$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/222B248A366BA61349BB5B105D7973A9661BE6AA.cer File: 222B248A366BA61349BB5B105D7973A9661BE6AA.cer (raw, json) Hash identifier: mLHG2R5e/2OiYMQRHSVaHPYlCstc/3B6jk1SNYx/DIQ= Subject key identifier: 22:2B:24:8A:36:6B:A6:13:49:BB:5B:10:5D:79:73:A9:66:1B:E6:AA Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 617B3D70E679B08445F9A33D17A5AF12D7AE6551 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/1DE75ACB741E00E0B17FEDC72B2C183A5264AD746053F20041B3B94461E9BBB2/0/222B248A366BA61349BB5B105D7973A9661BE6AA.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/1DE75ACB741E00E0B17FEDC72B2C183A5264AD746053F20041B3B94461E9BBB2/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 27 Jan 2026 21:27:28 +0000 Certificate not after: Tue 26 Jan 2027 21:32:28 +0000 Subordinate resources: AS: 270085 IP: 200.0.67.0/24 IP: 2801:10:a800::/48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:7b:3d:70:e6:79:b0:84:45:f9:a3:3d:17:a5:af:12:d7:ae:65:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 27 21:27:28 2026 GMT Not After : Jan 26 21:32:28 2027 GMT Subject: CN=222B248A366BA61349BB5B105D7973A9661BE6AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c4:4d:9e:b7:26:09:20:86:f6:1c:bd:51:92: 31:f0:b5:30:01:6d:1d:54:51:02:af:4a:e0:af:a5: e6:91:97:a1:71:48:8f:75:7e:1b:86:16:36:22:64: 7a:af:e8:67:80:39:31:ac:92:7d:a8:9b:5b:29:85: 2a:52:ae:01:ec:73:36:0c:2b:62:db:f0:71:97:17: 08:f6:f4:ed:41:71:e4:41:6b:2e:33:f6:66:84:42: 9e:66:8a:e1:13:99:1b:25:29:0d:37:2b:db:35:b5: 36:83:1e:9e:21:0e:20:e4:ad:d0:83:56:df:af:44: ea:fa:ff:2e:12:68:55:00:df:0a:38:d6:51:c9:ec: bc:68:4e:2d:ec:86:cd:6e:0a:91:de:19:ae:41:9c: e7:69:85:b9:90:8e:af:cd:31:bc:08:98:50:b1:4a: 1a:6d:a1:58:2e:8d:d2:0a:49:ae:b4:bb:7b:e0:ed: 8c:0c:df:26:42:16:5c:97:8e:e4:70:7d:4b:ac:34: d7:41:0d:fd:15:a9:40:ae:d1:15:ef:4c:0c:97:0e: 59:f3:89:14:af:89:4b:8b:98:8e:bb:e7:e5:e3:9f: 39:e3:36:05:f4:28:9f:eb:ae:9b:7f:d5:dd:35:57: 17:17:ac:8d:2e:bf:59:d2:d6:5c:58:ac:1e:32:30: 11:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 22:2B:24:8A:36:6B:A6:13:49:BB:5B:10:5D:79:73:A9:66:1B:E6:AA X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1DE75ACB741E00E0B17FEDC72B2C183A5264AD746053F20041B3B94461E9BBB2/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1DE75ACB741E00E0B17FEDC72B2C183A5264AD746053F20041B3B94461E9BBB2/0/222B248A366BA61349BB5B105D7973A9661BE6AA.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.0.67.0/24 IPv6: 2801:10:a800::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 270085 Signature Algorithm: sha256WithRSAEncryption 4f:51:1c:4c:9c:a0:e9:4f:7d:44:6c:3c:4e:4b:d3:b7:c2:a0: 97:8a:af:1c:d9:66:0e:f7:9b:18:b8:42:a9:fc:d3:45:ae:f6: e1:02:16:fa:37:53:bb:d9:64:fe:50:02:9f:9a:f6:2e:6f:40: b1:d0:ac:60:75:4f:a9:28:64:24:3a:96:f5:a5:50:1f:30:e2: 0e:93:f4:58:1c:56:c5:91:47:a4:df:16:cc:c6:06:9a:8d:94: 7e:49:62:f6:43:48:71:d3:eb:ec:37:20:05:e2:d0:a9:57:e2: 83:de:d7:53:c3:69:8b:41:ee:f1:8a:31:5f:c4:51:c5:c1:b1: 75:b6:80:53:b2:6a:93:1e:78:bf:2f:19:63:f8:44:bd:79:cf: 3a:bf:ef:1c:c0:bc:8e:95:23:40:68:47:71:02:9a:04:e3:b6: 71:c5:b9:20:86:42:d7:fc:a1:c2:70:be:20:aa:8d:2c:24:9e: 45:5b:8a:b7:69:49:39:09:68:27:e0:be:f9:cd:8a:1d:dc:30: b0:0d:87:40:9e:57:40:10:3e:a6:80:b0:42:70:28:4e:44:d9: bb:4e:29:9a:ed:12:82:92:fc:87:28:21:01:cf:8f:61:74:ac: 80:4f:e5:64:2a:93:a4:b4:24:f0:67:47:b6:e5:32:eb:79:e0: 7e:f0:1a:90 -----BEGIN CERTIFICATE----- MIIGpzCCBY+gAwIBAgIUYXs9cOZ5sIRF+aM9F6WvEteuZVEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjcyMTI3MjhaFw0yNzAxMjYyMTMyMjhaMDMxMTAvBgNV BAMTKDIyMkIyNDhBMzY2QkE2MTM0OUJCNUIxMDVENzk3M0E5NjYxQkU2QUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+xE2etyYJIIb2HL1RkjHwtTAB bR1UUQKvSuCvpeaRl6FxSI91fhuGFjYiZHqv6GeAOTGskn2om1sphSpSrgHsczYM K2Lb8HGXFwj29O1BceRBay4z9maEQp5miuETmRslKQ03K9s1tTaDHp4hDiDkrdCD Vt+vROr6/y4SaFUA3wo41lHJ7LxoTi3shs1uCpHeGa5BnOdphbmQjq/NMbwImFCx ShptoVgujdIKSa60u3vg7YwM3yZCFlyXjuRwfUusNNdBDf0VqUCu0RXvTAyXDlnz iRSviUuLmI675+XjnznjNgX0KJ/rrpt/1d01VxcXrI0uv1nS1lxYrB4yMBFpAgMB AAGjggOxMIIDrTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQiKySKNmumE0m7 WxBdeXOpZhvmqjAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMURFNzVBQ0I3NDFFMDBFMEIxN0ZFREM3 MkIyQzE4M0E1MjY0QUQ3NDYwNTNGMjAwNDFCM0I5NDQ2MUU5QkJCMi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8xREU3NUFDQjc0MUUwMEUwQjE3RkVEQzcyQjJDMTgzQTUyNjRBRDc0NjA1 M0YyMDA0MUIzQjk0NDYxRTlCQkIyLzAvMjIyQjI0OEEzNjZCQTYxMzQ5QkI1QjEw NUQ3OTczQTk2NjFCRTZBQS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAyABDMA8EAgAC MAkDBwAoAQAQqAAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBB8FMA0GCSqGSIb3 DQEBCwUAA4IBAQBPURxMnKDpT31EbDxOS9O3wqCXiq8c2WYO95sYuEKp/NNFrvbh Ahb6N1O72WT+UAKfmvYub0Cx0KxgdU+pKGQkOpb1pVAfMOIOk/RYHFbFkUek3xbM xgaajZR+SWL2Q0hx0+vsNyAF4tCpV+KD3tdTw2mLQe7xijFfxFHFwbF1toBTsmqT Hni/Lxlj+ES9ec86v+8cwLyOlSNAaEdxApoE47ZxxbkghkLX/KHCcL4gqo0sJJ5F W4q3aUk5CWgn4L75zYod3DCwDYdAnldAED6mgLBCcChORNm7Tima7RKCkvyHKCEB z49hdKyAT+VkKpOktCTwZ0e25TLreeB+8BqQ -----END CERTIFICATE-----Generated at Mon Mar 2 19:30:49 2026 by rpki-client