$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/06C08D44AF888E8F97E6E20DF100F0BE283ADADD.cer File: 06C08D44AF888E8F97E6E20DF100F0BE283ADADD.cer (raw, json) Hash identifier: xHGz43YdyI6QOTNrXZ0ccAt/GuLoXhS0RH9GPU4vrCQ= Subject key identifier: 06:C0:8D:44:AF:88:8E:8F:97:E6:E2:0D:F1:00:F0:BE:28:3A:DA:DD Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 7F1DA38B565BDF330F7A75C8AA4F54568E036858 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/90C7B82D751C0121B1DF483FCE52F8072A0A500CA2F228B4FDE35D8E842C5C6D/0/06C08D44AF888E8F97E6E20DF100F0BE283ADADD.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/90C7B82D751C0121B1DF483FCE52F8072A0A500CA2F228B4FDE35D8E842C5C6D/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 27 Jan 2026 20:47:43 +0000 Certificate not after: Tue 26 Jan 2027 20:52:43 +0000 Subordinate resources: AS: 64168 AS: 273242 IP: 45.68.60.0/23 IP: 2801:19:7800::/44 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 05 Mar 2026 11:41:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:1d:a3:8b:56:5b:df:33:0f:7a:75:c8:aa:4f:54:56:8e:03:68:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 27 20:47:43 2026 GMT Not After : Jan 26 20:52:43 2027 GMT Subject: CN=06C08D44AF888E8F97E6E20DF100F0BE283ADADD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:03:3e:cc:80:2d:8b:40:b8:dc:c3:94:7d:b0: 4d:63:c2:ef:33:14:04:5e:df:08:d6:c8:5e:8e:44: 52:b8:6c:50:7d:3d:50:05:b3:a4:44:f5:38:f5:49: c4:5e:41:2f:23:e5:fd:30:1f:0b:fc:26:c1:56:3d: 5d:74:ec:64:32:3b:72:1d:1a:ff:b1:d5:ca:03:b7: 4c:1f:35:a2:0b:73:ad:a9:a6:6c:fd:1e:eb:8c:a9: 1f:0b:ad:8d:c8:48:0b:4e:c5:d5:17:97:2e:0e:07: e0:75:e8:dc:8d:20:4b:92:01:20:46:8f:c5:d2:08: fd:37:89:1f:94:61:4d:db:af:74:79:56:eb:1d:24: 51:57:ec:c6:d8:20:ca:e8:ae:0f:79:3b:32:e2:a0: 9b:e6:b4:91:ce:ab:02:16:63:64:5f:d1:62:26:d4: 4a:7f:90:80:ca:e9:a8:84:c0:52:58:e6:e9:39:b1: a7:8e:73:e6:35:52:a4:86:91:7b:0c:fd:f4:11:57: 4a:6b:b6:14:87:96:5a:1d:9d:f4:d1:79:6a:c7:d1: af:7a:ef:d4:2d:04:00:0e:46:33:92:04:8a:58:c3: 73:3c:d0:ab:ef:0f:43:2c:9c:7b:a0:ad:b8:93:c0: 17:88:ac:8e:0a:0c:0c:73:de:98:ba:eb:07:63:4c: 81:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 06:C0:8D:44:AF:88:8E:8F:97:E6:E2:0D:F1:00:F0:BE:28:3A:DA:DD X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/90C7B82D751C0121B1DF483FCE52F8072A0A500CA2F228B4FDE35D8E842C5C6D/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/90C7B82D751C0121B1DF483FCE52F8072A0A500CA2F228B4FDE35D8E842C5C6D/0/06C08D44AF888E8F97E6E20DF100F0BE283ADADD.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.68.60.0/23 IPv6: 2801:19:7800::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 64168 273242 Signature Algorithm: sha256WithRSAEncryption 7e:b8:ed:fb:d5:d1:9d:83:47:3e:d2:63:6c:76:c4:97:93:35: cf:7e:5d:bb:fa:ab:2b:d8:1a:be:a7:a4:7e:ee:a2:b2:f4:a1: 29:db:0b:62:cd:54:e4:f3:af:8d:f6:51:cc:24:42:c7:36:2f: da:0c:34:9d:41:78:92:b7:b2:76:1a:08:57:c8:4a:b1:4d:61: be:30:b9:35:02:02:ff:0a:b2:d1:0e:21:65:e3:4e:23:98:43: d1:f1:f5:66:ce:f4:59:75:07:b4:12:ba:45:53:4b:a9:06:08: 26:2d:e7:dd:71:1e:d5:66:7b:25:de:98:b9:f1:9f:2f:6c:3f: a2:b7:62:b0:77:ee:a7:20:d9:9a:09:58:0e:c9:71:27:30:e8: 18:66:2a:57:5c:b5:71:0f:c1:00:02:37:06:5a:7b:7c:d4:8e: 39:86:cd:f4:ae:2c:ba:c1:ed:9c:49:19:96:44:bd:ac:db:d5: f7:28:2c:35:6a:e7:1b:fd:78:d5:61:ad:99:b3:fe:47:ff:06: e1:6b:04:b6:7c:ce:70:78:ab:e6:cc:3e:11:14:da:5b:9a:20: 1d:19:78:c1:95:6b:06:17:6e:02:ef:72:67:29:9c:a7:2b:63: c5:41:64:16:b2:29:80:13:d6:44:f9:74:3e:33:8a:c0:12:47: 70:dd:1d:31 -----BEGIN CERTIFICATE----- MIIGrDCCBZSgAwIBAgIUfx2ji1Zb3zMPenXIqk9UVo4DaFgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjcyMDQ3NDNaFw0yNzAxMjYyMDUyNDNaMDMxMTAvBgNV BAMTKDA2QzA4RDQ0QUY4ODhFOEY5N0U2RTIwREYxMDBGMEJFMjgzQURBREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvAz7MgC2LQLjcw5R9sE1jwu8z FARe3wjWyF6ORFK4bFB9PVAFs6RE9Tj1ScReQS8j5f0wHwv8JsFWPV107GQyO3Id Gv+x1coDt0wfNaILc62ppmz9HuuMqR8LrY3ISAtOxdUXly4OB+B16NyNIEuSASBG j8XSCP03iR+UYU3br3R5VusdJFFX7MbYIMrorg95OzLioJvmtJHOqwIWY2Rf0WIm 1Ep/kIDK6aiEwFJY5uk5saeOc+Y1UqSGkXsM/fQRV0prthSHllodnfTReWrH0a96 79QtBAAORjOSBIpYw3M80KvvD0MsnHugrbiTwBeIrI4KDAxz3pi66wdjTIEHAgMB AAGjggO2MIIDsjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQGwI1Er4iOj5fm 4g3xAPC+KDra3TAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvOTBDN0I4MkQ3NTFDMDEyMUIxREY0ODNG Q0U1MkY4MDcyQTBBNTAwQ0EyRjIyOEI0RkRFMzVEOEU4NDJDNUM2RC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy85MEM3QjgyRDc1MUMwMTIxQjFERjQ4M0ZDRTUyRjgwNzJBMEE1MDBDQTJG MjI4QjRGREUzNUQ4RTg0MkM1QzZELzAvMDZDMDhENDRBRjg4OEU4Rjk3RTZFMjBE RjEwMEYwQkUyODNBREFERC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBLUQ8MA8EAgAC MAkDBwQoAQAZeAAwHwYIKwYBBQUHAQgBAf8EEDAOoAwwCgIDAPqoAgMEK1owDQYJ KoZIhvcNAQELBQADggEBAH647fvV0Z2DRz7SY2x2xJeTNc9+Xbv6qyvYGr6npH7u orL0oSnbC2LNVOTzr432UcwkQsc2L9oMNJ1BeJK3snYaCFfISrFNYb4wuTUCAv8K stEOIWXjTiOYQ9Hx9WbO9Fl1B7QSukVTS6kGCCYt591xHtVmeyXemLnxny9sP6K3 YrB37qcg2ZoJWA7JcScw6BhmKldctXEPwQACNwZae3zUjjmGzfSuLLrB7ZxJGZZE vazb1fcoLDVq5xv9eNVhrZmz/kf/BuFrBLZ8znB4q+bMPhEU2luaIB0ZeMGVawYX bgLvcmcpnKcrY8VBZBayKYAT1kT5dD4zisASR3DdHTE= -----END CERTIFICATE-----Generated at Mon Mar 2 09:49:35 2026 by rpki-client