$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5D91E46260E9AEAE95697E1C0815E51DF174137.cer File: B5D91E46260E9AEAE95697E1C0815E51DF174137.cer (raw, json) Hash identifier: F77zXtADDIIajzKy5ZnLvqHbO+Z4iko3J/SXqQcFSZE= Subject key identifier: B5:D9:1E:46:26:0E:9A:EA:E9:56:97:E1:C0:81:5E:51:DF:17:41:37 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 11D4832D8CF50367FBCFDB3CA54FE8CE1B414094 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/862A8BDEBD5E6FED70D10E27AB1049153DE74B8CF495F12FFD454EBAAB4D3518/0/B5D91E46260E9AEAE95697E1C0815E51DF174137.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/862A8BDEBD5E6FED70D10E27AB1049153DE74B8CF495F12FFD454EBAAB4D3518/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 17:59:27 +0000 Certificate not after: Wed 27 Jan 2027 18:04:27 +0000 Subordinate resources: AS: 274026 IP: 190.110.241.0/24 IP: 2803:acd0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:d4:83:2d:8c:f5:03:67:fb:cf:db:3c:a5:4f:e8:ce:1b:41:40:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 17:59:27 2026 GMT Not After : Jan 27 18:04:27 2027 GMT Subject: CN=B5D91E46260E9AEAE95697E1C0815E51DF174137 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:bd:04:e2:86:a4:18:79:70:ec:ff:2e:7f:1f: 5d:45:e1:fb:5a:a1:2b:38:22:9b:70:87:d4:e1:48: cc:c4:43:a3:0e:31:f3:29:30:0f:a2:b1:38:8d:51: fd:27:26:cf:a3:a0:8d:8c:18:8a:0c:ca:ee:11:98: 53:73:77:bc:f8:18:1a:4e:d9:25:8a:c0:ca:d1:6b: 47:00:90:9a:cc:2c:6e:81:24:bd:75:b2:b0:25:e2: aa:cb:b7:60:7b:6e:bc:d6:18:fa:4a:36:09:40:12: e8:28:ac:75:65:0a:63:da:8b:5a:7d:79:f1:dc:84: 7b:f1:aa:4a:d0:0b:97:4e:43:92:2e:93:4d:dd:9b: 5a:fe:f6:72:28:48:9f:0b:62:4b:86:27:3f:de:5d: a0:d2:6d:38:67:f7:f7:d2:0b:d1:16:84:c8:89:29: d6:9d:cc:85:47:ed:06:bd:42:ff:e8:93:fd:a7:21: 27:ae:ff:37:8d:40:96:83:77:2d:38:87:9d:41:69: d7:a4:56:cc:27:a8:c1:74:30:ae:34:ff:8b:5d:64: 72:4c:6f:dc:6f:1d:e2:8a:c8:6b:ee:77:70:ef:a9: b0:e1:cc:b3:6f:a7:18:6e:64:90:88:4f:41:34:6b: cc:b9:95:f1:85:07:88:75:47:d2:53:cc:a9:1c:98: d3:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B5:D9:1E:46:26:0E:9A:EA:E9:56:97:E1:C0:81:5E:51:DF:17:41:37 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/862A8BDEBD5E6FED70D10E27AB1049153DE74B8CF495F12FFD454EBAAB4D3518/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/862A8BDEBD5E6FED70D10E27AB1049153DE74B8CF495F12FFD454EBAAB4D3518/0/B5D91E46260E9AEAE95697E1C0815E51DF174137.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 190.110.241.0/24 IPv6: 2803:acd0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 274026 Signature Algorithm: sha256WithRSAEncryption 02:b3:ef:3b:7c:78:eb:ff:7c:37:03:59:fa:22:1d:f8:d1:c2: 6f:99:84:bd:ca:86:0b:24:0b:b5:e9:bb:a1:63:cb:e2:39:3a: b9:0e:0b:39:19:70:83:39:a9:6e:5d:f2:7d:48:d3:f7:b9:24: 9f:fd:98:9b:1f:05:34:a6:aa:76:98:f0:45:98:ff:e2:c1:72: 61:9a:49:80:50:03:30:f8:58:ca:45:ed:21:16:21:9d:7e:70: 1d:2e:1f:11:33:86:62:e5:73:40:06:3b:ac:a6:6b:7e:6d:80: 9a:a6:16:81:a1:67:0f:e4:95:da:10:e5:3e:74:93:80:41:1b: 53:1d:38:23:e0:5e:dd:c2:95:19:23:f8:65:8c:af:b3:b7:7a: 7c:58:22:05:95:87:42:3e:0e:1d:43:c1:3b:2f:9c:ac:53:68: eb:d2:32:65:7f:84:52:05:c3:52:60:2e:cc:74:c8:58:e7:b0: 33:82:d3:51:d5:c8:96:13:3d:fc:81:03:a4:31:37:b4:67:85: 17:aa:da:02:a7:f4:b8:7f:c0:59:d1:d8:8e:fd:61:0f:a4:f3: 9c:ab:9d:40:f9:7c:87:a6:2a:03:76:55:b6:d8:1a:7e:61:d3: bb:0b:91:b6:0d:da:40:5c:53:70:90:af:ba:50:20:48:c8:28: 23:8e:39:d8 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUEdSDLYz1A2f7z9s8pU/ozhtBQJQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgxNzU5MjdaFw0yNzAxMjcxODA0MjdaMDMxMTAvBgNV BAMTKEI1RDkxRTQ2MjYwRTlBRUFFOTU2OTdFMUMwODE1RTUxREYxNzQxMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNvQTihqQYeXDs/y5/H11F4fta oSs4Iptwh9ThSMzEQ6MOMfMpMA+isTiNUf0nJs+joI2MGIoMyu4RmFNzd7z4GBpO 2SWKwMrRa0cAkJrMLG6BJL11srAl4qrLt2B7brzWGPpKNglAEugorHVlCmPai1p9 efHchHvxqkrQC5dOQ5Iuk03dm1r+9nIoSJ8LYkuGJz/eXaDSbThn9/fSC9EWhMiJ KdadzIVH7Qa9Qv/ok/2nISeu/zeNQJaDdy04h51BadekVswnqMF0MK40/4tdZHJM b9xvHeKKyGvud3DvqbDhzLNvpxhuZJCIT0E0a8y5lfGFB4h1R9JTzKkcmNOtAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS12R5GJg6a6ulW l+HAgV5R3xdBNzAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvODYyQThCREVCRDVFNkZFRDcwRDEwRTI3 QUIxMDQ5MTUzREU3NEI4Q0Y0OTVGMTJGRkQ0NTRFQkFBQjREMzUxOC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy84NjJBOEJERUJENUU2RkVENzBEMTBFMjdBQjEwNDkxNTNERTc0QjhDRjQ5 NUYxMkZGRDQ1NEVCQUFCNEQzNTE4LzAvQjVEOTFFNDYyNjBFOUFFQUU5NTY5N0Ux QzA4MTVFNTFERjE3NDEzNy5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAvm7xMA0EAgAC MAcDBQAoA6zQMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQuajANBgkqhkiG9w0B AQsFAAOCAQEAArPvO3x46/98NwNZ+iId+NHCb5mEvcqGCyQLtem7oWPL4jk6uQ4L ORlwgzmpbl3yfUjT97kkn/2Ymx8FNKaqdpjwRZj/4sFyYZpJgFADMPhYykXtIRYh nX5wHS4fETOGYuVzQAY7rKZrfm2AmqYWgaFnD+SV2hDlPnSTgEEbUx04I+Be3cKV GSP4ZYyvs7d6fFgiBZWHQj4OHUPBOy+crFNo69IyZX+EUgXDUmAuzHTIWOewM4LT UdXIlhM9/IEDpDE3tGeFF6raAqf0uH/AWdHYjv1hD6TznKudQPl8h6YqA3ZVttga fmHTuwuRtg3aQFxTcJCvulAgSMgoI4452A== -----END CERTIFICATE-----Generated at Tue Mar 3 02:31:31 2026 by rpki-client