$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D8692867D0888EDE9943E1B31BAED70B4DB4811.cer File: 2D8692867D0888EDE9943E1B31BAED70B4DB4811.cer (raw, json) Hash identifier: D1rvxMdMU6LYN5GDMZXa6BvlQ3rSdM2s6v+Muyq3O9I= Subject key identifier: 2D:86:92:86:7D:08:88:ED:E9:94:3E:1B:31:BA:ED:70:B4:DB:48:11 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 57FEAF223A636242CBC32D98449846AAED4D8DAD Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/DAEE146D6347C36A81F84E6FDD597E91F78FC7EA3270A9258F33E8FA870D2880/0/2D8692867D0888EDE9943E1B31BAED70B4DB4811.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/DAEE146D6347C36A81F84E6FDD597E91F78FC7EA3270A9258F33E8FA870D2880/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 21:37:26 +0000 Certificate not after: Wed 27 Jan 2027 21:42:26 +0000 Subordinate resources: AS: 271839 IP: 45.239.216.0/22 IP: 2803:3810::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 05 Mar 2026 11:41:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:fe:af:22:3a:63:62:42:cb:c3:2d:98:44:98:46:aa:ed:4d:8d:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 21:37:26 2026 GMT Not After : Jan 27 21:42:26 2027 GMT Subject: CN=2D8692867D0888EDE9943E1B31BAED70B4DB4811 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a2:64:8e:73:0a:d5:39:83:4d:f5:55:62:a4: 22:63:1f:8a:5e:dc:15:f3:62:4a:eb:a3:62:42:14: 63:28:a4:86:e1:a6:87:2b:00:78:3b:c9:82:b5:23: ab:73:ba:b6:40:29:c0:76:8a:5b:28:77:ae:36:1f: 18:bf:7d:6e:0b:41:88:a4:45:12:b5:cc:93:c6:21: 4c:da:00:60:f2:86:55:78:ca:e8:f6:f4:8f:43:5c: b5:ef:ea:5b:d1:81:9c:d2:2a:a8:f9:1e:cf:4a:50: d3:33:e0:4f:74:d8:6b:31:58:95:41:98:15:4e:0e: a6:f7:bf:09:9d:52:54:55:d7:05:48:9c:09:09:b7: b0:63:3f:cc:06:67:60:f8:34:a2:55:6f:b5:d3:04: af:82:5d:1c:af:31:aa:6b:6a:af:86:22:7d:d5:b8: 04:08:1e:0d:80:fc:eb:0f:a5:6b:e2:97:21:45:b3: c8:1c:6e:42:d3:b8:f6:e0:a2:60:90:67:39:f1:af: a3:e8:e9:aa:cd:55:46:ff:97:d4:6b:a9:2a:35:47: 44:50:9c:c8:f0:94:95:59:14:47:44:4b:8f:7a:af: f4:ac:d3:d2:47:13:4f:05:3d:5a:6b:c1:15:04:d7: 99:4d:b3:a1:b6:22:96:ff:4f:a8:dd:ad:18:a3:2b: 94:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2D:86:92:86:7D:08:88:ED:E9:94:3E:1B:31:BA:ED:70:B4:DB:48:11 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/DAEE146D6347C36A81F84E6FDD597E91F78FC7EA3270A9258F33E8FA870D2880/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/DAEE146D6347C36A81F84E6FDD597E91F78FC7EA3270A9258F33E8FA870D2880/0/2D8692867D0888EDE9943E1B31BAED70B4DB4811.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.239.216.0/22 IPv6: 2803:3810::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 271839 Signature Algorithm: sha256WithRSAEncryption 6d:77:c1:e4:6a:fe:af:7a:16:0e:a3:e8:e1:df:03:52:27:07: f3:02:8e:e1:9f:09:b5:f9:d6:73:d9:d2:d6:9e:26:62:5a:5e: a0:8d:14:c8:e0:4d:de:de:7e:42:a5:76:65:75:c5:38:65:db: cc:74:71:ac:05:b3:55:97:5d:de:df:2f:15:74:40:cc:5e:17: 19:14:82:39:f6:fd:05:19:fd:33:33:12:ae:eb:06:de:46:a3: cd:39:89:9a:9c:60:c2:47:43:20:72:81:1c:5d:95:d8:de:86: 0c:06:57:1d:52:f4:17:fd:20:9a:54:72:ac:bc:4f:db:47:55: ff:3b:3f:75:61:e2:e6:13:ed:bc:97:d7:42:8c:b5:41:c4:39: 43:eb:a3:f8:23:3d:2b:10:cd:ad:2a:eb:af:99:d4:d4:de:6b: be:4b:e0:77:a6:b1:a2:35:78:23:a5:db:b2:19:26:60:28:24: 5d:ea:8a:00:ea:7a:87:9b:30:d6:57:af:5f:96:1b:7b:c2:0f: ab:17:b4:18:90:30:be:d5:11:92:be:24:cc:d9:4c:e6:26:f6: 6b:61:3a:d9:d8:0f:e5:b1:86:91:1a:2a:b3:cc:8d:0d:b9:c7: 25:ac:be:e1:3f:2f:80:13:e1:e0:ad:f1:70:ec:82:62:38:07: a9:90:c5:27 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUV/6vIjpjYkLLwy2YRJhGqu1Nja0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgyMTM3MjZaFw0yNzAxMjcyMTQyMjZaMDMxMTAvBgNV BAMTKDJEODY5Mjg2N0QwODg4RURFOTk0M0UxQjMxQkFFRDcwQjREQjQ4MTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3omSOcwrVOYNN9VVipCJjH4pe 3BXzYkrro2JCFGMopIbhpocrAHg7yYK1I6tzurZAKcB2ilsod642Hxi/fW4LQYik RRK1zJPGIUzaAGDyhlV4yuj29I9DXLXv6lvRgZzSKqj5Hs9KUNMz4E902GsxWJVB mBVODqb3vwmdUlRV1wVInAkJt7BjP8wGZ2D4NKJVb7XTBK+CXRyvMapraq+GIn3V uAQIHg2A/OsPpWvilyFFs8gcbkLTuPbgomCQZznxr6Po6arNVUb/l9RrqSo1R0RQ nMjwlJVZFEdES496r/Ss09JHE08FPVprwRUE15lNs6G2Ipb/T6jdrRijK5T9AgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQthpKGfQiI7emU Phsxuu1wtNtIETAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvREFFRTE0NkQ2MzQ3QzM2QTgxRjg0RTZG REQ1OTdFOTFGNzhGQzdFQTMyNzBBOTI1OEYzM0U4RkE4NzBEMjg4MC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9EQUVFMTQ2RDYzNDdDMzZBODFGODRFNkZERDU5N0U5MUY3OEZDN0VBMzI3 MEE5MjU4RjMzRThGQTg3MEQyODgwLzAvMkQ4NjkyODY3RDA4ODhFREU5OTQzRTFC MzFCQUVENzBCNERCNDgxMS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLe/YMA0EAgAC MAcDBQAoAzgQMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQl3zANBgkqhkiG9w0B AQsFAAOCAQEAbXfB5Gr+r3oWDqPo4d8DUicH8wKO4Z8JtfnWc9nS1p4mYlpeoI0U yOBN3t5+QqV2ZXXFOGXbzHRxrAWzVZdd3t8vFXRAzF4XGRSCOfb9BRn9MzMSrusG 3kajzTmJmpxgwkdDIHKBHF2V2N6GDAZXHVL0F/0gmlRyrLxP20dV/zs/dWHi5hPt vJfXQoy1QcQ5Q+uj+CM9KxDNrSrrr5nU1N5rvkvgd6axojV4I6XbshkmYCgkXeqK AOp6h5sw1levX5Ybe8IPqxe0GJAwvtURkr4kzNlM5ib2a2E62dgP5bGGkRoqs8yN DbnHJay+4T8vgBPh4K3xcOyCYjgHqZDFJw== -----END CERTIFICATE-----Generated at Mon Mar 2 13:38:00 2026 by rpki-client