$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B89C5AE85A486E451A9A04540DBDA45D52A5D5.cer File: 30B89C5AE85A486E451A9A04540DBDA45D52A5D5.cer (raw, json) Hash identifier: XByPo40c0aZ08anBe5gDe7DWZz88nty3p5hNv9HN4yg= Subject key identifier: 30:B8:9C:5A:E8:5A:48:6E:45:1A:9A:04:54:0D:BD:A4:5D:52:A5:D5 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 03EB0EDF590829AEFBB6CC791C88E3B7460A8236 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/1A4BED27D4740E14E97C241B5C9D89C0448B69347B4568A603DFFD5B5F72A677/0/30B89C5AE85A486E451A9A04540DBDA45D52A5D5.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/1A4BED27D4740E14E97C241B5C9D89C0448B69347B4568A603DFFD5B5F72A677/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Thu 29 Jan 2026 01:06:40 +0000 Certificate not after: Thu 28 Jan 2027 01:11:40 +0000 Subordinate resources: AS: 266753 IP: 45.232.96.0/22 IP: 2803:7b20::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 05 Mar 2026 11:41:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:eb:0e:df:59:08:29:ae:fb:b6:cc:79:1c:88:e3:b7:46:0a:82:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 29 01:06:40 2026 GMT Not After : Jan 28 01:11:40 2027 GMT Subject: CN=30B89C5AE85A486E451A9A04540DBDA45D52A5D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:fa:01:95:eb:2c:a0:f8:0b:de:8e:f6:13:dd: 3e:25:1a:d9:62:16:21:11:14:70:92:95:00:61:11: 58:ad:59:e3:b4:40:9f:4f:d9:e1:cf:8d:41:a6:85: 03:f1:60:9e:5b:1d:dd:aa:00:1b:98:77:1d:17:49: 63:bc:d2:8c:74:81:7b:a7:64:1b:7b:6e:d0:b8:64: da:93:51:53:ae:99:1c:98:93:4a:b2:33:d6:6c:f2: 34:89:c6:76:2b:80:e8:70:dd:a4:bb:6b:b8:df:58: 51:95:43:b8:9d:29:b3:ca:1b:1a:d9:99:d0:c6:50: d4:32:0a:13:95:d9:0a:52:04:f2:ee:f1:a0:31:e4: 46:45:15:3a:4a:2a:04:c9:51:65:5d:4c:23:c9:81: 07:0a:f3:ca:c0:1d:ba:89:fc:2c:fc:77:d3:d7:44: b3:1e:91:13:0d:2d:cb:aa:b5:39:74:0b:52:5d:92: 6d:cd:23:26:bc:41:7d:2b:32:c1:19:99:a0:58:e4: 77:3c:d7:f9:76:e9:a1:c5:b8:53:5a:d7:cc:4d:2a: 1e:cf:f5:af:b2:f0:e1:cf:6c:7c:bd:72:da:88:e6: c8:39:38:c8:73:89:ab:5a:ea:5e:91:ec:e9:12:b7: b2:16:1f:32:78:00:dc:55:10:66:ba:68:93:ee:ac: cc:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 30:B8:9C:5A:E8:5A:48:6E:45:1A:9A:04:54:0D:BD:A4:5D:52:A5:D5 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1A4BED27D4740E14E97C241B5C9D89C0448B69347B4568A603DFFD5B5F72A677/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1A4BED27D4740E14E97C241B5C9D89C0448B69347B4568A603DFFD5B5F72A677/0/30B89C5AE85A486E451A9A04540DBDA45D52A5D5.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.232.96.0/22 IPv6: 2803:7b20::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266753 Signature Algorithm: sha256WithRSAEncryption 1a:a1:b8:68:38:77:30:25:7d:e9:bd:74:62:9c:ee:eb:6f:27: 65:14:e3:d4:78:bc:0b:e9:92:46:cb:b3:a8:6d:b6:00:bc:96: fc:d6:e6:87:9e:5b:6a:ba:1e:f7:52:05:7b:ba:5d:80:e7:b4: a3:01:54:f8:c9:8b:0c:13:78:2b:e8:3e:9a:39:b8:d7:3f:67: 4a:53:d3:b6:fa:e5:3d:22:a9:dd:b3:90:20:f9:14:55:e1:78: ca:ff:a5:ce:63:da:05:79:10:b4:e8:13:f7:99:80:7f:d0:93: c1:8f:56:c2:fe:5c:97:36:51:ed:fd:a3:ab:c6:3e:05:5f:e4: d4:28:b2:7d:0a:a9:da:4c:af:0b:ef:87:2e:fa:4d:80:f2:bf: 39:41:7d:0a:48:40:07:cb:36:1d:07:8c:57:e3:2a:ce:40:54: 95:9e:f2:6e:64:dc:72:a9:0e:a7:54:7d:92:3b:67:61:ab:ab: 5c:0f:e4:38:87:00:c8:6b:84:c5:d0:54:04:5a:a6:b2:02:a5: e8:0e:4e:6c:e2:33:80:15:ae:bf:94:30:95:74:9d:a7:4d:70: 25:b4:71:f4:e0:fc:e2:3f:ab:19:33:03:aa:29:02:7c:80:6a: 45:a3:fd:95:f5:b3:8f:0f:45:92:c2:79:ad:e3:33:f5:8e:e0: 0c:d4:d8:a9 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUA+sO31kIKa77tsx5HIjjt0YKgjYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjkwMTA2NDBaFw0yNzAxMjgwMTExNDBaMDMxMTAvBgNV BAMTKDMwQjg5QzVBRTg1QTQ4NkU0NTFBOUEwNDU0MERCREE0NUQ1MkE1RDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP+gGV6yyg+AvejvYT3T4lGtli FiERFHCSlQBhEVitWeO0QJ9P2eHPjUGmhQPxYJ5bHd2qABuYdx0XSWO80ox0gXun ZBt7btC4ZNqTUVOumRyYk0qyM9Zs8jSJxnYrgOhw3aS7a7jfWFGVQ7idKbPKGxrZ mdDGUNQyChOV2QpSBPLu8aAx5EZFFTpKKgTJUWVdTCPJgQcK88rAHbqJ/Cz8d9PX RLMekRMNLcuqtTl0C1Jdkm3NIya8QX0rMsEZmaBY5Hc81/l26aHFuFNa18xNKh7P 9a+y8OHPbHy9ctqI5sg5OMhziata6l6R7OkSt7IWHzJ4ANxVEGa6aJPurMzZAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQwuJxa6FpIbkUa mgRUDb2kXVKl1TAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMUE0QkVEMjdENDc0MEUxNEU5N0MyNDFC NUM5RDg5QzA0NDhCNjkzNDdCNDU2OEE2MDNERkZENUI1RjcyQTY3Ny8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8xQTRCRUQyN0Q0NzQwRTE0RTk3QzI0MUI1QzlEODlDMDQ0OEI2OTM0N0I0 NTY4QTYwM0RGRkQ1QjVGNzJBNjc3LzAvMzBCODlDNUFFODVBNDg2RTQ1MUE5QTA0 NTQwREJEQTQ1RDUyQTVENS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLehgMA0EAgAC MAcDBQAoA3sgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQSATANBgkqhkiG9w0B AQsFAAOCAQEAGqG4aDh3MCV96b10Ypzu628nZRTj1Hi8C+mSRsuzqG22ALyW/Nbm h55baroe91IFe7pdgOe0owFU+MmLDBN4K+g+mjm41z9nSlPTtvrlPSKp3bOQIPkU VeF4yv+lzmPaBXkQtOgT95mAf9CTwY9Wwv5clzZR7f2jq8Y+BV/k1CiyfQqp2kyv C++HLvpNgPK/OUF9CkhAB8s2HQeMV+MqzkBUlZ7ybmTccqkOp1R9kjtnYaurXA/k OIcAyGuExdBUBFqmsgKl6A5ObOIzgBWuv5QwlXSdp01wJbRx9OD84j+rGTMDqikC fIBqRaP9lfWzjw9FksJ5reMz9Y7gDNTYqQ== -----END CERTIFICATE-----Generated at Mon Mar 2 13:25:09 2026 by rpki-client