$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22BA0A0AE3424D55CA0DE50C3A959CC228F7B902.cer File: 22BA0A0AE3424D55CA0DE50C3A959CC228F7B902.cer (raw, json) Hash identifier: zbHfGSRccebA/Oyo9mgjUAthwDU7O/Ha3WQR0EWNYT8= Subject key identifier: 22:BA:0A:0A:E3:42:4D:55:CA:0D:E5:0C:3A:95:9C:C2:28:F7:B9:02 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 4130DA4E8102D39253FC030430F83112E6EFE0B2 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/A58DA6E62734E07F018689F32D2D4CE252954337DC0B5AF3D67D61E65B2CC282/0/22BA0A0AE3424D55CA0DE50C3A959CC228F7B902.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/A58DA6E62734E07F018689F32D2D4CE252954337DC0B5AF3D67D61E65B2CC282/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 27 Jan 2026 17:50:51 +0000 Certificate not after: Tue 26 Jan 2027 17:55:51 +0000 Subordinate resources: AS: 271775 IP: 192.231.116.0/24 IP: 2803:4fe0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:30:da:4e:81:02:d3:92:53:fc:03:04:30:f8:31:12:e6:ef:e0:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 27 17:50:51 2026 GMT Not After : Jan 26 17:55:51 2027 GMT Subject: CN=22BA0A0AE3424D55CA0DE50C3A959CC228F7B902 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:71:a0:40:e2:b5:6a:19:a7:44:56:af:00:b6: 3d:01:f5:5b:ed:eb:1f:8e:2b:a0:4e:43:9e:aa:e6: a0:39:ff:2c:e2:c1:fb:10:3e:ed:db:cd:0d:88:30: 3e:e0:cf:14:14:47:49:c1:5e:9c:b4:18:c9:55:ff: cb:8f:b9:c7:8b:60:ca:1b:86:e1:63:8c:fb:fd:35: a6:de:57:ab:c4:20:b5:8f:31:4e:ba:8a:89:10:3b: ed:a5:a9:47:37:5a:9e:53:2d:18:52:26:b4:55:d6: 16:57:29:dd:35:b4:58:d8:7c:97:f3:d2:27:26:9f: fe:c0:d1:be:f5:35:7b:26:20:b7:95:44:72:15:ff: d1:ba:59:6d:26:a8:83:80:f7:24:72:21:de:3c:a9: a1:8e:f4:23:e4:85:e2:b9:0f:79:66:60:79:21:07: 4c:01:99:7b:54:b4:59:77:20:49:c2:ed:17:c5:d2: 8d:10:9b:3c:31:1d:24:8c:15:40:a8:c0:88:8e:c0: 18:b3:53:a2:f8:dd:84:d6:9b:3d:c6:bd:af:42:42: 7e:9d:b6:63:b4:99:e9:77:25:13:5f:21:38:1d:f4: f9:c6:81:e9:7a:40:67:ad:08:92:ea:54:ba:0a:66: bc:c5:9f:c7:70:33:43:54:69:e5:78:96:42:06:dc: 10:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 22:BA:0A:0A:E3:42:4D:55:CA:0D:E5:0C:3A:95:9C:C2:28:F7:B9:02 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/A58DA6E62734E07F018689F32D2D4CE252954337DC0B5AF3D67D61E65B2CC282/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/A58DA6E62734E07F018689F32D2D4CE252954337DC0B5AF3D67D61E65B2CC282/0/22BA0A0AE3424D55CA0DE50C3A959CC228F7B902.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.231.116.0/24 IPv6: 2803:4fe0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 271775 Signature Algorithm: sha256WithRSAEncryption 4d:aa:42:94:ed:01:93:98:24:57:9a:1e:9d:52:4e:d2:fc:8e: 87:06:31:6d:34:4a:cf:33:ed:62:29:5f:f8:31:ec:42:7a:b1: ae:69:6c:12:28:89:46:15:c5:0f:ff:32:3e:b1:30:9e:c9:e7: 1f:fb:ce:e2:f0:b3:b3:b8:3a:6d:a2:0f:ee:70:93:88:35:87: 60:e6:ee:62:e3:44:75:03:60:04:06:cb:fc:90:76:b6:db:b2: 96:1a:1a:45:22:58:71:92:20:84:0a:d6:17:1d:39:13:5b:67: 22:76:e0:8f:43:1d:fe:89:63:a6:4f:d1:54:fb:46:53:bb:3e: 00:1c:9c:10:d9:16:00:a7:c7:ba:3e:bf:17:5f:68:a7:93:0f: 43:c3:50:0a:05:8a:03:ff:ac:e0:91:20:e6:d3:cc:c1:7b:9a: c7:57:be:57:f0:65:4b:48:f7:10:9c:f6:16:fe:cc:30:db:0a: bd:09:88:5d:c1:a9:e8:ed:ab:9e:9f:fd:64:68:04:aa:46:52: 4d:61:9b:41:47:e4:01:ae:7a:e8:c1:78:ee:3d:5a:25:0f:b9: 1b:29:81:07:9e:f1:28:b7:84:5d:bf:27:4e:b7:99:3c:5c:a7: 57:54:e7:b9:e7:65:dd:74:19:86:44:17:a4:49:5d:68:59:1b: 38:04:78:45 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUQTDaToEC05JT/AMEMPgxEubv4LIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjcxNzUwNTFaFw0yNzAxMjYxNzU1NTFaMDMxMTAvBgNV BAMTKDIyQkEwQTBBRTM0MjRENTVDQTBERTUwQzNBOTU5Q0MyMjhGN0I5MDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNcaBA4rVqGadEVq8Atj0B9Vvt 6x+OK6BOQ56q5qA5/yziwfsQPu3bzQ2IMD7gzxQUR0nBXpy0GMlV/8uPuceLYMob huFjjPv9NabeV6vEILWPMU66iokQO+2lqUc3Wp5TLRhSJrRV1hZXKd01tFjYfJfz 0icmn/7A0b71NXsmILeVRHIV/9G6WW0mqIOA9yRyId48qaGO9CPkheK5D3lmYHkh B0wBmXtUtFl3IEnC7RfF0o0QmzwxHSSMFUCowIiOwBizU6L43YTWmz3Gva9CQn6d tmO0mel3JRNfITgd9PnGgel6QGetCJLqVLoKZrzFn8dwM0NUaeV4lkIG3BBpAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQiugoK40JNVcoN 5Qw6lZzCKPe5AjAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQTU4REE2RTYyNzM0RTA3RjAxODY4OUYz MkQyRDRDRTI1Mjk1NDMzN0RDMEI1QUYzRDY3RDYxRTY1QjJDQzI4Mi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9BNThEQTZFNjI3MzRFMDdGMDE4Njg5RjMyRDJENENFMjUyOTU0MzM3REMw QjVBRjNENjdENjFFNjVCMkNDMjgyLzAvMjJCQTBBMEFFMzQyNEQ1NUNBMERFNTBD M0E5NTlDQzIyOEY3QjkwMi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwOd0MA0EAgAC MAcDBQAoA0/gMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQlnzANBgkqhkiG9w0B AQsFAAOCAQEATapClO0Bk5gkV5oenVJO0vyOhwYxbTRKzzPtYilf+DHsQnqxrmls EiiJRhXFD/8yPrEwnsnnH/vO4vCzs7g6baIP7nCTiDWHYObuYuNEdQNgBAbL/JB2 ttuylhoaRSJYcZIghArWFx05E1tnInbgj0Md/oljpk/RVPtGU7s+ABycENkWAKfH uj6/F19op5MPQ8NQCgWKA/+s4JEg5tPMwXuax1e+V/BlS0j3EJz2Fv7MMNsKvQmI XcGp6O2rnp/9ZGgEqkZSTWGbQUfkAa566MF47j1aJQ+5GymBB57xKLeEXb8nTreZ PFynV1Tnuedl3XQZhkQXpEldaFkbOAR4RQ== -----END CERTIFICATE-----Generated at Mon Mar 2 15:39:24 2026 by rpki-client