$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11EF0F3155B1ACEDB3C3A662954F8D179DAE9144.cer File: 11EF0F3155B1ACEDB3C3A662954F8D179DAE9144.cer (raw, json) Hash identifier: vNgijaw9Ez1D3h+QMTVCxDni4brNdwFaY5JdB0meoxs= Subject key identifier: 11:EF:0F:31:55:B1:AC:ED:B3:C3:A6:62:95:4F:8D:17:9D:AE:91:44 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 202F577F0F1D9FF4767AF5A08DB8B4E189A2CD40 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/6DAF6D4EF48F6B13D740A8C7423D0988C74BC5D29CCC050B1E85671F4C4B41C2/0/11EF0F3155B1ACEDB3C3A662954F8D179DAE9144.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/6DAF6D4EF48F6B13D740A8C7423D0988C74BC5D29CCC050B1E85671F4C4B41C2/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Fri 06 Mar 2026 19:40:00 +0000 Certificate not after: Fri 05 Mar 2027 19:45:00 +0000 Subordinate resources: AS: 269929 IP: 200.3.10.0/23 IP: 200.34.140.0/24 IP: 2803:72e0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 19 Mar 2026 05:02:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:2f:57:7f:0f:1d:9f:f4:76:7a:f5:a0:8d:b8:b4:e1:89:a2:cd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Mar 6 19:40:00 2026 GMT Not After : Mar 5 19:45:00 2027 GMT Subject: CN=11EF0F3155B1ACEDB3C3A662954F8D179DAE9144 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:3d:fd:66:28:ee:35:16:e5:a3:e7:bb:5a:44: 9f:21:10:20:f6:d5:ce:05:9a:f6:96:71:f8:18:1a: d0:bb:a8:6d:ea:2d:35:b0:96:b3:bb:b1:3c:aa:5d: 0c:ab:58:38:d6:46:c3:0b:d8:06:85:87:9d:ca:9a: 8c:40:4a:5a:12:0d:12:e8:a8:78:36:47:a4:fb:2e: b0:81:f4:6a:cc:ed:b3:17:dd:be:78:78:f5:1c:1c: 46:1e:31:e8:f8:18:88:3d:d0:9c:4b:b3:49:d9:4f: eb:10:68:83:02:aa:5d:d0:fc:17:b3:45:96:58:7e: 36:f1:78:d7:1c:19:bf:2e:b7:3f:43:b6:b2:96:e6: d1:9d:16:f2:24:b3:de:e0:44:08:e2:aa:e3:9c:e6: cf:5d:c5:d1:05:a5:63:b7:81:b9:f4:51:a6:29:b2: d3:1d:d5:be:6f:ea:b4:19:71:03:cb:b2:60:c1:66: a5:05:cf:5b:7c:04:be:63:d0:0a:67:6c:67:f2:bc: da:e7:1b:41:3e:a5:b4:26:b5:74:c1:08:27:f4:44: 14:1f:d7:ac:04:7f:29:02:73:ea:5c:1f:6f:32:a9: 15:81:31:80:b0:41:67:f8:1b:69:7d:c0:77:b4:e0: 8f:b7:fa:3f:cb:6e:4a:27:1e:ea:14:17:40:2d:07: 86:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 11:EF:0F:31:55:B1:AC:ED:B3:C3:A6:62:95:4F:8D:17:9D:AE:91:44 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6DAF6D4EF48F6B13D740A8C7423D0988C74BC5D29CCC050B1E85671F4C4B41C2/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6DAF6D4EF48F6B13D740A8C7423D0988C74BC5D29CCC050B1E85671F4C4B41C2/0/11EF0F3155B1ACEDB3C3A662954F8D179DAE9144.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.3.10.0/23 200.34.140.0/24 IPv6: 2803:72e0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 269929 Signature Algorithm: sha256WithRSAEncryption 0d:d8:5e:e9:38:e6:9c:ae:52:c5:d9:f9:d0:44:7b:93:e4:49: 72:56:be:b3:27:3d:d6:78:f5:83:bb:e8:e3:42:96:1c:0f:40: 95:7b:71:c4:ea:d3:cd:63:51:56:88:d1:e1:98:f7:e9:0d:04: ed:6c:70:ac:1c:27:e0:dd:32:50:59:b3:3f:cc:fe:10:4a:c5: 9e:52:2d:db:37:b3:34:56:92:bc:78:6d:3b:f1:31:b0:29:70: 66:43:fe:22:77:75:75:4b:5f:73:3f:01:40:2a:5b:f0:40:ea: d9:20:12:0e:ba:22:1f:3d:40:8e:5c:95:2e:ba:02:fe:23:5c: 88:b9:15:4e:4b:4c:ef:20:a1:34:ec:43:89:f6:4f:38:03:c8: 96:d1:b8:8f:c9:c7:6d:48:2a:48:9a:c9:b6:69:f2:ec:d7:8f: a5:85:be:ec:08:5d:18:4a:e4:45:69:50:89:ac:10:95:b5:8b: dc:79:94:01:16:62:f9:8d:cc:93:2a:fe:c9:72:30:33:15:c1: 17:a6:a9:39:f0:07:bb:2d:d7:85:ba:cd:e8:30:db:11:a9:28: 74:9e:c8:b1:3d:64:18:24:f7:60:d8:fe:57:82:97:b8:8a:ff: 2b:e2:d2:a1:67:95:18:20:f5:03:7e:ae:9a:8c:b4:b6:07:87: 7d:ad:20:07 -----BEGIN CERTIFICATE----- MIIGqzCCBZOgAwIBAgIUIC9Xfw8dn/R2evWgjbi04YmizUAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAzMDYxOTQwMDBaFw0yNzAzMDUxOTQ1MDBaMDMxMTAvBgNV BAMTKDExRUYwRjMxNTVCMUFDRURCM0MzQTY2Mjk1NEY4RDE3OURBRTkxNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2Pf1mKO41FuWj57taRJ8hECD2 1c4FmvaWcfgYGtC7qG3qLTWwlrO7sTyqXQyrWDjWRsML2AaFh53KmoxASloSDRLo qHg2R6T7LrCB9GrM7bMX3b54ePUcHEYeMej4GIg90JxLs0nZT+sQaIMCql3Q/Bez RZZYfjbxeNccGb8utz9DtrKW5tGdFvIks97gRAjiquOc5s9dxdEFpWO3gbn0UaYp stMd1b5v6rQZcQPLsmDBZqUFz1t8BL5j0ApnbGfyvNrnG0E+pbQmtXTBCCf0RBQf 16wEfykCc+pcH28yqRWBMYCwQWf4G2l9wHe04I+3+j/LbkonHuoUF0AtB4a9AgMB AAGjggO1MIIDsTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQR7w8xVbGs7bPD pmKVT40Xna6RRDAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNkRBRjZENEVGNDhGNkIxM0Q3NDBBOEM3 NDIzRDA5ODhDNzRCQzVEMjlDQ0MwNTBCMUU4NTY3MUY0QzRCNDFDMi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy82REFGNkQ0RUY0OEY2QjEzRDc0MEE4Qzc0MjNEMDk4OEM3NEJDNUQyOUND QzA1MEIxRTg1NjcxRjRDNEI0MUMyLzAvMTFFRjBGMzE1NUIxQUNFREIzQzNBNjYy OTU0RjhEMTc5REFFOTE0NC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQByAMKAwQAyCKM MA0EAgACMAcDBQAoA3LgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQeaTANBgkq hkiG9w0BAQsFAAOCAQEADdhe6TjmnK5Sxdn50ER7k+RJcla+syc91nj1g7vo40KW HA9AlXtxxOrTzWNRVojR4Zj36Q0E7WxwrBwn4N0yUFmzP8z+EErFnlIt2zezNFaS vHhtO/ExsClwZkP+Ind1dUtfcz8BQCpb8EDq2SASDroiHz1AjlyVLroC/iNciLkV TktM7yChNOxDifZPOAPIltG4j8nHbUgqSJrJtmny7NePpYW+7AhdGErkRWlQiawQ lbWL3HmUARZi+Y3Mkyr+yXIwMxXBF6apOfAHuy3XhbrN6DDbEakodJ7IsT1kGCT3 YNj+V4KXuIr/K+LSoWeVGCD1A36umoy0tgeHfa0gBw== -----END CERTIFICATE-----Generated at Mon Mar 16 01:55:34 2026 by rpki-client