$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EB6F7C65D0D0E90316E9740CDF465857E2002AA0.cer File: EB6F7C65D0D0E90316E9740CDF465857E2002AA0.cer (raw, json) Hash identifier: bp0fSlLmJvyzdL7HtwDyUI+/qmeNYwerKE+xQEfUPp8= Subject key identifier: EB:6F:7C:65:D0:D0:E9:03:16:E9:74:0C:DF:46:58:57:E2:00:2A:A0 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 7212F3BFA82529FDCBB092C69CF514E6E0779740 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/597F7AA232F21919B58016692954265E42C59FFE514E65734CE69AF641E8E827/0/EB6F7C65D0D0E90316E9740CDF465857E2002AA0.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/597F7AA232F21919B58016692954265E42C59FFE514E65734CE69AF641E8E827/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 16:59:51 +0000 Certificate not after: Wed 27 Jan 2027 17:04:51 +0000 Subordinate resources: AS: 266867 IP: 164.163.160.0/22 IP: 2803:fc0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:12:f3:bf:a8:25:29:fd:cb:b0:92:c6:9c:f5:14:e6:e0:77:97:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 16:59:51 2026 GMT Not After : Jan 27 17:04:51 2027 GMT Subject: CN=EB6F7C65D0D0E90316E9740CDF465857E2002AA0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:24:5b:f3:1e:36:38:79:e6:38:f3:eb:4d:14: 55:d2:ad:f5:9d:48:68:78:cf:45:c5:a9:0c:53:2e: 14:e9:bb:10:e8:8d:aa:90:fc:7a:ae:f3:e7:fe:49: 41:ff:d0:df:0f:28:52:b9:68:3e:b7:e5:af:84:2c: bd:ed:96:7b:3e:a4:1e:a2:1a:0a:57:65:2d:57:cd: 03:f8:64:df:b9:b1:fa:f7:7d:46:41:f7:18:7d:3c: e7:e8:f6:63:33:59:86:21:17:b6:15:5a:ee:3d:87: e7:ff:a3:60:c3:a1:70:1a:a7:48:ab:60:a1:92:6d: af:8a:43:65:10:b9:80:07:9a:3b:1d:1a:7d:4e:88: 0b:d1:e8:22:6a:01:72:a7:dd:18:82:93:82:d0:98: 59:a2:5a:37:5f:d8:89:af:7d:f2:b7:8e:49:77:81: 97:94:30:a5:c7:b9:b6:62:8d:f5:29:27:c2:2c:0b: 05:0a:6e:74:1b:7a:08:70:4a:30:23:2a:da:a9:8e: ed:d9:a1:47:d1:d0:57:49:7d:17:1f:89:68:42:2c: f6:8c:a0:c4:ce:dd:23:72:25:4a:44:f2:ca:a5:8f: 5c:3e:a2:3d:ea:1d:da:8e:38:a5:00:f7:20:eb:c4: 9c:44:68:2a:bc:57:56:b8:f7:68:c3:68:91:8b:f9: 4a:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: EB:6F:7C:65:D0:D0:E9:03:16:E9:74:0C:DF:46:58:57:E2:00:2A:A0 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/597F7AA232F21919B58016692954265E42C59FFE514E65734CE69AF641E8E827/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/597F7AA232F21919B58016692954265E42C59FFE514E65734CE69AF641E8E827/0/EB6F7C65D0D0E90316E9740CDF465857E2002AA0.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.163.160.0/22 IPv6: 2803:fc0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266867 Signature Algorithm: sha256WithRSAEncryption 49:d1:35:86:f7:a6:82:78:db:09:ce:8c:6b:c8:35:38:93:43: b9:c2:b0:21:50:c8:09:74:94:46:6c:2e:c8:a9:f3:5a:59:3e: 1b:57:0d:2f:d6:61:20:93:53:3f:98:1b:8e:c8:a3:fc:7b:6b: 4c:06:e0:bf:8b:4d:cd:61:8a:eb:e4:d2:12:e9:08:cc:63:b8: 6e:e0:9e:1a:3a:4d:b8:aa:76:ee:93:70:7b:7b:95:92:29:3d: 74:ab:0b:a9:5e:e3:3f:3e:66:35:43:a5:75:51:05:7f:de:58: 13:85:51:3a:ef:09:01:9f:1e:3c:6c:3b:1f:27:73:e2:53:fd: 17:74:30:67:60:73:30:b5:38:38:0e:f8:9e:90:18:94:65:cf: aa:86:db:b4:2c:57:1d:ed:29:45:c7:53:d2:74:a1:fa:e8:24: 40:93:29:7b:8d:59:0c:d8:14:c3:90:a0:3c:28:11:3c:c5:8c: c0:e1:8a:fc:73:25:be:af:8a:ba:ed:c6:34:da:9c:5f:46:44: cd:a3:03:94:0e:2f:96:7e:0c:aa:db:71:b0:50:9b:04:58:6b: 6f:62:49:35:76:5d:49:2a:15:1f:c5:64:6e:be:14:01:21:3a: 64:59:94:d6:4b:94:07:5a:c0:f5:59:f9:6b:1d:91:c0:93:00: 95:2e:8e:3b -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUchLzv6glKf3LsJLGnPUU5uB3l0AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgxNjU5NTFaFw0yNzAxMjcxNzA0NTFaMDMxMTAvBgNV BAMTKEVCNkY3QzY1RDBEMEU5MDMxNkU5NzQwQ0RGNDY1ODU3RTIwMDJBQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkJFvzHjY4eeY48+tNFFXSrfWd SGh4z0XFqQxTLhTpuxDojaqQ/Hqu8+f+SUH/0N8PKFK5aD635a+ELL3tlns+pB6i GgpXZS1XzQP4ZN+5sfr3fUZB9xh9POfo9mMzWYYhF7YVWu49h+f/o2DDoXAap0ir YKGSba+KQ2UQuYAHmjsdGn1OiAvR6CJqAXKn3RiCk4LQmFmiWjdf2ImvffK3jkl3 gZeUMKXHubZijfUpJ8IsCwUKbnQbeghwSjAjKtqpju3ZoUfR0FdJfRcfiWhCLPaM oMTO3SNyJUpE8sqlj1w+oj3qHdqOOKUA9yDrxJxEaCq8V1a492jDaJGL+Ur9AgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTrb3xl0NDpAxbp dAzfRlhX4gAqoDAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNTk3RjdBQTIzMkYyMTkxOUI1ODAxNjY5 Mjk1NDI2NUU0MkM1OUZGRTUxNEU2NTczNENFNjlBRjY0MUU4RTgyNy8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy81OTdGN0FBMjMyRjIxOTE5QjU4MDE2NjkyOTU0MjY1RTQyQzU5RkZFNTE0 RTY1NzM0Q0U2OUFGNjQxRThFODI3LzAvRUI2RjdDNjVEMEQwRTkwMzE2RTk3NDBD REY0NjU4NTdFMjAwMkFBMC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCpKOgMA0EAgAC MAcDBQAoAw/AMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQSczANBgkqhkiG9w0B AQsFAAOCAQEASdE1hvemgnjbCc6Ma8g1OJNDucKwIVDICXSURmwuyKnzWlk+G1cN L9ZhIJNTP5gbjsij/HtrTAbgv4tNzWGK6+TSEukIzGO4buCeGjpNuKp27pNwe3uV kik9dKsLqV7jPz5mNUOldVEFf95YE4VROu8JAZ8ePGw7Hydz4lP9F3QwZ2BzMLU4 OA74npAYlGXPqobbtCxXHe0pRcdT0nSh+ugkQJMpe41ZDNgUw5CgPCgRPMWMwOGK /HMlvq+Kuu3GNNqcX0ZEzaMDlA4vln4MqttxsFCbBFhrb2JJNXZdSSoVH8Vkbr4U ASE6ZFmU1kuUB1rA9Vn5ax2RwJMAlS6OOw== -----END CERTIFICATE-----Generated at Mon Mar 2 17:08:40 2026 by rpki-client