$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/72B67FDA04246C53AE1C1A7EBE6EF57B4E9C842C.cer File: 72B67FDA04246C53AE1C1A7EBE6EF57B4E9C842C.cer (raw, json) Hash identifier: bsBEV+rYWp5cUQTQMbSEmg/vq5PNIsQ06q0dRAYmJbY= Subject key identifier: 72:B6:7F:DA:04:24:6C:53:AE:1C:1A:7E:BE:6E:F5:7B:4E:9C:84:2C Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 321403E62ADC29DE6831047B59806AA80C02A90C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/C32A8D50921BD87E43FA761FF973EE18169DD40683D0E47F21FE7576E4C359E0/0/72B67FDA04246C53AE1C1A7EBE6EF57B4E9C842C.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/C32A8D50921BD87E43FA761FF973EE18169DD40683D0E47F21FE7576E4C359E0/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 16:55:28 +0000 Certificate not after: Wed 27 Jan 2027 17:00:28 +0000 Subordinate resources: AS: 270018 IP: 200.23.75.0/24 IP: 2801:1da::/44 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 21 Feb 2026 22:16:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:14:03:e6:2a:dc:29:de:68:31:04:7b:59:80:6a:a8:0c:02:a9:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 16:55:28 2026 GMT Not After : Jan 27 17:00:28 2027 GMT Subject: CN=72B67FDA04246C53AE1C1A7EBE6EF57B4E9C842C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:61:df:77:aa:e4:da:96:81:c8:b5:66:97:5c: 62:01:7a:79:96:28:51:f4:8e:f7:60:82:a6:6d:5b: c8:29:da:9d:5f:ea:b4:c1:11:15:f3:b2:0d:ef:de: 9f:e8:17:36:39:81:e1:5e:f8:49:0c:26:6a:26:f0: 1a:f8:c5:de:53:aa:23:15:6d:97:0d:70:3a:58:b2: eb:1a:e3:67:66:fa:cf:32:d0:bf:1f:47:9f:02:d1: f9:7f:2c:32:a5:7d:a2:77:b5:c2:e9:54:ba:b1:37: f7:e5:9e:42:a6:10:dd:f3:9e:80:d3:86:b1:0a:32: f6:b4:38:60:b0:24:fc:90:c6:9c:b5:56:c4:7b:2e: 34:79:44:e2:f6:f0:d7:95:3b:3e:23:dd:97:f9:14: fe:2a:d0:e5:38:9f:7d:f3:9b:b1:bb:78:4d:03:ff: 2f:74:41:8a:90:d1:d2:03:a9:1f:ae:5b:6e:ef:26: e1:6d:f1:0d:b0:c4:2c:05:89:aa:3e:f9:84:53:1b: bb:ac:2b:0f:6f:d1:21:69:4f:a6:8c:92:6c:c5:37: 6e:82:b8:af:b4:60:9b:0b:9e:fd:72:61:d4:65:06: 61:1d:75:a4:65:c3:a3:b0:59:8f:f3:e4:8c:e9:d2: 12:4f:29:d9:f9:64:83:1e:94:f5:39:59:54:90:fd: a9:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 72:B6:7F:DA:04:24:6C:53:AE:1C:1A:7E:BE:6E:F5:7B:4E:9C:84:2C X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/C32A8D50921BD87E43FA761FF973EE18169DD40683D0E47F21FE7576E4C359E0/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/C32A8D50921BD87E43FA761FF973EE18169DD40683D0E47F21FE7576E4C359E0/0/72B67FDA04246C53AE1C1A7EBE6EF57B4E9C842C.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.23.75.0/24 IPv6: 2801:1da::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 270018 Signature Algorithm: sha256WithRSAEncryption 33:01:80:bd:0f:ff:4c:45:5a:6c:08:1d:e1:86:aa:fc:9b:1b: f3:21:6c:3d:d7:f4:6a:d0:f9:06:11:bc:97:90:f7:85:06:3f: 5e:21:a6:32:c3:61:66:21:24:57:41:63:c0:70:8c:64:e9:ed: 51:e9:30:45:c5:a2:dc:b7:f7:4e:cb:6b:c1:7b:ff:06:ed:79: bb:df:0b:38:c8:72:3f:1f:7a:8f:48:24:c8:65:21:f6:10:ba: 5f:6d:00:8f:0b:93:8b:68:15:7f:ee:35:a9:88:f5:69:3f:e5: 54:15:3b:19:36:72:ac:11:f2:8d:18:1e:e5:24:9c:1b:36:91: 23:51:59:64:70:75:85:d1:5b:a3:b5:2b:c8:02:03:3b:5e:67: d5:bd:76:eb:f2:27:b7:bc:fc:5f:50:7e:d8:cd:dd:a0:da:f9: 3a:61:2f:f2:d0:0e:7f:dd:f3:b8:e1:e3:07:12:6f:bb:87:1e: 5f:c0:ec:6f:cd:cf:a5:55:d8:a0:a1:e9:fb:13:75:b9:c0:86: 40:af:b9:43:ea:92:de:ba:8e:27:7c:e2:e0:88:b2:24:eb:83: 3f:b0:5c:6d:db:00:55:64:81:54:96:f6:3d:a8:0a:4e:7b:7a: 09:00:d4:31:1b:a1:a7:c9:1e:bd:75:22:28:a0:f1:31:8e:92: 21:e6:10:e2 -----BEGIN CERTIFICATE----- MIIGpzCCBY+gAwIBAgIUMhQD5ircKd5oMQR7WYBqqAwCqQwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgxNjU1MjhaFw0yNzAxMjcxNzAwMjhaMDMxMTAvBgNV BAMTKDcyQjY3RkRBMDQyNDZDNTNBRTFDMUE3RUJFNkVGNTdCNEU5Qzg0MkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrYd93quTaloHItWaXXGIBenmW KFH0jvdggqZtW8gp2p1f6rTBERXzsg3v3p/oFzY5geFe+EkMJmom8Br4xd5TqiMV bZcNcDpYsusa42dm+s8y0L8fR58C0fl/LDKlfaJ3tcLpVLqxN/flnkKmEN3znoDT hrEKMva0OGCwJPyQxpy1VsR7LjR5ROL28NeVOz4j3Zf5FP4q0OU4n33zm7G7eE0D /y90QYqQ0dIDqR+uW27vJuFt8Q2wxCwFiao++YRTG7usKw9v0SFpT6aMkmzFN26C uK+0YJsLnv1yYdRlBmEddaRlw6OwWY/z5Izp0hJPKdn5ZIMelPU5WVSQ/ak3AgMB AAGjggOxMIIDrTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRytn/aBCRsU64c Gn6+bvV7TpyELDAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQzMyQThENTA5MjFCRDg3RTQzRkE3NjFG Rjk3M0VFMTgxNjlERDQwNjgzRDBFNDdGMjFGRTc1NzZFNEMzNTlFMC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9DMzJBOEQ1MDkyMUJEODdFNDNGQTc2MUZGOTczRUUxODE2OURENDA2ODNE MEU0N0YyMUZFNzU3NkU0QzM1OUUwLzAvNzJCNjdGREEwNDI0NkM1M0FFMUMxQTdF QkU2RUY1N0I0RTlDODQyQy5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAyBdLMA8EAgAC MAkDBwQoAQHaAAAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBB7CMA0GCSqGSIb3 DQEBCwUAA4IBAQAzAYC9D/9MRVpsCB3hhqr8mxvzIWw91/Rq0PkGEbyXkPeFBj9e IaYyw2FmISRXQWPAcIxk6e1R6TBFxaLct/dOy2vBe/8G7Xm73ws4yHI/H3qPSCTI ZSH2ELpfbQCPC5OLaBV/7jWpiPVpP+VUFTsZNnKsEfKNGB7lJJwbNpEjUVlkcHWF 0VujtSvIAgM7XmfVvXbr8ie3vPxfUH7Yzd2g2vk6YS/y0A5/3fO44eMHEm+7hx5f wOxvzc+lVdigoen7E3W5wIZAr7lD6pLeuo4nfOLgiLIk64M/sFxt2wBVZIFUlvY9 qApOe3oJANQxG6GnyR69dSIooPExjpIh5hDi -----END CERTIFICATE-----Generated at Wed Feb 18 14:26:24 2026 by rpki-client