$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E99B22CCF68622142CA1F92E8A488B9DC2B16E33.cer File: E99B22CCF68622142CA1F92E8A488B9DC2B16E33.cer (raw, json) Hash identifier: 07oAG2LGu9K8/58aIS/Kxm9pRquG2TBR0GoFM3CbZdM= Subject key identifier: E9:9B:22:CC:F6:86:22:14:2C:A1:F9:2E:8A:48:8B:9D:C2:B1:6E:33 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 15CBB8E78B2702D494DEB4D6771C1B9F4B7AB113 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/C451155C9EC948FC3CAEDCA4204A8E18CFC0E06A78FACFB081EEB0554C647B96/0/E99B22CCF68622142CA1F92E8A488B9DC2B16E33.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/C451155C9EC948FC3CAEDCA4204A8E18CFC0E06A78FACFB081EEB0554C647B96/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 18:28:15 +0000 Certificate not after: Wed 27 Jan 2027 18:33:15 +0000 Subordinate resources: AS: 272982 IP: 190.9.68.0/23 IP: 2803:be90::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:cb:b8:e7:8b:27:02:d4:94:de:b4:d6:77:1c:1b:9f:4b:7a:b1:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 18:28:15 2026 GMT Not After : Jan 27 18:33:15 2027 GMT Subject: CN=E99B22CCF68622142CA1F92E8A488B9DC2B16E33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ac:67:07:12:c2:e5:0b:cb:fc:b2:4b:70:df: 29:77:9e:cf:b5:57:a6:4e:d4:0d:d4:c3:cf:fc:04: e7:f9:6d:86:9e:3a:df:b5:45:d3:86:f7:5b:53:33: 68:ac:a4:1e:6e:1a:be:54:6e:bf:ac:37:22:e3:a7: 8e:a6:67:be:80:37:f1:2f:6c:10:8f:be:52:f7:77: e2:6c:52:8d:d7:71:63:c3:f6:97:1c:b3:c4:6b:5f: 88:c2:ad:a7:77:65:aa:7c:6d:a9:c3:d0:d9:a9:44: 39:b7:55:72:6f:8b:b5:5d:c9:03:b2:b0:ef:86:16: ad:84:3e:90:6c:a4:1e:c4:2e:91:39:5f:50:9a:1b: 20:d8:a0:c4:a0:d7:dc:f7:36:d9:be:27:82:33:f6: d2:a2:bf:b6:e9:da:3c:eb:ff:28:a6:e0:1b:f3:75: 5f:42:7d:b6:e6:b7:3d:7c:37:1f:70:a0:a0:5f:33: d5:d3:d8:98:d6:74:de:30:a1:ce:92:4f:1a:ad:2a: 07:7d:cf:70:86:b6:5a:dd:c6:22:23:ec:86:53:b5: 3b:e4:8e:da:b6:d0:32:f9:ad:a9:c1:5f:ef:bc:a5: 10:dd:38:64:01:31:f4:d5:25:34:d4:cf:b8:2f:d2: e0:7d:aa:df:e8:a9:3b:93:5d:9c:f5:da:8a:f0:35: ba:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E9:9B:22:CC:F6:86:22:14:2C:A1:F9:2E:8A:48:8B:9D:C2:B1:6E:33 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/C451155C9EC948FC3CAEDCA4204A8E18CFC0E06A78FACFB081EEB0554C647B96/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/C451155C9EC948FC3CAEDCA4204A8E18CFC0E06A78FACFB081EEB0554C647B96/0/E99B22CCF68622142CA1F92E8A488B9DC2B16E33.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 190.9.68.0/23 IPv6: 2803:be90::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 272982 Signature Algorithm: sha256WithRSAEncryption 1e:94:b4:46:52:99:ad:4f:68:99:33:90:88:b8:34:1f:64:9c: ca:6d:67:56:f2:9c:7f:dc:d5:4f:3d:bc:2a:90:9d:af:ba:0c: 8c:ff:5f:8c:8d:06:71:30:6c:7e:c6:a4:a0:7a:ad:c2:44:a0: b0:a3:a5:c0:0a:94:e6:65:64:d5:e2:49:17:b6:2c:ca:96:63: 54:98:6f:db:ba:71:14:a6:9a:bb:4a:4d:df:84:5a:f2:f9:cd: 57:86:b2:b6:d8:3f:16:da:c4:94:ad:17:8a:61:cb:a7:4a:95: a1:70:b7:48:48:26:fa:39:46:f5:3d:43:8e:0f:9f:b9:f3:1c: 63:49:49:dc:15:08:d9:28:ef:67:c4:fa:ef:5a:38:11:ae:2a: bd:49:5f:a3:d7:37:65:34:2b:d2:85:29:b3:a3:6d:d3:75:29: 8e:c4:95:be:4f:7a:c6:f3:6c:3f:a7:fb:68:c7:d1:d8:7a:aa: 1d:74:87:dd:03:e7:80:16:62:b4:10:8d:a1:73:29:8e:ff:a1: 58:42:be:cb:e9:c3:be:12:85:e9:c0:61:01:ea:b3:a6:3b:70: 47:7d:71:87:50:fd:0b:a0:b6:40:71:3b:2e:25:cf:7d:d9:5e: b8:d8:79:2b:4a:6f:93:57:47:6e:a5:1a:64:54:fe:71:43:40: a8:2e:d8:fc -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUFcu454snAtSU3rTWdxwbn0t6sRMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgxODI4MTVaFw0yNzAxMjcxODMzMTVaMDMxMTAvBgNV BAMTKEU5OUIyMkNDRjY4NjIyMTQyQ0ExRjkyRThBNDg4QjlEQzJCMTZFMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyrGcHEsLlC8v8sktw3yl3ns+1 V6ZO1A3Uw8/8BOf5bYaeOt+1RdOG91tTM2ispB5uGr5Ubr+sNyLjp46mZ76AN/Ev bBCPvlL3d+JsUo3XcWPD9pccs8RrX4jCrad3Zap8banD0NmpRDm3VXJvi7VdyQOy sO+GFq2EPpBspB7ELpE5X1CaGyDYoMSg19z3Ntm+J4Iz9tKiv7bp2jzr/yim4Bvz dV9Cfbbmtz18Nx9woKBfM9XT2JjWdN4woc6STxqtKgd9z3CGtlrdxiIj7IZTtTvk jtq20DL5ranBX++8pRDdOGQBMfTVJTTUz7gv0uB9qt/oqTuTXZz12orwNbplAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTpmyLM9oYiFCyh +S6KSIudwrFuMzAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQzQ1MTE1NUM5RUM5NDhGQzNDQUVEQ0E0 MjA0QThFMThDRkMwRTA2QTc4RkFDRkIwODFFRUIwNTU0QzY0N0I5Ni8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9DNDUxMTU1QzlFQzk0OEZDM0NBRURDQTQyMDRBOEUxOENGQzBFMDZBNzhG QUNGQjA4MUVFQjA1NTRDNjQ3Qjk2LzAvRTk5QjIyQ0NGNjg2MjIxNDJDQTFGOTJF OEE0ODhCOURDMkIxNkUzMy5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBvglEMA0EAgAC MAcDBQAoA76QMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQqVjANBgkqhkiG9w0B AQsFAAOCAQEAHpS0RlKZrU9omTOQiLg0H2Scym1nVvKcf9zVTz28KpCdr7oMjP9f jI0GcTBsfsakoHqtwkSgsKOlwAqU5mVk1eJJF7YsypZjVJhv27pxFKaau0pN34Ra 8vnNV4ayttg/FtrElK0XimHLp0qVoXC3SEgm+jlG9T1Djg+fufMcY0lJ3BUI2Sjv Z8T671o4Ea4qvUlfo9c3ZTQr0oUps6Nt03UpjsSVvk96xvNsP6f7aMfR2HqqHXSH 3QPngBZitBCNoXMpjv+hWEK+y+nDvhKF6cBhAeqzpjtwR31xh1D9C6C2QHE7LiXP fdleuNh5K0pvk1dHbqUaZFT+cUNAqC7Y/A== -----END CERTIFICATE-----Generated at Mon Mar 2 15:37:56 2026 by rpki-client