$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0BA8E66315F819CD6B55A83C376518C0B115A2A8.cer File: 0BA8E66315F819CD6B55A83C376518C0B115A2A8.cer (raw, json) Hash identifier: LwQRAY3DCII9/LImbUw9FfL2cVqfKNuvPlUs5XsTcms= Subject key identifier: 0B:A8:E6:63:15:F8:19:CD:6B:55:A8:3C:37:65:18:C0:B1:15:A2:A8 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 04C2BA1D07E95AB54F9B62828390D83FF7655972 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/1109DB714359366BFC890257739CEEC66ADE95669DBC987FAB13A15827AE07E2/0/0BA8E66315F819CD6B55A83C376518C0B115A2A8.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/1109DB714359366BFC890257739CEEC66ADE95669DBC987FAB13A15827AE07E2/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 27 Jan 2026 23:29:43 +0000 Certificate not after: Tue 26 Jan 2027 23:34:43 +0000 Subordinate resources: AS: 267719 IP: 45.166.72.0/22 IP: 2803:b9a0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:c2:ba:1d:07:e9:5a:b5:4f:9b:62:82:83:90:d8:3f:f7:65:59:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 27 23:29:43 2026 GMT Not After : Jan 26 23:34:43 2027 GMT Subject: CN=0BA8E66315F819CD6B55A83C376518C0B115A2A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:e4:73:c6:75:7d:fe:35:1b:40:f2:94:13:e9: 58:fe:87:e1:10:81:e2:52:b8:cc:b5:51:2b:31:62: ae:2f:3f:26:14:f5:3f:e2:3d:60:52:c5:67:f2:43: 9f:b9:ed:ff:e2:7a:3c:36:f4:c9:e6:09:94:17:9d: 08:41:cf:25:93:47:39:06:34:81:3e:8c:34:ac:bf: 9d:cf:8c:b0:8a:a1:1d:79:bf:bd:12:6d:af:1e:66: ca:56:08:9a:b3:9b:b8:6d:52:b4:d8:5d:81:2b:71: 29:31:b1:93:8a:65:33:22:21:67:f1:34:49:2e:76: 90:3d:92:25:b2:f9:4f:e5:b7:cc:8c:ad:34:b8:8a: a7:30:84:8a:89:c7:5e:de:b0:30:bf:38:dd:a4:d8: a8:29:84:2b:7d:9a:61:6f:0f:12:04:1a:fe:92:04: 98:d1:3e:d5:16:f9:ad:8e:ed:47:6f:06:78:9b:b0: 5e:fc:4c:3b:8b:63:89:2c:d2:b7:9c:5a:a1:a7:bc: 33:f8:52:d1:11:aa:e5:0d:46:d6:4a:9c:ed:1a:6c: 00:6f:03:6b:f1:c8:2b:01:8e:e6:8e:c7:e6:93:03: 25:3d:02:0a:f7:80:02:4c:1e:d1:f8:87:94:21:5c: b8:bd:09:1b:b5:19:89:b7:df:3f:37:1c:ae:5b:1b: 30:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 0B:A8:E6:63:15:F8:19:CD:6B:55:A8:3C:37:65:18:C0:B1:15:A2:A8 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1109DB714359366BFC890257739CEEC66ADE95669DBC987FAB13A15827AE07E2/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1109DB714359366BFC890257739CEEC66ADE95669DBC987FAB13A15827AE07E2/0/0BA8E66315F819CD6B55A83C376518C0B115A2A8.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.166.72.0/22 IPv6: 2803:b9a0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267719 Signature Algorithm: sha256WithRSAEncryption 6f:00:ed:57:49:4f:dc:f5:40:42:af:e4:53:b0:1c:f9:87:ca: 1f:5e:ed:7c:c8:01:66:2d:d6:79:dc:64:3f:c7:d7:33:7b:11: ed:91:55:f4:b0:4d:ec:91:ff:0f:41:a1:b4:35:7c:08:ac:5a: fb:dd:4c:e2:35:29:c3:af:3a:96:fa:16:bc:a6:03:ef:34:88: 63:88:81:11:9f:5a:2b:d8:6b:76:73:05:12:46:b9:53:7d:e3: e6:37:de:49:4c:d2:fc:43:a8:5c:1a:1d:23:9a:14:e2:9d:82: 4f:5a:e5:08:a8:c6:1b:5f:cf:de:5a:d3:d4:c4:c9:22:4c:d3: b5:74:ee:9b:be:6f:ff:f4:13:f2:65:f9:db:b0:ba:2a:34:75: 6a:94:49:1d:d6:5e:3d:b6:18:81:7e:08:79:a3:35:6d:e7:1e: dc:a2:1e:a0:4d:e1:81:7a:51:fb:c2:4f:bf:23:0a:2c:72:60: f5:bf:50:92:54:ec:13:59:b7:8a:e9:75:76:f4:89:0c:e2:32: 5c:14:fc:b2:06:5b:47:47:f6:43:0c:5f:79:e4:b0:f9:44:33: 70:29:fc:98:67:96:2f:6c:07:30:9f:5a:50:85:4a:14:db:11: 27:73:1f:e7:09:71:7e:b6:fb:cf:4d:d7:2d:74:8a:5f:3b:6e: f3:e8:c2:8e -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUBMK6HQfpWrVPm2KCg5DYP/dlWXIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjcyMzI5NDNaFw0yNzAxMjYyMzM0NDNaMDMxMTAvBgNV BAMTKDBCQThFNjYzMTVGODE5Q0Q2QjU1QTgzQzM3NjUxOEMwQjExNUEyQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa5HPGdX3+NRtA8pQT6Vj+h+EQ geJSuMy1USsxYq4vPyYU9T/iPWBSxWfyQ5+57f/iejw29MnmCZQXnQhBzyWTRzkG NIE+jDSsv53PjLCKoR15v70Sba8eZspWCJqzm7htUrTYXYErcSkxsZOKZTMiIWfx NEkudpA9kiWy+U/lt8yMrTS4iqcwhIqJx17esDC/ON2k2KgphCt9mmFvDxIEGv6S BJjRPtUW+a2O7UdvBnibsF78TDuLY4ks0recWqGnvDP4UtERquUNRtZKnO0abABv A2vxyCsBjuaOx+aTAyU9Agr3gAJMHtH4h5QhXLi9CRu1GYm33z83HK5bGzCBAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQLqOZjFfgZzWtV qDw3ZRjAsRWiqDAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMTEwOURCNzE0MzU5MzY2QkZDODkwMjU3 NzM5Q0VFQzY2QURFOTU2NjlEQkM5ODdGQUIxM0ExNTgyN0FFMDdFMi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8xMTA5REI3MTQzNTkzNjZCRkM4OTAyNTc3MzlDRUVDNjZBREU5NTY2OURC Qzk4N0ZBQjEzQTE1ODI3QUUwN0UyLzAvMEJBOEU2NjMxNUY4MTlDRDZCNTVBODND Mzc2NTE4QzBCMTE1QTJBOC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLaZIMA0EAgAC MAcDBQAoA7mgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQVxzANBgkqhkiG9w0B AQsFAAOCAQEAbwDtV0lP3PVAQq/kU7Ac+YfKH17tfMgBZi3WedxkP8fXM3sR7ZFV 9LBN7JH/D0GhtDV8CKxa+91M4jUpw686lvoWvKYD7zSIY4iBEZ9aK9hrdnMFEka5 U33j5jfeSUzS/EOoXBodI5oU4p2CT1rlCKjGG1/P3lrT1MTJIkzTtXTum75v//QT 8mX527C6KjR1apRJHdZePbYYgX4IeaM1bece3KIeoE3hgXpR+8JPvyMKLHJg9b9Q klTsE1m3iul1dvSJDOIyXBT8sgZbR0f2QwxfeeSw+UQzcCn8mGeWL2wHMJ9aUIVK FNsRJ3Mf5wlxfrb7z03XLXSKXztu8+jCjg== -----END CERTIFICATE-----Generated at Mon Mar 2 17:14:56 2026 by rpki-client