$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF4A18D238F70FCA7608E0CF91F044302F886A78.cer File: AF4A18D238F70FCA7608E0CF91F044302F886A78.cer (raw, json) Hash identifier: d4bW1QhPVCWsH4NubL3PkMGu95Z5kLA830PnU91FFLw= Subject key identifier: AF:4A:18:D2:38:F7:0F:CA:76:08:E0:CF:91:F0:44:30:2F:88:6A:78 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 43EE5CA6BAEF268A2220A874AF8C8006D994000C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/816B2F7D66A633B3CE8C265EFB4DC6361F6813A3FC929333FDEBAD7EE166BBB3/0/AF4A18D238F70FCA7608E0CF91F044302F886A78.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/816B2F7D66A633B3CE8C265EFB4DC6361F6813A3FC929333FDEBAD7EE166BBB3/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 11 Mar 2026 17:55:10 +0000 Certificate not after: Wed 10 Mar 2027 18:00:10 +0000 Subordinate resources: AS: 22411 AS: 262235 IP: 138.59.64.0/22 IP: 143.137.144.0/22 IP: 170.0.80.0/22 IP: 170.239.100.0/22 IP: 190.15.251.0 -- 190.15.255.255 IP: 190.107.180.0/22 IP: 200.123.0.0/19 IP: 2803:c200::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 24 Mar 2026 17:36:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:ee:5c:a6:ba:ef:26:8a:22:20:a8:74:af:8c:80:06:d9:94:00:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Mar 11 17:55:10 2026 GMT Not After : Mar 10 18:00:10 2027 GMT Subject: CN=AF4A18D238F70FCA7608E0CF91F044302F886A78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:54:0a:f3:8d:51:2c:3e:bd:44:86:5b:0c:88: 0a:a6:a0:b4:7e:b3:cb:f1:e9:7b:94:07:9e:ec:59: 49:03:b4:3f:94:19:f9:73:8b:1c:6a:5f:3d:12:03: ac:e0:86:c5:06:12:f9:f8:9d:8e:01:58:34:f8:00: 48:78:9f:13:ea:32:4a:d8:d9:d5:83:2d:73:e7:4a: 5e:fa:89:53:d3:07:0a:87:99:32:3d:d1:32:58:1d: 10:fd:a6:8a:f2:5a:a4:1a:d4:ff:52:39:6b:75:96: 27:24:23:93:af:ea:31:3c:7b:75:52:f9:73:53:45: d5:d2:c0:f3:41:17:d7:45:a6:bb:57:0b:eb:bf:64: 0d:19:83:86:19:13:9e:fc:9e:ca:05:0c:69:e9:48: b6:b6:1a:a9:9a:48:20:a3:85:7e:a1:ed:89:b7:a8: 0a:6c:72:ff:30:23:77:71:2b:0f:d2:87:84:81:f1: ac:26:2a:19:ef:b3:b9:99:c7:35:94:f5:ef:9c:70: 87:03:82:27:62:75:ed:97:bb:4e:d4:22:a5:1f:84: a4:34:2e:4c:55:a0:d0:c8:bd:52:17:5b:de:f5:0b: d9:54:b2:ba:7f:54:c4:06:55:fe:1e:93:ed:e7:4f: 70:61:ac:05:e1:79:8e:6d:b4:b6:f2:52:50:1d:ba: 2f:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AF:4A:18:D2:38:F7:0F:CA:76:08:E0:CF:91:F0:44:30:2F:88:6A:78 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/816B2F7D66A633B3CE8C265EFB4DC6361F6813A3FC929333FDEBAD7EE166BBB3/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/816B2F7D66A633B3CE8C265EFB4DC6361F6813A3FC929333FDEBAD7EE166BBB3/0/AF4A18D238F70FCA7608E0CF91F044302F886A78.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.59.64.0/22 143.137.144.0/22 170.0.80.0/22 170.239.100.0/22 190.15.251.0-190.15.255.255 190.107.180.0/22 200.123.0.0/19 IPv6: 2803:c200::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 22411 262235 Signature Algorithm: sha256WithRSAEncryption 5a:08:41:e0:4e:b8:95:e0:38:0e:2d:a7:89:9b:be:48:99:f7: bc:fb:44:c3:40:53:e4:12:65:a2:93:73:8f:35:cc:28:8c:af: b6:79:b8:37:d8:6d:2e:e5:ff:2d:b1:a1:1a:78:09:42:42:78: bd:34:d3:1e:26:19:fa:01:be:79:7f:13:f5:65:76:58:c8:19: f2:bc:fc:97:5f:1e:e3:93:a0:d4:bb:c0:1b:0c:1d:0f:0d:e6: df:d0:f2:51:de:71:1a:27:52:df:eb:28:fa:11:63:0c:be:5d: 5a:b2:5b:10:af:4c:18:7f:7f:a3:07:f4:25:c4:00:12:3e:93: 0d:92:a3:8a:24:29:c0:c8:a6:9d:9c:fb:fe:9c:e7:3c:ce:b9: d3:07:1a:3d:03:8a:5d:7c:58:6f:ab:0f:f9:e5:ff:f8:80:60: 0b:6e:a2:20:d9:06:3a:97:e8:0d:3f:95:35:0c:a1:76:af:79: dc:d4:3a:c2:d8:3e:86:fd:b6:b2:92:d6:6f:38:57:ab:67:af: 30:1f:6f:2b:da:16:dc:4a:52:48:14:73:11:3c:fc:8b:43:e4: 09:a0:d4:2c:3d:23:ef:11:23:77:48:b5:85:45:be:31:d7:a7: cc:d8:d3:d6:34:82:06:ee:75:db:79:5a:68:e3:c3:ea:30:cf: d6:59:89:04 -----BEGIN CERTIFICATE----- MIIG1DCCBbygAwIBAgIUQ+5cprrvJooiIKh0r4yABtmUAAwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAzMTExNzU1MTBaFw0yNzAzMTAxODAwMTBaMDMxMTAvBgNV BAMTKEFGNEExOEQyMzhGNzBGQ0E3NjA4RTBDRjkxRjA0NDMwMkY4ODZBNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjVArzjVEsPr1EhlsMiAqmoLR+ s8vx6XuUB57sWUkDtD+UGflzixxqXz0SA6zghsUGEvn4nY4BWDT4AEh4nxPqMkrY 2dWDLXPnSl76iVPTBwqHmTI90TJYHRD9poryWqQa1P9SOWt1lickI5Ov6jE8e3VS +XNTRdXSwPNBF9dFprtXC+u/ZA0Zg4YZE578nsoFDGnpSLa2GqmaSCCjhX6h7Ym3 qApscv8wI3dxKw/Sh4SB8awmKhnvs7mZxzWU9e+ccIcDgidide2Xu07UIqUfhKQ0 LkxVoNDIvVIXW971C9lUsrp/VMQGVf4ek+3nT3BhrAXheY5ttLbyUlAdui8LAgMB AAGjggPeMIID2jAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSvShjSOPcPynYI 4M+R8EQwL4hqeDAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvODE2QjJGN0Q2NkE2MzNCM0NFOEMyNjVF RkI0REM2MzYxRjY4MTNBM0ZDOTI5MzMzRkRFQkFEN0VFMTY2QkJCMy8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy84MTZCMkY3RDY2QTYzM0IzQ0U4QzI2NUVGQjREQzYzNjFGNjgxM0EzRkM5 MjkzMzNGREVCQUQ3RUUxNjZCQkIzLzAvQUY0QTE4RDIzOEY3MEZDQTc2MDhFMENG OTFGMDQ0MzAyRjg4NkE3OC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFkGCCsGAQUFBwEHAQH/BEowSDA3BAIAATAxAwQCijtAAwQCj4mQ AwQCqgBQAwQCqu9kMAsDBAC+D/sDAwS+AAMEAr5rtAMEBch7ADANBAIAAjAHAwUA KAPCADAeBggrBgEFBQcBCAEB/wQPMA2gCzAJAgJXiwIDBABbMA0GCSqGSIb3DQEB CwUAA4IBAQBaCEHgTriV4DgOLaeJm75Imfe8+0TDQFPkEmWik3OPNcwojK+2ebg3 2G0u5f8tsaEaeAlCQni9NNMeJhn6Ab55fxP1ZXZYyBnyvPyXXx7jk6DUu8AbDB0P Debf0PJR3nEaJ1Lf6yj6EWMMvl1aslsQr0wYf3+jB/QlxAASPpMNkqOKJCnAyKad nPv+nOc8zrnTBxo9A4pdfFhvqw/55f/4gGALbqIg2QY6l+gNP5U1DKF2r3nc1DrC 2D6G/bayktZvOFerZ68wH28r2hbcSlJIFHMRPPyLQ+QJoNQsPSPvESN3SLWFRb4x 16fM2NPWNIIG7nXbeVpo48PqMM/WWYkE -----END CERTIFICATE-----Generated at Fri Mar 20 01:03:05 2026 by rpki-client