$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FDB692B7B90C4707701C811F7179377E0289AC4C.cer File: FDB692B7B90C4707701C811F7179377E0289AC4C.cer (raw, json) Hash identifier: d2G08Es6eChHAhFv+8oKQ2qNEkFVFPwxlvAmxSnmphQ= Subject key identifier: FD:B6:92:B7:B9:0C:47:07:70:1C:81:1F:71:79:37:7E:02:89:AC:4C Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 1B898BD8008D3F3C0AEF0A3B69CEC91CAC66CDAB Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/75ADA18295AE5AA1B76C1ACB6F819BB421BDD5CC3F99E1309C3344E3F7B7DCD3/0/FDB692B7B90C4707701C811F7179377E0289AC4C.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/75ADA18295AE5AA1B76C1ACB6F819BB421BDD5CC3F99E1309C3344E3F7B7DCD3/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 18:19:56 +0000 Certificate not after: Wed 27 Jan 2027 18:24:56 +0000 Subordinate resources: IP: 45.227.48.0/22 IP: 2803:cd50::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:89:8b:d8:00:8d:3f:3c:0a:ef:0a:3b:69:ce:c9:1c:ac:66:cd:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 18:19:56 2026 GMT Not After : Jan 27 18:24:56 2027 GMT Subject: CN=FDB692B7B90C4707701C811F7179377E0289AC4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:eb:69:ed:c0:c4:7f:d4:49:0b:80:40:63:76: 88:43:b7:86:6d:94:a2:88:34:8a:01:90:05:ae:5c: 57:02:a7:af:df:cd:98:32:10:29:8b:e9:ce:95:ab: 4a:ec:57:f5:05:f2:c8:a5:c1:e1:77:bf:60:d7:6d: 8b:d0:7f:bb:d3:e5:8d:23:43:50:3b:8e:c2:ba:84: 67:dc:95:51:99:70:02:f2:5f:45:d8:56:04:7a:fd: 2c:18:f6:f9:70:cb:98:a6:81:17:49:5e:a6:1a:39: b8:ee:2d:5b:b2:4a:3e:dd:04:10:ba:4c:3f:09:82: f5:1c:17:f8:a8:4e:63:b1:99:34:33:6d:7b:89:25: b4:37:74:56:19:06:4f:d7:ff:54:6a:53:95:32:ee: a6:ab:39:8e:f0:f3:47:26:d3:d6:af:57:c9:1a:62: 1d:d0:a1:5a:0b:85:87:3e:e3:09:f0:72:88:49:33: 1d:a1:e7:70:89:78:37:68:bb:b4:2e:63:3f:a1:36: f1:5e:43:df:2c:1e:0c:65:b6:1b:8e:42:55:96:0c: cd:cc:37:ef:7f:a3:19:04:34:2a:85:30:17:de:47: e0:a4:5d:32:2a:42:99:67:14:b5:f8:ca:4d:dc:81: 0a:9c:98:b2:2d:e0:81:4e:bf:1e:a9:98:a3:fd:7e: 83:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FD:B6:92:B7:B9:0C:47:07:70:1C:81:1F:71:79:37:7E:02:89:AC:4C X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/75ADA18295AE5AA1B76C1ACB6F819BB421BDD5CC3F99E1309C3344E3F7B7DCD3/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/75ADA18295AE5AA1B76C1ACB6F819BB421BDD5CC3F99E1309C3344E3F7B7DCD3/0/FDB692B7B90C4707701C811F7179377E0289AC4C.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.227.48.0/22 IPv6: 2803:cd50::/32 Signature Algorithm: sha256WithRSAEncryption 36:db:db:fb:f1:90:17:23:76:a2:eb:2e:3d:b4:66:8e:c9:fa: 80:e4:dc:7a:61:d0:d7:1c:0b:9b:67:0f:06:27:8c:01:df:dd: 88:72:82:1f:33:63:a0:7f:16:4a:b3:aa:92:5d:1b:a1:bd:9a: 55:9f:a0:ff:bc:69:b7:6d:b7:3e:19:7b:b6:61:9b:39:ba:b2: 0f:92:50:b8:29:fe:f9:df:2b:12:c1:9d:93:7e:fd:03:dc:db: c1:97:0e:a2:dc:8c:d0:36:12:36:50:0b:8f:2f:9f:7f:e2:ca: 6a:49:3b:ca:bc:d2:53:75:81:ff:5e:e6:9d:69:a6:97:1a:eb: 19:bf:a8:85:c9:37:9a:5e:8a:eb:f0:7b:fa:eb:bc:9d:f6:c1: 1e:23:1a:3e:f0:15:b9:c2:6f:5c:c1:55:33:6e:1f:d7:ab:5c: b6:0c:3b:53:2e:fb:7d:73:35:1c:51:2b:e3:19:59:56:b4:c7: cd:08:05:f7:9b:82:36:38:a6:31:01:93:fc:75:9a:13:1f:46: 7d:78:17:b2:1f:ab:9a:7c:7a:b5:c1:d4:77:29:dc:48:57:b0: 76:a2:79:d1:be:20:5f:6b:74:d5:22:0f:18:71:06:e1:1c:70: 4f:38:95:7a:b9:b4:2e:8a:1e:f9:9d:af:70:40:43:27:f6:99: d5:78:0f:0b -----BEGIN CERTIFICATE----- MIIGiTCCBXGgAwIBAgIUG4mL2ACNPzwK7wo7ac7JHKxmzaswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgxODE5NTZaFw0yNzAxMjcxODI0NTZaMDMxMTAvBgNV BAMTKEZEQjY5MkI3QjkwQzQ3MDc3MDFDODExRjcxNzkzNzdFMDI4OUFDNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx62ntwMR/1EkLgEBjdohDt4Zt lKKINIoBkAWuXFcCp6/fzZgyECmL6c6Vq0rsV/UF8silweF3v2DXbYvQf7vT5Y0j Q1A7jsK6hGfclVGZcALyX0XYVgR6/SwY9vlwy5imgRdJXqYaObjuLVuySj7dBBC6 TD8JgvUcF/ioTmOxmTQzbXuJJbQ3dFYZBk/X/1RqU5Uy7qarOY7w80cm09avV8ka Yh3QoVoLhYc+4wnwcohJMx2h53CJeDdou7QuYz+hNvFeQ98sHgxlthuOQlWWDM3M N+9/oxkENCqFMBfeR+CkXTIqQplnFLX4yk3cgQqcmLIt4IFOvx6pmKP9foOJAgMB AAGjggOTMIIDjzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT9tpK3uQxHB3Ac gR9xeTd+AomsTDAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNzVBREExODI5NUFFNUFBMUI3NkMxQUNC NkY4MTlCQjQyMUJERDVDQzNGOTlFMTMwOUMzMzQ0RTNGN0I3RENEMy8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy83NUFEQTE4Mjk1QUU1QUExQjc2QzFBQ0I2RjgxOUJCNDIxQkRENUNDM0Y5 OUUxMzA5QzMzNDRFM0Y3QjdEQ0QzLzAvRkRCNjkyQjdCOTBDNDcwNzcwMUM4MTFG NzE3OTM3N0UwMjg5QUM0Qy5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLeMwMA0EAgAC MAcDBQAoA81QMA0GCSqGSIb3DQEBCwUAA4IBAQA229v78ZAXI3ai6y49tGaOyfqA 5Nx6YdDXHAubZw8GJ4wB392IcoIfM2OgfxZKs6qSXRuhvZpVn6D/vGm3bbc+GXu2 YZs5urIPklC4Kf753ysSwZ2Tfv0D3NvBlw6i3IzQNhI2UAuPL59/4spqSTvKvNJT dYH/XuadaaaXGusZv6iFyTeaXorr8Hv667yd9sEeIxo+8BW5wm9cwVUzbh/Xq1y2 DDtTLvt9czUcUSvjGVlWtMfNCAX3m4I2OKYxAZP8dZoTH0Z9eBeyH6uafHq1wdR3 KdxIV7B2onnRviBfa3TVIg8YcQbhHHBPOJV6ubQuih75na9wQEMn9pnVeA8L -----END CERTIFICATE-----Generated at Mon Mar 2 15:38:44 2026 by rpki-client