$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4D589E119E93073CAED797C92FC4BDE3B8AE4D9E.cer File: 4D589E119E93073CAED797C92FC4BDE3B8AE4D9E.cer (raw, json) Hash identifier: 7r1lwOPTWpUPSTfJfBt5lOHjIb8kZFwuwkjyv7ON+hE= Subject key identifier: 4D:58:9E:11:9E:93:07:3C:AE:D7:97:C9:2F:C4:BD:E3:B8:AE:4D:9E Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 1B3016097AC3832464A67C059314B5765F8B3CD9 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/88C275E59F680ACC1E2A6080F3C1F65AC49C6F85834B5509059653056D523BFC/0/4D589E119E93073CAED797C92FC4BDE3B8AE4D9E.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/88C275E59F680ACC1E2A6080F3C1F65AC49C6F85834B5509059653056D523BFC/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 11 Mar 2026 15:15:01 +0000 Certificate not after: Wed 10 Mar 2027 15:20:01 +0000 Subordinate resources: AS: 272885 IP: 200.123.50.0/24 IP: 2803:1230::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 19 Mar 2026 05:02:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:30:16:09:7a:c3:83:24:64:a6:7c:05:93:14:b5:76:5f:8b:3c:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Mar 11 15:15:01 2026 GMT Not After : Mar 10 15:20:01 2027 GMT Subject: CN=4D589E119E93073CAED797C92FC4BDE3B8AE4D9E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:b4:38:ba:4c:e7:72:b7:7d:a5:58:6e:d6:1d: 3b:f7:40:33:ba:a2:57:03:44:38:2d:52:76:83:7d: 97:59:e0:6f:59:a1:e3:47:15:da:c7:20:47:e0:b4: 25:3e:a1:2f:d6:37:d2:0c:56:69:11:06:b3:2d:31: 6a:f6:3a:79:e1:39:fe:fa:c7:e2:ed:36:02:b3:c9: 0b:92:41:35:62:fe:66:ff:bc:39:46:51:8a:e1:ed: d4:6c:74:b7:be:bd:95:88:aa:14:56:5f:01:6b:9d: f8:97:90:5d:5b:7f:07:1b:b6:a5:65:65:7c:8f:e6: 80:d1:0e:f3:c7:43:bd:9b:ac:e1:52:ee:f2:0a:d9: 6f:88:30:b3:d2:fd:2c:9f:65:56:07:ae:15:d4:21: a6:90:21:0e:5e:94:d9:eb:2d:65:cd:d2:2d:34:f1: 18:9e:fc:85:fc:1d:a0:a8:22:8f:b0:d8:a6:ac:af: 6c:b9:77:32:2a:96:60:c6:5e:12:c3:6f:a6:43:0e: 8c:d9:93:c5:20:cc:ec:a2:79:28:c4:85:c3:af:41: 72:e6:69:a4:02:a0:8f:a4:97:c5:7b:eb:d7:03:e3: 9c:20:1a:6f:1d:f7:4f:d5:59:ab:d8:84:8b:11:d5: 46:40:72:79:47:6b:df:ef:db:20:0f:e6:8a:9c:03: ae:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4D:58:9E:11:9E:93:07:3C:AE:D7:97:C9:2F:C4:BD:E3:B8:AE:4D:9E X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/88C275E59F680ACC1E2A6080F3C1F65AC49C6F85834B5509059653056D523BFC/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/88C275E59F680ACC1E2A6080F3C1F65AC49C6F85834B5509059653056D523BFC/0/4D589E119E93073CAED797C92FC4BDE3B8AE4D9E.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.123.50.0/24 IPv6: 2803:1230::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 272885 Signature Algorithm: sha256WithRSAEncryption 8a:2d:e6:fd:fe:ec:65:4f:e0:7b:c4:59:55:a2:5e:87:98:47: 4e:ad:10:54:8f:7d:21:02:2a:3a:48:97:15:29:4e:4e:23:aa: 9e:02:43:59:1c:f3:f5:5e:9b:58:ff:4a:ed:dd:84:a7:95:06: cc:e1:7e:c2:82:44:8b:47:85:c6:a4:b2:18:7a:8a:5c:d2:42: 2c:4b:53:b1:7a:9f:73:69:43:74:39:11:63:c9:cd:ed:47:03: a8:83:8c:c2:6d:69:52:c2:aa:f4:9c:76:09:ef:5d:3d:55:40: b7:75:c9:1b:fc:cc:6a:62:4f:eb:6d:2a:02:bf:a0:6d:b0:ae: 64:5a:bd:c8:44:71:72:b7:fb:40:8b:5b:84:6d:f1:da:d2:87: c2:fc:09:81:cc:f9:7c:66:98:e0:58:b5:c2:ad:80:bb:c3:30: ff:31:2a:d0:48:7a:9a:83:45:95:16:ae:de:2e:9c:e7:39:8b: bf:54:74:c5:2d:18:3e:26:bf:03:f9:47:80:b6:fa:01:8d:ad: 1c:68:17:c0:e4:ac:6b:0b:f5:91:ed:e2:a1:c0:bf:30:41:30: 8d:66:3b:ef:23:15:6e:0e:09:c9:6f:6c:43:5e:64:62:32:8e: 7b:07:2c:5e:b2:b0:e2:71:86:78:35:bc:06:f8:3d:32:b6:c2: 96:32:df:72 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUGzAWCXrDgyRkpnwFkxS1dl+LPNkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAzMTExNTE1MDFaFw0yNzAzMTAxNTIwMDFaMDMxMTAvBgNV BAMTKDRENTg5RTExOUU5MzA3M0NBRUQ3OTdDOTJGQzRCREUzQjhBRTREOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdtDi6TOdyt32lWG7WHTv3QDO6 olcDRDgtUnaDfZdZ4G9ZoeNHFdrHIEfgtCU+oS/WN9IMVmkRBrMtMWr2OnnhOf76 x+LtNgKzyQuSQTVi/mb/vDlGUYrh7dRsdLe+vZWIqhRWXwFrnfiXkF1bfwcbtqVl ZXyP5oDRDvPHQ72brOFS7vIK2W+IMLPS/SyfZVYHrhXUIaaQIQ5elNnrLWXN0i00 8Rie/IX8HaCoIo+w2Kasr2y5dzIqlmDGXhLDb6ZDDozZk8UgzOyieSjEhcOvQXLm aaQCoI+kl8V769cD45wgGm8d90/VWavYhIsR1UZAcnlHa9/v2yAP5oqcA67LAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRNWJ4RnpMHPK7X l8kvxL3juK5NnjAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvODhDMjc1RTU5RjY4MEFDQzFFMkE2MDgw RjNDMUY2NUFDNDlDNkY4NTgzNEI1NTA5MDU5NjUzMDU2RDUyM0JGQy8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy84OEMyNzVFNTlGNjgwQUNDMUUyQTYwODBGM0MxRjY1QUM0OUM2Rjg1ODM0 QjU1MDkwNTk2NTMwNTZENTIzQkZDLzAvNEQ1ODlFMTE5RTkzMDczQ0FFRDc5N0M5 MkZDNEJERTNCOEFFNEQ5RS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAyHsyMA0EAgAC MAcDBQAoAxIwMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQp9TANBgkqhkiG9w0B AQsFAAOCAQEAii3m/f7sZU/ge8RZVaJeh5hHTq0QVI99IQIqOkiXFSlOTiOqngJD WRzz9V6bWP9K7d2Ep5UGzOF+woJEi0eFxqSyGHqKXNJCLEtTsXqfc2lDdDkRY8nN 7UcDqIOMwm1pUsKq9Jx2Ce9dPVVAt3XJG/zMamJP620qAr+gbbCuZFq9yERxcrf7 QItbhG3x2tKHwvwJgcz5fGaY4Fi1wq2Au8Mw/zEq0Eh6moNFlRau3i6c5zmLv1R0 xS0YPia/A/lHgLb6AY2tHGgXwOSsawv1ke3iocC/MEEwjWY77yMVbg4JyW9sQ15k YjKOewcsXrKw4nGGeDW8Bvg9MrbCljLfcg== -----END CERTIFICATE-----Generated at Sun Mar 15 16:58:39 2026 by rpki-client