$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/624B0D31DA0C267FD24FE5E055AA6297A7C4DF4B.cer File: 624B0D31DA0C267FD24FE5E055AA6297A7C4DF4B.cer (raw, json) Hash identifier: f0173ZwgYV3Y+VVdK4lXPZOS/eBxAqcXIm3vIH0KIaE= Subject key identifier: 62:4B:0D:31:DA:0C:26:7F:D2:4F:E5:E0:55:AA:62:97:A7:C4:DF:4B Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 2C4E4BF69E2DD1B2A676730BECBE7934A6CFE322 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/C1B4353477F39292665AA5EDA653729D45E1477FB2E6301976F4D06C72857D68/0/624B0D31DA0C267FD24FE5E055AA6297A7C4DF4B.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/C1B4353477F39292665AA5EDA653729D45E1477FB2E6301976F4D06C72857D68/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 03:24:22 +0000 Certificate not after: Wed 27 Jan 2027 03:29:22 +0000 Subordinate resources: AS: 267701 IP: 45.236.120.0/24 IP: 2803:74a0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:4e:4b:f6:9e:2d:d1:b2:a6:76:73:0b:ec:be:79:34:a6:cf:e3:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 03:24:22 2026 GMT Not After : Jan 27 03:29:22 2027 GMT Subject: CN=624B0D31DA0C267FD24FE5E055AA6297A7C4DF4B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:a7:2b:30:01:12:e8:02:79:66:a3:07:8e:cb: c8:5b:74:c2:f0:11:69:c4:41:c0:bd:6c:b1:e6:6e: d5:2e:a4:40:7f:74:22:1a:cd:7f:d0:93:6c:22:b5: 4a:ea:d9:be:68:a9:0f:53:c6:6a:97:0b:3e:cb:78: e3:82:cd:62:6b:56:b0:b8:15:19:01:1f:e2:fd:c2: 4d:9f:f3:f3:a0:46:aa:9c:f4:94:d4:72:c5:72:6d: 22:11:cb:24:65:c4:de:1c:52:99:c7:92:1e:13:2f: 4c:ec:74:c7:1d:76:05:b0:f6:29:59:b3:73:3c:aa: 70:12:a9:44:d2:e1:0e:10:39:6c:a3:de:2e:49:1e: 4d:c6:24:be:ca:b3:1d:55:e1:9c:e7:af:b9:53:5d: 1f:3e:7e:68:c4:08:7f:a4:fb:d0:8c:16:53:d9:2a: 88:5f:39:e2:15:76:b9:2f:fd:de:e8:65:3f:97:9c: 65:d7:10:1b:7e:8e:1f:5d:4d:d1:b8:ab:9d:f0:c1: 38:c1:e9:3c:a2:32:6e:56:51:9f:50:e4:bb:35:7f: a5:18:11:a5:5c:c9:08:f9:87:a8:e4:02:22:32:c3: b0:98:7e:7a:12:c9:07:3b:c3:24:40:f7:92:1a:85: bd:b6:d8:bb:31:86:e0:b1:33:6d:50:8b:65:ef:73: 0e:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 62:4B:0D:31:DA:0C:26:7F:D2:4F:E5:E0:55:AA:62:97:A7:C4:DF:4B X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/C1B4353477F39292665AA5EDA653729D45E1477FB2E6301976F4D06C72857D68/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/C1B4353477F39292665AA5EDA653729D45E1477FB2E6301976F4D06C72857D68/0/624B0D31DA0C267FD24FE5E055AA6297A7C4DF4B.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.236.120.0/24 IPv6: 2803:74a0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267701 Signature Algorithm: sha256WithRSAEncryption 2c:aa:64:ce:71:0f:1d:42:05:59:b2:a5:0b:68:b8:fc:60:1b: 98:4a:4a:6c:0a:23:39:fa:9b:e9:99:95:50:e1:6d:b5:c2:9d: 7b:ff:2d:6c:0c:2e:ac:c0:c1:73:05:17:4b:98:14:6f:79:49: f1:f9:4a:67:0c:c1:9d:f1:da:8e:87:f7:0d:34:b0:40:37:15: 50:1f:0b:99:98:02:ca:5b:4f:5f:bf:97:5b:cd:72:d0:3e:02: 3f:3d:b0:c3:54:32:21:8d:7d:77:e6:3c:cb:b7:4b:58:44:ac: d2:a0:e8:9e:41:99:12:75:c5:52:bd:e0:49:ed:27:cd:0f:5d: 76:1d:8a:71:b2:e8:95:bc:d9:c7:ae:46:1b:ed:60:c5:a2:19: 96:76:fa:75:3a:cb:25:26:d4:32:e4:ca:85:09:ea:c4:20:df: ec:15:36:59:17:fd:2d:c7:cd:82:bc:9a:5c:7a:3e:c6:be:bc: f1:82:46:16:db:d6:c9:f9:0c:f1:c8:c5:86:5b:8a:3f:65:21: 21:cd:ca:27:57:f5:96:99:59:0b:1c:5f:af:06:a3:1a:38:37: a8:e8:9e:a6:6c:22:60:f0:d2:d3:df:a2:8b:df:a0:3b:95:7c: 8c:00:60:3b:86:1b:c5:7f:be:5f:1f:78:7e:cb:bd:97:fa:52: 90:30:7e:db -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIULE5L9p4t0bKmdnML7L55NKbP4yIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgwMzI0MjJaFw0yNzAxMjcwMzI5MjJaMDMxMTAvBgNV BAMTKDYyNEIwRDMxREEwQzI2N0ZEMjRGRTVFMDU1QUE2Mjk3QTdDNERGNEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzpyswARLoAnlmoweOy8hbdMLw EWnEQcC9bLHmbtUupEB/dCIazX/Qk2witUrq2b5oqQ9TxmqXCz7LeOOCzWJrVrC4 FRkBH+L9wk2f8/OgRqqc9JTUcsVybSIRyyRlxN4cUpnHkh4TL0zsdMcddgWw9ilZ s3M8qnASqUTS4Q4QOWyj3i5JHk3GJL7Ksx1V4Zznr7lTXR8+fmjECH+k+9CMFlPZ KohfOeIVdrkv/d7oZT+XnGXXEBt+jh9dTdG4q53wwTjB6TyiMm5WUZ9Q5Ls1f6UY EaVcyQj5h6jkAiIyw7CYfnoSyQc7wyRA95Iahb222LsxhuCxM21Qi2Xvcw7dAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRiSw0x2gwmf9JP 5eBVqmKXp8TfSzAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQzFCNDM1MzQ3N0YzOTI5MjY2NUFBNUVE QTY1MzcyOUQ0NUUxNDc3RkIyRTYzMDE5NzZGNEQwNkM3Mjg1N0Q2OC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9DMUI0MzUzNDc3RjM5MjkyNjY1QUE1RURBNjUzNzI5RDQ1RTE0NzdGQjJF NjMwMTk3NkY0RDA2QzcyODU3RDY4LzAvNjI0QjBEMzFEQTBDMjY3RkQyNEZFNUUw NTVBQTYyOTdBN0M0REY0Qi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQALex4MA0EAgAC MAcDBQAoA3SgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQVtTANBgkqhkiG9w0B AQsFAAOCAQEALKpkznEPHUIFWbKlC2i4/GAbmEpKbAojOfqb6ZmVUOFttcKde/8t bAwurMDBcwUXS5gUb3lJ8flKZwzBnfHajof3DTSwQDcVUB8LmZgCyltPX7+XW81y 0D4CPz2ww1QyIY19d+Y8y7dLWESs0qDonkGZEnXFUr3gSe0nzQ9ddh2KcbLolbzZ x65GG+1gxaIZlnb6dTrLJSbUMuTKhQnqxCDf7BU2WRf9LcfNgryaXHo+xr688YJG FtvWyfkM8cjFhluKP2UhIc3KJ1f1lplZCxxfrwajGjg3qOiepmwiYPDS09+ii9+g O5V8jABgO4YbxX++Xx94fsu9l/pSkDB+2w== -----END CERTIFICATE-----Generated at Mon Mar 2 14:43:15 2026 by rpki-client