$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/179432928797F12F1478B33FBCA3D63294DDAFC3.cer File: 179432928797F12F1478B33FBCA3D63294DDAFC3.cer (raw, json) Hash identifier: RgNhVxBIb13znkbGcKR0RvVGOI7tBFFFKzXXELwdg/U= Subject key identifier: 17:94:32:92:87:97:F1:2F:14:78:B3:3F:BC:A3:D6:32:94:DD:AF:C3 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 3784CCD1CA057F4311325267CA6868B25B912FB1 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/F08DB84004E91DEB6AABF052A6B511426B71AC9D4BCE440E855E68B15F43CC57/0/179432928797F12F1478B33FBCA3D63294DDAFC3.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/F08DB84004E91DEB6AABF052A6B511426B71AC9D4BCE440E855E68B15F43CC57/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 04:59:38 +0000 Certificate not after: Wed 27 Jan 2027 05:04:38 +0000 Subordinate resources: AS: 273190 IP: 45.225.104.0/22 IP: 2803:aa20::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 05 Mar 2026 11:41:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:84:cc:d1:ca:05:7f:43:11:32:52:67:ca:68:68:b2:5b:91:2f:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 04:59:38 2026 GMT Not After : Jan 27 05:04:38 2027 GMT Subject: CN=179432928797F12F1478B33FBCA3D63294DDAFC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:83:09:42:30:42:43:cb:cc:42:58:eb:36:46: 93:ba:58:d4:ee:9a:13:30:0a:c1:67:41:d2:17:00: 1f:5d:9a:f5:60:c8:79:f4:ee:1e:f9:92:e4:df:10: 42:48:85:d7:64:6e:70:ee:4a:86:9b:bf:45:70:8b: ce:39:e2:d2:ae:a9:f3:5d:5b:d1:fd:38:85:b4:74: 25:72:88:c4:5e:52:3d:c3:55:f9:78:66:15:e3:1c: 6f:58:35:a6:44:0d:a4:fc:53:fa:d1:1b:d0:e1:e2: 9d:a6:f2:ba:de:9c:af:73:1e:e2:1c:fe:36:32:34: 0e:88:58:f3:b4:b4:3f:a8:de:d5:66:9a:4b:c9:63: e3:0d:4d:7f:6b:d3:59:9a:82:2d:07:e9:9e:fc:fe: 35:5c:7f:7e:d6:34:19:9d:15:e3:b7:ce:fd:0f:bb: 7b:f2:f0:e7:93:af:00:ee:cc:8d:7c:50:70:3a:45: 65:91:cd:b2:a6:94:5a:d2:0b:69:a9:ab:6e:80:6e: a4:9c:bb:2e:ba:ba:52:1e:71:6b:91:a1:8e:55:de: 9b:89:67:dd:9c:ce:f4:a7:d0:b8:54:57:ee:29:ef: b3:f1:61:43:24:69:58:c3:fc:14:59:50:62:f5:34: 89:1a:6f:29:e7:44:7b:53:6b:57:5b:0a:d4:42:6c: 63:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 17:94:32:92:87:97:F1:2F:14:78:B3:3F:BC:A3:D6:32:94:DD:AF:C3 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/F08DB84004E91DEB6AABF052A6B511426B71AC9D4BCE440E855E68B15F43CC57/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/F08DB84004E91DEB6AABF052A6B511426B71AC9D4BCE440E855E68B15F43CC57/0/179432928797F12F1478B33FBCA3D63294DDAFC3.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.225.104.0/22 IPv6: 2803:aa20::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273190 Signature Algorithm: sha256WithRSAEncryption 85:99:d9:2e:ab:3b:ef:68:53:14:c2:03:eb:fc:46:2f:d1:4e: 92:f3:3b:d6:e6:47:ad:b4:d0:2a:19:76:74:54:62:90:08:5c: f1:3d:24:6e:2b:fd:12:08:53:36:a2:7c:13:f6:74:54:7f:3e: 9e:97:1b:35:f4:ce:b8:39:99:0e:91:56:1c:99:79:5f:7d:a5: 2b:05:5a:d8:50:48:2b:1e:d0:49:87:9e:61:3b:66:33:b9:ae: e3:da:3f:47:3c:e9:83:96:23:a4:63:eb:ad:50:0e:d5:f5:91: 8c:5d:3c:a1:cc:4b:55:0f:18:18:1b:42:ac:00:f2:0f:eb:64: 24:a0:49:36:57:4c:a3:1a:98:e0:65:3a:99:c3:91:12:d5:92: 3c:7f:55:13:89:55:8b:29:53:0e:70:6b:fc:e9:39:49:37:02: 83:f2:fa:98:da:94:04:9e:c7:f2:e5:a3:5a:b5:82:ce:c0:b9: d7:1d:ff:bc:2d:7b:24:82:0e:b1:81:7f:16:14:31:b1:54:bf: 37:a8:04:79:36:65:d0:11:72:0c:51:f7:0c:14:b1:86:42:d2: 64:ef:5b:7a:65:e8:79:29:f3:80:db:bc:43:87:21:24:7b:84: bd:81:a6:58:ac:9b:f6:22:b7:4e:f9:76:8e:4f:74:e9:8a:ff: f2:ea:e3:36 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUN4TM0coFf0MRMlJnymhosluRL7EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgwNDU5MzhaFw0yNzAxMjcwNTA0MzhaMDMxMTAvBgNV BAMTKDE3OTQzMjkyODc5N0YxMkYxNDc4QjMzRkJDQTNENjMyOTREREFGQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/gwlCMEJDy8xCWOs2RpO6WNTu mhMwCsFnQdIXAB9dmvVgyHn07h75kuTfEEJIhddkbnDuSoabv0Vwi8454tKuqfNd W9H9OIW0dCVyiMReUj3DVfl4ZhXjHG9YNaZEDaT8U/rRG9Dh4p2m8rrenK9zHuIc /jYyNA6IWPO0tD+o3tVmmkvJY+MNTX9r01magi0H6Z78/jVcf37WNBmdFeO3zv0P u3vy8OeTrwDuzI18UHA6RWWRzbKmlFrSC2mpq26AbqScuy66ulIecWuRoY5V3puJ Z92czvSn0LhUV+4p77PxYUMkaVjD/BRZUGL1NIkabynnRHtTa1dbCtRCbGNfAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQXlDKSh5fxLxR4 sz+8o9YylN2vwzAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRjA4REI4NDAwNEU5MURFQjZBQUJGMDUy QTZCNTExNDI2QjcxQUM5RDRCQ0U0NDBFODU1RTY4QjE1RjQzQ0M1Ny8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9GMDhEQjg0MDA0RTkxREVCNkFBQkYwNTJBNkI1MTE0MjZCNzFBQzlENEJD RTQ0MEU4NTVFNjhCMTVGNDNDQzU3LzAvMTc5NDMyOTI4Nzk3RjEyRjE0NzhCMzNG QkNBM0Q2MzI5NEREQUZDMy5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLeFoMA0EAgAC MAcDBQAoA6ogMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQrJjANBgkqhkiG9w0B AQsFAAOCAQEAhZnZLqs772hTFMID6/xGL9FOkvM71uZHrbTQKhl2dFRikAhc8T0k biv9EghTNqJ8E/Z0VH8+npcbNfTOuDmZDpFWHJl5X32lKwVa2FBIKx7QSYeeYTtm M7mu49o/Rzzpg5YjpGPrrVAO1fWRjF08ocxLVQ8YGBtCrADyD+tkJKBJNldMoxqY 4GU6mcOREtWSPH9VE4lViylTDnBr/Ok5STcCg/L6mNqUBJ7H8uWjWrWCzsC51x3/ vC17JIIOsYF/FhQxsVS/N6gEeTZl0BFyDFH3DBSxhkLSZO9bemXoeSnzgNu8Q4ch JHuEvYGmWKyb9iK3Tvl2jk906Yr/8urjNg== -----END CERTIFICATE-----Generated at Mon Mar 2 13:06:50 2026 by rpki-client