$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09589E9040CA01AF46E7A39A74C8FBFD9EBA79F8.cer File: 09589E9040CA01AF46E7A39A74C8FBFD9EBA79F8.cer (raw, json) Hash identifier: 6b5YxT43TVx7dW8XAZ25fbH5q1OE6W9zlNhmFGdnzts= Subject key identifier: 09:58:9E:90:40:CA:01:AF:46:E7:A3:9A:74:C8:FB:FD:9E:BA:79:F8 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 2FAA604BE988A77ADC3B3878CF1D095CA9E0BEB1 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/C036F36B432DC7B3BFBAA09993162934C6552881FBD938974FCFE0F2DE7813DD/0/09589E9040CA01AF46E7A39A74C8FBFD9EBA79F8.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/C036F36B432DC7B3BFBAA09993162934C6552881FBD938974FCFE0F2DE7813DD/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 27 Jan 2026 17:50:46 +0000 Certificate not after: Tue 26 Jan 2027 17:55:46 +0000 Subordinate resources: AS: 269837 IP: 45.185.30.0/24 IP: 45.187.210.0/23 IP: 2803:af60::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 05 Mar 2026 11:41:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:aa:60:4b:e9:88:a7:7a:dc:3b:38:78:cf:1d:09:5c:a9:e0:be:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 27 17:50:46 2026 GMT Not After : Jan 26 17:55:46 2027 GMT Subject: CN=09589E9040CA01AF46E7A39A74C8FBFD9EBA79F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:88:00:3e:16:13:a6:ca:fe:dc:8c:6a:41:00: 12:85:cc:d2:65:42:5b:d2:d4:7b:ce:ae:46:65:82: e9:bf:5e:d9:0e:a3:c0:06:83:21:c2:52:5b:cd:36: 57:fc:7a:7a:6e:18:cc:0c:93:a7:92:36:aa:cc:bb: 10:7d:bc:21:f8:87:79:1a:27:cc:c2:0f:fe:3c:6c: 42:84:11:0c:21:d5:83:d8:d5:e2:56:a4:7d:82:30: 3b:18:b1:0b:27:1b:09:60:0a:13:fa:98:b7:84:95: bf:e7:7d:47:ce:df:e6:df:37:0f:56:03:64:0a:92: ee:fc:0b:bb:89:2f:87:5d:b3:5b:9f:9f:de:ac:2d: 66:3c:9b:43:32:49:56:3b:00:cd:8b:dd:f2:92:d1: da:48:08:5a:65:93:c6:a3:fb:3b:9e:b7:15:b0:a7: 93:68:70:ff:04:00:eb:47:7f:e4:39:98:78:02:af: b3:e3:cf:08:99:25:4c:22:7f:a8:71:23:24:91:56: 0a:75:27:9f:28:3d:a1:8f:01:22:27:32:c5:b0:6b: ad:cd:bd:b1:4a:dd:82:15:f2:0c:90:2f:f9:fa:d2: 58:a8:94:40:cf:3f:6f:9e:e6:09:dc:19:03:00:45: ff:7d:75:c2:22:91:16:4b:02:70:52:13:93:b0:2f: e0:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 09:58:9E:90:40:CA:01:AF:46:E7:A3:9A:74:C8:FB:FD:9E:BA:79:F8 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/C036F36B432DC7B3BFBAA09993162934C6552881FBD938974FCFE0F2DE7813DD/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/C036F36B432DC7B3BFBAA09993162934C6552881FBD938974FCFE0F2DE7813DD/0/09589E9040CA01AF46E7A39A74C8FBFD9EBA79F8.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.185.30.0/24 45.187.210.0/23 IPv6: 2803:af60::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 269837 Signature Algorithm: sha256WithRSAEncryption 7b:9c:e1:d1:16:42:62:86:40:a8:15:dc:09:da:7c:34:e5:96: a9:43:ef:2f:0a:c4:54:92:96:98:60:d5:57:f9:a5:6a:23:9a: a7:2d:53:96:52:41:0d:f0:4c:df:5f:b2:22:d7:8b:3b:28:0d: f4:7e:73:be:06:c6:2d:3d:b2:f7:f3:e0:3e:90:ce:03:0c:9b: 45:b4:d9:a4:a9:83:c7:02:93:06:e2:ec:a4:25:d4:56:54:c7: 26:13:4c:52:59:97:6e:b0:20:6f:8c:cd:17:94:a1:38:81:15: e2:44:af:5f:03:23:37:85:9c:c6:f6:bf:47:da:a3:c0:da:ca: 0d:e7:92:3d:19:7b:70:98:22:92:42:1d:05:60:ac:cc:06:2d: f0:ec:17:99:05:b3:69:b7:a2:f8:79:16:f2:ea:07:4c:21:d0: 49:b0:35:91:d1:03:d6:ad:6a:6c:4d:47:53:8d:14:6f:76:27: dd:63:70:ce:f5:3f:45:f7:34:43:46:dc:4a:c9:7d:3b:4c:a8: e5:70:2a:1b:22:45:5a:f5:b4:0b:99:b1:37:d2:10:93:21:44: 94:9e:3a:91:a1:48:45:51:3a:e3:c9:5b:89:74:50:dd:46:19: c2:b4:43:1e:bf:7d:47:60:53:1c:c8:1b:59:3c:91:36:06:ff: 76:83:48:3f -----BEGIN CERTIFICATE----- MIIGqzCCBZOgAwIBAgIUL6pgS+mIp3rcOzh4zx0JXKngvrEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjcxNzUwNDZaFw0yNzAxMjYxNzU1NDZaMDMxMTAvBgNV BAMTKDA5NTg5RTkwNDBDQTAxQUY0NkU3QTM5QTc0QzhGQkZEOUVCQTc5RjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQiAA+FhOmyv7cjGpBABKFzNJl QlvS1HvOrkZlgum/XtkOo8AGgyHCUlvNNlf8enpuGMwMk6eSNqrMuxB9vCH4h3ka J8zCD/48bEKEEQwh1YPY1eJWpH2CMDsYsQsnGwlgChP6mLeElb/nfUfO3+bfNw9W A2QKku78C7uJL4dds1ufn96sLWY8m0MySVY7AM2L3fKS0dpICFplk8aj+zuetxWw p5NocP8EAOtHf+Q5mHgCr7PjzwiZJUwif6hxIySRVgp1J58oPaGPASInMsWwa63N vbFK3YIV8gyQL/n60liolEDPP2+e5gncGQMARf99dcIikRZLAnBSE5OwL+AxAgMB AAGjggO1MIIDsTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQJWJ6QQMoBr0bn o5p0yPv9nrp5+DAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQzAzNkYzNkI0MzJEQzdCM0JGQkFBMDk5 OTMxNjI5MzRDNjU1Mjg4MUZCRDkzODk3NEZDRkUwRjJERTc4MTNERC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9DMDM2RjM2QjQzMkRDN0IzQkZCQUEwOTk5MzE2MjkzNEM2NTUyODgxRkJE OTM4OTc0RkNGRTBGMkRFNzgxM0RELzAvMDk1ODlFOTA0MENBMDFBRjQ2RTdBMzlB NzRDOEZCRkQ5RUJBNzlGOC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQALbkeAwQBLbvS MA0EAgACMAcDBQAoA69gMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQeDTANBgkq hkiG9w0BAQsFAAOCAQEAe5zh0RZCYoZAqBXcCdp8NOWWqUPvLwrEVJKWmGDVV/ml aiOapy1TllJBDfBM31+yIteLOygN9H5zvgbGLT2y9/PgPpDOAwybRbTZpKmDxwKT BuLspCXUVlTHJhNMUlmXbrAgb4zNF5ShOIEV4kSvXwMjN4Wcxva/R9qjwNrKDeeS PRl7cJgikkIdBWCszAYt8OwXmQWzabei+HkW8uoHTCHQSbA1kdED1q1qbE1HU40U b3Yn3WNwzvU/Rfc0Q0bcSsl9O0yo5XAqGyJFWvW0C5mxN9IQkyFElJ46kaFIRVE6 48lbiXRQ3UYZwrRDHr99R2BTHMgbWTyRNgb/doNIPw== -----END CERTIFICATE-----Generated at Mon Mar 2 12:51:56 2026 by rpki-client