$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F78F9E6F642B6485F25A9B2331897573DEED26F6.cer File: F78F9E6F642B6485F25A9B2331897573DEED26F6.cer (raw, json) Hash identifier: KQFUX32qEBQDNOCfoWwhvRW64G865qJrjZWvHAcK2WM= Subject key identifier: F7:8F:9E:6F:64:2B:64:85:F2:5A:9B:23:31:89:75:73:DE:ED:26:F6 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 25934C6345EEA25629AF415A7353116F3754F7B5 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/6DE91B35DA9AC709C34C2BD1A13A688E9A169AE888B92B4E4BBB86F25B77C458/0/F78F9E6F642B6485F25A9B2331897573DEED26F6.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/6DE91B35DA9AC709C34C2BD1A13A688E9A169AE888B92B4E4BBB86F25B77C458/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Mon 30 Mar 2026 16:20:00 +0000 Certificate not after: Mon 29 Mar 2027 16:25:00 +0000 Subordinate resources: AS: 272114 IP: 168.205.0.0/22 IP: 170.247.120.0/22 IP: 190.110.232.0/22 IP: 2803:6d40::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Apr 2026 19:03:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:93:4c:63:45:ee:a2:56:29:af:41:5a:73:53:11:6f:37:54:f7:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Mar 30 16:20:00 2026 GMT Not After : Mar 29 16:25:00 2027 GMT Subject: CN=F78F9E6F642B6485F25A9B2331897573DEED26F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:8b:4c:19:e4:9d:b1:2b:f0:71:f2:4f:20:28: f9:9d:60:cd:22:bd:36:22:cd:6b:3e:a0:db:66:f1: 9c:23:ce:3e:08:09:07:24:d4:84:c6:3b:45:43:a8: 7c:50:38:ca:96:77:79:d3:d0:fb:e5:32:ce:8a:e6: 8c:ec:99:99:d7:63:af:88:28:d9:e5:cf:f7:25:ef: b9:f6:51:f3:e1:67:6e:7f:bb:83:7b:e1:70:2b:53: a8:d2:8b:68:9e:16:9b:06:e3:0d:da:d6:17:e7:74: 30:b2:1a:c4:7d:a9:49:9d:3b:53:3f:5e:72:66:90: f7:a1:d4:82:04:a2:b1:23:37:25:05:8e:58:4e:8c: c7:02:d9:99:ac:f3:dd:86:11:ed:14:87:13:5b:1f: e2:4d:4b:6e:53:de:01:5a:7a:52:74:9e:cf:cf:91: 5f:53:f7:1c:e2:ca:bc:46:7a:1e:30:67:4c:ed:27: 0c:4f:ca:e9:9d:31:bc:47:07:63:f2:c4:0e:eb:3e: 38:54:f5:56:1d:c0:e5:31:67:b4:17:b8:4c:53:10: a9:dc:a0:26:6c:cb:9c:03:b9:bb:56:80:49:7c:4b: 51:6e:77:10:3d:bc:6e:2b:47:ee:3f:da:8a:28:38: 5a:56:97:bd:3a:f0:8a:aa:a7:6e:bf:f9:11:7d:30: 45:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F7:8F:9E:6F:64:2B:64:85:F2:5A:9B:23:31:89:75:73:DE:ED:26:F6 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6DE91B35DA9AC709C34C2BD1A13A688E9A169AE888B92B4E4BBB86F25B77C458/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6DE91B35DA9AC709C34C2BD1A13A688E9A169AE888B92B4E4BBB86F25B77C458/0/F78F9E6F642B6485F25A9B2331897573DEED26F6.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.205.0.0/22 170.247.120.0/22 190.110.232.0/22 IPv6: 2803:6d40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 272114 Signature Algorithm: sha256WithRSAEncryption 63:45:1b:fd:52:ef:98:1b:c1:9b:fa:98:9f:a2:3a:35:6b:c9: c8:3d:16:c4:10:03:20:21:b6:59:9b:2c:d4:b0:5e:7b:22:87: dd:4e:b2:f5:8a:55:93:ef:87:23:79:70:78:16:19:b7:2d:38: d1:4a:a1:5d:f9:42:68:85:d0:b4:64:b7:ad:02:81:97:7e:0c: 5f:d2:78:eb:03:df:be:a9:8c:e8:94:70:b8:71:dd:98:8d:16: 51:11:80:7a:1e:ca:a4:4c:f3:82:54:63:8a:b1:f1:fe:dd:bf: bc:7a:3f:35:bb:4c:ff:18:76:68:d4:8b:b6:5d:7f:b4:02:a8: 02:38:83:8f:18:f3:85:b2:30:97:40:f8:cd:dc:09:de:67:83: b6:79:fd:ba:68:36:67:8c:1b:f8:58:8c:a7:ef:c0:fe:ee:0a: 77:e3:2f:5d:d9:24:e3:47:56:48:f2:46:97:0b:41:a8:c2:85: 79:5c:9b:25:3f:76:e7:31:0c:8c:05:33:be:04:cb:24:b2:a8: 78:4a:dc:26:8b:e1:d0:77:f1:9f:51:9e:2c:af:87:3c:b2:73: 26:64:aa:37:ab:d7:cf:14:5d:ce:06:c1:fc:eb:cd:a8:a7:48: fa:c3:00:5a:f4:0a:f7:14:1e:60:40:63:9d:24:81:da:7b:bb: af:4e:cf:e0 -----BEGIN CERTIFICATE----- MIIGsTCCBZmgAwIBAgIUJZNMY0XuolYpr0Fac1MRbzdU97UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAzMzAxNjIwMDBaFw0yNzAzMjkxNjI1MDBaMDMxMTAvBgNV BAMTKEY3OEY5RTZGNjQyQjY0ODVGMjVBOUIyMzMxODk3NTczREVFRDI2RjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7i0wZ5J2xK/Bx8k8gKPmdYM0i vTYizWs+oNtm8Zwjzj4ICQck1ITGO0VDqHxQOMqWd3nT0PvlMs6K5ozsmZnXY6+I KNnlz/cl77n2UfPhZ25/u4N74XArU6jSi2ieFpsG4w3a1hfndDCyGsR9qUmdO1M/ XnJmkPeh1IIEorEjNyUFjlhOjMcC2Zms892GEe0UhxNbH+JNS25T3gFaelJ0ns/P kV9T9xziyrxGeh4wZ0ztJwxPyumdMbxHB2PyxA7rPjhU9VYdwOUxZ7QXuExTEKnc oCZsy5wDubtWgEl8S1FudxA9vG4rR+4/2oooOFpWl7068Iqqp26/+RF9MEXHAgMB AAGjggO7MIIDtzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT3j55vZCtkhfJa myMxiXVz3u0m9jAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNkRFOTFCMzVEQTlBQzcwOUMzNEMyQkQx QTEzQTY4OEU5QTE2OUFFODg4QjkyQjRFNEJCQjg2RjI1Qjc3QzQ1OC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy82REU5MUIzNURBOUFDNzA5QzM0QzJCRDFBMTNBNjg4RTlBMTY5QUU4ODhC OTJCNEU0QkJCODZGMjVCNzdDNDU4LzAvRjc4RjlFNkY2NDJCNjQ4NUYyNUE5QjIz MzE4OTc1NzNERUVEMjZGNi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCqM0AAwQCqvd4 AwQCvm7oMA0EAgACMAcDBQAoA21AMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQm 8jANBgkqhkiG9w0BAQsFAAOCAQEAY0Ub/VLvmBvBm/qYn6I6NWvJyD0WxBADICG2 WZss1LBeeyKH3U6y9YpVk++HI3lweBYZty040UqhXflCaIXQtGS3rQKBl34MX9J4 6wPfvqmM6JRwuHHdmI0WURGAeh7KpEzzglRjirHx/t2/vHo/NbtM/xh2aNSLtl1/ tAKoAjiDjxjzhbIwl0D4zdwJ3meDtnn9umg2Z4wb+FiMp+/A/u4Kd+MvXdkk40dW SPJGlwtBqMKFeVybJT925zEMjAUzvgTLJLKoeErcJovh0Hfxn1GeLK+HPLJzJmSq N6vXzxRdzgbB/OvNqKdI+sMAWvQK9xQeYEBjnSSB2nu7r07P4A== -----END CERTIFICATE-----Generated at Fri Apr 17 19:51:43 2026 by rpki-client