$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C37FCCB1015F74B72A299747CF1A77DE714F66AF.cer File: C37FCCB1015F74B72A299747CF1A77DE714F66AF.cer (raw, json) Hash identifier: Glfs5UKFhxHPl0wXDqEw6IOE68advI9dmwpjfIbYkqA= Subject key identifier: C3:7F:CC:B1:01:5F:74:B7:2A:29:97:47:CF:1A:77:DE:71:4F:66:AF Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 220EC24B66736C59969B2450D43FC9CE1EFC38F2 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/9B155D364E8A23BF74B3327FF5257F9A5EC9ABE8B4ED514116E45535E6E0C73A/0/C37FCCB1015F74B72A299747CF1A77DE714F66AF.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/9B155D364E8A23BF74B3327FF5257F9A5EC9ABE8B4ED514116E45535E6E0C73A/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 10 Mar 2026 17:50:01 +0000 Certificate not after: Tue 09 Mar 2027 17:55:01 +0000 Subordinate resources: AS: 265808 IP: 201.182.112.0/22 IP: 2803:1820::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 19 Mar 2026 05:02:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:0e:c2:4b:66:73:6c:59:96:9b:24:50:d4:3f:c9:ce:1e:fc:38:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Mar 10 17:50:01 2026 GMT Not After : Mar 9 17:55:01 2027 GMT Subject: CN=C37FCCB1015F74B72A299747CF1A77DE714F66AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:bb:b2:89:0b:bd:2e:29:b2:60:ee:af:a0:47: e8:4f:b3:60:3c:bf:43:a2:66:bc:13:76:e9:08:9b: 01:9b:22:3c:96:b0:00:54:b7:25:ea:8d:7e:39:a0: ba:37:b7:96:b4:1c:93:b0:a0:31:bc:72:b3:b1:68: 8b:90:51:9e:21:92:6a:8e:63:0c:16:b5:26:a1:14: b3:83:b2:11:a5:9e:f2:d9:d3:90:d6:42:ca:a4:71: f7:4c:93:13:50:eb:04:a2:2b:96:4f:27:06:f0:6f: d5:ec:5b:9a:0d:8e:14:51:c3:46:17:d9:e7:19:ec: 7b:2d:a5:08:d4:33:26:96:7f:58:d3:d0:73:b4:95: 03:c3:8a:af:da:d0:e4:5f:1a:86:b9:a4:97:a7:94: 52:72:60:b3:34:ff:ad:c0:90:bd:21:be:d3:8c:af: c8:a9:2b:91:49:ec:27:ac:ce:0e:bf:ec:37:29:49: 97:e9:dc:c2:62:20:7e:8c:83:3b:36:38:d4:81:5f: c0:4c:5c:e2:9e:2c:58:66:d8:16:28:7e:ef:58:95: 07:31:54:30:7e:43:ae:2b:34:fb:77:ea:6d:51:88: a1:e5:ba:21:93:ef:de:21:26:dd:9a:bb:9e:96:fa: 21:02:65:d9:c8:19:69:64:81:a3:50:ef:d7:20:aa: 5e:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C3:7F:CC:B1:01:5F:74:B7:2A:29:97:47:CF:1A:77:DE:71:4F:66:AF X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/9B155D364E8A23BF74B3327FF5257F9A5EC9ABE8B4ED514116E45535E6E0C73A/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/9B155D364E8A23BF74B3327FF5257F9A5EC9ABE8B4ED514116E45535E6E0C73A/0/C37FCCB1015F74B72A299747CF1A77DE714F66AF.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 201.182.112.0/22 IPv6: 2803:1820::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265808 Signature Algorithm: sha256WithRSAEncryption 80:b7:d4:96:a2:06:00:8c:2a:3d:5d:04:30:04:ca:c1:23:a4: b1:a7:9d:d1:fa:4b:9b:41:7b:35:35:f4:0d:cc:af:ba:14:da: 1d:6b:67:6e:2f:c9:ef:2a:87:60:1f:ac:60:f2:2f:16:0c:63: d4:1e:1c:cf:ca:a8:88:1f:f9:ea:25:9a:4e:75:4c:76:f3:77: 64:b5:8c:3e:4b:c5:48:c7:89:5d:4a:56:2f:19:b5:7e:28:31: d4:db:61:70:62:f5:7b:4e:f9:57:d8:bb:87:90:40:03:0c:d8: f2:4f:6a:39:c0:43:28:f3:b6:27:62:e5:98:83:bf:63:19:f7: d9:d5:2b:b1:85:e4:91:70:17:e3:a0:47:23:8f:25:cd:12:a4: 3e:0e:8a:f9:5f:0f:8c:84:44:e4:91:94:b5:30:00:74:ea:14: 84:e4:e3:b6:ae:56:a4:18:b5:1c:d6:6a:4c:d0:27:42:f9:1b: e5:c2:c5:92:e5:a0:ce:56:df:d0:ef:88:3a:97:ce:ac:a3:0d: 48:1e:a0:20:1d:2a:0c:4c:db:72:f3:6a:03:b5:9e:de:dd:70: e3:76:27:0c:02:8c:77:40:ab:18:dd:51:20:e4:60:d3:47:dd: be:83:b7:f7:e5:dc:e4:80:66:47:14:d0:8d:7c:75:26:be:19: bc:51:4e:aa -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUIg7CS2ZzbFmWmyRQ1D/Jzh78OPIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAzMTAxNzUwMDFaFw0yNzAzMDkxNzU1MDFaMDMxMTAvBgNV BAMTKEMzN0ZDQ0IxMDE1Rjc0QjcyQTI5OTc0N0NGMUE3N0RFNzE0RjY2QUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVu7KJC70uKbJg7q+gR+hPs2A8 v0OiZrwTdukImwGbIjyWsABUtyXqjX45oLo3t5a0HJOwoDG8crOxaIuQUZ4hkmqO YwwWtSahFLODshGlnvLZ05DWQsqkcfdMkxNQ6wSiK5ZPJwbwb9XsW5oNjhRRw0YX 2ecZ7HstpQjUMyaWf1jT0HO0lQPDiq/a0ORfGoa5pJenlFJyYLM0/63AkL0hvtOM r8ipK5FJ7Ceszg6/7DcpSZfp3MJiIH6Mgzs2ONSBX8BMXOKeLFhm2BYofu9YlQcx VDB+Q64rNPt36m1RiKHluiGT794hJt2au56W+iECZdnIGWlkgaNQ79cgql53AgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTDf8yxAV90tyop l0fPGnfecU9mrzAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvOUIxNTVEMzY0RThBMjNCRjc0QjMzMjdG RjUyNTdGOUE1RUM5QUJFOEI0RUQ1MTQxMTZFNDU1MzVFNkUwQzczQS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy85QjE1NUQzNjRFOEEyM0JGNzRCMzMyN0ZGNTI1N0Y5QTVFQzlBQkU4QjRF RDUxNDExNkU0NTUzNUU2RTBDNzNBLzAvQzM3RkNDQjEwMTVGNzRCNzJBMjk5NzQ3 Q0YxQTc3REU3MTRGNjZBRi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCybZwMA0EAgAC MAcDBQAoAxggMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQOUDANBgkqhkiG9w0B AQsFAAOCAQEAgLfUlqIGAIwqPV0EMATKwSOksaed0fpLm0F7NTX0DcyvuhTaHWtn bi/J7yqHYB+sYPIvFgxj1B4cz8qoiB/56iWaTnVMdvN3ZLWMPkvFSMeJXUpWLxm1 figx1NthcGL1e075V9i7h5BAAwzY8k9qOcBDKPO2J2LlmIO/Yxn32dUrsYXkkXAX 46BHI48lzRKkPg6K+V8PjIRE5JGUtTAAdOoUhOTjtq5WpBi1HNZqTNAnQvkb5cLF kuWgzlbf0O+IOpfOrKMNSB6gIB0qDEzbcvNqA7We3t1w43YnDAKMd0CrGN1RIORg 00fdvoO39+Xc5IBmRxTQjXx1Jr4ZvFFOqg== -----END CERTIFICATE-----Generated at Mon Mar 16 01:55:34 2026 by rpki-client