$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C06B6FA6CB2B8122FB58DC52543671093B05FAA.cer File: 2C06B6FA6CB2B8122FB58DC52543671093B05FAA.cer (raw, json) Hash identifier: 3syiOWHTWcG67KvLYp0EcA343iHyV4uBE1Upa+wksLM= Subject key identifier: 2C:06:B6:FA:6C:B2:B8:12:2F:B5:8D:C5:25:43:67:10:93:B0:5F:AA Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 713B3500CAD9998ACF3C7811118ED73950EED000 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/2C06B6FA6CB2B8122FB58DC52543671093B05FAA.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 23:37:25 +0000 Certificate not after: Wed 27 Jan 2027 23:42:25 +0000 Subordinate resources: AS: 264824 IP: 45.183.140.0/22 IP: 2803:e360::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:3b:35:00:ca:d9:99:8a:cf:3c:78:11:11:8e:d7:39:50:ee:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 23:37:25 2026 GMT Not After : Jan 27 23:42:25 2027 GMT Subject: CN=2C06B6FA6CB2B8122FB58DC52543671093B05FAA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:1f:47:8e:43:9b:2e:cc:9d:ef:e3:67:01:17: ea:eb:35:77:22:16:5d:c0:89:74:d4:15:62:dc:03: 47:57:04:d9:df:1d:29:df:56:e7:0c:44:f3:7c:cd: 6c:df:2d:34:c4:fc:e2:67:29:59:d4:c6:dd:2d:4c: 8d:c8:6b:29:e5:b2:82:8c:c2:ae:ef:22:9f:5b:f2: 8a:3e:9b:81:3f:37:23:a3:d9:c6:af:30:c9:98:df: b6:37:79:ad:24:9f:ef:3d:3e:43:89:66:d7:36:77: c8:41:b7:da:22:8b:4c:38:e9:6c:38:4e:75:4d:41: 73:21:f1:8d:4f:6c:03:ae:61:12:f6:c1:67:ae:f7: 88:50:1c:6e:d8:36:1b:70:cb:22:b9:a3:bf:ba:dd: 63:14:f9:b6:70:5b:99:df:16:30:ca:eb:47:43:a9: bb:3a:18:03:1b:4c:a0:ce:82:25:3e:06:07:96:3a: a5:f3:38:96:ca:d7:ab:a1:73:06:9e:33:e8:b1:22: d8:91:92:b2:0c:ad:58:e3:04:e5:5f:ff:e7:a1:cf: 27:b5:f6:41:d6:98:a1:d0:8a:81:5e:c4:27:9a:4a: 26:b9:d3:a3:42:4d:77:55:c5:9a:0c:bc:9c:4d:fa: ec:05:60:c3:ed:a4:e5:1f:f8:39:af:e1:7f:dc:23: ee:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2C:06:B6:FA:6C:B2:B8:12:2F:B5:8D:C5:25:43:67:10:93:B0:5F:AA X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/2C06B6FA6CB2B8122FB58DC52543671093B05FAA.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.183.140.0/22 IPv6: 2803:e360::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264824 Signature Algorithm: sha256WithRSAEncryption 1e:d8:f4:b2:e2:09:01:e2:b6:f5:92:8d:ed:c7:f5:49:55:b3: d1:7a:f6:15:cf:4e:50:11:f7:9a:44:ce:1e:0a:04:ce:cd:5c: 99:1d:ee:60:9a:02:0b:2e:c6:d5:ee:46:5b:03:ea:1c:e2:5b: 79:97:f8:0a:cb:9d:2d:7e:f3:4e:1d:75:8d:fd:20:c7:dc:1f: 49:73:9c:15:87:d5:2d:2d:eb:ad:2b:ee:8b:f5:56:0e:5b:c0: fc:d6:5b:58:d5:34:98:c0:0f:ed:76:81:b2:a1:a3:57:c1:cc: ed:c3:1e:e1:7f:46:71:29:f0:42:22:74:79:02:86:b5:75:3e: 65:32:99:ee:0b:70:11:d1:d1:4a:b2:23:35:b5:cb:12:c8:db: 96:d4:04:e5:a1:73:17:10:12:4a:65:b4:13:9b:e4:ef:51:e6: f8:d2:ec:c4:7b:4a:bc:b5:e9:d6:71:05:22:e8:a4:8b:95:c7: 3f:10:60:fe:6f:7a:1e:6e:1b:44:2a:17:6b:4b:1e:28:d9:7e: 65:25:5d:cf:dd:5a:4c:ef:de:28:0d:17:51:f3:c3:11:91:ea: d9:73:e8:45:3e:70:12:46:db:ce:10:43:3d:7d:26:30:9e:b0: 97:4c:c4:42:89:ab:0d:48:92:2c:c4:2c:4a:79:ea:fb:8b:26: a5:40:00:40 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUcTs1AMrZmYrPPHgREY7XOVDu0AAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgyMzM3MjVaFw0yNzAxMjcyMzQyMjVaMDMxMTAvBgNV BAMTKDJDMDZCNkZBNkNCMkI4MTIyRkI1OERDNTI1NDM2NzEwOTNCMDVGQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjH0eOQ5suzJ3v42cBF+rrNXci Fl3AiXTUFWLcA0dXBNnfHSnfVucMRPN8zWzfLTTE/OJnKVnUxt0tTI3IaynlsoKM wq7vIp9b8oo+m4E/NyOj2cavMMmY37Y3ea0kn+89PkOJZtc2d8hBt9oii0w46Ww4 TnVNQXMh8Y1PbAOuYRL2wWeu94hQHG7YNhtwyyK5o7+63WMU+bZwW5nfFjDK60dD qbs6GAMbTKDOgiU+BgeWOqXzOJbK16uhcwaeM+ixItiRkrIMrVjjBOVf/+ehzye1 9kHWmKHQioFexCeaSia506NCTXdVxZoMvJxN+uwFYMPtpOUf+Dmv4X/cI+4lAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQsBrb6bLK4Ei+1 jcUlQ2cQk7BfqjAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQzkzQkQwQzNFM0E3QjNENjZFODQxMkNC Q0I2QkIyMTIzNjAyNDRGRDQ5NUJBRjlCNTk2MTNBRDhBMUY1RTE2Mi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9DOTNCRDBDM0UzQTdCM0Q2NkU4NDEyQ0JDQjZCQjIxMjM2MDI0NEZENDk1 QkFGOUI1OTYxM0FEOEExRjVFMTYyLzAvMkMwNkI2RkE2Q0IyQjgxMjJGQjU4REM1 MjU0MzY3MTA5M0IwNUZBQS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLbeMMA0EAgAC MAcDBQAoA+NgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQKeDANBgkqhkiG9w0B AQsFAAOCAQEAHtj0suIJAeK29ZKN7cf1SVWz0Xr2Fc9OUBH3mkTOHgoEzs1cmR3u YJoCCy7G1e5GWwPqHOJbeZf4CsudLX7zTh11jf0gx9wfSXOcFYfVLS3rrSvui/VW DlvA/NZbWNU0mMAP7XaBsqGjV8HM7cMe4X9GcSnwQiJ0eQKGtXU+ZTKZ7gtwEdHR SrIjNbXLEsjbltQE5aFzFxASSmW0E5vk71Hm+NLsxHtKvLXp1nEFIuiki5XHPxBg /m96Hm4bRCoXa0seKNl+ZSVdz91aTO/eKA0XUfPDEZHq2XPoRT5wEkbbzhBDPX0m MJ6wl0zEQomrDUiSLMQsSnnq+4smpUAAQA== -----END CERTIFICATE-----Generated at Mon Mar 2 15:53:17 2026 by rpki-client