$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42088D6FEC3FD14B71DEDB78860C90D825571466.cer File: 42088D6FEC3FD14B71DEDB78860C90D825571466.cer (raw, json) Hash identifier: oN7u8v4C5R5SGBaDSz8lNAfrU42pYvbHoTzoxu3P3lw= Subject key identifier: 42:08:8D:6F:EC:3F:D1:4B:71:DE:DB:78:86:0C:90:D8:25:57:14:66 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 55A86C8FE551099EDB394447D0FB1613090A4DED Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/5E821E6B0754F2B4CE47521F21E3E73CB7AA22580B95F9C727AB6760F25A5028/0/42088D6FEC3FD14B71DEDB78860C90D825571466.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/5E821E6B0754F2B4CE47521F21E3E73CB7AA22580B95F9C727AB6760F25A5028/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 13:49:54 +0000 Certificate not after: Wed 27 Jan 2027 13:54:54 +0000 Subordinate resources: AS: 272394 -- 272395 IP: 45.68.64.0/22 IP: 2806:424::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 05 Mar 2026 11:41:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:a8:6c:8f:e5:51:09:9e:db:39:44:47:d0:fb:16:13:09:0a:4d:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 13:49:54 2026 GMT Not After : Jan 27 13:54:54 2027 GMT Subject: CN=42088D6FEC3FD14B71DEDB78860C90D825571466 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:fd:3f:55:1a:7e:a1:c4:12:49:da:9d:66:5f: a4:aa:e8:dc:36:48:cb:8c:c4:41:fb:16:93:e2:14: 87:c1:80:e6:ee:ec:3f:db:d8:71:45:a1:b8:1c:3e: 2b:a2:35:b0:8a:6d:07:39:e1:04:6e:46:68:21:a4: bc:ff:63:d4:cf:2e:61:67:5e:1c:02:77:59:00:7b: e3:b8:3d:cc:8a:2a:85:5e:90:f9:a5:6b:bb:87:1a: 10:48:e4:a6:fe:b2:f2:62:a1:21:8c:f4:90:53:63: 8f:43:2d:b7:23:9e:59:27:f2:ab:1c:e1:11:03:97: 34:4a:16:a6:fd:aa:03:a6:9c:10:ae:33:94:cf:ed: e8:ba:7a:e4:90:a4:a3:cb:88:4c:63:c3:3a:e6:ac: df:8c:05:30:6a:98:53:51:a8:05:c8:4a:fc:91:2f: 57:c6:01:95:40:f4:33:af:b8:53:c7:86:5a:e1:4c: 58:5e:ac:d9:72:a2:46:05:94:f5:e7:0b:1a:ff:dd: 7e:21:16:28:df:52:8c:12:44:75:f2:92:eb:7a:be: 94:34:3b:ca:9e:2f:af:b3:62:7b:8f:b4:76:9f:8e: c3:95:53:b2:dd:a5:d1:3f:bf:b6:03:ca:82:92:70: 73:91:5a:eb:59:11:ad:c7:bc:15:4c:17:87:b7:a1: 07:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 42:08:8D:6F:EC:3F:D1:4B:71:DE:DB:78:86:0C:90:D8:25:57:14:66 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/5E821E6B0754F2B4CE47521F21E3E73CB7AA22580B95F9C727AB6760F25A5028/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/5E821E6B0754F2B4CE47521F21E3E73CB7AA22580B95F9C727AB6760F25A5028/0/42088D6FEC3FD14B71DEDB78860C90D825571466.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.68.64.0/22 IPv6: 2806:424::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 272394-272395 Signature Algorithm: sha256WithRSAEncryption 53:c7:00:f3:5e:98:6c:e7:15:b0:fb:f1:27:3a:4b:e0:91:d6: a1:ff:fa:e3:6d:ea:50:6d:5e:02:66:22:da:88:4a:dd:44:aa: 57:8e:23:71:6d:af:c1:0d:fd:20:f2:29:9e:38:49:e5:c2:d1: 68:df:8f:47:e4:84:61:eb:d5:30:78:8d:70:c8:4d:33:a4:b2: 69:ce:d7:f6:26:09:74:94:ce:72:c0:b5:45:93:6d:72:0d:78: ff:fb:6e:42:26:98:f8:f3:8d:f0:ff:07:21:85:7b:e9:63:96: fc:ff:8b:01:66:1f:84:54:1f:25:ed:a3:d0:ca:ed:77:d2:92: 19:a2:07:c9:0e:84:45:0b:93:2c:37:b0:d1:2e:bd:1d:67:2d: ba:ff:88:d5:63:d6:32:34:dc:13:9e:5d:cd:c2:fb:ef:25:22: 41:4b:e7:29:37:24:75:f1:40:37:a4:c5:b2:d2:03:8e:fa:21: 6a:d1:71:c3:49:f6:b2:18:0b:5f:29:fc:eb:3f:7c:9e:0b:c3: 19:47:5d:a6:bb:d5:d1:39:0b:5d:ff:f6:15:7d:5e:83:1e:dc: 4a:3a:c3:06:84:17:3f:c3:82:3e:c7:5f:5f:a8:13:dc:52:10: 46:52:00:ec:14:6d:7a:f1:bb:2e:36:bf:10:3f:57:eb:d8:b5: 5f:7a:d5:80 -----BEGIN CERTIFICATE----- MIIGrDCCBZSgAwIBAgIUVahsj+VRCZ7bOURH0PsWEwkKTe0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgxMzQ5NTRaFw0yNzAxMjcxMzU0NTRaMDMxMTAvBgNV BAMTKDQyMDg4RDZGRUMzRkQxNEI3MURFREI3ODg2MEM5MEQ4MjU1NzE0NjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU/T9VGn6hxBJJ2p1mX6Sq6Nw2 SMuMxEH7FpPiFIfBgObu7D/b2HFFobgcPiuiNbCKbQc54QRuRmghpLz/Y9TPLmFn XhwCd1kAe+O4PcyKKoVekPmla7uHGhBI5Kb+svJioSGM9JBTY49DLbcjnlkn8qsc 4REDlzRKFqb9qgOmnBCuM5TP7ei6euSQpKPLiExjwzrmrN+MBTBqmFNRqAXISvyR L1fGAZVA9DOvuFPHhlrhTFherNlyokYFlPXnCxr/3X4hFijfUowSRHXykut6vpQ0 O8qeL6+zYnuPtHafjsOVU7LdpdE/v7YDyoKScHORWutZEa3HvBVMF4e3oQc3AgMB AAGjggO2MIIDsjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRCCI1v7D/RS3He 23iGDJDYJVcUZjAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNUU4MjFFNkIwNzU0RjJCNENFNDc1MjFG MjFFM0U3M0NCN0FBMjI1ODBCOTVGOUM3MjdBQjY3NjBGMjVBNTAyOC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy81RTgyMUU2QjA3NTRGMkI0Q0U0NzUyMUYyMUUzRTczQ0I3QUEyMjU4MEI5 NUY5QzcyN0FCNjc2MEYyNUE1MDI4LzAvNDIwODhENkZFQzNGRDE0QjcxREVEQjc4 ODYwQzkwRDgyNTU3MTQ2Ni5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLURAMA0EAgAC MAcDBQAoBgQkMCEGCCsGAQUFBwEIAQH/BBIwEKAOMAwwCgIDBCgKAgMEKAswDQYJ KoZIhvcNAQELBQADggEBAFPHAPNemGznFbD78Sc6S+CR1qH/+uNt6lBtXgJmItqI St1EqleOI3Ftr8EN/SDyKZ44SeXC0Wjfj0fkhGHr1TB4jXDITTOksmnO1/YmCXSU znLAtUWTbXINeP/7bkImmPjzjfD/ByGFe+ljlvz/iwFmH4RUHyXto9DK7XfSkhmi B8kOhEULkyw3sNEuvR1nLbr/iNVj1jI03BOeXc3C++8lIkFL5yk3JHXxQDekxbLS A476IWrRccNJ9rIYC18p/Os/fJ4LwxlHXaa71dE5C13/9hV9XoMe3Eo6wwaEFz/D gj7HX1+oE9xSEEZSAOwUbXrxuy42vxA/V+vYtV961YA= -----END CERTIFICATE-----Generated at Mon Mar 2 13:25:17 2026 by rpki-client