$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.cer File: 25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.cer (raw, json) Hash identifier: gd5WmLjh13B+j0VMBV6/tIorFqbwtk/+GvjIm36SKGc= Subject key identifier: 25:F2:8E:F0:D0:F9:3A:52:8B:35:E0:7F:04:DC:CD:7C:5C:26:40:6A Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 1C0682E55954A907CC720560C34FC08ECD5FC331 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/17D97860CDD19F9076CFC79E0E2B503E423ADC428A944E28AE42021B437C0527/0/25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/17D97860CDD19F9076CFC79E0E2B503E423ADC428A944E28AE42021B437C0527/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 18:19:33 +0000 Certificate not after: Wed 27 Jan 2027 18:24:33 +0000 Subordinate resources: AS: 266902 IP: 45.161.44.0/22 IP: 2801:15:f000::/48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 05 Mar 2026 11:41:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:06:82:e5:59:54:a9:07:cc:72:05:60:c3:4f:c0:8e:cd:5f:c3:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 18:19:33 2026 GMT Not After : Jan 27 18:24:33 2027 GMT Subject: CN=25F28EF0D0F93A528B35E07F04DCCD7C5C26406A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:4f:eb:b2:dc:0e:3d:b1:52:ff:3c:bf:9a:72: 3b:46:dd:b9:54:5e:d5:76:69:a3:1a:90:09:6e:8f: b9:e4:8b:9f:2e:a5:4d:1b:be:6b:b9:4c:9d:52:51: 48:75:19:ce:2a:cb:6d:78:d0:52:aa:ac:5a:05:94: 17:ed:ab:b0:41:70:31:9c:8a:3b:e2:5f:40:06:e0: 06:76:30:f2:13:a0:57:c8:32:1b:01:29:2b:56:93: c9:bf:4c:a4:dc:6b:18:ae:09:b7:7d:0d:2c:a2:9c: 7b:42:0f:56:7c:10:88:4c:64:3e:0e:d4:93:c5:e1: ad:d7:8d:8e:fa:82:c5:f8:ea:02:96:82:92:f5:34: 81:b7:4a:95:6f:15:46:32:93:d8:4c:5e:01:14:8c: 48:6c:89:77:75:ce:01:d5:41:00:b0:15:f6:b4:60: 79:37:0d:d3:21:36:03:2d:a0:1f:83:eb:b8:8f:3d: 5f:cb:43:2b:ab:ae:06:f6:36:48:ff:f1:0e:5b:f2: 86:fd:ce:75:4d:33:62:8b:a9:8b:e8:17:f5:63:80: 95:60:c8:7a:74:b3:b6:0a:4d:89:a4:6e:c6:be:bb: 80:75:1f:d2:70:89:38:d7:e3:80:5b:d2:06:5b:da: 78:bc:54:9a:82:52:48:59:ad:f2:b7:29:d5:04:b9: dd:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 25:F2:8E:F0:D0:F9:3A:52:8B:35:E0:7F:04:DC:CD:7C:5C:26:40:6A X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/17D97860CDD19F9076CFC79E0E2B503E423ADC428A944E28AE42021B437C0527/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/17D97860CDD19F9076CFC79E0E2B503E423ADC428A944E28AE42021B437C0527/0/25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.161.44.0/22 IPv6: 2801:15:f000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266902 Signature Algorithm: sha256WithRSAEncryption 4f:d9:5d:d2:f0:ff:7a:7a:c6:6b:ce:98:3d:96:50:0b:c2:08: b6:83:7f:2a:d3:61:a4:13:e7:35:53:85:5d:a5:e6:d0:6b:39: 19:6e:5b:d5:39:40:04:3f:08:94:8a:73:1f:a4:87:06:5f:c5: cf:ce:8d:d9:6c:54:b3:28:05:d7:47:96:36:ae:28:22:df:27: d7:d7:e3:b1:f5:6f:37:64:ee:bc:67:60:f8:09:69:a5:8f:49: 2e:c2:78:37:10:1b:fa:c6:3e:1f:74:cb:1d:84:f2:4e:f3:73: ae:95:f2:62:db:f8:c7:61:1e:73:a6:74:d1:ce:39:c0:03:e0: 70:18:4a:82:91:ca:32:af:6c:fb:5c:2a:f8:cc:91:4e:b0:79: 6f:c5:9b:a0:ba:42:9d:c7:88:6b:15:90:05:89:ca:b8:d9:d8: d3:e4:e4:6c:a4:b3:d1:48:58:e8:8c:65:62:95:dd:fa:53:69: fc:77:b1:15:b1:64:b5:1a:ea:53:fd:eb:9a:55:cc:62:65:46: 09:7e:9d:fe:c1:29:3b:89:b6:06:b2:1c:a7:f8:f9:1f:9e:4d: d1:ee:60:a3:bf:99:65:23:f8:be:42:ec:fd:3f:8c:1d:96:e1: aa:16:b8:fc:cd:ab:a7:7e:6b:c1:27:54:65:ba:8e:9e:31:2e: 04:6e:4c:52 -----BEGIN CERTIFICATE----- MIIGpzCCBY+gAwIBAgIUHAaC5VlUqQfMcgVgw0/Ajs1fwzEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgxODE5MzNaFw0yNzAxMjcxODI0MzNaMDMxMTAvBgNV BAMTKDI1RjI4RUYwRDBGOTNBNTI4QjM1RTA3RjA0RENDRDdDNUMyNjQwNkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVT+uy3A49sVL/PL+acjtG3blU XtV2aaMakAluj7nki58upU0bvmu5TJ1SUUh1Gc4qy2140FKqrFoFlBftq7BBcDGc ijviX0AG4AZ2MPIToFfIMhsBKStWk8m/TKTcaxiuCbd9DSyinHtCD1Z8EIhMZD4O 1JPF4a3XjY76gsX46gKWgpL1NIG3SpVvFUYyk9hMXgEUjEhsiXd1zgHVQQCwFfa0 YHk3DdMhNgMtoB+D67iPPV/LQyurrgb2Nkj/8Q5b8ob9znVNM2KLqYvoF/VjgJVg yHp0s7YKTYmkbsa+u4B1H9JwiTjX44Bb0gZb2ni8VJqCUkhZrfK3KdUEud0vAgMB AAGjggOxMIIDrTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQl8o7w0Pk6Uos1 4H8E3M18XCZAajAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMTdEOTc4NjBDREQxOUY5MDc2Q0ZDNzlF MEUyQjUwM0U0MjNBREM0MjhBOTQ0RTI4QUU0MjAyMUI0MzdDMDUyNy8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8xN0Q5Nzg2MENERDE5RjkwNzZDRkM3OUUwRTJCNTAzRTQyM0FEQzQyOEE5 NDRFMjhBRTQyMDIxQjQzN0MwNTI3LzAvMjVGMjhFRjBEMEY5M0E1MjhCMzVFMDdG MDREQ0NEN0M1QzI2NDA2QS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCLaEsMA8EAgAC MAkDBwAoAQAV8AAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBKWMA0GCSqGSIb3 DQEBCwUAA4IBAQBP2V3S8P96esZrzpg9llALwgi2g38q02GkE+c1U4VdpebQazkZ blvVOUAEPwiUinMfpIcGX8XPzo3ZbFSzKAXXR5Y2rigi3yfX1+Ox9W83ZO68Z2D4 CWmlj0kuwng3EBv6xj4fdMsdhPJO83OulfJi2/jHYR5zpnTRzjnAA+BwGEqCkcoy r2z7XCr4zJFOsHlvxZugukKdx4hrFZAFicq42djT5ORspLPRSFjojGVild36U2n8 d7EVsWS1GupT/euaVcxiZUYJfp3+wSk7ibYGshyn+Pkfnk3R7mCjv5llI/i+Quz9 P4wdluGqFrj8zaunfmvBJ1Rluo6eMS4EbkxS -----END CERTIFICATE-----Generated at Mon Mar 2 13:41:06 2026 by rpki-client