$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/03EADE63CD8AF6482547D464E8DBBEA8040D0D88.cer File: 03EADE63CD8AF6482547D464E8DBBEA8040D0D88.cer (raw, json) Hash identifier: FCDbQ9LQcMmlJlTUxFusg0HWYHX+MCbZ+p+EFnVZ62k= Subject key identifier: 03:EA:DE:63:CD:8A:F6:48:25:47:D4:64:E8:DB:BE:A8:04:0D:0D:88 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 4D6036C329E93E12D502C9ED996DCA94F19BE142 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/BFB4C0F7CCADD62E07ED7A054BF45AB8B38472AF4BA299DEE13AD4C5AE60FC46/0/03EADE63CD8AF6482547D464E8DBBEA8040D0D88.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/BFB4C0F7CCADD62E07ED7A054BF45AB8B38472AF4BA299DEE13AD4C5AE60FC46/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 02:55:05 +0000 Certificate not after: Wed 27 Jan 2027 03:00:05 +0000 Subordinate resources: AS: 267840 IP: 45.175.212.0/22 IP: 2803:d460::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 05 Mar 2026 11:41:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:60:36:c3:29:e9:3e:12:d5:02:c9:ed:99:6d:ca:94:f1:9b:e1:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 02:55:05 2026 GMT Not After : Jan 27 03:00:05 2027 GMT Subject: CN=03EADE63CD8AF6482547D464E8DBBEA8040D0D88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:92:cc:e9:c1:fa:c7:ae:77:28:ba:16:a8:4d: 67:72:a5:bc:71:2b:e6:d7:f2:01:0e:4f:78:65:6a: a5:32:5d:72:91:5a:75:a4:eb:f0:55:da:ba:60:21: 89:a8:27:b8:9a:eb:e4:42:89:40:ca:28:0c:34:4c: 81:4f:6f:68:b6:6a:fa:72:da:54:7b:5b:fe:88:5f: 50:02:7b:43:be:0c:71:1a:6f:cf:ed:8a:cc:7f:5b: 48:9d:9b:55:7e:5d:8e:54:e7:bf:20:9a:cc:b4:df: a5:20:e2:d5:94:3f:62:75:af:89:18:56:d4:35:54: ad:48:d1:96:73:fa:39:d9:a1:28:16:10:7c:0a:8a: 44:64:c2:77:bd:35:b9:de:ba:68:67:f7:20:b5:3c: 84:80:32:d7:7a:3e:00:59:de:79:a3:a8:f1:d2:f7: 44:86:ad:cb:26:0d:d9:cb:ee:08:b4:bd:2a:1c:ba: ad:a3:44:0b:e5:e5:99:63:21:4b:2d:05:ce:3a:e0: b4:f3:8b:aa:5e:85:9e:c6:3d:54:91:c6:30:ab:4c: d8:ec:d9:47:27:da:9a:3d:c2:18:29:5b:e8:9e:72: 0a:09:af:59:7c:7a:19:c6:14:de:b6:37:47:d5:85: 33:bf:7c:cc:e6:ba:44:b9:9a:13:5f:28:4e:e2:6a: c2:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 03:EA:DE:63:CD:8A:F6:48:25:47:D4:64:E8:DB:BE:A8:04:0D:0D:88 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/BFB4C0F7CCADD62E07ED7A054BF45AB8B38472AF4BA299DEE13AD4C5AE60FC46/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/BFB4C0F7CCADD62E07ED7A054BF45AB8B38472AF4BA299DEE13AD4C5AE60FC46/0/03EADE63CD8AF6482547D464E8DBBEA8040D0D88.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.175.212.0/22 IPv6: 2803:d460::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267840 Signature Algorithm: sha256WithRSAEncryption 13:94:3e:6e:a7:03:b1:91:84:7b:98:73:83:23:96:1a:c0:f4: 1c:11:01:75:0a:31:70:ae:91:7c:8d:dd:88:84:cc:6d:18:d8: 33:5b:4b:ff:3a:2e:de:b0:ff:70:09:a1:e9:44:d3:6c:f3:d8: fe:9a:72:99:78:03:5c:ea:c7:50:08:a8:95:53:82:38:23:e2: cf:ec:2b:b3:bf:8f:12:4b:7c:48:f8:2c:3f:8e:eb:eb:d1:92: 21:81:8f:7f:90:96:53:a8:83:a7:95:7f:d2:44:e1:77:f0:97: de:46:fb:71:bc:d0:53:a5:a0:ca:62:ac:9b:0c:b1:87:54:8b: 91:f8:cb:a7:f9:06:6a:7e:6a:42:79:9d:dd:3e:0e:ca:9c:0f: d6:eb:fc:6d:91:9e:89:78:43:d2:66:a5:f0:1f:c7:d4:10:6b: e4:27:2d:ee:de:60:c7:2c:c1:e2:dd:0e:d8:f1:78:56:c7:ff: fe:cb:13:fb:90:78:a7:b4:97:b2:bc:81:33:ec:b7:9f:44:60: e5:6d:40:f2:70:d8:d6:12:3f:55:60:b4:b0:a9:40:3b:72:9d: 17:99:9c:65:08:1c:8f:02:35:2d:02:9b:8e:42:60:8b:a5:4c: b5:16:0c:a6:0d:a9:66:71:c5:ff:4d:f9:bf:32:52:7b:23:28: 19:8f:32:71 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUTWA2wynpPhLVAsntmW3KlPGb4UIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgwMjU1MDVaFw0yNzAxMjcwMzAwMDVaMDMxMTAvBgNV BAMTKDAzRUFERTYzQ0Q4QUY2NDgyNTQ3RDQ2NEU4REJCRUE4MDQwRDBEODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtkszpwfrHrncouhaoTWdypbxx K+bX8gEOT3hlaqUyXXKRWnWk6/BV2rpgIYmoJ7ia6+RCiUDKKAw0TIFPb2i2avpy 2lR7W/6IX1ACe0O+DHEab8/tisx/W0idm1V+XY5U578gmsy036Ug4tWUP2J1r4kY VtQ1VK1I0ZZz+jnZoSgWEHwKikRkwne9Nbneumhn9yC1PISAMtd6PgBZ3nmjqPHS 90SGrcsmDdnL7gi0vSocuq2jRAvl5ZljIUstBc464LTzi6pehZ7GPVSRxjCrTNjs 2Ucn2po9whgpW+iecgoJr1l8ehnGFN62N0fVhTO/fMzmukS5mhNfKE7iasKVAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQD6t5jzYr2SCVH 1GTo276oBA0NiDAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQkZCNEMwRjdDQ0FERDYyRTA3RUQ3QTA1 NEJGNDVBQjhCMzg0NzJBRjRCQTI5OURFRTEzQUQ0QzVBRTYwRkM0Ni8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9CRkI0QzBGN0NDQURENjJFMDdFRDdBMDU0QkY0NUFCOEIzODQ3MkFGNEJB Mjk5REVFMTNBRDRDNUFFNjBGQzQ2LzAvMDNFQURFNjNDRDhBRjY0ODI1NDdENDY0 RThEQkJFQTgwNDBEMEQ4OC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLa/UMA0EAgAC MAcDBQAoA9RgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQWQDANBgkqhkiG9w0B AQsFAAOCAQEAE5Q+bqcDsZGEe5hzgyOWGsD0HBEBdQoxcK6RfI3diITMbRjYM1tL /zou3rD/cAmh6UTTbPPY/ppymXgDXOrHUAiolVOCOCPiz+wrs7+PEkt8SPgsP47r 69GSIYGPf5CWU6iDp5V/0kThd/CX3kb7cbzQU6WgymKsmwyxh1SLkfjLp/kGan5q Qnmd3T4OypwP1uv8bZGeiXhD0mal8B/H1BBr5Cct7t5gxyzB4t0O2PF4Vsf//ssT +5B4p7SXsryBM+y3n0Rg5W1A8nDY1hI/VWC0sKlAO3KdF5mcZQgcjwI1LQKbjkJg i6VMtRYMpg2pZnHF/035vzJSeyMoGY8ycQ== -----END CERTIFICATE-----Generated at Mon Mar 2 09:47:09 2026 by rpki-client