$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF9663FE43D33F28F6E1EF717FEAADD21E1D5E15.cer File: FF9663FE43D33F28F6E1EF717FEAADD21E1D5E15.cer (raw, json) Hash identifier: waERYVc8FW4FcfV/4RuAcXJwfT0g/xi490oGXWq7510= Subject key identifier: FF:96:63:FE:43:D3:3F:28:F6:E1:EF:71:7F:EA:AD:D2:1E:1D:5E:15 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 1C16C65C8895998C24689F632093066582E73096 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/D877E30D1FFF1010EC4A40BD1DD396C70B74BF32FB2C9D30397652606FB699F7/0/FF9663FE43D33F28F6E1EF717FEAADD21E1D5E15.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/D877E30D1FFF1010EC4A40BD1DD396C70B74BF32FB2C9D30397652606FB699F7/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 16:04:22 +0000 Certificate not after: Wed 27 Jan 2027 16:09:22 +0000 Subordinate resources: AS: 270049 IP: 131.161.220.0/22 IP: 2803:ade0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:16:c6:5c:88:95:99:8c:24:68:9f:63:20:93:06:65:82:e7:30:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 16:04:22 2026 GMT Not After : Jan 27 16:09:22 2027 GMT Subject: CN=FF9663FE43D33F28F6E1EF717FEAADD21E1D5E15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:d2:05:ce:0e:b1:b1:b3:24:ef:c9:58:6d:f5: 47:08:54:10:ed:95:15:17:a4:7f:4e:0d:13:27:71: 66:b9:17:53:be:79:93:8b:05:cc:db:c0:95:1a:80: f3:5f:25:74:bb:91:e0:6a:aa:9f:43:2c:9f:78:bd: c2:91:9b:df:c7:97:a9:32:9a:72:4b:86:bd:24:5e: 72:99:91:32:68:0c:fd:78:20:20:c5:d2:64:51:d9: 59:03:1f:11:3a:9c:e4:bd:99:83:ba:5d:f4:b4:95: 9d:2d:a1:6d:04:4b:b0:bf:a3:3c:55:a2:f3:a4:f8: 93:4c:70:da:c5:b9:66:e4:0b:9b:c2:ad:56:62:eb: f7:bb:ee:d3:a7:b8:0f:5f:25:0e:53:cb:a0:e1:4d: c1:98:11:f1:9b:6d:eb:78:22:f4:2a:49:cb:fb:d7: 03:0e:fb:bf:9c:01:d4:9d:8f:44:d3:56:76:8f:5b: db:c5:a8:0e:1a:52:54:52:6a:89:53:f6:87:00:f5: fa:57:0c:7c:82:22:04:33:35:96:05:94:0c:3b:34: 11:90:88:54:49:90:51:ae:7c:92:a2:5d:0a:57:a0: c7:0b:b4:f2:0e:06:3a:23:d9:a8:a6:f7:f3:9f:ce: c6:e3:aa:fd:85:cd:1a:1a:bd:14:70:f5:12:3b:3f: c7:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FF:96:63:FE:43:D3:3F:28:F6:E1:EF:71:7F:EA:AD:D2:1E:1D:5E:15 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/D877E30D1FFF1010EC4A40BD1DD396C70B74BF32FB2C9D30397652606FB699F7/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/D877E30D1FFF1010EC4A40BD1DD396C70B74BF32FB2C9D30397652606FB699F7/0/FF9663FE43D33F28F6E1EF717FEAADD21E1D5E15.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.161.220.0/22 IPv6: 2803:ade0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 270049 Signature Algorithm: sha256WithRSAEncryption 27:5c:12:11:23:31:12:c2:d8:0f:3e:f2:40:35:7d:56:f4:e6: 5e:e6:dc:1d:1d:0f:e8:ef:d6:f6:f1:30:09:33:6b:51:58:e6: 5c:b8:4a:26:f0:f3:71:a0:b0:a5:db:a9:d0:28:07:c6:8a:ee: e3:ab:d2:a8:c5:83:95:8d:c9:58:0a:0e:e6:28:c7:3e:38:63: 04:15:77:8f:2e:4b:4f:e4:f1:29:5d:0a:8a:3c:03:87:2d:60: 2e:65:c0:41:d1:c8:a9:65:64:e1:b9:3f:d0:76:e2:e0:d9:7b: 4d:f0:c4:f5:d0:bc:ab:a8:b1:69:14:48:a4:9a:79:14:cc:dd: b8:84:fa:9f:a5:cb:a2:3a:1a:4f:12:56:20:ce:99:3d:e7:94: 2b:46:36:fe:f1:e6:4e:dd:f1:69:c7:0c:c9:a1:19:eb:36:2f: 07:0f:93:63:70:e4:35:28:83:b3:06:45:a1:23:45:65:43:41: de:81:87:1c:66:e9:d6:36:2f:29:65:f6:c3:80:3e:cf:86:49: ab:92:ac:07:44:72:14:6a:db:c9:f7:8b:56:73:28:5d:31:64: d0:2d:1f:54:0c:15:e9:36:37:60:a8:ef:19:c3:aa:3a:2a:e9: 00:7e:14:6b:96:d0:c4:b1:f6:aa:4e:d2:8f:20:1c:a8:1b:bf: 99:6d:c9:6f -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUHBbGXIiVmYwkaJ9jIJMGZYLnMJYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgxNjA0MjJaFw0yNzAxMjcxNjA5MjJaMDMxMTAvBgNV BAMTKEZGOTY2M0ZFNDNEMzNGMjhGNkUxRUY3MTdGRUFBREQyMUUxRDVFMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCV0gXODrGxsyTvyVht9UcIVBDt lRUXpH9ODRMncWa5F1O+eZOLBczbwJUagPNfJXS7keBqqp9DLJ94vcKRm9/Hl6ky mnJLhr0kXnKZkTJoDP14ICDF0mRR2VkDHxE6nOS9mYO6XfS0lZ0toW0ES7C/ozxV ovOk+JNMcNrFuWbkC5vCrVZi6/e77tOnuA9fJQ5Ty6DhTcGYEfGbbet4IvQqScv7 1wMO+7+cAdSdj0TTVnaPW9vFqA4aUlRSaolT9ocA9fpXDHyCIgQzNZYFlAw7NBGQ iFRJkFGufJKiXQpXoMcLtPIOBjoj2aim9/Ofzsbjqv2FzRoavRRw9RI7P8fLAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT/lmP+Q9M/KPbh 73F/6q3SHh1eFTAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRDg3N0UzMEQxRkZGMTAxMEVDNEE0MEJE MUREMzk2QzcwQjc0QkYzMkZCMkM5RDMwMzk3NjUyNjA2RkI2OTlGNy8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9EODc3RTMwRDFGRkYxMDEwRUM0QTQwQkQxREQzOTZDNzBCNzRCRjMyRkIy QzlEMzAzOTc2NTI2MDZGQjY5OUY3LzAvRkY5NjYzRkU0M0QzM0YyOEY2RTFFRjcx N0ZFQUFERDIxRTFENUUxNS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCg6HcMA0EAgAC MAcDBQAoA63gMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQe4TANBgkqhkiG9w0B AQsFAAOCAQEAJ1wSESMxEsLYDz7yQDV9VvTmXubcHR0P6O/W9vEwCTNrUVjmXLhK JvDzcaCwpdup0CgHxoru46vSqMWDlY3JWAoO5ijHPjhjBBV3jy5LT+TxKV0KijwD hy1gLmXAQdHIqWVk4bk/0Hbi4Nl7TfDE9dC8q6ixaRRIpJp5FMzduIT6n6XLojoa TxJWIM6ZPeeUK0Y2/vHmTt3xaccMyaEZ6zYvBw+TY3DkNSiDswZFoSNFZUNB3oGH HGbp1jYvKWX2w4A+z4ZJq5KsB0RyFGrbyfeLVnMoXTFk0C0fVAwV6TY3YKjvGcOq OirpAH4Ua5bQxLH2qk7SjyAcqBu/mW3Jbw== -----END CERTIFICATE-----Generated at Mon Mar 2 14:31:21 2026 by rpki-client