$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/04DA5678A6D80556909D2141072E40172BEFF2A5.cer File: 04DA5678A6D80556909D2141072E40172BEFF2A5.cer (raw, json) Hash identifier: 5brXuoKuwZiQfcaEO4PlHB3OtN+coozV8OlzJeKn9Jc= Subject key identifier: 04:DA:56:78:A6:D8:05:56:90:9D:21:41:07:2E:40:17:2B:EF:F2:A5 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 23ECF6D00D180E177A079B9A7F5E54559B8F9D63 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/B1B1FAD315E58422FB3642BF333709AB88AEB6BDA14A806D7C43FDB57C377285/0/04DA5678A6D80556909D2141072E40172BEFF2A5.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/B1B1FAD315E58422FB3642BF333709AB88AEB6BDA14A806D7C43FDB57C377285/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 08:57:00 +0000 Certificate not after: Wed 27 Jan 2027 09:02:00 +0000 Subordinate resources: AS: 274222 IP: 45.229.248.0/22 IP: 2803:abd0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 05 Mar 2026 11:41:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:ec:f6:d0:0d:18:0e:17:7a:07:9b:9a:7f:5e:54:55:9b:8f:9d:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 08:57:00 2026 GMT Not After : Jan 27 09:02:00 2027 GMT Subject: CN=04DA5678A6D80556909D2141072E40172BEFF2A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:bf:6f:c2:18:43:f6:a2:e0:fb:f9:0e:ab:4d: a2:aa:4c:b1:39:e3:2b:cc:29:df:72:12:54:6e:b0: 1c:8a:9d:5f:13:af:1e:52:e5:f9:b7:31:d2:8d:ba: 28:0e:63:53:60:91:84:c9:e4:68:76:ba:aa:3e:ca: 1f:f9:a3:66:05:9a:aa:38:2f:33:9f:0b:50:d2:c8: 94:38:52:61:06:9d:7b:27:f5:97:e0:7e:0b:c3:a7: c6:0a:19:20:21:ad:f3:0c:d2:10:88:19:41:34:ba: 7b:83:bf:2b:2e:6f:57:ae:c6:02:40:95:70:89:6f: 3f:7b:27:26:ac:f3:56:ff:b9:7a:9a:e1:95:0d:94: 1d:20:22:6a:55:a2:ed:ee:2e:9c:f1:3b:ce:40:ba: 82:8c:5d:a3:ed:d1:56:9c:5b:4e:2b:ec:4c:33:75: dd:a6:4b:52:70:da:d2:08:87:20:eb:b6:1f:c9:1a: 84:8f:09:b8:4c:8a:d2:2b:f4:51:f0:5e:a1:31:29: 8e:b4:e0:6c:77:2a:e0:1e:19:b3:60:02:74:62:99: 08:9d:b9:a2:76:62:3b:87:f5:4b:a8:18:dd:71:86: 80:2b:58:bc:1b:57:47:bd:19:e3:ee:f3:e7:2e:48: c4:3b:be:c6:6a:d8:38:21:31:36:1f:6a:ad:db:b3: 87:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 04:DA:56:78:A6:D8:05:56:90:9D:21:41:07:2E:40:17:2B:EF:F2:A5 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/B1B1FAD315E58422FB3642BF333709AB88AEB6BDA14A806D7C43FDB57C377285/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/B1B1FAD315E58422FB3642BF333709AB88AEB6BDA14A806D7C43FDB57C377285/0/04DA5678A6D80556909D2141072E40172BEFF2A5.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.229.248.0/22 IPv6: 2803:abd0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 274222 Signature Algorithm: sha256WithRSAEncryption 59:f1:87:49:34:15:ca:94:ce:a6:ab:cf:18:d1:ab:90:e3:f2: 60:1e:fa:47:80:30:25:7f:07:79:6c:f6:cd:42:71:98:14:2b: 57:aa:fb:fd:87:d0:6f:89:8d:3c:cb:65:08:bf:45:63:de:e9: 63:57:69:4a:b8:b9:63:ac:ed:ef:d7:5b:88:cf:a0:a9:70:e1: 61:d0:da:15:9d:15:d7:e9:4a:fb:aa:fd:ac:43:62:22:ed:c0: 8e:f8:4a:01:b1:33:2a:8f:b5:e8:1d:41:2e:16:0a:af:36:ff: 32:00:20:59:76:9e:be:2f:1a:f8:84:9f:55:7b:ff:44:a9:91: 95:3a:b2:a5:0e:c2:f4:19:38:79:da:d1:cd:86:14:11:99:73: f5:6f:48:81:b4:5b:1d:8b:a1:6c:04:4e:5c:58:16:ef:aa:36: cd:8e:91:52:8f:20:a1:1e:2f:6d:75:af:4b:b6:2a:04:12:55: 3a:45:2a:89:e1:be:b9:c7:95:b2:82:9a:9e:10:36:f7:49:02: e7:8b:2e:ea:1f:17:77:38:25:7b:a4:e7:05:76:ba:bd:69:b8: 5e:31:52:8e:53:b7:10:04:97:8f:21:55:57:25:38:84:06:3a: fb:d8:7d:f1:05:65:a7:f7:ac:05:ea:fb:f6:e0:cc:6e:95:81: 95:51:80:18 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUI+z20A0YDhd6B5uaf15UVZuPnWMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgwODU3MDBaFw0yNzAxMjcwOTAyMDBaMDMxMTAvBgNV BAMTKDA0REE1Njc4QTZEODA1NTY5MDlEMjE0MTA3MkU0MDE3MkJFRkYyQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqv2/CGEP2ouD7+Q6rTaKqTLE5 4yvMKd9yElRusByKnV8Trx5S5fm3MdKNuigOY1NgkYTJ5Gh2uqo+yh/5o2YFmqo4 LzOfC1DSyJQ4UmEGnXsn9ZfgfgvDp8YKGSAhrfMM0hCIGUE0unuDvysub1euxgJA lXCJbz97Jyas81b/uXqa4ZUNlB0gImpVou3uLpzxO85AuoKMXaPt0VacW04r7Ewz dd2mS1Jw2tIIhyDrth/JGoSPCbhMitIr9FHwXqExKY604Gx3KuAeGbNgAnRimQid uaJ2YjuH9UuoGN1xhoArWLwbV0e9GePu8+cuSMQ7vsZq2DghMTYfaq3bs4cNAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQE2lZ4ptgFVpCd IUEHLkAXK+/ypTAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQjFCMUZBRDMxNUU1ODQyMkZCMzY0MkJG MzMzNzA5QUI4OEFFQjZCREExNEE4MDZEN0M0M0ZEQjU3QzM3NzI4NS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9CMUIxRkFEMzE1RTU4NDIyRkIzNjQyQkYzMzM3MDlBQjg4QUVCNkJEQTE0 QTgwNkQ3QzQzRkRCNTdDMzc3Mjg1LzAvMDREQTU2NzhBNkQ4MDU1NjkwOUQyMTQx MDcyRTQwMTcyQkVGRjJBNS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLeX4MA0EAgAC MAcDBQAoA6vQMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQvLjANBgkqhkiG9w0B AQsFAAOCAQEAWfGHSTQVypTOpqvPGNGrkOPyYB76R4AwJX8HeWz2zUJxmBQrV6r7 /YfQb4mNPMtlCL9FY97pY1dpSri5Y6zt79dbiM+gqXDhYdDaFZ0V1+lK+6r9rENi Iu3AjvhKAbEzKo+16B1BLhYKrzb/MgAgWXaevi8a+ISfVXv/RKmRlTqypQ7C9Bk4 edrRzYYUEZlz9W9IgbRbHYuhbAROXFgW76o2zY6RUo8goR4vbXWvS7YqBBJVOkUq ieG+uceVsoKanhA290kC54su6h8Xdzgle6TnBXa6vWm4XjFSjlO3EASXjyFVVyU4 hAY6+9h98QVlp/esBer79uDMbpWBlVGAGA== -----END CERTIFICATE-----Generated at Mon Mar 2 12:51:04 2026 by rpki-client