$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43D2A661B6F1B4D00B2916B52B729414016F4C6B.cer File: 43D2A661B6F1B4D00B2916B52B729414016F4C6B.cer (raw, json) Hash identifier: F5i99me1oqEnmUtFM2zmExomuFFfofA0DAjWOciKVm8= Subject key identifier: 43:D2:A6:61:B6:F1:B4:D0:0B:29:16:B5:2B:72:94:14:01:6F:4C:6B Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 3432B79806706C706A83C90418DFC44F4B8ACE27 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/A3A5A0B9D9C5AA81C46F742D41A06942142ABD67E0B7414AE5D0EFE56BC9E733/0/43D2A661B6F1B4D00B2916B52B729414016F4C6B.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/A3A5A0B9D9C5AA81C46F742D41A06942142ABD67E0B7414AE5D0EFE56BC9E733/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 05:54:09 +0000 Certificate not after: Wed 27 Jan 2027 05:59:09 +0000 Subordinate resources: AS: 64102 IP: 144.22.0.0/15 IP: 198.49.164.0/24 IP: 200.9.209.0 -- 200.9.211.255 IP: 200.10.145.0/24 IP: 2801:1::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 01 Mar 2026 13:51:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:32:b7:98:06:70:6c:70:6a:83:c9:04:18:df:c4:4f:4b:8a:ce:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 05:54:09 2026 GMT Not After : Jan 27 05:59:09 2027 GMT Subject: CN=43D2A661B6F1B4D00B2916B52B729414016F4C6B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f6:9f:49:4d:d5:74:55:d6:b2:8d:46:03:75: 92:29:6e:88:73:d8:d2:7f:1e:4d:e2:b0:36:77:fe: 08:1a:9f:04:50:62:cd:49:98:15:66:ad:21:36:c3: 50:e8:a6:fb:bc:9e:bc:3e:9d:76:98:4b:23:ce:fa: 14:43:46:d6:8e:08:ac:0b:8e:a0:b7:37:c0:75:b9: 55:fc:dd:66:51:e2:82:30:80:5b:eb:2e:e9:10:34: de:8d:e6:e4:a6:ee:e9:53:72:f1:e0:2f:f0:8b:bb: a7:e0:0d:84:f9:27:fa:1f:2c:62:f7:9d:df:cd:75: 7f:af:91:18:a6:e2:de:cb:11:58:d9:00:e7:f9:c0: 96:6a:f4:06:52:f4:4c:1d:1a:1d:94:b0:5d:22:a0: 36:e2:fc:23:11:2d:41:3e:60:19:ca:a6:a3:94:c4: 2c:7a:bc:3e:da:18:20:5c:b3:2b:da:56:6b:5b:ea: 23:38:4d:eb:82:ee:b3:e5:ae:5e:8b:8e:49:bd:4d: b5:e4:eb:6e:64:aa:43:35:b4:bd:e5:a7:69:4c:6d: 9e:a2:8b:37:07:0e:26:aa:c0:d0:2a:10:4f:e9:cd: 36:04:3d:04:e4:15:58:f0:2b:c2:b0:4e:64:f1:c3: d2:b8:d7:ad:7c:eb:df:65:6d:d3:e7:f7:e7:63:70: 58:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 43:D2:A6:61:B6:F1:B4:D0:0B:29:16:B5:2B:72:94:14:01:6F:4C:6B X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/A3A5A0B9D9C5AA81C46F742D41A06942142ABD67E0B7414AE5D0EFE56BC9E733/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/A3A5A0B9D9C5AA81C46F742D41A06942142ABD67E0B7414AE5D0EFE56BC9E733/0/43D2A661B6F1B4D00B2916B52B729414016F4C6B.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.22.0.0/15 198.49.164.0/24 200.9.209.0-200.9.211.255 200.10.145.0/24 IPv6: 2801:1::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 64102 Signature Algorithm: sha256WithRSAEncryption 00:bf:19:24:ad:63:4e:a5:ea:83:04:25:5a:95:a5:c7:e3:74: 35:58:7b:b0:30:93:e3:71:1d:cf:9c:60:34:74:b5:94:6c:f1: 27:f6:97:dc:c5:05:e9:45:cd:9d:82:ee:70:82:1e:0d:46:6c: 06:68:bc:3b:0a:b7:4f:19:6b:5e:2f:1d:ba:2a:95:c2:da:a6: c5:a4:32:3a:4f:3e:93:bc:19:cd:6f:b2:04:33:24:5c:99:bb: 44:6a:06:cc:46:50:a4:02:62:61:ce:12:94:4e:cd:a7:6a:9d: 21:96:f3:d1:b4:4c:21:e0:90:20:6f:73:c6:44:08:a9:85:ab: 59:25:a1:6c:1c:70:2e:1a:6a:bb:99:13:e1:48:b9:03:f7:d9: 2e:32:7a:d6:71:78:d1:fe:74:11:f5:59:c8:27:9f:44:43:c1: 91:c5:10:1d:e4:32:7f:82:bf:b8:1b:b2:66:70:07:c9:16:45: d7:33:37:db:b1:97:37:dd:db:40:32:ff:7c:f2:8e:1f:3a:b6: e8:b0:c9:7a:55:62:59:8b:f8:c5:ea:0d:8e:bd:15:3a:bd:79: 66:a3:75:bb:5f:c0:d9:eb:04:64:d2:2c:13:ae:2a:60:20:e0: 44:86:1e:83:a2:ac:34:60:6e:75:f2:1b:f4:2d:0e:fb:2d:6b: 5a:f8:0c:bd -----BEGIN CERTIFICATE----- MIIGvjCCBaagAwIBAgIUNDK3mAZwbHBqg8kEGN/ET0uKzicwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgwNTU0MDlaFw0yNzAxMjcwNTU5MDlaMDMxMTAvBgNV BAMTKDQzRDJBNjYxQjZGMUI0RDAwQjI5MTZCNTJCNzI5NDE0MDE2RjRDNkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD9p9JTdV0VdayjUYDdZIpbohz 2NJ/Hk3isDZ3/gganwRQYs1JmBVmrSE2w1Dopvu8nrw+nXaYSyPO+hRDRtaOCKwL jqC3N8B1uVX83WZR4oIwgFvrLukQNN6N5uSm7ulTcvHgL/CLu6fgDYT5J/ofLGL3 nd/NdX+vkRim4t7LEVjZAOf5wJZq9AZS9EwdGh2UsF0ioDbi/CMRLUE+YBnKpqOU xCx6vD7aGCBcsyvaVmtb6iM4TeuC7rPlrl6Ljkm9TbXk625kqkM1tL3lp2lMbZ6i izcHDiaqwNAqEE/pzTYEPQTkFVjwK8KwTmTxw9K41618699lbdPn9+djcFjHAgMB AAGjggPIMIIDxDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRD0qZhtvG00Asp FrUrcpQUAW9MazAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQTNBNUEwQjlEOUM1QUE4MUM0NkY3NDJE NDFBMDY5NDIxNDJBQkQ2N0UwQjc0MTRBRTVEMEVGRTU2QkM5RTczMy8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9BM0E1QTBCOUQ5QzVBQTgxQzQ2Rjc0MkQ0MUEwNjk0MjE0MkFCRDY3RTBC NzQxNEFFNUQwRUZFNTZCQzlFNzMzLzAvNDNEMkE2NjFCNkYxQjREMDBCMjkxNkI1 MkI3Mjk0MTQwMTZGNEM2Qi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMEcGCCsGAQUFBwEHAQH/BDgwNjAlBAIAATAfAwMBkBYDBADGMaQw DAMEAMgJ0QMEAsgJ0AMEAMgKkTANBAIAAjAHAwUAKAEAATAaBggrBgEFBQcBCAEB /wQLMAmgBzAFAgMA+mYwDQYJKoZIhvcNAQELBQADggEBAAC/GSStY06l6oMEJVqV pcfjdDVYe7Awk+NxHc+cYDR0tZRs8Sf2l9zFBelFzZ2C7nCCHg1GbAZovDsKt08Z a14vHboqlcLapsWkMjpPPpO8Gc1vsgQzJFyZu0RqBsxGUKQCYmHOEpROzadqnSGW 89G0TCHgkCBvc8ZECKmFq1kloWwccC4aaruZE+FIuQP32S4yetZxeNH+dBH1Wcgn n0RDwZHFEB3kMn+Cv7gbsmZwB8kWRdczN9uxlzfd20Ay/3zyjh86tuiwyXpVYlmL +MXqDY69FTq9eWajdbtfwNnrBGTSLBOuKmAg4ESGHoOirDRgbnXyG/QtDvsta1r4 DL0= -----END CERTIFICATE-----Generated at Thu Feb 26 05:08:01 2026 by rpki-client