$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer File: EC13C93A66C7E47BB5B86090087322BC2D6981CA.cer (raw, json) Hash identifier: /LDNUdT/DIbPufgiMsdAsMZLHWcFdh0y72AcuW6JF8k= Subject key identifier: EC:13:C9:3A:66:C7:E4:7B:B5:B8:60:90:08:73:22:BC:2D:69:81:CA Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 0FF607D6181E7E508BFC626D0377752E988FD765 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 16:54:53 +0000 Certificate not after: Wed 27 Jan 2027 16:59:53 +0000 Subordinate resources: AS: 26593 IP: 200.108.64.0/19 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:f6:07:d6:18:1e:7e:50:8b:fc:62:6d:03:77:75:2e:98:8f:d7:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 16:54:53 2026 GMT Not After : Jan 27 16:59:53 2027 GMT Subject: CN=EC13C93A66C7E47BB5B86090087322BC2D6981CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:fc:57:75:8e:53:4e:72:34:45:1b:5d:c2:be: ff:2b:bd:c5:f9:47:74:34:45:22:0c:73:73:49:e5: e0:ad:75:77:40:a0:c3:9c:11:4c:96:7d:0f:13:60: b1:ba:1f:fd:97:1c:f1:c2:d8:c7:c9:96:ed:49:1d: f5:c0:3e:f7:06:ba:d1:1d:43:90:4c:eb:c8:81:08: 29:c0:55:3a:5f:6a:51:08:d9:ad:23:de:c4:9b:c5: 62:6b:60:80:e7:88:99:a8:62:fe:d2:74:1d:62:11: b7:0f:96:22:74:b0:45:91:a4:38:3c:47:b5:96:e6: 4e:47:93:28:dd:48:74:81:ce:34:19:9e:c6:4c:7c: 00:2e:1a:2a:e4:cd:7b:76:e4:46:40:d5:8c:c2:3b: db:c4:f6:12:c6:80:80:0b:34:e5:30:39:98:39:03: a8:70:26:1c:0a:c8:ec:b6:9b:14:0c:87:57:e3:6f: 11:7c:20:6f:75:46:30:c6:62:04:ac:17:72:5b:18: 5f:01:56:37:e4:33:06:30:23:15:bd:a1:9f:c0:80: b4:c4:ce:e1:38:1b:dc:53:5f:b7:d9:dc:21:97:a9: 85:24:40:35:24:45:76:cf:3e:be:65:91:f2:6b:3d: c6:e5:32:87:32:4a:36:79:7a:fe:bf:0f:c1:4a:5f: de:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: EC:13:C9:3A:66:C7:E4:7B:B5:B8:60:90:08:73:22:BC:2D:69:81:CA X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/A703E36F65FEBDAF09154981AE3267D7F18B09A90123FF7A5349FE33BCD65BAB/0/EC13C93A66C7E47BB5B86090087322BC2D6981CA.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.108.64.0/19 sbgp-autonomousSysNum: critical Autonomous System Numbers: 26593 Signature Algorithm: sha256WithRSAEncryption 11:95:b4:40:9e:3c:b4:b2:34:95:8c:d9:4d:69:f9:46:57:e9: 79:bb:65:43:d5:29:79:48:5e:98:7d:a1:96:70:b0:ee:ee:51: 65:f6:c1:15:3b:d3:63:45:9c:f1:d6:bc:78:5e:7a:53:b0:29: 80:ce:9e:ae:b9:33:fb:96:a6:12:12:d6:1f:6a:33:4a:87:bc: d3:26:84:55:50:f9:aa:6a:b5:a3:42:86:f7:4c:c7:86:e9:09: 03:24:0a:a5:0a:72:27:2d:8e:b2:a2:02:df:72:0a:a7:52:cf: 06:63:fa:8c:3a:65:05:c2:3c:fc:cc:76:4e:aa:84:d1:2c:c3: be:15:fc:75:12:c6:fa:4f:74:db:33:be:df:78:83:c1:5b:13: 0d:04:29:20:3b:9f:0b:0c:e1:dd:47:b3:29:a1:e8:6a:b5:23: c2:fc:f0:e9:44:a2:61:79:d1:75:b9:da:4a:12:2e:fc:8f:fa: 72:fe:f3:33:86:e8:0b:85:c9:14:b7:2b:46:4d:91:4c:f5:87: a9:96:57:be:78:be:6e:79:0c:2f:97:8a:ac:3e:4e:06:ec:85: d5:58:68:3f:cf:b6:9a:7a:a1:dd:7e:a6:88:7b:cd:fa:44:ab: 01:99:c8:ba:58:ac:71:53:a4:b5:4a:09:39:28:b7:ac:2b:23: 6c:9b:52:f2 -----BEGIN CERTIFICATE----- MIIGlTCCBX2gAwIBAgIUD/YH1hgeflCL/GJtA3d1LpiP12UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgxNjU0NTNaFw0yNzAxMjcxNjU5NTNaMDMxMTAvBgNV BAMTKEVDMTNDOTNBNjZDN0U0N0JCNUI4NjA5MDA4NzMyMkJDMkQ2OTgxQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu/Fd1jlNOcjRFG13Cvv8rvcX5 R3Q0RSIMc3NJ5eCtdXdAoMOcEUyWfQ8TYLG6H/2XHPHC2MfJlu1JHfXAPvcGutEd Q5BM68iBCCnAVTpfalEI2a0j3sSbxWJrYIDniJmoYv7SdB1iEbcPliJ0sEWRpDg8 R7WW5k5HkyjdSHSBzjQZnsZMfAAuGirkzXt25EZA1YzCO9vE9hLGgIALNOUwOZg5 A6hwJhwKyOy2mxQMh1fjbxF8IG91RjDGYgSsF3JbGF8BVjfkMwYwIxW9oZ/AgLTE zuE4G9xTX7fZ3CGXqYUkQDUkRXbPPr5lkfJrPcblMocySjZ5ev6/D8FKX955AgMB AAGjggOfMIIDmzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTsE8k6Zsfke7W4 YJAIcyK8LWmByjAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQTcwM0UzNkY2NUZFQkRBRjA5MTU0OTgx QUUzMjY3RDdGMThCMDlBOTAxMjNGRjdBNTM0OUZFMzNCQ0Q2NUJBQi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9BNzAzRTM2RjY1RkVCREFGMDkxNTQ5ODFBRTMyNjdEN0YxOEIwOUE5MDEy M0ZGN0E1MzQ5RkUzM0JDRDY1QkFCLzAvRUMxM0M5M0E2NkM3RTQ3QkI1Qjg2MDkw MDg3MzIyQkMyRDY5ODFDQS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFyGxAMBkGCCsG AQUFBwEIAQH/BAowCKAGMAQCAmfhMA0GCSqGSIb3DQEBCwUAA4IBAQARlbRAnjy0 sjSVjNlNaflGV+l5u2VD1Sl5SF6YfaGWcLDu7lFl9sEVO9NjRZzx1rx4XnpTsCmA zp6uuTP7lqYSEtYfajNKh7zTJoRVUPmqarWjQob3TMeG6QkDJAqlCnInLY6yogLf cgqnUs8GY/qMOmUFwjz8zHZOqoTRLMO+Ffx1Esb6T3TbM77feIPBWxMNBCkgO58L DOHdR7MpoehqtSPC/PDpRKJhedF1udpKEi78j/py/vMzhugLhckUtytGTZFM9Yep lle+eL5ueQwvl4qsPk4G7IXVWGg/z7aaeqHdfqaIe836RKsBmci6WKxxU6S1Sgk5 KLesKyNsm1Ly -----END CERTIFICATE-----Generated at Mon Mar 2 17:58:24 2026 by rpki-client