$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D745EBF35F5EB9C70C42D5392DC9776A7ED2FC2.cer File: 1D745EBF35F5EB9C70C42D5392DC9776A7ED2FC2.cer (raw, json) Hash identifier: YfIdHL/0+84rA+QX5hYfZsFvO7j7RllgsQ0Tff3lY+4= Subject key identifier: 1D:74:5E:BF:35:F5:EB:9C:70:C4:2D:53:92:DC:97:76:A7:ED:2F:C2 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 35AFA68139D5AB9F1143ABACCC82BE28C422793F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/A115815F39AB3B661CE8D33DC635EC7326A4AD9FB203D8396D5666ED67BA6F76/0/1D745EBF35F5EB9C70C42D5392DC9776A7ED2FC2.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/A115815F39AB3B661CE8D33DC635EC7326A4AD9FB203D8396D5666ED67BA6F76/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 04:16:01 +0000 Certificate not after: Wed 27 Jan 2027 04:21:01 +0000 Subordinate resources: IP: 45.5.164.0/22 IP: 2801:17:d000::/48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 05 Mar 2026 11:41:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:af:a6:81:39:d5:ab:9f:11:43:ab:ac:cc:82:be:28:c4:22:79:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 04:16:01 2026 GMT Not After : Jan 27 04:21:01 2027 GMT Subject: CN=1D745EBF35F5EB9C70C42D5392DC9776A7ED2FC2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:43:ee:f0:7f:d9:3a:3e:da:00:e8:0f:89:35: c3:81:31:66:7c:59:44:78:a0:72:29:ed:30:59:90: dd:fc:05:98:cd:15:3c:9e:31:96:a3:bb:32:15:9b: c4:ae:f4:5d:a7:8e:63:1d:10:eb:4f:48:4e:ec:e2: c2:67:c1:75:c2:e6:2d:b8:a3:29:01:79:e0:6d:17: cd:12:56:2b:1b:ca:28:cf:1c:b1:c0:ad:5c:f4:c9: e2:fe:3c:08:78:17:67:86:7d:0f:d7:8a:e3:33:15: 35:20:3a:cf:21:70:0e:17:94:64:5a:7a:08:62:93: 97:fa:31:df:0d:5f:c4:10:93:67:24:6b:7e:ec:7b: bd:3f:89:2f:f8:83:5a:32:12:eb:e5:0a:08:53:aa: 9f:c6:3f:39:35:64:b6:43:ee:cd:a1:d8:70:4d:c6: 83:a6:f8:8e:a8:43:aa:d7:74:7c:88:c2:8d:a9:3f: 20:48:e9:58:95:7d:bb:e9:72:29:32:cd:89:45:a0: 11:40:fb:56:a8:13:5c:5e:0c:c0:77:aa:f1:3d:b8: 5e:cd:00:94:8b:66:23:5e:0b:7e:0b:7e:81:55:07: 2b:f4:ac:a5:6a:85:20:55:dc:3d:ab:b8:26:97:09: 10:4b:43:81:bd:62:ad:bb:89:b4:c1:58:e3:d5:fa: d0:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1D:74:5E:BF:35:F5:EB:9C:70:C4:2D:53:92:DC:97:76:A7:ED:2F:C2 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/A115815F39AB3B661CE8D33DC635EC7326A4AD9FB203D8396D5666ED67BA6F76/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/A115815F39AB3B661CE8D33DC635EC7326A4AD9FB203D8396D5666ED67BA6F76/0/1D745EBF35F5EB9C70C42D5392DC9776A7ED2FC2.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.5.164.0/22 IPv6: 2801:17:d000::/48 Signature Algorithm: sha256WithRSAEncryption 7a:e3:49:a7:e7:4f:0d:20:d0:41:8b:1d:96:ad:29:5c:23:05: 8f:26:7a:1e:83:76:29:c9:25:19:e5:4a:19:5f:12:07:63:e5: cf:31:88:bc:35:ae:77:ad:0e:ca:c3:c5:9b:f3:ac:7f:0c:ae: 37:22:06:7b:b5:c6:be:22:b1:47:19:de:e2:46:55:0c:a4:17: da:22:a0:6a:fd:66:d8:6e:4a:a9:88:6b:bb:51:f4:52:59:33: a6:f8:b5:4c:04:48:82:7d:ca:61:7f:4d:c5:09:1d:9d:3c:dc: 6d:a0:c4:2d:d7:b0:6c:0d:29:2a:ab:4b:50:18:07:23:da:71: 29:65:0a:d1:2c:95:60:77:7f:e9:a8:76:a8:2d:ac:7a:50:6c: 00:71:47:7c:23:43:86:10:02:9b:11:5a:fa:8b:5a:21:ca:de: e5:68:b5:f5:25:21:b9:fa:48:1f:eb:59:fd:fa:92:8e:8d:e3: 01:f0:45:0e:21:f8:c6:0f:30:eb:57:f0:56:e6:67:a6:96:14: 24:20:33:bf:d2:58:95:ed:43:16:dc:24:8f:5c:cc:30:c8:95: ba:97:6a:a3:14:7c:ee:5c:11:49:49:fc:66:24:e5:13:9c:4e: 7f:7d:7a:5a:19:93:68:ab:65:9d:a5:56:4a:17:19:c3:d4:1f: fb:40:9f:7c -----BEGIN CERTIFICATE----- MIIGizCCBXOgAwIBAgIUNa+mgTnVq58RQ6uszIK+KMQieT8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgwNDE2MDFaFw0yNzAxMjcwNDIxMDFaMDMxMTAvBgNV BAMTKDFENzQ1RUJGMzVGNUVCOUM3MEM0MkQ1MzkyREM5Nzc2QTdFRDJGQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7Q+7wf9k6PtoA6A+JNcOBMWZ8 WUR4oHIp7TBZkN38BZjNFTyeMZajuzIVm8Su9F2njmMdEOtPSE7s4sJnwXXC5i24 oykBeeBtF80SVisbyijPHLHArVz0yeL+PAh4F2eGfQ/XiuMzFTUgOs8hcA4XlGRa eghik5f6Md8NX8QQk2cka37se70/iS/4g1oyEuvlCghTqp/GPzk1ZLZD7s2h2HBN xoOm+I6oQ6rXdHyIwo2pPyBI6ViVfbvpcikyzYlFoBFA+1aoE1xeDMB3qvE9uF7N AJSLZiNeC34LfoFVByv0rKVqhSBV3D2ruCaXCRBLQ4G9Yq27ibTBWOPV+tAjAgMB AAGjggOVMIIDkTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQddF6/NfXrnHDE LVOS3Jd2p+0vwjAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQTExNTgxNUYzOUFCM0I2NjFDRThEMzNE QzYzNUVDNzMyNkE0QUQ5RkIyMDNEODM5NkQ1NjY2RUQ2N0JBNkY3Ni8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9BMTE1ODE1RjM5QUIzQjY2MUNFOEQzM0RDNjM1RUM3MzI2QTRBRDlGQjIw M0Q4Mzk2RDU2NjZFRDY3QkE2Rjc2LzAvMUQ3NDVFQkYzNUY1RUI5QzcwQzQyRDUz OTJEQzk3NzZBN0VEMkZDMi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCLQWkMA8EAgAC MAkDBwAoAQAX0AAwDQYJKoZIhvcNAQELBQADggEBAHrjSafnTw0g0EGLHZatKVwj BY8meh6DdinJJRnlShlfEgdj5c8xiLw1rnetDsrDxZvzrH8MrjciBnu1xr4isUcZ 3uJGVQykF9oioGr9ZthuSqmIa7tR9FJZM6b4tUwESIJ9ymF/TcUJHZ083G2gxC3X sGwNKSqrS1AYByPacSllCtEslWB3f+modqgtrHpQbABxR3wjQ4YQApsRWvqLWiHK 3uVotfUlIbn6SB/rWf36ko6N4wHwRQ4h+MYPMOtX8FbmZ6aWFCQgM7/SWJXtQxbc JI9czDDIlbqXaqMUfO5cEUlJ/GYk5ROcTn99eloZk2irZZ2lVkoXGcPUH/tAn3w= -----END CERTIFICATE-----Generated at Mon Mar 2 12:23:53 2026 by rpki-client