$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC9DD0E87EF2F26EE3177696A25789D0A68599EF.cer File: FC9DD0E87EF2F26EE3177696A25789D0A68599EF.cer (raw, json) Hash identifier: yKMDfPQXbHirzpekDJJdE0MCHnsZ418eabzQXAXr3NU= Subject key identifier: FC:9D:D0:E8:7E:F2:F2:6E:E3:17:76:96:A2:57:89:D0:A6:85:99:EF Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 0C962C0A56D6A05BDDAC0C2B1CC21A276E6A3A8A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/A1CFB9CC05A650683E2547043E71965E85C3582FDBE6051B283EA7F356F68F92/0/FC9DD0E87EF2F26EE3177696A25789D0A68599EF.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/A1CFB9CC05A650683E2547043E71965E85C3582FDBE6051B283EA7F356F68F92/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 01:05:17 +0000 Certificate not after: Wed 27 Jan 2027 01:10:17 +0000 Subordinate resources: AS: 270074 IP: 200.1.112.0/24 IP: 2801:1b:2800::/48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:96:2c:0a:56:d6:a0:5b:dd:ac:0c:2b:1c:c2:1a:27:6e:6a:3a:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 01:05:17 2026 GMT Not After : Jan 27 01:10:17 2027 GMT Subject: CN=FC9DD0E87EF2F26EE3177696A25789D0A68599EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a2:10:1f:13:71:b4:b2:af:71:9e:28:7e:27: a0:99:9a:8c:4b:00:60:39:ab:25:9f:2a:ae:d8:05: fc:3d:27:70:a7:38:71:15:b3:dd:af:9a:9f:e4:88: 51:b2:a1:fe:df:ac:d5:29:81:85:9a:6a:83:2b:f7: e7:be:5b:bf:71:a1:ea:d6:58:74:37:ce:d6:a2:91: be:bc:c7:3c:2c:8e:f6:f3:c9:9f:c5:90:bd:36:18: 73:b0:13:dc:66:6e:c2:cc:63:77:a5:bd:ad:36:9b: a3:d2:11:a3:83:14:5f:09:b9:ab:ca:3f:2d:68:53: bc:23:3a:3e:39:59:96:41:7b:62:54:bb:bf:5c:c4: 1f:88:48:8f:77:8c:93:70:28:4c:8e:56:d5:ea:da: 97:d1:0a:e2:ec:73:18:fe:7f:64:7c:9e:85:fa:12: 56:75:16:11:c4:c2:fb:2e:85:3c:c6:4e:4b:7a:55: 28:b9:46:9d:10:4b:14:ed:b7:c2:e3:da:78:49:c2: 5f:0a:c7:c8:43:92:5d:37:59:b7:f1:d2:de:3c:ae: 7b:a5:dc:15:84:90:ea:9f:5b:c2:f1:e8:c2:70:e4: a2:0b:8f:29:f3:74:e9:93:97:08:1f:d1:58:b8:ef: ce:b5:65:bb:1d:10:42:be:72:16:69:d2:4c:52:d7: 2a:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FC:9D:D0:E8:7E:F2:F2:6E:E3:17:76:96:A2:57:89:D0:A6:85:99:EF X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/A1CFB9CC05A650683E2547043E71965E85C3582FDBE6051B283EA7F356F68F92/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/A1CFB9CC05A650683E2547043E71965E85C3582FDBE6051B283EA7F356F68F92/0/FC9DD0E87EF2F26EE3177696A25789D0A68599EF.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.1.112.0/24 IPv6: 2801:1b:2800::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 270074 Signature Algorithm: sha256WithRSAEncryption 07:01:00:fd:3e:9e:fa:c2:68:7d:88:53:12:16:63:02:ce:2f: 3c:c9:64:ca:0e:66:a8:ad:38:c8:da:d3:54:91:a9:ce:75:b2: 1b:a7:78:3a:c5:9e:66:8f:e3:ff:2e:38:44:15:26:b2:fd:85: c5:4e:9c:67:63:de:a1:80:9f:c8:60:18:40:01:43:6a:76:8b: ad:7d:d9:6c:36:52:b6:4c:1a:96:ad:86:cb:42:4e:c4:99:54: 34:d4:0f:20:f7:30:35:d9:3d:aa:e8:56:ce:7a:4d:d9:c5:b0: 4e:ef:06:fb:eb:8c:66:3b:d5:31:e8:a4:b0:9b:12:25:7c:d1: b6:04:f7:de:7b:f5:77:0b:f7:25:14:ed:66:d8:77:e5:fb:be: 4c:4a:74:ef:d3:ea:63:6f:e1:bc:cc:ed:ce:63:55:89:57:d6: 1a:5d:dd:49:d8:da:bb:92:e1:02:e5:7d:1f:e8:ea:cd:0e:20: fa:af:1e:81:8c:28:8b:8c:6d:bf:df:fd:87:de:a6:b6:40:22: f8:e3:ad:3e:85:22:e2:e1:f5:9b:3c:99:e4:0c:47:4b:dc:17: 9f:7f:e3:1c:69:fc:d6:4a:34:97:83:f3:11:cc:65:70:ce:80: 08:0f:4a:a1:cb:65:ee:29:39:a3:a1:2b:ec:e6:57:90:3a:0b: 10:7d:c2:4e -----BEGIN CERTIFICATE----- MIIGpzCCBY+gAwIBAgIUDJYsClbWoFvdrAwrHMIaJ25qOoowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgwMTA1MTdaFw0yNzAxMjcwMTEwMTdaMDMxMTAvBgNV BAMTKEZDOUREMEU4N0VGMkYyNkVFMzE3NzY5NkEyNTc4OUQwQTY4NTk5RUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2ohAfE3G0sq9xnih+J6CZmoxL AGA5qyWfKq7YBfw9J3CnOHEVs92vmp/kiFGyof7frNUpgYWaaoMr9+e+W79xoerW WHQ3ztaikb68xzwsjvbzyZ/FkL02GHOwE9xmbsLMY3elva02m6PSEaODFF8JuavK Py1oU7wjOj45WZZBe2JUu79cxB+ISI93jJNwKEyOVtXq2pfRCuLscxj+f2R8noX6 ElZ1FhHEwvsuhTzGTkt6VSi5Rp0QSxTtt8Lj2nhJwl8Kx8hDkl03Wbfx0t48rnul 3BWEkOqfW8Lx6MJw5KILjynzdOmTlwgf0Vi47861ZbsdEEK+chZp0kxS1yo1AgMB AAGjggOxMIIDrTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT8ndDofvLybuMX dpaiV4nQpoWZ7zAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQTFDRkI5Q0MwNUE2NTA2ODNFMjU0NzA0 M0U3MTk2NUU4NUMzNTgyRkRCRTYwNTFCMjgzRUE3RjM1NkY2OEY5Mi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9BMUNGQjlDQzA1QTY1MDY4M0UyNTQ3MDQzRTcxOTY1RTg1QzM1ODJGREJF NjA1MUIyODNFQTdGMzU2RjY4RjkyLzAvRkM5REQwRTg3RUYyRjI2RUUzMTc3Njk2 QTI1Nzg5RDBBNjg1OTlFRi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAyAFwMA8EAgAC MAkDBwAoAQAbKAAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBB76MA0GCSqGSIb3 DQEBCwUAA4IBAQAHAQD9Pp76wmh9iFMSFmMCzi88yWTKDmaorTjI2tNUkanOdbIb p3g6xZ5mj+P/LjhEFSay/YXFTpxnY96hgJ/IYBhAAUNqdoutfdlsNlK2TBqWrYbL Qk7EmVQ01A8g9zA12T2q6FbOek3ZxbBO7wb764xmO9Ux6KSwmxIlfNG2BPfee/V3 C/clFO1m2Hfl+75MSnTv0+pjb+G8zO3OY1WJV9YaXd1J2Nq7kuEC5X0f6OrNDiD6 rx6BjCiLjG2/3/2H3qa2QCL4460+hSLi4fWbPJnkDEdL3Beff+McafzWSjSXg/MR zGVwzoAID0qhy2XuKTmjoSvs5leQOgsQfcJO -----END CERTIFICATE-----Generated at Mon Mar 2 15:43:43 2026 by rpki-client