$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/87919A3C59C067523C21EF70A596F0B7F9C09798.cer File: 87919A3C59C067523C21EF70A596F0B7F9C09798.cer (raw, json) Hash identifier: wD40bW/Gj3vzdOYNuTFegAMfq22kp9tLnQemXgQ5HnM= Subject key identifier: 87:91:9A:3C:59:C0:67:52:3C:21:EF:70:A5:96:F0:B7:F9:C0:97:98 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 33B1996485D55876B1DC3764104C5E9636F24163 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/EF3F942AC4BB534D534DF373937707F1FC0BA8E7DC1267EA498A421C6FE3C72E/0/87919A3C59C067523C21EF70A596F0B7F9C09798.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/EF3F942AC4BB534D534DF373937707F1FC0BA8E7DC1267EA498A421C6FE3C72E/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 27 Jan 2026 17:50:47 +0000 Certificate not after: Tue 26 Jan 2027 17:55:47 +0000 Subordinate resources: AS: 269806 IP: 45.186.4.0/22 IP: 2803:6b60::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 01 Mar 2026 13:51:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:b1:99:64:85:d5:58:76:b1:dc:37:64:10:4c:5e:96:36:f2:41:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 27 17:50:47 2026 GMT Not After : Jan 26 17:55:47 2027 GMT Subject: CN=87919A3C59C067523C21EF70A596F0B7F9C09798 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f6:e5:9c:b2:d1:e1:d0:52:01:32:f9:63:27: 85:7b:4c:a1:32:6b:e1:73:94:e7:ea:7a:72:a8:8f: f3:76:c8:cc:41:4b:5e:2c:43:1b:53:06:3d:20:89: 4b:6e:d3:0e:8c:61:cb:68:2b:2c:7d:e5:90:8f:ba: f7:d4:1f:07:bc:6c:0a:22:60:a0:49:95:c4:e3:e4: 5c:81:76:df:16:94:96:ce:a8:da:a0:63:fd:2b:34: 13:30:42:04:81:14:59:71:00:45:5e:3a:f9:27:65: 53:50:64:ad:4f:e5:6d:14:1f:30:19:14:1e:46:e2: 65:63:b4:d9:5c:30:84:35:d0:05:2e:6e:7e:07:09: 6d:2f:d9:25:8c:44:f9:e3:a0:84:95:5b:60:71:d8: d5:67:87:4b:e4:55:1d:7b:6f:51:24:d0:fa:14:3d: ea:bb:7d:f7:06:1b:a8:5a:a9:78:33:94:22:70:ef: ea:d7:3d:0e:f5:1a:c1:f8:52:f8:84:c1:6f:1b:6e: 11:2a:04:79:d9:43:92:f0:97:86:b2:e1:42:c0:a7: 55:a0:89:b4:ee:c4:8b:8d:56:61:55:a8:c9:c8:c3: 29:6d:43:97:a9:ee:50:47:34:e0:66:a3:86:6e:20: 0a:76:94:e6:41:90:74:8a:25:8e:42:53:42:73:a7: 2b:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 87:91:9A:3C:59:C0:67:52:3C:21:EF:70:A5:96:F0:B7:F9:C0:97:98 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/EF3F942AC4BB534D534DF373937707F1FC0BA8E7DC1267EA498A421C6FE3C72E/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/EF3F942AC4BB534D534DF373937707F1FC0BA8E7DC1267EA498A421C6FE3C72E/0/87919A3C59C067523C21EF70A596F0B7F9C09798.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.186.4.0/22 IPv6: 2803:6b60::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 269806 Signature Algorithm: sha256WithRSAEncryption 6c:ba:fd:2f:ba:65:6a:f7:f3:ce:b3:c9:b5:7c:eb:f9:96:46: b3:ee:a8:77:53:a3:13:09:1c:f0:3a:6d:08:fa:fc:bc:2c:87: 40:a7:9c:f3:c3:51:e4:ad:b9:f8:80:0b:0e:3d:49:d6:7c:32: 3b:82:3e:ca:38:5f:52:c1:34:0e:bf:a3:e7:d4:d6:bb:3e:9a: e4:3a:70:fb:d9:46:4b:6c:97:5a:79:e2:93:77:c5:12:e5:1a: b3:fa:67:fe:e3:a4:c9:5d:65:17:6d:12:09:ea:c0:bc:94:80: 22:a6:95:f1:11:bb:45:c9:af:4b:bd:91:f5:e2:23:c6:04:bb: cd:e0:ca:e8:0e:b3:84:17:6c:23:f8:1d:b6:af:6a:3a:55:fe: 04:af:09:09:59:21:99:64:49:11:73:16:b1:b4:d3:36:51:21: 53:7a:c3:2f:91:d7:8e:cf:34:42:a7:db:48:8f:18:15:f4:da: ab:9e:93:43:a5:d0:e0:0c:0b:f2:20:53:47:39:d5:57:0b:21: 9b:a4:10:75:b8:79:24:7d:ec:d9:f5:63:e7:54:57:a1:b5:2a: 7b:c8:2e:3f:ea:a5:35:ee:8c:0d:82:31:06:92:ee:bc:4a:3a: d9:a8:85:55:d8:0a:1c:90:07:8b:9d:1b:fc:e5:75:e1:f2:10: f6:26:7a:50 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUM7GZZIXVWHax3DdkEExeljbyQWMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjcxNzUwNDdaFw0yNzAxMjYxNzU1NDdaMDMxMTAvBgNV BAMTKDg3OTE5QTNDNTlDMDY3NTIzQzIxRUY3MEE1OTZGMEI3RjlDMDk3OTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj9uWcstHh0FIBMvljJ4V7TKEy a+FzlOfqenKoj/N2yMxBS14sQxtTBj0giUtu0w6MYctoKyx95ZCPuvfUHwe8bAoi YKBJlcTj5FyBdt8WlJbOqNqgY/0rNBMwQgSBFFlxAEVeOvknZVNQZK1P5W0UHzAZ FB5G4mVjtNlcMIQ10AUubn4HCW0v2SWMRPnjoISVW2Bx2NVnh0vkVR17b1Ek0PoU Peq7ffcGG6haqXgzlCJw7+rXPQ71GsH4UviEwW8bbhEqBHnZQ5Lwl4ay4ULAp1Wg ibTuxIuNVmFVqMnIwyltQ5ep7lBHNOBmo4ZuIAp2lOZBkHSKJY5CU0JzpysxAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSHkZo8WcBnUjwh 73CllvC3+cCXmDAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRUYzRjk0MkFDNEJCNTM0RDUzNERGMzcz OTM3NzA3RjFGQzBCQThFN0RDMTI2N0VBNDk4QTQyMUM2RkUzQzcyRS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9FRjNGOTQyQUM0QkI1MzRENTM0REYzNzM5Mzc3MDdGMUZDMEJBOEU3REMx MjY3RUE0OThBNDIxQzZGRTNDNzJFLzAvODc5MTlBM0M1OUMwNjc1MjNDMjFFRjcw QTU5NkYwQjdGOUMwOTc5OC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLboEMA0EAgAC MAcDBQAoA2tgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQd7jANBgkqhkiG9w0B AQsFAAOCAQEAbLr9L7plavfzzrPJtXzr+ZZGs+6od1OjEwkc8DptCPr8vCyHQKec 88NR5K25+IALDj1J1nwyO4I+yjhfUsE0Dr+j59TWuz6a5Dpw+9lGS2yXWnnik3fF EuUas/pn/uOkyV1lF20SCerAvJSAIqaV8RG7RcmvS72R9eIjxgS7zeDK6A6zhBds I/gdtq9qOlX+BK8JCVkhmWRJEXMWsbTTNlEhU3rDL5HXjs80QqfbSI8YFfTaq56T Q6XQ4AwL8iBTRznVVwshm6QQdbh5JH3s2fVj51RXobUqe8guP+qlNe6MDYIxBpLu vEo62aiFVdgKHJAHi50b/OV14fIQ9iZ6UA== -----END CERTIFICATE-----Generated at Thu Feb 26 10:57:50 2026 by rpki-client