$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.cer File: 1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.cer (raw, json) Hash identifier: 8Dv62ChOdIdOc5Pe7aLzKpm9fS1tVpZpvOrunwZHaiY= Subject key identifier: 13:47:BD:D7:F6:19:EC:AD:7A:91:CF:DA:27:3E:81:ED:88:36:F7:E8 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 0C3D6D44BC1F6792DD067119E5BB0644FBD05223 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 15:43:46 +0000 Certificate not after: Wed 27 Jan 2027 15:48:46 +0000 Subordinate resources: IP: 190.109.192.0/19 IP: 191.103.64.0/19 IP: 2803:3a80::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 26 Feb 2026 05:53:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:3d:6d:44:bc:1f:67:92:dd:06:71:19:e5:bb:06:44:fb:d0:52:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 15:43:46 2026 GMT Not After : Jan 27 15:48:46 2027 GMT Subject: CN=1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:26:97:db:d3:ac:21:35:1a:e7:3b:5e:32:45: d9:ed:a5:6b:c1:d3:e0:35:64:f2:5d:be:eb:ff:ed: 21:d1:38:fd:fb:c6:6e:56:c9:76:e5:4b:30:1f:33: 30:48:3f:7d:2b:61:a0:a7:20:f2:fa:4c:35:81:d6: 8e:4a:e4:e7:17:6f:aa:ad:aa:77:04:57:72:0d:98: 06:fe:d5:a2:9c:15:b7:7a:15:85:ca:0a:cf:dd:64: de:df:73:30:9e:c6:84:6e:a6:03:c5:56:6c:4f:84: b9:6e:e5:8d:3e:de:db:71:77:e5:22:1a:2f:f8:b1: ab:37:78:64:8c:58:fd:36:d6:38:d2:3d:a7:f1:e6: f4:3f:03:87:fb:a0:52:bc:f8:f8:12:a8:23:ec:e1: 20:e1:5a:76:3d:f1:59:f4:63:66:53:35:0a:f4:44: fc:ba:2a:40:d4:ea:8c:53:92:20:d7:fb:fb:24:d2: 35:16:ba:f1:fd:ab:8d:4b:2f:8a:de:7e:fa:66:60: 16:3d:b5:11:bf:b5:93:8e:82:a7:3d:7f:de:41:1a: 3b:05:d0:d2:d5:3e:9b:cd:68:49:64:d3:ef:d5:9b: 3d:14:eb:82:cd:8b:0b:02:2d:cd:c7:28:35:10:8c: 24:8f:af:1e:e7:20:df:ce:a3:20:bd:0d:0b:fb:60: 7f:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 13:47:BD:D7:F6:19:EC:AD:7A:91:CF:DA:27:3E:81:ED:88:36:F7:E8 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 190.109.192.0/19 191.103.64.0/19 IPv6: 2803:3a80::/32 Signature Algorithm: sha256WithRSAEncryption 28:d7:d2:e5:e5:84:6a:d5:03:c6:6d:b9:65:66:9d:1a:05:ab: a2:71:a7:ee:a7:e9:b1:ef:f6:65:57:4f:ed:41:db:dd:3b:88: fa:48:f3:42:21:29:1e:96:90:1b:18:5c:62:45:ab:7f:1a:56: ad:fc:2e:39:72:81:cd:f4:a2:ce:2c:64:75:bb:1b:bf:ff:f5: 99:2f:ea:e0:de:8d:c1:56:84:3b:c1:d7:9e:d1:fe:ad:c3:5a: 76:7c:5c:97:11:d1:78:5a:f6:e6:85:f8:2a:4f:ed:c7:f6:1b: df:32:14:78:aa:73:c2:04:b7:ed:6b:d8:3a:b0:37:73:57:ad: c6:32:83:2d:15:ad:e4:26:73:77:df:9c:91:5c:7f:6c:e5:af: 5e:33:3a:ce:17:3c:08:a1:52:fd:dc:7b:9c:57:57:a2:88:80: d6:48:f0:82:91:c2:16:d1:ae:4f:b6:3d:cb:83:04:96:99:dd: ea:05:f7:99:c9:8a:93:72:44:55:d6:b7:85:8d:1f:cb:cd:ac: d2:6e:6f:40:59:80:53:3e:a6:e3:a0:ed:cb:43:14:4f:a7:39: 04:54:72:c9:ea:f6:4c:64:6a:91:48:10:57:26:22:bd:cc:13: f9:a5:cd:0e:17:b7:88:c9:b6:de:da:a5:74:50:36:a4:c2:b1: 68:82:1b:fe -----BEGIN CERTIFICATE----- MIIGjzCCBXegAwIBAgIUDD1tRLwfZ5LdBnEZ5bsGRPvQUiMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgxNTQzNDZaFw0yNzAxMjcxNTQ4NDZaMDMxMTAvBgNV BAMTKDEzNDdCREQ3RjYxOUVDQUQ3QTkxQ0ZEQTI3M0U4MUVEODgzNkY3RTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8Jpfb06whNRrnO14yRdntpWvB 0+A1ZPJdvuv/7SHROP37xm5WyXblSzAfMzBIP30rYaCnIPL6TDWB1o5K5OcXb6qt qncEV3INmAb+1aKcFbd6FYXKCs/dZN7fczCexoRupgPFVmxPhLlu5Y0+3ttxd+Ui Gi/4sas3eGSMWP021jjSPafx5vQ/A4f7oFK8+PgSqCPs4SDhWnY98Vn0Y2ZTNQr0 RPy6KkDU6oxTkiDX+/sk0jUWuvH9q41LL4refvpmYBY9tRG/tZOOgqc9f95BGjsF 0NLVPpvNaElk0+/Vmz0U64LNiwsCLc3HKDUQjCSPrx7nIN/OoyC9DQv7YH97AgMB AAGjggOZMIIDlTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQTR73X9hnsrXqR z9onPoHtiDb36DAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMTVDODVCNjk3MUQ4RDg5MDJCNzA1QzU2 NEQxNjYwRDM3MDAxQzE0MEJGM0VENjc1RjFCMjhDMjQwMkFEMkM4Ny8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8xNUM4NUI2OTcxRDhEODkwMkI3MDVDNTY0RDE2NjBEMzcwMDFDMTQwQkYz RUQ2NzVGMUIyOEMyNDAyQUQyQzg3LzAvMTM0N0JERDdGNjE5RUNBRDdBOTFDRkRB MjczRTgxRUQ4ODM2RjdFOC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQFvm3AAwQFv2dA MA0EAgACMAcDBQAoAzqAMA0GCSqGSIb3DQEBCwUAA4IBAQAo19Ll5YRq1QPGbbll Zp0aBauicafup+mx7/ZlV0/tQdvdO4j6SPNCISkelpAbGFxiRat/Glat/C45coHN 9KLOLGR1uxu///WZL+rg3o3BVoQ7wdee0f6tw1p2fFyXEdF4WvbmhfgqT+3H9hvf MhR4qnPCBLfta9g6sDdzV63GMoMtFa3kJnN335yRXH9s5a9eMzrOFzwIoVL93Huc V1eiiIDWSPCCkcIW0a5Ptj3LgwSWmd3qBfeZyYqTckRV1reFjR/LzazSbm9AWYBT PqbjoO3LQxRPpzkEVHLJ6vZMZGqRSBBXJiK9zBP5pc0OF7eIybbe2qV0UDakwrFo ghv+ -----END CERTIFICATE-----Generated at Sun Feb 22 18:38:22 2026 by rpki-client