$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0CA7024ACC22C66CE1D43A34A15D3D2B70F18C6A.cer File: 0CA7024ACC22C66CE1D43A34A15D3D2B70F18C6A.cer (raw, json) Hash identifier: t0twhQFGFXJADwjpWNLGrrfC5aVJjKXTUh/hDWAkkR4= Subject key identifier: 0C:A7:02:4A:CC:22:C6:6C:E1:D4:3A:34:A1:5D:3D:2B:70:F1:8C:6A Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 45BDBEF6D37764CA278E24DEAFE52D7DCA368549 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/1C3CEC65CE13F99BF75C413D6E5A90177AB0B155B824614544271D5164A0223B/0/0CA7024ACC22C66CE1D43A34A15D3D2B70F18C6A.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/1C3CEC65CE13F99BF75C413D6E5A90177AB0B155B824614544271D5164A0223B/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 27 Jan 2026 19:45:08 +0000 Certificate not after: Tue 26 Jan 2027 19:50:08 +0000 Subordinate resources: AS: 262266 IP: 2801:1e:4000::/45 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:bd:be:f6:d3:77:64:ca:27:8e:24:de:af:e5:2d:7d:ca:36:85:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 27 19:45:08 2026 GMT Not After : Jan 26 19:50:08 2027 GMT Subject: CN=0CA7024ACC22C66CE1D43A34A15D3D2B70F18C6A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:3e:58:e4:5b:63:6c:37:ba:c7:1a:3d:79:aa: 1e:4b:54:0e:e3:32:c2:38:a5:84:c9:a5:1e:c3:d0: 3a:f0:90:84:d0:91:d2:b0:72:ea:07:6f:09:54:12: c0:c7:5a:51:a0:8b:0f:7f:6a:43:05:39:f1:8f:4e: 51:2f:0c:84:38:09:f5:42:70:53:d1:59:83:00:ba: 7e:36:87:3f:fd:70:0f:69:59:4d:a0:05:33:e0:fe: 04:e9:df:85:45:cb:22:8e:f0:ea:79:b8:a5:ca:14: 5b:bd:44:b5:ce:2d:77:6f:1d:56:7a:d6:f0:c5:0b: 6a:5d:a0:94:7d:18:56:e3:43:f0:e2:46:89:5c:31: 10:ba:4c:a0:62:80:79:e0:2c:fa:45:79:12:be:45: 8e:fc:03:b9:f4:4d:9b:3b:cf:6b:62:cf:33:2b:38: 50:86:2e:b4:86:15:7a:92:e6:fe:48:ad:23:7b:3d: 6d:55:35:f4:b4:73:9e:d0:87:02:69:0f:dd:88:f1: 19:f3:4c:9e:9d:1d:ef:83:17:86:a1:ee:45:35:bb: 38:0f:20:a8:c8:6b:28:b2:d7:59:56:40:90:da:3d: c4:0b:78:13:a4:b4:9a:a0:9f:de:90:8d:af:92:4a: 9e:9d:f6:60:6f:cf:95:ae:b0:6c:5d:76:00:c7:58: cf:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 0C:A7:02:4A:CC:22:C6:6C:E1:D4:3A:34:A1:5D:3D:2B:70:F1:8C:6A X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1C3CEC65CE13F99BF75C413D6E5A90177AB0B155B824614544271D5164A0223B/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1C3CEC65CE13F99BF75C413D6E5A90177AB0B155B824614544271D5164A0223B/0/0CA7024ACC22C66CE1D43A34A15D3D2B70F18C6A.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2801:1e:4000::/45 sbgp-autonomousSysNum: critical Autonomous System Numbers: 262266 Signature Algorithm: sha256WithRSAEncryption 04:dd:d6:f6:51:c6:e5:54:c6:08:39:8f:45:4e:8a:8e:3d:0d: fd:92:7b:2e:43:25:99:40:19:d9:67:69:8f:b2:80:eb:c0:39: 7e:e9:7d:ac:f3:1b:13:6e:fb:aa:2c:9a:fe:ef:0a:73:a3:e7: 4c:47:a3:93:28:eb:f3:64:64:f7:04:cd:bf:23:39:a8:93:67: 62:89:28:6f:c1:e7:58:3c:d4:c6:98:64:cc:75:f7:23:7b:b0: 13:cd:20:10:fd:cf:8b:d2:c8:d2:c7:20:50:bc:29:b4:92:d9: 99:26:01:fd:4e:42:48:ca:1f:a8:ea:48:ed:54:a1:55:aa:78: e3:2d:87:6d:7b:a0:62:00:e2:cc:74:e8:82:ca:4a:3a:75:b2: f5:c4:41:19:14:85:e6:be:0a:28:c6:4a:5e:e7:63:4a:70:f2: 72:18:cf:68:44:96:c3:83:5f:ca:6e:64:23:90:53:a4:59:dc: 3e:83:d5:8f:50:96:3f:60:96:5a:46:7f:45:78:13:e8:b7:84: 04:7d:63:50:bf:39:76:c5:92:4c:e7:ba:99:a8:56:ae:2b:57: 29:48:47:91:29:22:1a:e9:5a:85:16:3b:b3:aa:b1:d5:73:68: 46:9f:2e:61:b7:ba:c2:12:08:e4:07:11:f2:dc:a2:35:de:61: dc:73:11:81 -----BEGIN CERTIFICATE----- MIIGmTCCBYGgAwIBAgIURb2+9tN3ZMonjiTer+Utfco2hUkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjcxOTQ1MDhaFw0yNzAxMjYxOTUwMDhaMDMxMTAvBgNV BAMTKDBDQTcwMjRBQ0MyMkM2NkNFMUQ0M0EzNEExNUQzRDJCNzBGMThDNkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD8PljkW2NsN7rHGj15qh5LVA7j MsI4pYTJpR7D0DrwkITQkdKwcuoHbwlUEsDHWlGgiw9/akMFOfGPTlEvDIQ4CfVC cFPRWYMAun42hz/9cA9pWU2gBTPg/gTp34VFyyKO8Op5uKXKFFu9RLXOLXdvHVZ6 1vDFC2pdoJR9GFbjQ/DiRolcMRC6TKBigHngLPpFeRK+RY78A7n0TZs7z2tizzMr OFCGLrSGFXqS5v5IrSN7PW1VNfS0c57QhwJpD92I8RnzTJ6dHe+DF4ah7kU1uzgP IKjIayiy11lWQJDaPcQLeBOktJqgn96Qja+SSp6d9mBvz5WusGxddgDHWM9fAgMB AAGjggOjMIIDnzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQMpwJKzCLGbOHU OjShXT0rcPGMajAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMUMzQ0VDNjVDRTEzRjk5QkY3NUM0MTNE NkU1QTkwMTc3QUIwQjE1NUI4MjQ2MTQ1NDQyNzFENTE2NEEwMjIzQi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8xQzNDRUM2NUNFMTNGOTlCRjc1QzQxM0Q2RTVBOTAxNzdBQjBCMTU1Qjgy NDYxNDU0NDI3MUQ1MTY0QTAyMjNCLzAvMENBNzAyNEFDQzIyQzY2Q0UxRDQzQTM0 QTE1RDNEMkI3MEYxOEM2QS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcDKAEAHkAAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwQAejANBgkqhkiG9w0BAQsFAAOCAQEABN3W 9lHG5VTGCDmPRU6Kjj0N/ZJ7LkMlmUAZ2Wdpj7KA68A5ful9rPMbE277qiya/u8K c6PnTEejkyjr82Rk9wTNvyM5qJNnYokob8HnWDzUxphkzHX3I3uwE80gEP3Pi9LI 0scgULwptJLZmSYB/U5CSMofqOpI7VShVap44y2HbXugYgDizHTogspKOnWy9cRB GRSF5r4KKMZKXudjSnDychjPaESWw4Nfym5kI5BTpFncPoPVj1CWP2CWWkZ/RXgT 6LeEBH1jUL85dsWSTOe6mahWritXKUhHkSkiGulahRY7s6qx1XNoRp8uYbe6whII 5AcR8tyiNd5h3HMRgQ== -----END CERTIFICATE-----Generated at Mon Mar 2 15:44:34 2026 by rpki-client