$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/23CA48C64E79E1ECA4DA65621794A1D3893773EF.cer File: 23CA48C64E79E1ECA4DA65621794A1D3893773EF.cer (raw, json) Hash identifier: dGc+dhbypMSoJQW3z/0iuUUAXcETU7pz1aUWYkHb4aw= Subject key identifier: 23:CA:48:C6:4E:79:E1:EC:A4:DA:65:62:17:94:A1:D3:89:37:73:EF Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 29E8A350A7D42B8D5E6C2CE7C3D642A1159156C5 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/F03E1B9F77812070D302406FB4756627B298359E1D675B743F7EDC5587E86573/0/23CA48C64E79E1ECA4DA65621794A1D3893773EF.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/F03E1B9F77812070D302406FB4756627B298359E1D675B743F7EDC5587E86573/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 06:46:44 +0000 Certificate not after: Wed 27 Jan 2027 06:51:44 +0000 Subordinate resources: AS: 265724 IP: 45.6.224.0/22 IP: 45.171.109.0/24 IP: 2803:9dc0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:e8:a3:50:a7:d4:2b:8d:5e:6c:2c:e7:c3:d6:42:a1:15:91:56:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 06:46:44 2026 GMT Not After : Jan 27 06:51:44 2027 GMT Subject: CN=23CA48C64E79E1ECA4DA65621794A1D3893773EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:d7:52:f7:f0:fa:38:f0:ce:60:8a:48:3e:74: d9:9c:33:84:52:6f:15:67:13:e5:5d:a5:4d:3a:16: ec:ca:22:90:63:f9:5d:12:43:e0:6e:9d:8e:b8:f7: 14:98:f5:1e:3f:66:73:d8:f4:d2:1c:0b:09:a6:6b: 8c:f5:6c:5f:2a:03:00:3e:4b:80:0a:71:47:e6:39: f8:75:9f:99:31:dc:52:ad:74:76:6a:e0:be:62:2c: 95:b6:d1:9a:42:a0:bb:98:43:c3:86:da:3b:f9:ab: 56:f7:42:af:d4:51:18:c9:cd:89:ae:57:d6:92:a7: db:0d:3a:7b:a5:90:22:a4:53:a0:1d:c9:c2:04:a5: b8:55:03:81:6e:82:7c:18:e0:3a:1d:13:06:ce:41: b4:1e:28:6a:2d:86:44:dd:ba:be:59:59:9d:27:28: d5:7b:02:be:38:66:2c:b6:12:ff:2b:7d:d5:e4:b2: 78:06:e9:5a:cb:1a:00:2d:e4:5b:8a:aa:d7:9f:a8: cb:c2:3c:8c:49:2d:b4:77:67:5a:a9:3e:1f:3c:9c: 80:0c:e9:f6:c5:52:55:99:c7:ff:12:19:dc:1d:e9: 1e:6e:4d:8d:ad:ae:d3:f6:05:e0:8b:2d:10:a0:41: b1:cc:c7:a1:fc:f4:8b:25:ba:4d:a4:da:42:57:11: 27:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 23:CA:48:C6:4E:79:E1:EC:A4:DA:65:62:17:94:A1:D3:89:37:73:EF X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/F03E1B9F77812070D302406FB4756627B298359E1D675B743F7EDC5587E86573/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/F03E1B9F77812070D302406FB4756627B298359E1D675B743F7EDC5587E86573/0/23CA48C64E79E1ECA4DA65621794A1D3893773EF.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.6.224.0/22 45.171.109.0/24 IPv6: 2803:9dc0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265724 Signature Algorithm: sha256WithRSAEncryption 27:df:66:6d:1b:d8:bb:36:09:39:47:27:af:7a:cd:d6:60:3c: e8:67:79:4a:26:dd:6e:f4:ff:ac:4f:b5:79:62:7b:41:7c:46: 7e:ff:20:25:32:11:f8:41:bd:08:99:4c:30:5f:1e:63:54:29: 6b:d1:7a:c2:09:4c:c2:7b:e3:44:94:9d:64:48:f4:21:67:55: 28:92:47:0b:dd:4e:b4:f6:64:d2:8f:74:8d:ca:79:17:85:74: 74:a6:a5:44:37:3e:b7:e4:cc:48:15:90:e7:ed:be:e0:15:65: e6:15:cd:24:f5:75:6d:e2:a1:e6:1d:ea:9f:3b:34:25:d1:c0: a8:0e:d5:4a:0c:72:2c:5f:e7:6a:42:71:11:ca:95:ab:70:5f: b8:22:77:28:7a:33:4c:c4:f7:9d:76:7b:87:69:ca:d8:fb:cf: db:fd:34:fd:a4:58:56:74:58:11:c7:5e:73:30:c6:22:e1:02: 5a:98:13:5e:64:7f:bc:5f:de:8f:62:4b:98:7d:f2:b7:c9:d5: d6:d0:37:d5:e4:8e:10:87:72:51:c1:13:46:80:c6:4e:84:ae: e5:33:2f:d2:fe:5d:2f:60:41:48:58:9f:6e:6a:93:e2:cf:c7: 58:f0:f8:59:57:21:0f:34:c6:9b:a3:b2:f5:cc:84:52:98:c9: 81:d2:e2:45 -----BEGIN CERTIFICATE----- MIIGqzCCBZOgAwIBAgIUKeijUKfUK41ebCznw9ZCoRWRVsUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgwNjQ2NDRaFw0yNzAxMjcwNjUxNDRaMDMxMTAvBgNV BAMTKDIzQ0E0OEM2NEU3OUUxRUNBNERBNjU2MjE3OTRBMUQzODkzNzczRUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO11L38Po48M5gikg+dNmcM4RS bxVnE+VdpU06FuzKIpBj+V0SQ+BunY649xSY9R4/ZnPY9NIcCwmma4z1bF8qAwA+ S4AKcUfmOfh1n5kx3FKtdHZq4L5iLJW20ZpCoLuYQ8OG2jv5q1b3Qq/UURjJzYmu V9aSp9sNOnulkCKkU6AdycIEpbhVA4FugnwY4DodEwbOQbQeKGothkTdur5ZWZ0n KNV7Ar44Ziy2Ev8rfdXksngG6VrLGgAt5FuKqtefqMvCPIxJLbR3Z1qpPh88nIAM 6fbFUlWZx/8SGdwd6R5uTY2trtP2BeCLLRCgQbHMx6H89Isluk2k2kJXESfpAgMB AAGjggO1MIIDsTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQjykjGTnnh7KTa ZWIXlKHTiTdz7zAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRjAzRTFCOUY3NzgxMjA3MEQzMDI0MDZG QjQ3NTY2MjdCMjk4MzU5RTFENjc1Qjc0M0Y3RURDNTU4N0U4NjU3My8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9GMDNFMUI5Rjc3ODEyMDcwRDMwMjQwNkZCNDc1NjYyN0IyOTgzNTlFMUQ2 NzVCNzQzRjdFREM1NTg3RTg2NTczLzAvMjNDQTQ4QzY0RTc5RTFFQ0E0REE2NTYy MTc5NEExRDM4OTM3NzNFRi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCLQbgAwQALatt MA0EAgACMAcDBQAoA53AMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQN/DANBgkq hkiG9w0BAQsFAAOCAQEAJ99mbRvYuzYJOUcnr3rN1mA86Gd5SibdbvT/rE+1eWJ7 QXxGfv8gJTIR+EG9CJlMMF8eY1Qpa9F6wglMwnvjRJSdZEj0IWdVKJJHC91OtPZk 0o90jcp5F4V0dKalRDc+t+TMSBWQ5+2+4BVl5hXNJPV1beKh5h3qnzs0JdHAqA7V SgxyLF/nakJxEcqVq3BfuCJ3KHozTMT3nXZ7h2nK2PvP2/00/aRYVnRYEcdeczDG IuECWpgTXmR/vF/ej2JLmH3yt8nV1tA31eSOEIdyUcETRoDGToSu5TMv0v5dL2BB SFifbmqT4s/HWPD4WVchDzTGm6Oy9cyEUpjJgdLiRQ== -----END CERTIFICATE-----Generated at Mon Mar 2 17:43:50 2026 by rpki-client