$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A2E8494F1EE6E9343EF823748A436EA77B86231.cer File: 0A2E8494F1EE6E9343EF823748A436EA77B86231.cer (raw, json) Hash identifier: ORwSJr14//SJGryQ92mLE+9I1k959lAKyh7TfEoi5zc= Subject key identifier: 0A:2E:84:94:F1:EE:6E:93:43:EF:82:37:48:A4:36:EA:77:B8:62:31 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 274F65F815646080B2FF3B85E37E722D845E9142 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/736B3B1FC83140AA883214E5C5900315BDB58648D4C6CEA8A8B9048B8EFA6A53/0/0A2E8494F1EE6E9343EF823748A436EA77B86231.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/736B3B1FC83140AA883214E5C5900315BDB58648D4C6CEA8A8B9048B8EFA6A53/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 11:43:19 +0000 Certificate not after: Wed 27 Jan 2027 11:48:19 +0000 Subordinate resources: AS: 267784 IP: 45.227.252.0/22 IP: 2803:5120::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:4f:65:f8:15:64:60:80:b2:ff:3b:85:e3:7e:72:2d:84:5e:91:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 11:43:19 2026 GMT Not After : Jan 27 11:48:19 2027 GMT Subject: CN=0A2E8494F1EE6E9343EF823748A436EA77B86231 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c5:44:a4:f2:2e:9e:43:84:28:af:ab:40:7b: ef:37:82:74:cb:a3:e9:ba:b7:fa:c5:80:f6:0c:96: af:10:9a:e6:74:ef:64:81:f8:2f:30:9c:b2:dc:af: d7:34:5d:5a:05:0c:f9:ea:81:b6:35:ad:6c:9e:63: 88:75:a4:92:79:05:57:5b:77:88:b8:94:6d:9c:49: 95:cb:75:2d:db:f8:fe:9c:96:93:e2:c5:d4:25:1f: 26:e7:03:3e:a6:ba:54:3f:aa:71:eb:45:8e:c9:95: 3b:37:63:4d:52:2c:62:e1:15:29:b7:11:ea:7a:80: b1:5c:85:b9:8d:86:8f:8b:c1:a2:30:21:e6:7c:a4: 36:6e:4b:ac:5c:f6:24:00:3d:03:db:be:d1:82:3c: e4:59:b5:3f:d2:b1:25:83:fb:e4:ae:91:cb:22:82: dd:44:d2:30:c2:ab:00:ae:36:ab:7c:88:cc:1b:a8: cb:33:70:d9:26:3f:09:c6:b0:41:d7:66:d7:1b:59: 62:39:51:c8:58:cf:b9:d2:46:52:f5:ce:87:93:bf: b9:6f:9f:04:b0:73:45:a9:02:6c:4b:9c:c2:eb:6b: dc:7c:23:50:fa:02:3b:f1:2d:a7:bf:6f:fe:5c:b0: 21:b7:78:0e:49:68:c8:12:a5:be:a2:6e:cb:32:52: 0a:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 0A:2E:84:94:F1:EE:6E:93:43:EF:82:37:48:A4:36:EA:77:B8:62:31 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/736B3B1FC83140AA883214E5C5900315BDB58648D4C6CEA8A8B9048B8EFA6A53/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/736B3B1FC83140AA883214E5C5900315BDB58648D4C6CEA8A8B9048B8EFA6A53/0/0A2E8494F1EE6E9343EF823748A436EA77B86231.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.227.252.0/22 IPv6: 2803:5120::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267784 Signature Algorithm: sha256WithRSAEncryption 69:03:d9:0c:f2:0a:31:03:d9:d0:0e:3e:51:97:37:c1:56:79: 6c:fa:e9:ad:4b:fb:40:46:d3:38:2f:b9:c1:20:72:54:1c:fe: 25:e0:8e:f4:e9:33:fc:63:70:c8:f0:44:e8:19:67:c3:af:0a: 34:7a:7f:38:4c:07:c2:b8:10:8e:e4:35:11:e7:fe:04:8d:d6: 80:6e:3d:e8:d9:d2:91:0e:4c:e5:71:1c:6d:36:ec:ab:c2:83: 39:fa:20:10:36:50:80:ba:46:d5:16:73:c1:7a:ae:a9:d7:f0: af:32:52:48:82:4f:f8:3f:6c:91:65:45:d6:5e:0f:87:f1:c4: 78:2b:b7:00:03:79:ef:39:d3:ed:7e:20:d2:41:e2:2b:0c:4e: f5:fe:11:e5:01:ef:d0:a0:4d:41:2e:6a:55:a6:d3:a1:6d:11: aa:34:ef:3f:70:2e:fb:b8:5b:c3:86:90:b2:2d:71:ea:f1:a7: 5e:57:48:9f:db:1c:30:79:e0:56:15:ba:f8:2f:ec:fc:2e:12: 71:bb:a5:97:35:5a:5a:0b:94:01:cf:a3:dc:df:6d:64:ea:bf: 71:3e:6a:39:34:93:27:02:35:2c:63:4e:84:f5:74:b9:73:a0: 73:73:5c:0c:a3:9e:2a:90:03:7d:d7:da:e5:bb:b6:48:bb:23: bc:39:a9:ef -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUJ09l+BVkYICy/zuF435yLYRekUIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgxMTQzMTlaFw0yNzAxMjcxMTQ4MTlaMDMxMTAvBgNV BAMTKDBBMkU4NDk0RjFFRTZFOTM0M0VGODIzNzQ4QTQzNkVBNzdCODYyMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkxUSk8i6eQ4Qor6tAe+83gnTL o+m6t/rFgPYMlq8QmuZ072SB+C8wnLLcr9c0XVoFDPnqgbY1rWyeY4h1pJJ5BVdb d4i4lG2cSZXLdS3b+P6clpPixdQlHybnAz6mulQ/qnHrRY7JlTs3Y01SLGLhFSm3 Eep6gLFchbmNho+LwaIwIeZ8pDZuS6xc9iQAPQPbvtGCPORZtT/SsSWD++Sukcsi gt1E0jDCqwCuNqt8iMwbqMszcNkmPwnGsEHXZtcbWWI5UchYz7nSRlL1zoeTv7lv nwSwc0WpAmxLnMLra9x8I1D6AjvxLae/b/5csCG3eA5JaMgSpb6ibssyUgpPAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQKLoSU8e5uk0Pv gjdIpDbqd7hiMTAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNzM2QjNCMUZDODMxNDBBQTg4MzIxNEU1 QzU5MDAzMTVCREI1ODY0OEQ0QzZDRUE4QThCOTA0OEI4RUZBNkE1My8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy83MzZCM0IxRkM4MzE0MEFBODgzMjE0RTVDNTkwMDMxNUJEQjU4NjQ4RDRD NkNFQThBOEI5MDQ4QjhFRkE2QTUzLzAvMEEyRTg0OTRGMUVFNkU5MzQzRUY4MjM3 NDhBNDM2RUE3N0I4NjIzMS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLeP8MA0EAgAC MAcDBQAoA1EgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQWCDANBgkqhkiG9w0B AQsFAAOCAQEAaQPZDPIKMQPZ0A4+UZc3wVZ5bPrprUv7QEbTOC+5wSByVBz+JeCO 9Okz/GNwyPBE6Blnw68KNHp/OEwHwrgQjuQ1Eef+BI3WgG496NnSkQ5M5XEcbTbs q8KDOfogEDZQgLpG1RZzwXquqdfwrzJSSIJP+D9skWVF1l4Ph/HEeCu3AAN57znT 7X4g0kHiKwxO9f4R5QHv0KBNQS5qVabToW0RqjTvP3Au+7hbw4aQsi1x6vGnXldI n9scMHngVhW6+C/s/C4ScbullzVaWguUAc+j3N9tZOq/cT5qOTSTJwI1LGNOhPV0 uXOgc3NcDKOeKpADfdfa5bu2SLsjvDmp7w== -----END CERTIFICATE-----Generated at Mon Mar 2 18:09:59 2026 by rpki-client