$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F82E0DF2AA6857B34A994C7A30E543ABF22FDA42.cer File: F82E0DF2AA6857B34A994C7A30E543ABF22FDA42.cer (raw, json) Hash identifier: tFD8n1kdgy79AbP2C2PvHSiA88BPEzkEQL30skCfJhk= Subject key identifier: F8:2E:0D:F2:AA:68:57:B3:4A:99:4C:7A:30:E5:43:AB:F2:2F:DA:42 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 60EF7A52AA08DC3DBB647E2CBA85810642F4ED60 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/FB5EA391B8AE50AF4812345DA4458529BC172D13AC9D0EAF8425DCA73D4793E1/0/F82E0DF2AA6857B34A994C7A30E543ABF22FDA42.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/FB5EA391B8AE50AF4812345DA4458529BC172D13AC9D0EAF8425DCA73D4793E1/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Fri 27 Feb 2026 11:30:01 +0000 Certificate not after: Fri 26 Feb 2027 11:35:01 +0000 Subordinate resources: AS: 269970 IP: 24.152.57.0/24 IP: 2803:36e0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 05 Mar 2026 11:41:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:ef:7a:52:aa:08:dc:3d:bb:64:7e:2c:ba:85:81:06:42:f4:ed:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Feb 27 11:30:01 2026 GMT Not After : Feb 26 11:35:01 2027 GMT Subject: CN=F82E0DF2AA6857B34A994C7A30E543ABF22FDA42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:44:9c:99:cc:9d:f8:8b:b5:51:4a:f1:d4:64: 32:7f:f6:db:1a:61:da:19:e7:d2:25:0a:c2:02:7d: e1:03:28:e3:a4:5d:72:6d:8e:d9:51:90:b8:fc:fc: 8b:26:06:72:3e:8b:64:d5:d3:b0:7d:12:9d:fb:aa: 85:17:69:93:a5:dd:62:b2:d9:e5:f2:e0:7c:6a:d7: e3:71:8f:f1:22:79:b1:1f:93:80:ec:21:cf:64:e4: 4e:1a:23:f5:a0:f3:76:9e:7c:51:cb:76:b6:a0:7c: 13:cf:cb:a3:4b:87:1e:4f:b2:34:7c:f5:62:1b:23: 04:6f:c1:a6:53:a1:3e:41:af:cf:eb:1c:75:72:4e: 20:c0:58:40:06:a7:56:59:45:7d:07:8d:b2:30:50: 5c:e3:df:97:32:6b:47:1e:03:36:77:6f:de:7b:64: e4:8b:86:9e:99:22:20:76:98:15:4c:ea:4e:60:32: 83:8d:86:b6:0c:01:05:7b:d2:9a:a2:1c:d4:bf:32: 80:76:53:4c:01:38:ce:69:0a:f6:57:0f:ba:8d:84: a2:5e:0f:c7:f3:c4:b9:90:b6:01:3b:ce:a1:20:b9: 5d:0e:09:c8:2c:37:31:8d:d3:8b:f3:21:1a:10:98: 37:d1:24:61:14:07:ba:e6:d4:83:36:f1:7e:cb:30: ba:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F8:2E:0D:F2:AA:68:57:B3:4A:99:4C:7A:30:E5:43:AB:F2:2F:DA:42 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/FB5EA391B8AE50AF4812345DA4458529BC172D13AC9D0EAF8425DCA73D4793E1/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/FB5EA391B8AE50AF4812345DA4458529BC172D13AC9D0EAF8425DCA73D4793E1/0/F82E0DF2AA6857B34A994C7A30E543ABF22FDA42.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 24.152.57.0/24 IPv6: 2803:36e0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 269970 Signature Algorithm: sha256WithRSAEncryption 75:77:a2:ae:0f:78:a0:48:b6:b3:88:1f:63:a6:48:65:c9:58: 96:83:44:1c:1c:d3:74:41:ce:2e:ac:ee:5c:cc:09:3a:c8:5c: 10:f1:5a:a9:09:5a:74:00:48:55:9d:5c:c8:ef:8f:68:78:3f: 52:4c:72:40:41:35:23:c6:c9:f2:dd:3f:48:33:49:8f:4f:3b: be:52:ef:23:8c:a7:48:32:7e:cd:7d:e7:0a:0b:6e:bd:c2:70: fd:68:45:21:22:b9:bd:29:f0:39:08:71:e6:85:59:f7:fa:ce: e0:15:1b:48:7b:15:fb:61:6d:24:1d:24:d8:83:e7:56:ba:5d: fb:d6:4c:99:28:49:ab:3f:98:ba:c3:3f:79:5e:92:5b:4b:35: 82:65:53:25:ed:af:fa:db:65:13:6d:e8:ac:12:0f:05:01:00: 63:20:f6:c0:8c:51:11:3a:48:d1:c4:51:13:55:5a:c9:81:70: 0e:8a:96:24:e6:c6:9b:3c:6f:bf:65:c3:d2:2c:0a:47:b0:8b: eb:19:5a:4f:82:28:f4:66:a0:f7:b7:05:a5:52:25:01:27:63: e3:c6:a5:c7:b1:ce:c9:15:dc:48:fe:79:21:2a:4c:92:50:38: a3:ee:1b:b2:d1:c2:63:a5:40:dc:8b:90:c5:00:d5:86:99:41: 25:50:a6:e2 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUYO96UqoI3D27ZH4suoWBBkL07WAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAyMjcxMTMwMDFaFw0yNzAyMjYxMTM1MDFaMDMxMTAvBgNV BAMTKEY4MkUwREYyQUE2ODU3QjM0QTk5NEM3QTMwRTU0M0FCRjIyRkRBNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkRJyZzJ34i7VRSvHUZDJ/9tsa YdoZ59IlCsICfeEDKOOkXXJtjtlRkLj8/IsmBnI+i2TV07B9Ep37qoUXaZOl3WKy 2eXy4Hxq1+Nxj/EiebEfk4DsIc9k5E4aI/Wg83aefFHLdragfBPPy6NLhx5PsjR8 9WIbIwRvwaZToT5Br8/rHHVyTiDAWEAGp1ZZRX0HjbIwUFzj35cya0ceAzZ3b957 ZOSLhp6ZIiB2mBVM6k5gMoONhrYMAQV70pqiHNS/MoB2U0wBOM5pCvZXD7qNhKJe D8fzxLmQtgE7zqEguV0OCcgsNzGN04vzIRoQmDfRJGEUB7rm1IM28X7LMLplAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT4Lg3yqmhXs0qZ THow5UOr8i/aQjAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRkI1RUEzOTFCOEFFNTBBRjQ4MTIzNDVE QTQ0NTg1MjlCQzE3MkQxM0FDOUQwRUFGODQyNURDQTczRDQ3OTNFMS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9GQjVFQTM5MUI4QUU1MEFGNDgxMjM0NURBNDQ1ODUyOUJDMTcyRDEzQUM5 RDBFQUY4NDI1RENBNzNENDc5M0UxLzAvRjgyRTBERjJBQTY4NTdCMzRBOTk0QzdB MzBFNTQzQUJGMjJGREE0Mi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAGJg5MA0EAgAC MAcDBQAoAzbgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQekjANBgkqhkiG9w0B AQsFAAOCAQEAdXeirg94oEi2s4gfY6ZIZclYloNEHBzTdEHOLqzuXMwJOshcEPFa qQladABIVZ1cyO+PaHg/UkxyQEE1I8bJ8t0/SDNJj087vlLvI4ynSDJ+zX3nCgtu vcJw/WhFISK5vSnwOQhx5oVZ9/rO4BUbSHsV+2FtJB0k2IPnVrpd+9ZMmShJqz+Y usM/eV6SW0s1gmVTJe2v+ttlE23orBIPBQEAYyD2wIxRETpI0cRRE1VayYFwDoqW JObGmzxvv2XD0iwKR7CL6xlaT4Io9Gag97cFpVIlASdj48alx7HOyRXcSP55ISpM klA4o+4bstHCY6VA3IuQxQDVhplBJVCm4g== -----END CERTIFICATE-----Generated at Mon Mar 2 09:36:33 2026 by rpki-client