$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/27FE79291A5C3D66DAA7564D181C08DDA1B23D02.cer File: 27FE79291A5C3D66DAA7564D181C08DDA1B23D02.cer (raw, json) Hash identifier: 5I9g+IxsRiLHWAXvdkzmEMeU8W95KjxHncx+rG0U6kM= Subject key identifier: 27:FE:79:29:1A:5C:3D:66:DA:A7:56:4D:18:1C:08:DD:A1:B2:3D:02 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 2BEF69FDCC93DB46A4B18473D88D07437B749CF9 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/9E5DA6A46D8582A3AC672D5744AF4793C5C0C55C06AD919F84AC45CCB94F07DD/0/27FE79291A5C3D66DAA7564D181C08DDA1B23D02.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/9E5DA6A46D8582A3AC672D5744AF4793C5C0C55C06AD919F84AC45CCB94F07DD/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Thu 29 Jan 2026 00:03:46 +0000 Certificate not after: Thu 28 Jan 2027 00:08:46 +0000 Subordinate resources: AS: 266702 IP: 45.230.64.0/22 IP: 2803:6d20::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:ef:69:fd:cc:93:db:46:a4:b1:84:73:d8:8d:07:43:7b:74:9c:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 29 00:03:46 2026 GMT Not After : Jan 28 00:08:46 2027 GMT Subject: CN=27FE79291A5C3D66DAA7564D181C08DDA1B23D02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e5:1a:95:ba:6a:d6:0d:55:3f:ae:7b:57:5a: 67:bf:82:f9:d2:3e:fd:55:9e:d5:9e:a8:d0:14:e4: 47:27:48:6a:0d:fe:00:b6:fc:5c:b2:24:ab:bb:97: 41:aa:b9:cf:44:86:59:34:48:d8:be:1f:a0:60:d2: c1:fa:18:a5:1f:c8:a4:02:57:f1:e6:c9:61:6b:22: ec:8e:af:d0:cc:0c:82:f6:52:c1:13:9c:3d:f2:5c: 48:d7:ed:49:0f:65:21:e4:e1:e3:d2:01:b6:d6:d3: 3d:29:e8:3d:e5:bb:b8:70:29:7f:69:ba:06:d4:24: 02:36:ea:d2:0a:24:d3:89:90:77:16:e6:6b:8b:76: 22:61:a9:66:bc:f6:52:28:b7:31:06:f5:22:ed:9e: 40:aa:66:39:7d:b4:62:19:52:cf:19:0b:0f:f1:a7: 3b:59:d3:13:76:1e:39:01:24:b1:56:15:67:c1:4a: 35:4d:69:ff:b6:7b:c3:0f:9b:77:a5:35:03:02:0d: 66:62:bc:fb:42:05:0d:f6:64:c1:8a:73:41:5c:de: ae:c3:86:67:2c:1e:00:af:79:35:70:77:59:5f:da: 58:a0:a3:55:2f:07:26:0b:c5:89:d5:ab:3b:f7:55: 96:c8:06:ea:ff:71:39:60:fc:6f:4d:7b:da:05:e7: 4a:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 27:FE:79:29:1A:5C:3D:66:DA:A7:56:4D:18:1C:08:DD:A1:B2:3D:02 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/9E5DA6A46D8582A3AC672D5744AF4793C5C0C55C06AD919F84AC45CCB94F07DD/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/9E5DA6A46D8582A3AC672D5744AF4793C5C0C55C06AD919F84AC45CCB94F07DD/0/27FE79291A5C3D66DAA7564D181C08DDA1B23D02.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.230.64.0/22 IPv6: 2803:6d20::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266702 Signature Algorithm: sha256WithRSAEncryption 1c:cb:0e:e0:9b:ca:c5:f8:76:84:52:bb:90:a0:96:c9:7b:b7: c8:e1:45:50:5b:9e:25:e4:f3:08:4d:ee:d3:c5:9f:71:38:22: 66:6c:d0:51:c9:27:1b:3e:e7:a7:f4:b4:5e:8a:d8:8b:48:5a: 3c:bb:d9:ee:63:f1:db:35:f1:10:6e:5f:20:98:5b:c5:63:4b: 0e:a8:96:2b:3a:83:61:89:ed:7a:59:4b:82:23:31:b7:81:7d: a7:74:b3:96:9c:a0:55:3f:16:63:67:f3:c2:ad:3a:c1:b3:b1: 74:a0:8f:30:be:7e:a7:05:0b:ca:9d:11:b4:2a:8a:47:d9:29: 4c:e9:11:23:d6:05:d5:31:89:4a:3d:3e:f3:dd:9a:e2:ef:52: 05:41:77:62:57:fd:c9:c6:e3:38:37:75:ac:dd:11:71:45:21: 2b:28:05:3f:8d:ec:ee:22:a4:cd:8e:ba:98:1c:4a:65:1e:89: c9:67:1b:65:f8:c1:12:a1:67:67:3f:0d:c7:88:bc:d0:1c:76: eb:cb:80:2b:64:a6:46:70:06:61:51:74:35:7f:e0:02:3b:87: 68:a2:3e:02:16:c3:f9:f4:ab:df:fc:5e:be:16:31:ac:26:70: 0c:db:81:d5:29:44:e1:5b:60:1f:5c:60:e0:9a:5e:e8:89:2e: 65:32:e1:0e -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUK+9p/cyT20aksYRz2I0HQ3t0nPkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjkwMDAzNDZaFw0yNzAxMjgwMDA4NDZaMDMxMTAvBgNV BAMTKDI3RkU3OTI5MUE1QzNENjZEQUE3NTY0RDE4MUMwOEREQTFCMjNEMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr5RqVumrWDVU/rntXWme/gvnS Pv1VntWeqNAU5EcnSGoN/gC2/FyyJKu7l0Gquc9Ehlk0SNi+H6Bg0sH6GKUfyKQC V/HmyWFrIuyOr9DMDIL2UsETnD3yXEjX7UkPZSHk4ePSAbbW0z0p6D3lu7hwKX9p ugbUJAI26tIKJNOJkHcW5muLdiJhqWa89lIotzEG9SLtnkCqZjl9tGIZUs8ZCw/x pztZ0xN2HjkBJLFWFWfBSjVNaf+2e8MPm3elNQMCDWZivPtCBQ32ZMGKc0Fc3q7D hmcsHgCveTVwd1lf2ligo1UvByYLxYnVqzv3VZbIBur/cTlg/G9Ne9oF50q1AgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQn/nkpGlw9Ztqn Vk0YHAjdobI9AjAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvOUU1REE2QTQ2RDg1ODJBM0FDNjcyRDU3 NDRBRjQ3OTNDNUMwQzU1QzA2QUQ5MTlGODRBQzQ1Q0NCOTRGMDdERC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy85RTVEQTZBNDZEODU4MkEzQUM2NzJENTc0NEFGNDc5M0M1QzBDNTVDMDZB RDkxOUY4NEFDNDVDQ0I5NEYwN0RELzAvMjdGRTc5MjkxQTVDM0Q2NkRBQTc1NjRE MTgxQzA4RERBMUIyM0QwMi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLeZAMA0EAgAC MAcDBQAoA20gMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQRzjANBgkqhkiG9w0B AQsFAAOCAQEAHMsO4JvKxfh2hFK7kKCWyXu3yOFFUFueJeTzCE3u08WfcTgiZmzQ UcknGz7np/S0XorYi0haPLvZ7mPx2zXxEG5fIJhbxWNLDqiWKzqDYYntellLgiMx t4F9p3SzlpygVT8WY2fzwq06wbOxdKCPML5+pwULyp0RtCqKR9kpTOkRI9YF1TGJ Sj0+892a4u9SBUF3Ylf9ycbjODd1rN0RcUUhKygFP43s7iKkzY66mBxKZR6JyWcb ZfjBEqFnZz8Nx4i80Bx268uAK2SmRnAGYVF0NX/gAjuHaKI+AhbD+fSr3/xevhYx rCZwDNuB1SlE4VtgH1xg4Jpe6IkuZTLhDg== -----END CERTIFICATE-----Generated at Mon Mar 2 18:27:50 2026 by rpki-client