$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.cer File: 36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.cer (raw, json) Hash identifier: llT/54TvkLlea3zBmrvBH1qf189K4hID7oZhTSHmyYk= Subject key identifier: 36:E1:9E:2D:4E:E8:F3:EA:D0:C1:46:60:B2:A8:64:6A:C9:F2:0A:F5 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 17E83A1C930630CE518D854CE67C851CF411A403 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 10:26:17 +0000 Certificate not after: Wed 27 Jan 2027 10:31:17 +0000 Subordinate resources: AS: 7087 IP: 200.13.192.0/19 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 22 Feb 2026 23:49:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:e8:3a:1c:93:06:30:ce:51:8d:85:4c:e6:7c:85:1c:f4:11:a4:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 10:26:17 2026 GMT Not After : Jan 27 10:31:17 2027 GMT Subject: CN=36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:50:31:03:ce:7d:c8:9b:8b:7a:6f:80:e8:d9: a8:e6:63:53:d5:b3:8f:b7:eb:36:cf:da:2a:2d:db: 02:93:f9:0d:53:81:bc:5a:06:a2:cb:16:93:b0:38: 36:24:75:b8:67:15:63:ff:d3:89:40:5d:08:dc:15: e2:ab:1a:f6:43:ca:2e:71:76:97:43:d7:97:73:3a: 69:fe:bb:28:1e:ea:1e:6c:cf:2c:84:70:54:e1:ad: 2c:73:8b:04:c6:de:76:6b:3c:f9:5c:b9:da:1c:64: 58:6a:a4:55:da:07:a3:23:07:de:67:7e:60:ac:d4: 11:33:30:08:9e:a1:7e:44:c4:21:c5:7d:37:59:8f: 0b:be:c1:b6:3d:af:f4:6b:12:b1:36:14:58:ce:7e: b6:5b:6e:df:74:30:c8:c1:c3:3c:c5:a0:40:fb:4a: bb:e6:08:6e:1f:df:50:4e:62:80:24:c6:db:9a:3d: 27:01:c8:b4:05:ff:44:54:cd:24:16:7c:61:f5:4b: 69:95:31:0f:49:12:5d:d9:e4:0a:74:f8:28:9e:4a: 7f:b1:47:1c:e9:41:6f:0c:d4:22:cc:2a:ef:8e:89: 0c:38:12:73:2c:1c:d4:bc:84:5d:b2:87:5e:1e:a9: ee:e0:27:1a:06:e5:5d:a0:65:f8:94:10:0e:d8:11: 40:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 36:E1:9E:2D:4E:E8:F3:EA:D0:C1:46:60:B2:A8:64:6A:C9:F2:0A:F5 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.13.192.0/19 sbgp-autonomousSysNum: critical Autonomous System Numbers: 7087 Signature Algorithm: sha256WithRSAEncryption 4a:a0:a1:20:4b:4f:56:a9:6f:e8:d4:6a:36:ca:d2:77:06:8c: 61:c2:8e:56:ad:92:db:d4:d9:3b:95:d0:e1:ba:3a:b2:0d:44: 94:01:7b:84:a7:19:de:73:2a:79:e7:77:2e:b2:cd:03:7d:a1: d3:fb:40:cf:ce:52:bd:25:90:51:e3:0c:54:40:c7:0d:1b:54: 49:36:e8:08:c7:d4:ce:b0:4b:7b:af:63:1a:ce:b5:25:2b:1b: 53:b6:1a:24:87:81:cf:6f:34:5c:bc:19:3a:06:19:c1:53:de: 59:1e:8d:17:b8:5f:4b:ae:8a:75:2e:c2:4e:3a:82:37:a6:28: fa:3c:07:07:e9:b7:d5:75:1d:57:7f:68:9a:1f:68:94:36:35: 7e:42:83:80:71:68:80:e7:94:cf:cd:cf:58:bc:f3:4b:e7:ee: 5f:59:84:43:f8:48:32:34:13:92:97:c1:4b:03:00:5e:6d:ed: 95:1b:87:1f:ce:b3:8e:ca:73:e1:d7:0e:6c:3b:56:b0:24:20: 45:b8:03:f4:9b:eb:48:07:90:27:25:a7:d5:69:89:0f:eb:89: c0:9c:d0:d6:54:64:40:0b:b2:09:71:2e:5c:b9:12:8c:b7:f3: ad:ab:1c:cc:10:6d:24:3f:73:b0:24:47:cd:5b:b6:52:42:cd: 28:f2:74:2b -----BEGIN CERTIFICATE----- MIIGlTCCBX2gAwIBAgIUF+g6HJMGMM5RjYVM5nyFHPQRpAMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgxMDI2MTdaFw0yNzAxMjcxMDMxMTdaMDMxMTAvBgNV BAMTKDM2RTE5RTJENEVFOEYzRUFEMEMxNDY2MEIyQTg2NDZBQzlGMjBBRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5UDEDzn3Im4t6b4Do2ajmY1PV s4+36zbP2iot2wKT+Q1TgbxaBqLLFpOwODYkdbhnFWP/04lAXQjcFeKrGvZDyi5x dpdD15dzOmn+uyge6h5szyyEcFThrSxziwTG3nZrPPlcudocZFhqpFXaB6MjB95n fmCs1BEzMAieoX5ExCHFfTdZjwu+wbY9r/RrErE2FFjOfrZbbt90MMjBwzzFoED7 SrvmCG4f31BOYoAkxtuaPScByLQF/0RUzSQWfGH1S2mVMQ9JEl3Z5Ap0+CieSn+x RxzpQW8M1CLMKu+OiQw4EnMsHNS8hF2yh14eqe7gJxoG5V2gZfiUEA7YEUAdAgMB AAGjggOfMIIDmzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ24Z4tTujz6tDB RmCyqGRqyfIK9TAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRkY3QkE3NTA1NUY3OTk3NThGM0Y0Q0U4 MTFCQURCQTI0OTFCRjFFMzIzODRGQkIzQUY4QTM5RTdGQjUwNkMyQi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9GRjdCQTc1MDU1Rjc5OTc1OEYzRjRDRTgxMUJBREJBMjQ5MUJGMUUzMjM4 NEZCQjNBRjhBMzlFN0ZCNTA2QzJCLzAvMzZFMTlFMkQ0RUU4RjNFQUQwQzE0NjYw QjJBODY0NkFDOUYyMEFGNS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFyA3AMBkGCCsG AQUFBwEIAQH/BAowCKAGMAQCAhuvMA0GCSqGSIb3DQEBCwUAA4IBAQBKoKEgS09W qW/o1Go2ytJ3Boxhwo5WrZLb1Nk7ldDhujqyDUSUAXuEpxnecyp553cuss0DfaHT +0DPzlK9JZBR4wxUQMcNG1RJNugIx9TOsEt7r2MazrUlKxtTthokh4HPbzRcvBk6 BhnBU95ZHo0XuF9Lrop1LsJOOoI3pij6PAcH6bfVdR1Xf2iaH2iUNjV+QoOAcWiA 55TPzc9YvPNL5+5fWYRD+EgyNBOSl8FLAwBebe2VG4cfzrOOynPh1w5sO1awJCBF uAP0m+tIB5AnJafVaYkP64nAnNDWVGRAC7IJcS5cuRKMt/OtqxzMEG0kP3OwJEfN W7ZSQs0o8nQr -----END CERTIFICATE-----Generated at Thu Feb 19 01:34:37 2026 by rpki-client