$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F3C2B582A38A773B6A755BF6D6E3026584CAF2F1.cer File: F3C2B582A38A773B6A755BF6D6E3026584CAF2F1.cer (raw, json) Hash identifier: exxRY/77+2RXtmae9c9rpz82ZDC4U03TFJ0oHMx0zJs= Subject key identifier: F3:C2:B5:82:A3:8A:77:3B:6A:75:5B:F6:D6:E3:02:65:84:CA:F2:F1 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 09796668A29F392CB645B761DEE3B5C10D814D02 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/08089B08E57EFC288CDCFA6CC18F751FFD6A46E07EE22B416601A44F44F710F0/0/F3C2B582A38A773B6A755BF6D6E3026584CAF2F1.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/08089B08E57EFC288CDCFA6CC18F751FFD6A46E07EE22B416601A44F44F710F0/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 17:20:24 +0000 Certificate not after: Wed 27 Jan 2027 17:25:24 +0000 Subordinate resources: AS: 272053 IP: 181.232.196.0/22 IP: 2803:5d10::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:79:66:68:a2:9f:39:2c:b6:45:b7:61:de:e3:b5:c1:0d:81:4d:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 17:20:24 2026 GMT Not After : Jan 27 17:25:24 2027 GMT Subject: CN=F3C2B582A38A773B6A755BF6D6E3026584CAF2F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:73:c0:b5:0c:1e:1a:5b:bc:ad:e7:9b:70:01: 27:8b:5e:46:d1:df:d6:74:48:7a:b7:96:8b:48:cf: 27:6b:1a:1f:8b:4d:52:90:56:83:75:fc:0c:e9:0f: 50:c8:6f:28:c6:d6:ed:d7:71:ea:aa:45:29:a6:0b: 17:3b:84:df:5f:64:a5:d3:7e:80:94:1c:a1:4f:fe: b3:40:d8:fd:ea:57:e4:a0:61:c3:e3:f2:d5:a7:79: 56:36:5a:cc:ae:b4:78:ec:be:93:8e:e6:57:a8:1c: 61:69:f6:07:bc:4c:22:de:ed:c7:8b:8d:23:05:2c: d3:35:01:e7:27:ce:08:76:a5:b2:ec:51:d1:42:66: a4:d4:83:a3:c0:b5:36:e6:72:18:d8:71:2e:a3:ef: b9:5c:17:d7:5f:68:d2:25:fc:c4:a9:66:30:e7:f4: 0b:e1:b7:14:5a:b4:9b:01:f0:61:24:87:08:93:ed: 7f:15:df:14:fa:7e:de:92:de:25:73:ae:70:2b:0e: 23:97:fe:8d:19:ea:52:49:1f:89:96:18:03:b0:d8: 0a:ce:1d:15:85:c6:84:d5:45:f3:29:f5:52:c5:34: ae:9c:f5:82:c9:99:8a:c0:c8:cd:38:b7:67:dc:9d: 44:bb:33:ec:7b:c6:66:bd:70:cf:d3:63:6a:37:e7: 90:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F3:C2:B5:82:A3:8A:77:3B:6A:75:5B:F6:D6:E3:02:65:84:CA:F2:F1 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/08089B08E57EFC288CDCFA6CC18F751FFD6A46E07EE22B416601A44F44F710F0/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/08089B08E57EFC288CDCFA6CC18F751FFD6A46E07EE22B416601A44F44F710F0/0/F3C2B582A38A773B6A755BF6D6E3026584CAF2F1.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 181.232.196.0/22 IPv6: 2803:5d10::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 272053 Signature Algorithm: sha256WithRSAEncryption 8d:7f:5b:4f:ef:b2:a3:d7:bd:c1:6e:b7:b1:43:d2:b1:cf:f0: 41:7f:bc:af:09:00:88:ef:42:6b:f8:04:c7:6a:18:7b:ec:ff: 59:42:7a:c7:7a:35:94:30:f0:2a:4e:cf:64:f4:63:e4:d2:80: dd:7a:15:cc:37:86:e6:6a:ab:a1:46:9a:5d:4d:27:62:cb:16: 93:e3:57:93:cd:71:97:27:49:cb:6b:5b:88:b1:7d:8d:c8:0a: 3a:04:d3:ad:74:f0:c1:d0:46:5c:2e:23:67:74:07:1b:2c:bd: 4e:6f:8d:1f:17:ea:9d:3e:59:ec:de:87:f8:00:2b:63:60:81: db:47:b1:3d:bc:54:7a:9f:ac:77:fe:98:87:7b:30:a8:df:85: df:4a:c0:bb:56:1f:d1:61:dc:e9:cc:2a:83:98:b6:a0:fb:12: 07:d5:c9:b5:1f:b0:5e:bf:40:ac:ff:18:f5:23:cd:1d:18:e9: 92:14:b3:b4:6d:78:f9:37:34:55:54:91:da:6b:23:43:96:11: b8:a6:5c:11:f3:df:64:ea:73:1d:76:d9:9b:4b:0b:da:a3:89: 6a:6f:3b:2b:e8:2b:17:fa:c6:eb:b1:c2:17:c9:91:79:6e:05: b6:e1:cd:14:06:df:09:a3:c4:cf:5e:3b:93:f3:de:21:2a:02: 42:d6:04:47 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUCXlmaKKfOSy2Rbdh3uO1wQ2BTQIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgxNzIwMjRaFw0yNzAxMjcxNzI1MjRaMDMxMTAvBgNV BAMTKEYzQzJCNTgyQTM4QTc3M0I2QTc1NUJGNkQ2RTMwMjY1ODRDQUYyRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTc8C1DB4aW7yt55twASeLXkbR 39Z0SHq3lotIzydrGh+LTVKQVoN1/AzpD1DIbyjG1u3XceqqRSmmCxc7hN9fZKXT foCUHKFP/rNA2P3qV+SgYcPj8tWneVY2WsyutHjsvpOO5leoHGFp9ge8TCLe7ceL jSMFLNM1Aecnzgh2pbLsUdFCZqTUg6PAtTbmchjYcS6j77lcF9dfaNIl/MSpZjDn 9AvhtxRatJsB8GEkhwiT7X8V3xT6ft6S3iVzrnArDiOX/o0Z6lJJH4mWGAOw2ArO HRWFxoTVRfMp9VLFNK6c9YLJmYrAyM04t2fcnUS7M+x7xma9cM/TY2o355DlAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTzwrWCo4p3O2p1 W/bW4wJlhMry8TAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMDgwODlCMDhFNTdFRkMyODhDRENGQTZD QzE4Rjc1MUZGRDZBNDZFMDdFRTIyQjQxNjYwMUE0NEY0NEY3MTBGMC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8wODA4OUIwOEU1N0VGQzI4OENEQ0ZBNkNDMThGNzUxRkZENkE0NkUwN0VF MjJCNDE2NjAxQTQ0RjQ0RjcxMEYwLzAvRjNDMkI1ODJBMzhBNzczQjZBNzU1QkY2 RDZFMzAyNjU4NENBRjJGMS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCtejEMA0EAgAC MAcDBQAoA10QMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQmtTANBgkqhkiG9w0B AQsFAAOCAQEAjX9bT++yo9e9wW63sUPSsc/wQX+8rwkAiO9Ca/gEx2oYe+z/WUJ6 x3o1lDDwKk7PZPRj5NKA3XoVzDeG5mqroUaaXU0nYssWk+NXk81xlydJy2tbiLF9 jcgKOgTTrXTwwdBGXC4jZ3QHGyy9Tm+NHxfqnT5Z7N6H+AArY2CB20exPbxUep+s d/6Yh3swqN+F30rAu1Yf0WHc6cwqg5i2oPsSB9XJtR+wXr9ArP8Y9SPNHRjpkhSz tG14+Tc0VVSR2msjQ5YRuKZcEfPfZOpzHXbZm0sL2qOJam87K+grF/rG67HCF8mR eW4FtuHNFAbfCaPEz147k/PeISoCQtYERw== -----END CERTIFICATE-----Generated at Mon Mar 2 15:57:29 2026 by rpki-client