$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9198017297E2662957B6F27616FF7A44A81298A.cer File: E9198017297E2662957B6F27616FF7A44A81298A.cer (raw, json) Hash identifier: UGeTlC6Sbt76oR0c2KUp9S0sd20AU6rclsvguKqx33Y= Subject key identifier: E9:19:80:17:29:7E:26:62:95:7B:6F:27:61:6F:F7:A4:4A:81:29:8A Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 7FC286209E89DCB648B4049B8FE1A9054AC67C58 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/1B2A41F8E29B375E45E90E01AB27A74A6557BE70B81FFDB5F563A9ECC355E0B1/0/E9198017297E2662957B6F27616FF7A44A81298A.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/1B2A41F8E29B375E45E90E01AB27A74A6557BE70B81FFDB5F563A9ECC355E0B1/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 12:06:24 +0000 Certificate not after: Wed 27 Jan 2027 12:11:24 +0000 Subordinate resources: AS: 273832 IP: 186.121.165.0/24 IP: 2803:8950::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:c2:86:20:9e:89:dc:b6:48:b4:04:9b:8f:e1:a9:05:4a:c6:7c:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 12:06:24 2026 GMT Not After : Jan 27 12:11:24 2027 GMT Subject: CN=E9198017297E2662957B6F27616FF7A44A81298A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:54:bb:37:bb:d1:f6:c2:41:88:40:47:56:7c: ae:c2:05:8b:66:77:f4:4b:bb:50:14:da:c2:d2:4a: fa:1c:dc:8d:f6:5b:c6:d7:a7:e0:4f:b2:22:be:c3: 61:4f:30:9c:82:49:38:c4:97:19:39:37:a8:41:0b: 9a:04:03:09:d5:71:57:8e:6b:51:09:ed:1d:4c:d6: 79:ff:ee:43:ac:e0:0d:c0:99:8a:86:8d:0d:ee:de: b8:89:d3:ef:71:1a:91:36:ad:fd:f1:b2:e0:8f:4d: 33:4e:25:a6:25:5f:a2:39:04:46:76:22:e4:80:7a: 67:e3:29:0a:5a:b4:f4:65:78:83:d2:2f:62:ba:71: a0:b3:61:0a:cc:16:27:46:68:48:ee:46:fd:97:58: ce:de:01:4d:63:d9:61:0f:45:94:95:23:ac:27:cc: 62:7e:d1:1d:61:9c:6a:0e:39:8b:a7:cf:c4:6a:46: 08:c8:b1:d1:63:11:c3:3a:4c:20:83:c1:53:46:84: ac:3f:ba:f4:42:0a:aa:d0:ab:b2:37:dd:05:19:7c: bc:63:9e:a6:21:1c:ca:a7:7f:97:fc:46:5e:1f:be: e1:5a:65:8b:4a:47:67:fd:97:3e:14:19:71:9e:78: 55:9c:03:bd:e9:31:b7:61:d6:a2:ef:7e:35:bc:3e: 8e:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E9:19:80:17:29:7E:26:62:95:7B:6F:27:61:6F:F7:A4:4A:81:29:8A X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1B2A41F8E29B375E45E90E01AB27A74A6557BE70B81FFDB5F563A9ECC355E0B1/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1B2A41F8E29B375E45E90E01AB27A74A6557BE70B81FFDB5F563A9ECC355E0B1/0/E9198017297E2662957B6F27616FF7A44A81298A.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 186.121.165.0/24 IPv6: 2803:8950::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273832 Signature Algorithm: sha256WithRSAEncryption 72:97:0a:cd:cd:2e:10:c7:fd:7d:ac:02:14:a5:cc:46:f1:b0: 6a:76:71:12:3e:2b:da:54:58:1e:cc:65:8d:73:3c:11:b8:88: 11:6e:95:9b:e2:2d:8e:44:3e:d9:3d:2a:8a:11:b8:1c:81:28: 02:0b:d5:1e:52:2f:20:b7:2b:0c:c8:45:16:71:ec:45:33:48: 70:98:93:0c:16:18:ee:45:e4:06:8c:d8:6f:fc:4a:36:2e:9b: 70:9b:ca:68:af:7f:ea:ce:7c:19:dd:d6:60:0b:bb:12:f2:f3: ca:ab:f6:a5:d1:bc:63:16:bc:ce:d9:e1:a6:35:33:8f:14:33: c6:65:b4:87:cd:22:66:83:8e:a4:ce:22:53:24:b6:b8:1b:78: 4d:fa:43:2f:13:61:06:97:56:d1:c0:86:16:90:54:3d:05:86: e4:1e:a8:e0:75:08:c1:af:c8:0e:0a:c5:c1:2c:ac:ce:a3:93: 1a:33:2d:5d:61:5d:52:0f:b1:dd:e6:4e:88:38:7f:48:50:f1: 02:6c:e8:85:87:7e:a1:d6:07:90:4e:68:21:60:73:46:ab:6a: 19:21:2e:12:34:e5:99:c5:ab:df:11:9f:f7:92:75:e6:fa:93: de:95:90:4e:03:91:46:15:8c:e1:19:ed:0a:32:3c:e6:e2:34: 4b:4d:30:4b -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUf8KGIJ6J3LZItASbj+GpBUrGfFgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgxMjA2MjRaFw0yNzAxMjcxMjExMjRaMDMxMTAvBgNV BAMTKEU5MTk4MDE3Mjk3RTI2NjI5NTdCNkYyNzYxNkZGN0E0NEE4MTI5OEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYVLs3u9H2wkGIQEdWfK7CBYtm d/RLu1AU2sLSSvoc3I32W8bXp+BPsiK+w2FPMJyCSTjElxk5N6hBC5oEAwnVcVeO a1EJ7R1M1nn/7kOs4A3AmYqGjQ3u3riJ0+9xGpE2rf3xsuCPTTNOJaYlX6I5BEZ2 IuSAemfjKQpatPRleIPSL2K6caCzYQrMFidGaEjuRv2XWM7eAU1j2WEPRZSVI6wn zGJ+0R1hnGoOOYunz8RqRgjIsdFjEcM6TCCDwVNGhKw/uvRCCqrQq7I33QUZfLxj nqYhHMqnf5f8Rl4fvuFaZYtKR2f9lz4UGXGeeFWcA73pMbdh1qLvfjW8Po77AgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTpGYAXKX4mYpV7 bydhb/ekSoEpijAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMUIyQTQxRjhFMjlCMzc1RTQ1RTkwRTAx QUIyN0E3NEE2NTU3QkU3MEI4MUZGREI1RjU2M0E5RUNDMzU1RTBCMS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8xQjJBNDFGOEUyOUIzNzVFNDVFOTBFMDFBQjI3QTc0QTY1NTdCRTcwQjgx RkZEQjVGNTYzQTlFQ0MzNTVFMEIxLzAvRTkxOTgwMTcyOTdFMjY2Mjk1N0I2RjI3 NjE2RkY3QTQ0QTgxMjk4QS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAunmlMA0EAgAC MAcDBQAoA4lQMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQtqDANBgkqhkiG9w0B AQsFAAOCAQEAcpcKzc0uEMf9fawCFKXMRvGwanZxEj4r2lRYHsxljXM8EbiIEW6V m+ItjkQ+2T0qihG4HIEoAgvVHlIvILcrDMhFFnHsRTNIcJiTDBYY7kXkBozYb/xK Ni6bcJvKaK9/6s58Gd3WYAu7EvLzyqv2pdG8Yxa8ztnhpjUzjxQzxmW0h80iZoOO pM4iUyS2uBt4TfpDLxNhBpdW0cCGFpBUPQWG5B6o4HUIwa/IDgrFwSyszqOTGjMt XWFdUg+x3eZOiDh/SFDxAmzohYd+odYHkE5oIWBzRqtqGSEuEjTlmcWr3xGf95J1 5vqT3pWQTgORRhWM4RntCjI85uI0S00wSw== -----END CERTIFICATE-----Generated at Mon Mar 2 21:28:40 2026 by rpki-client