$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/58C76DEB05E1657B955AB41355B108825D2D69BC.cer File: 58C76DEB05E1657B955AB41355B108825D2D69BC.cer (raw, json) Hash identifier: EVxQIbiHec+HqDG54lCaO6ab14n49/yHYf02l85yunw= Subject key identifier: 58:C7:6D:EB:05:E1:65:7B:95:5A:B4:13:55:B1:08:82:5D:2D:69:BC Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 40A905454B5821B0323A87EE1C50A338A801A9A3 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/1B2F1BAE427909763512B7001E694045B9FAB9477FCCC1EE2B6830E0A0838B1A/0/58C76DEB05E1657B955AB41355B108825D2D69BC.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/1B2F1BAE427909763512B7001E694045B9FAB9477FCCC1EE2B6830E0A0838B1A/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 04:29:51 +0000 Certificate not after: Wed 27 Jan 2027 04:34:51 +0000 Subordinate resources: AS: 265620 IP: 45.189.60.0/22 IP: 2806:3a0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:a9:05:45:4b:58:21:b0:32:3a:87:ee:1c:50:a3:38:a8:01:a9:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 04:29:51 2026 GMT Not After : Jan 27 04:34:51 2027 GMT Subject: CN=58C76DEB05E1657B955AB41355B108825D2D69BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:5b:b3:60:eb:ff:e3:73:62:69:a1:3e:9f:0f: b6:c1:6c:c8:2c:4c:a0:99:7b:b5:75:77:1c:d8:26: 2c:92:b8:15:41:e3:d2:d5:79:c8:b3:c9:03:95:c0: 4e:6a:28:a2:d6:4e:11:93:ae:8e:c1:4a:e6:1a:28: f6:07:df:59:97:77:b6:71:1a:b8:ac:3b:5e:d7:e5: 13:82:21:e0:36:90:ed:15:2c:e2:c7:b8:12:2e:61: e8:cb:9d:fa:ff:ba:ce:36:8f:8d:0f:b9:fb:85:1d: f8:35:fe:c5:30:d7:76:ad:e7:f0:ca:7d:c8:3f:ae: bc:dd:d3:6c:fa:67:c7:69:54:03:4d:17:67:1b:bc: 2f:64:db:b3:97:7f:40:db:8e:5c:6e:3a:e0:b9:a4: d8:2b:5d:d5:e4:aa:ed:fd:5e:a6:54:70:64:45:44: 7d:5a:45:10:24:7b:37:e7:45:a4:c8:5b:b6:4b:02: 74:c6:a8:dc:68:d8:7a:e6:cd:69:d8:8f:d8:84:ee: 90:e8:dc:89:77:6a:db:63:16:02:33:d4:27:90:6f: 33:b4:31:a8:1e:37:90:f8:6e:b0:98:1e:e9:a8:c0: 38:8c:ff:21:51:09:8f:0f:34:92:21:e0:a1:9c:08: ed:52:01:46:c6:8a:75:ec:0b:ff:d9:fa:01:4f:81: a6:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 58:C7:6D:EB:05:E1:65:7B:95:5A:B4:13:55:B1:08:82:5D:2D:69:BC X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1B2F1BAE427909763512B7001E694045B9FAB9477FCCC1EE2B6830E0A0838B1A/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1B2F1BAE427909763512B7001E694045B9FAB9477FCCC1EE2B6830E0A0838B1A/0/58C76DEB05E1657B955AB41355B108825D2D69BC.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.189.60.0/22 IPv6: 2806:3a0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265620 Signature Algorithm: sha256WithRSAEncryption 09:9b:78:d7:34:ef:5e:86:fa:47:7d:dc:c2:d1:c5:87:ca:3a: 33:5f:e0:e1:69:89:83:b8:a8:f7:73:48:62:ce:b2:c5:a1:e1: 11:cd:d7:64:d2:04:5a:54:6e:40:c2:d7:87:a2:88:8a:0e:49: e2:17:d8:a6:c3:2e:fc:c0:9a:59:02:71:23:6b:10:07:b3:b3: 1a:9b:35:95:9a:40:d3:c2:8d:fd:52:72:a9:cd:6d:38:47:0e: 3b:59:9a:16:c1:7e:e4:fc:ca:d5:00:44:83:ef:58:be:54:d5: 0b:18:32:bf:1f:51:73:df:92:f3:fd:b9:19:d1:ca:10:ff:2b: e5:86:21:8e:09:8b:e7:63:72:78:27:e7:ba:a6:40:c5:9a:e4: 56:33:25:53:07:27:23:e8:84:e8:97:a7:01:26:24:ff:2c:ec: 34:8b:a2:06:37:7f:f1:10:ed:28:d0:57:15:aa:8a:a6:eb:11: 56:46:5d:81:c7:c0:d3:38:72:a2:4f:72:d9:fc:10:9b:1e:cb: 3a:7b:e4:4a:50:c1:82:c8:ae:cf:0e:e8:48:40:7f:2f:c5:05: 4c:c4:ea:f6:4a:7b:45:87:a9:cf:bf:db:cd:4e:03:34:67:94: f8:42:8c:59:c6:03:6c:ef:88:55:a2:30:e2:cd:10:5b:f2:55: 2b:b9:76:d7 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUQKkFRUtYIbAyOofuHFCjOKgBqaMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgwNDI5NTFaFw0yNzAxMjcwNDM0NTFaMDMxMTAvBgNV BAMTKDU4Qzc2REVCMDVFMTY1N0I5NTVBQjQxMzU1QjEwODgyNUQyRDY5QkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGW7Ng6//jc2JpoT6fD7bBbMgs TKCZe7V1dxzYJiySuBVB49LVecizyQOVwE5qKKLWThGTro7BSuYaKPYH31mXd7Zx GrisO17X5ROCIeA2kO0VLOLHuBIuYejLnfr/us42j40PufuFHfg1/sUw13at5/DK fcg/rrzd02z6Z8dpVANNF2cbvC9k27OXf0DbjlxuOuC5pNgrXdXkqu39XqZUcGRF RH1aRRAkezfnRaTIW7ZLAnTGqNxo2HrmzWnYj9iE7pDo3Il3attjFgIz1CeQbzO0 MageN5D4brCYHumowDiM/yFRCY8PNJIh4KGcCO1SAUbGinXsC//Z+gFPgaYlAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRYx23rBeFle5Va tBNVsQiCXS1pvDAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMUIyRjFCQUU0Mjc5MDk3NjM1MTJCNzAw MUU2OTQwNDVCOUZBQjk0NzdGQ0NDMUVFMkI2ODMwRTBBMDgzOEIxQS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8xQjJGMUJBRTQyNzkwOTc2MzUxMkI3MDAxRTY5NDA0NUI5RkFCOTQ3N0ZD Q0MxRUUyQjY4MzBFMEEwODM4QjFBLzAvNThDNzZERUIwNUUxNjU3Qjk1NUFCNDEz NTVCMTA4ODI1RDJENjlCQy5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLb08MA0EAgAC MAcDBQAoBgOgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQNlDANBgkqhkiG9w0B AQsFAAOCAQEACZt41zTvXob6R33cwtHFh8o6M1/g4WmJg7io93NIYs6yxaHhEc3X ZNIEWlRuQMLXh6KIig5J4hfYpsMu/MCaWQJxI2sQB7OzGps1lZpA08KN/VJyqc1t OEcOO1maFsF+5PzK1QBEg+9YvlTVCxgyvx9Rc9+S8/25GdHKEP8r5YYhjgmL52Ny eCfnuqZAxZrkVjMlUwcnI+iE6JenASYk/yzsNIuiBjd/8RDtKNBXFaqKpusRVkZd gcfA0zhyok9y2fwQmx7LOnvkSlDBgsiuzw7oSEB/L8UFTMTq9kp7RYepz7/bzU4D NGeU+EKMWcYDbO+IVaIw4s0QW/JVK7l21w== -----END CERTIFICATE-----Generated at Mon Mar 2 15:41:33 2026 by rpki-client