:e0:65:60:93:81:e8:e4:15:05:a3:0c:62:f8:ca:21:ce: 28:29:c0:6d:58:e9:c8:73:7a:f6:2b:0e:8d:ce:c4:e0:bc:33: 9f:03:66:4c:45:07:9c:77:0d:a8:cb:7f:9e:9d:0a:84:4a:7a: 90:48:92:cc:8f:20:47:62:43:7a:df:ea:24:74:96:0b:d2:28: 36:aa:5a:96:5c:4d:96:54:93:ce:4c:8d:41:28:d7:e4:d8:d0: 0b:ba:e0:af:15:bf:ac:b3:07:04:60:79:5e:54:ca:3d:3b:2f: 2e:cb:2c:1e:73:25:76:55:22:5d:1a:38:0c:da:ed:3e:da:db: 3a:ff:ff:c7:d0:40:b8:fc:30:ea:56:18:8b:03:44:e3:3f:bb: b0:11:c6:95:ce:df:f0:bc:a0:f4:ef:4d:6a:d2:f5:54:e8:2d: d9:e7:6d:e9:83:5c:19:58:88:02:ec:aa:af:62:7a:fe:6c:a1: f1:82:12:56 -----BEGIN CERTIFICATE----- MIIGsDCCBZigAwIBAgIUT+QJlZCVndPm29O0+TbTepOe+w8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjcxOTA0MTdaFw0yNzAxMjYxOTA5MTdaMDMxMTAvBgNV BAMTKEU1NDVGMDRBQjM3OUQ4MTM0REU2MzYyMDY5NzdBMzlGQTUwMDg3MTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCen/EgT/ewVWnsBRoOh7M5JN9U yzco3V9130Ml/Ot3oCeiIL5fYWQQuP+HcffYip+aGwtRLixr/JCNhYd/ZIq00z9e zouCru1ulNbI9UwSbcJupvoaqckrrFlf3GaTsnTlJ/6U2Qz/LqfhWIMzH8QJWYFx Q3nwHduUehw3O/0+1YnhzQhGQ0rR8tkRIQDYM6kwZW5znBEmsZhLU1q96fUvYNnO lepCALS0j1PQdC0rtQuM0cf58RX9TADRMtE89wg8K4M8TOBcLTmH7iN/IsWkw/a1 xR649WgxpdXblKl5354DCEluYv+guDWr4I9rs5J9w/rsPO6+jWRe78wbTYuXAgMB AAGjggO6MIIDtjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTlRfBKs3nYE03m NiBpd6OfpQCHEjAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNjg1RDc0RTdCOUREQzREQTY1MjI5OTJE NDZDMEU2OEY4RjdCNjJGRTc1OUM3OUIyN0Y0RDM5NThGNDI5MUVGNi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy82ODVENzRFN0I5RERDNERBNjUyMjk5MkQ0NkMwRTY4RjhGN0I2MkZFNzU5 Qzc5QjI3RjREMzk1OEY0MjkxRUY2LzAvRTU0NUYwNEFCMzc5RDgxMzRERTYzNjIw Njk3N0EzOUZBNTAwODcxMi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQGvnBAAwQGv2cA AwQDyFsgMA0EAgACMAcDBQAoA+qAMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAm2Q MA0GCSqGSIb3DQEBCwUAA4IBAQB0rzEPK+bl7UcTidHrJtcaJ1i7PRtq0Vw5nJtO uwqCJMLMwdgnwExeJFjXF74Q/sgb7d4GD0VAPPg0oHroNk3xCxaA4V/2xj/3muBl YJOB6OQVBaMMYvjKIc4oKcBtWOnIc3r2Kw6NzsTgvDOfA2ZMRQecdw2oy3+enQqE SnqQSJLMjyBHYkN63+okdJYL0ig2qlqWXE2WVJPOTI1BKNfk2NALuuCvFb+sswcE YHleVMo9Oy8uyywecyV2VSJdGjgM2u0+2ts6///H0EC4/DDqVhiLA0TjP7uwEcaV zt/wvKD0701q0vVU6C3Z523pg1wZWIgC7KqvYnr+bKHxghJW -----END CERTIFICATE-----Generated at Mon Mar 2 17:58:33 2026 by rpki-client