$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4D54F92C0C41A477E9B5122A4BE2DFE83EED8AC1.cer File: 4D54F92C0C41A477E9B5122A4BE2DFE83EED8AC1.cer (raw, json) Hash identifier: 80gul1KIdf0s7iT/hZriDk8Qi3ObuykiOMcOBvXbq/M= Subject key identifier: 4D:54:F9:2C:0C:41:A4:77:E9:B5:12:2A:4B:E2:DF:E8:3E:ED:8A:C1 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 17A75201516305D33B5E32EE0D4948EDF42CE52B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/228A1144F80DF4A77C0E4FAC62CB4207C688A7FC94E852E8C58941408A68ADAE/0/4D54F92C0C41A477E9B5122A4BE2DFE83EED8AC1.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/228A1144F80DF4A77C0E4FAC62CB4207C688A7FC94E852E8C58941408A68ADAE/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Thu 29 Jan 2026 03:49:04 +0000 Certificate not after: Thu 28 Jan 2027 03:54:04 +0000 Subordinate resources: AS: 266878 IP: 45.160.72.0/22 IP: 2803:baa0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 05 Mar 2026 11:41:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:a7:52:01:51:63:05:d3:3b:5e:32:ee:0d:49:48:ed:f4:2c:e5:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 29 03:49:04 2026 GMT Not After : Jan 28 03:54:04 2027 GMT Subject: CN=4D54F92C0C41A477E9B5122A4BE2DFE83EED8AC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:80:66:d0:1b:55:05:be:74:69:e3:d5:33:26: e5:f2:d0:f0:04:2f:33:22:67:0c:06:21:ff:06:0a: 5a:02:29:1a:7f:5b:5a:b7:dc:e0:d1:65:a2:04:2b: 61:d6:d6:f2:00:41:48:77:b7:70:0a:ab:55:9f:65: 09:71:ab:10:fd:30:c2:f8:59:28:3c:ec:cf:33:2c: 1d:72:48:a7:ff:90:58:9d:e0:0b:95:4c:b4:ee:2d: 47:50:c1:ae:ac:30:7d:45:f1:e9:6f:48:0d:50:9f: 3e:69:25:07:3d:b4:be:a2:2f:8e:a4:4e:56:2c:a1: a9:f7:f1:e1:22:7a:c4:cd:a9:c5:9d:cb:89:56:0f: 18:73:c7:12:07:f0:49:b6:27:5d:df:11:ba:59:77: a4:92:e5:de:f0:39:4c:e3:11:2f:2a:50:26:ce:2a: cd:91:ee:ec:13:a7:72:3d:ff:26:21:f0:7a:cb:2c: 42:8e:8e:1b:c2:2e:6e:9c:5d:06:44:d8:3c:a0:e7: 99:a0:99:ba:b5:6d:bc:f5:9c:60:8d:08:cc:d9:e3: 4a:4c:cf:cf:8f:13:83:c8:b4:3c:56:ec:1d:3d:55: ee:10:9b:9c:25:5a:a4:77:a6:6d:7f:98:8d:d5:e0: bb:47:ac:d6:2d:26:a8:68:c7:17:0a:0e:cb:fb:b5: 65:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4D:54:F9:2C:0C:41:A4:77:E9:B5:12:2A:4B:E2:DF:E8:3E:ED:8A:C1 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/228A1144F80DF4A77C0E4FAC62CB4207C688A7FC94E852E8C58941408A68ADAE/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/228A1144F80DF4A77C0E4FAC62CB4207C688A7FC94E852E8C58941408A68ADAE/0/4D54F92C0C41A477E9B5122A4BE2DFE83EED8AC1.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.160.72.0/22 IPv6: 2803:baa0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266878 Signature Algorithm: sha256WithRSAEncryption 6a:30:ec:b2:57:5c:48:d4:03:a2:8a:8d:73:0d:34:24:72:7a: 7a:e0:17:58:22:f3:06:9c:26:7a:9a:96:01:c0:be:d9:cd:05: 57:a4:5b:1b:3f:df:48:ee:a8:9b:fd:f1:95:91:03:26:38:cb: a4:93:59:54:aa:a7:8f:fb:e3:c8:2c:8b:47:f0:89:71:70:8e: fb:d6:dc:d6:dc:22:03:d4:ab:5d:f7:5d:c6:81:e9:05:50:f7: de:d4:72:32:9b:91:b1:e1:de:b9:c8:12:07:c2:e9:ad:89:be: dd:4e:06:e5:d5:c2:21:53:dd:68:e6:83:dd:72:c8:af:94:24: b5:b5:7d:c2:cb:c8:4b:db:ea:30:17:53:db:7d:21:57:c3:89: 04:e7:d4:e6:b3:83:b0:c7:0e:f6:64:f0:5d:85:96:98:ba:d1: 74:5f:f7:f2:09:f3:f3:25:ed:fb:66:86:e5:69:5c:32:83:72: 1c:1e:72:e5:eb:0e:3e:0d:7d:d7:a4:fb:ba:40:f1:e3:1a:b1: 9c:dd:a1:a8:12:ad:e0:f3:fd:1a:4d:82:f3:35:6a:d7:85:f9: a5:8b:be:65:87:be:e8:a0:eb:0f:80:03:b0:7e:2c:a5:d5:fc: 0b:90:66:1d:47:99:24:e2:a0:4e:b0:6b:cd:df:21:4c:6f:d4: 3b:bc:0c:cc -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUF6dSAVFjBdM7XjLuDUlI7fQs5SswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjkwMzQ5MDRaFw0yNzAxMjgwMzU0MDRaMDMxMTAvBgNV BAMTKDRENTRGOTJDMEM0MUE0NzdFOUI1MTIyQTRCRTJERkU4M0VFRDhBQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbgGbQG1UFvnRp49UzJuXy0PAE LzMiZwwGIf8GCloCKRp/W1q33ODRZaIEK2HW1vIAQUh3t3AKq1WfZQlxqxD9MML4 WSg87M8zLB1ySKf/kFid4AuVTLTuLUdQwa6sMH1F8elvSA1Qnz5pJQc9tL6iL46k TlYsoan38eEiesTNqcWdy4lWDxhzxxIH8Em2J13fEbpZd6SS5d7wOUzjES8qUCbO Ks2R7uwTp3I9/yYh8HrLLEKOjhvCLm6cXQZE2Dyg55mgmbq1bbz1nGCNCMzZ40pM z8+PE4PItDxW7B09Ve4Qm5wlWqR3pm1/mI3V4LtHrNYtJqhoxxcKDsv7tWXBAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRNVPksDEGkd+m1 EipL4t/oPu2KwTAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMjI4QTExNDRGODBERjRBNzdDMEU0RkFD NjJDQjQyMDdDNjg4QTdGQzk0RTg1MkU4QzU4OTQxNDA4QTY4QURBRS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8yMjhBMTE0NEY4MERGNEE3N0MwRTRGQUM2MkNCNDIwN0M2ODhBN0ZDOTRF ODUyRThDNTg5NDE0MDhBNjhBREFFLzAvNEQ1NEY5MkMwQzQxQTQ3N0U5QjUxMjJB NEJFMkRGRTgzRUVEOEFDMS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLaBIMA0EAgAC MAcDBQAoA7qgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQSfjANBgkqhkiG9w0B AQsFAAOCAQEAajDssldcSNQDooqNcw00JHJ6euAXWCLzBpwmepqWAcC+2c0FV6Rb Gz/fSO6om/3xlZEDJjjLpJNZVKqnj/vjyCyLR/CJcXCO+9bc1twiA9SrXfddxoHp BVD33tRyMpuRseHeucgSB8LprYm+3U4G5dXCIVPdaOaD3XLIr5QktbV9wsvIS9vq MBdT230hV8OJBOfU5rODsMcO9mTwXYWWmLrRdF/38gnz8yXt+2aG5WlcMoNyHB5y 5esOPg1916T7ukDx4xqxnN2hqBKt4PP9Gk2C8zVq14X5pYu+ZYe+6KDrD4ADsH4s pdX8C5BmHUeZJOKgTrBrzd8hTG/UO7wMzA== -----END CERTIFICATE-----Generated at Mon Mar 2 12:44:33 2026 by rpki-client