$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F27FE8F5D134BDBCB727C1FA5EA363B4B589267E.cer File: F27FE8F5D134BDBCB727C1FA5EA363B4B589267E.cer (raw, json) Hash identifier: I63eTsrEzFB4Qe0c8wu5XZg0LXsVM7Z31Rfc9QXjjNY= Subject key identifier: F2:7F:E8:F5:D1:34:BD:BC:B7:27:C1:FA:5E:A3:63:B4:B5:89:26:7E Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 0415A2E67B4A2F8780BE40992CD0BA7030D87E29 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/48CFB26AC27A17BFC28C29A05A939D7C38B550A25B9D6FAE345819CE34D49516/0/F27FE8F5D134BDBCB727C1FA5EA363B4B589267E.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/48CFB26AC27A17BFC28C29A05A939D7C38B550A25B9D6FAE345819CE34D49516/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 27 Jan 2026 17:50:56 +0000 Certificate not after: Tue 26 Jan 2027 17:55:56 +0000 Subordinate resources: AS: 263800 IP: 138.97.200.0/22 IP: 2803:4040::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:15:a2:e6:7b:4a:2f:87:80:be:40:99:2c:d0:ba:70:30:d8:7e:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 27 17:50:56 2026 GMT Not After : Jan 26 17:55:56 2027 GMT Subject: CN=F27FE8F5D134BDBCB727C1FA5EA363B4B589267E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:40:e6:63:fc:e2:d9:26:4d:aa:5f:d1:c0:64: 36:52:e5:56:92:f9:6d:7b:65:50:7d:63:2f:04:3e: 7f:4a:fe:90:7f:02:ad:aa:07:cb:6c:99:77:00:11: c9:38:03:db:c4:54:4f:00:60:d1:39:73:12:f6:0f: 31:d5:55:0f:43:44:0a:03:a0:02:cd:7f:ce:0c:3c: 70:02:02:27:ff:f9:33:91:89:06:2b:29:d2:58:6e: ba:ac:34:72:80:57:33:5d:e5:35:b6:c4:ad:f5:19: 79:ba:81:dd:df:31:8b:b9:92:6a:65:6b:4a:e7:95: 85:33:0b:52:13:62:19:35:9e:b3:cb:01:58:e8:a5: 17:71:09:30:ae:78:4b:da:22:61:77:5e:44:af:01: d0:a0:20:4c:9f:f1:d5:f8:5b:75:14:7a:19:12:78: 07:96:f0:d6:3a:af:8b:7c:bf:9b:a3:68:67:09:eb: 4e:09:e0:21:c3:5f:db:87:6c:37:2b:69:52:84:96: 86:75:4c:92:75:36:d9:3e:d9:b3:02:c8:17:bc:0c: 00:ec:48:5a:5c:24:b1:35:9b:ed:39:cf:69:71:da: 80:d8:cb:f7:a8:70:43:f1:10:57:7b:a7:f5:33:09: 28:dc:16:1b:0a:13:80:e9:96:95:d3:b0:86:ea:2f: 9c:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F2:7F:E8:F5:D1:34:BD:BC:B7:27:C1:FA:5E:A3:63:B4:B5:89:26:7E X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/48CFB26AC27A17BFC28C29A05A939D7C38B550A25B9D6FAE345819CE34D49516/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/48CFB26AC27A17BFC28C29A05A939D7C38B550A25B9D6FAE345819CE34D49516/0/F27FE8F5D134BDBCB727C1FA5EA363B4B589267E.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.97.200.0/22 IPv6: 2803:4040::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263800 Signature Algorithm: sha256WithRSAEncryption 86:60:14:9f:f0:69:a2:05:89:32:2b:93:01:87:da:82:5d:32: 6e:63:d5:a5:9c:a6:69:38:aa:08:e6:05:ae:bd:d4:04:81:3f: 6a:a2:c1:d4:c0:97:86:a9:99:76:9d:aa:ed:eb:c2:01:8e:ba: 55:6b:ab:9b:4f:3f:0c:88:5f:95:3d:ee:83:1b:8e:12:2e:b2: 8f:66:20:e7:31:a2:5b:4d:ff:fc:08:09:63:7c:d3:47:6f:ed: cd:dd:cb:f6:c7:36:f9:c6:6c:25:83:73:3e:aa:f1:75:76:39: f1:4c:ec:84:03:2e:67:17:fe:f9:ac:e2:9d:8b:26:14:5e:10: c0:eb:95:e4:86:90:bc:fb:4e:59:3d:64:d9:00:e2:7e:f9:31: 7c:f1:d8:77:14:8d:87:4a:b8:b8:c0:59:7c:d7:9c:5c:60:9b: ef:84:72:70:30:b9:d4:cb:ce:bc:17:e6:69:f6:72:1c:3e:6d: 27:21:a8:ba:11:79:d3:7a:85:90:f6:ed:e1:bb:b9:46:19:70: f2:a5:e6:c4:12:c5:ff:a5:39:02:e5:9a:e6:6a:69:3d:a7:c4: 18:4b:f0:df:0e:16:f7:0c:59:51:ff:95:7a:4a:42:4c:76:67: 43:79:5d:5a:f5:00:2a:ac:4c:09:51:ab:d6:3f:c2:0e:ea:c4: 85:91:f5:fa -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUBBWi5ntKL4eAvkCZLNC6cDDYfikwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjcxNzUwNTZaFw0yNzAxMjYxNzU1NTZaMDMxMTAvBgNV BAMTKEYyN0ZFOEY1RDEzNEJEQkNCNzI3QzFGQTVFQTM2M0I0QjU4OTI2N0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvQOZj/OLZJk2qX9HAZDZS5VaS +W17ZVB9Yy8EPn9K/pB/Aq2qB8tsmXcAEck4A9vEVE8AYNE5cxL2DzHVVQ9DRAoD oALNf84MPHACAif/+TORiQYrKdJYbrqsNHKAVzNd5TW2xK31GXm6gd3fMYu5kmpl a0rnlYUzC1ITYhk1nrPLAVjopRdxCTCueEvaImF3XkSvAdCgIEyf8dX4W3UUehkS eAeW8NY6r4t8v5ujaGcJ604J4CHDX9uHbDcraVKEloZ1TJJ1Ntk+2bMCyBe8DADs SFpcJLE1m+05z2lx2oDYy/eocEPxEFd7p/UzCSjcFhsKE4DplpXTsIbqL5wXAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTyf+j10TS9vLcn wfpeo2O0tYkmfjAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNDhDRkIyNkFDMjdBMTdCRkMyOEMyOUEw NUE5MzlEN0MzOEI1NTBBMjVCOUQ2RkFFMzQ1ODE5Q0UzNEQ0OTUxNi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OENGQjI2QUMyN0ExN0JGQzI4QzI5QTA1QTkzOUQ3QzM4QjU1MEEyNUI5 RDZGQUUzNDU4MTlDRTM0RDQ5NTE2LzAvRjI3RkU4RjVEMTM0QkRCQ0I3MjdDMUZB NUVBMzYzQjRCNTg5MjY3RS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCimHIMA0EAgAC MAcDBQAoA0BAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQGeDANBgkqhkiG9w0B AQsFAAOCAQEAhmAUn/BpogWJMiuTAYfagl0ybmPVpZymaTiqCOYFrr3UBIE/aqLB 1MCXhqmZdp2q7evCAY66VWurm08/DIhflT3ugxuOEi6yj2Yg5zGiW03//AgJY3zT R2/tzd3L9sc2+cZsJYNzPqrxdXY58UzshAMuZxf++azinYsmFF4QwOuV5IaQvPtO WT1k2QDifvkxfPHYdxSNh0q4uMBZfNecXGCb74RycDC51MvOvBfmafZyHD5tJyGo uhF503qFkPbt4bu5Rhlw8qXmxBLF/6U5AuWa5mppPafEGEvw3w4W9wxZUf+VekpC THZnQ3ldWvUAKqxMCVGr1j/CDurEhZH1+g== -----END CERTIFICATE-----Generated at Mon Mar 2 16:02:34 2026 by rpki-client