$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C7C1D3BD7C277D2286AF6B4461F6A2764876A5F.cer File: 2C7C1D3BD7C277D2286AF6B4461F6A2764876A5F.cer (raw, json) Hash identifier: CN+fkl8QLks2G3Kb4VmIL3vXLH4UuHus3xOw1e3woDI= Subject key identifier: 2C:7C:1D:3B:D7:C2:77:D2:28:6A:F6:B4:46:1F:6A:27:64:87:6A:5F Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 6293DDAF9B4B98CA16D2AE38CD2CD8E796DA35A2 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/20222FE3707FC0E83510EEE1F8B46CB6100B787B45D0B209B61F835E021E5BE5/0/2C7C1D3BD7C277D2286AF6B4461F6A2764876A5F.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/20222FE3707FC0E83510EEE1F8B46CB6100B787B45D0B209B61F835E021E5BE5/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 27 Jan 2026 18:25:16 +0000 Certificate not after: Tue 26 Jan 2027 18:30:16 +0000 Subordinate resources: AS: 269884 IP: 45.188.216.0/23 IP: 2803:f8e0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:93:dd:af:9b:4b:98:ca:16:d2:ae:38:cd:2c:d8:e7:96:da:35:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 27 18:25:16 2026 GMT Not After : Jan 26 18:30:16 2027 GMT Subject: CN=2C7C1D3BD7C277D2286AF6B4461F6A2764876A5F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:78:95:b2:46:37:1c:43:a8:b4:70:ce:c2:29: e6:87:03:5c:42:07:59:18:14:a0:7b:66:1b:d1:3f: a8:8b:54:52:24:1f:e7:d9:40:18:be:26:3c:50:b3: 09:c3:42:df:40:c6:12:64:df:8a:e3:ea:24:98:85: 5b:a5:76:c1:5a:6e:5a:68:25:ce:0a:9a:7f:51:ae: ec:3c:1d:db:9d:19:09:cf:f8:e0:40:28:47:9b:67: d2:35:c3:84:19:6d:c2:6d:e2:1d:27:f6:28:80:25: 1e:7c:9f:c7:a9:27:d3:25:72:95:87:f3:7e:8f:a1: 2a:c9:87:0c:e1:c9:1a:93:bf:b0:c8:28:11:d8:f0: c8:91:66:8a:fd:e6:07:95:61:7c:cd:4e:4a:6e:d1: b5:09:eb:ca:ca:4a:04:b5:11:53:a0:63:d1:0c:81: c9:b1:e5:a7:69:bc:42:44:0c:af:a9:e0:b9:ce:d0: 96:cb:4b:88:09:c2:a8:cc:55:3e:fa:b3:45:ac:61: e5:ff:90:57:55:a6:08:a9:ad:b0:09:0a:be:e8:ff: ea:19:68:c3:04:20:47:ea:fd:0b:2c:31:62:2c:8c: 42:1e:f6:f3:d0:da:9a:81:8e:d5:c0:cc:6b:00:fc: 68:7b:3d:5f:ae:5d:10:75:f6:d7:4d:8a:16:29:1d: dd:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2C:7C:1D:3B:D7:C2:77:D2:28:6A:F6:B4:46:1F:6A:27:64:87:6A:5F X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/20222FE3707FC0E83510EEE1F8B46CB6100B787B45D0B209B61F835E021E5BE5/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/20222FE3707FC0E83510EEE1F8B46CB6100B787B45D0B209B61F835E021E5BE5/0/2C7C1D3BD7C277D2286AF6B4461F6A2764876A5F.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.188.216.0/23 IPv6: 2803:f8e0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 269884 Signature Algorithm: sha256WithRSAEncryption 2c:20:aa:1d:a3:bb:49:ab:01:6a:76:44:50:2c:9c:db:94:10: b5:03:d6:04:36:02:7d:b4:00:3f:ee:18:9a:15:f1:ff:78:9e: f0:fd:d0:7a:d9:a6:03:fe:7b:f1:b3:93:0b:52:bc:ed:d8:01: 8e:09:7b:8b:36:0c:81:4f:78:40:33:16:e5:b5:8a:30:ad:8a: b3:4f:ec:0b:39:d1:24:13:6b:b6:30:06:60:f3:04:17:64:3f: a5:55:65:cc:c9:fe:0f:6a:60:0e:a2:76:c6:29:9b:e3:cd:06: d7:ae:dc:e8:b1:32:f2:59:af:ee:c5:07:eb:39:f7:94:7b:a3: b5:19:dc:1d:6a:73:a7:36:1e:2f:40:27:2b:fe:8d:7d:6f:38: 1f:82:33:b8:d8:8f:b8:e1:b9:16:21:88:bf:a9:8a:ca:1e:6d: e5:29:19:e7:ef:44:e5:75:e5:24:8c:de:ae:5a:e0:07:63:3a: 9a:f0:ca:a9:de:f2:bb:33:21:d6:d7:99:b1:7e:ce:39:e6:e4: 77:d2:cd:fc:5d:82:c1:e2:d7:ba:91:8f:7c:99:9f:cd:0b:0e: 19:c4:16:55:63:d4:6a:4e:30:b7:cb:b3:4e:92:85:20:04:39: 6d:00:47:c2:18:83:9d:67:03:3f:ac:9e:2c:c6:ce:1e:5b:00: 4f:65:2a:e5 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUYpPdr5tLmMoW0q44zSzY55baNaIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjcxODI1MTZaFw0yNzAxMjYxODMwMTZaMDMxMTAvBgNV BAMTKDJDN0MxRDNCRDdDMjc3RDIyODZBRjZCNDQ2MUY2QTI3NjQ4NzZBNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLeJWyRjccQ6i0cM7CKeaHA1xC B1kYFKB7ZhvRP6iLVFIkH+fZQBi+JjxQswnDQt9AxhJk34rj6iSYhVuldsFablpo Jc4Kmn9Rruw8HdudGQnP+OBAKEebZ9I1w4QZbcJt4h0n9iiAJR58n8epJ9MlcpWH 836PoSrJhwzhyRqTv7DIKBHY8MiRZor95geVYXzNTkpu0bUJ68rKSgS1EVOgY9EM gcmx5adpvEJEDK+p4LnO0JbLS4gJwqjMVT76s0WsYeX/kFdVpgiprbAJCr7o/+oZ aMMEIEfq/QssMWIsjEIe9vPQ2pqBjtXAzGsA/Gh7PV+uXRB19tdNihYpHd1lAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQsfB0718J30ihq 9rRGH2onZIdqXzAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMjAyMjJGRTM3MDdGQzBFODM1MTBFRUUx RjhCNDZDQjYxMDBCNzg3QjQ1RDBCMjA5QjYxRjgzNUUwMjFFNUJFNS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8yMDIyMkZFMzcwN0ZDMEU4MzUxMEVFRTFGOEI0NkNCNjEwMEI3ODdCNDVE MEIyMDlCNjFGODM1RTAyMUU1QkU1LzAvMkM3QzFEM0JEN0MyNzdEMjI4NkFGNkI0 NDYxRjZBMjc2NDg3NkE1Ri5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBLbzYMA0EAgAC MAcDBQAoA/jgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQePDANBgkqhkiG9w0B AQsFAAOCAQEALCCqHaO7SasBanZEUCyc25QQtQPWBDYCfbQAP+4YmhXx/3ie8P3Q etmmA/578bOTC1K87dgBjgl7izYMgU94QDMW5bWKMK2Ks0/sCznRJBNrtjAGYPME F2Q/pVVlzMn+D2pgDqJ2ximb480G167c6LEy8lmv7sUH6zn3lHujtRncHWpzpzYe L0AnK/6NfW84H4IzuNiPuOG5FiGIv6mKyh5t5SkZ5+9E5XXlJIzerlrgB2M6mvDK qd7yuzMh1teZsX7OOebkd9LN/F2CweLXupGPfJmfzQsOGcQWVWPUak4wt8uzTpKF IAQ5bQBHwhiDnWcDP6yeLMbOHlsAT2Uq5Q== -----END CERTIFICATE-----Generated at Mon Mar 2 17:15:18 2026 by rpki-client