$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/66BA51E5AD3A5CC255E600193211E3B420DACCCB.cer File: 66BA51E5AD3A5CC255E600193211E3B420DACCCB.cer (raw, json) Hash identifier: mQkWmMtzZIUQIBlB42urQvqmsviwahvohYT9+S9q6Qk= Subject key identifier: 66:BA:51:E5:AD:3A:5C:C2:55:E6:00:19:32:11:E3:B4:20:DA:CC:CB Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 4413552CABC14148FA856D5A76976C3305AEA0ED Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/01B9FFB08E5EBB01D7F54A4F3D203CA08AEA4FD2A200E9168C68E53F60DECC47/0/66BA51E5AD3A5CC255E600193211E3B420DACCCB.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/01B9FFB08E5EBB01D7F54A4F3D203CA08AEA4FD2A200E9168C68E53F60DECC47/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 27 Jan 2026 20:06:14 +0000 Certificate not after: Tue 26 Jan 2027 20:11:14 +0000 Subordinate resources: AS: 270003 IP: 24.152.59.0/24 IP: 189.50.210.0/24 IP: 2803:b1e0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:13:55:2c:ab:c1:41:48:fa:85:6d:5a:76:97:6c:33:05:ae:a0:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 27 20:06:14 2026 GMT Not After : Jan 26 20:11:14 2027 GMT Subject: CN=66BA51E5AD3A5CC255E600193211E3B420DACCCB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:08:49:31:6f:c9:04:aa:d3:52:cf:01:18:15: 45:2b:97:44:36:5a:72:db:ff:ca:98:d8:34:d9:cb: 7c:6a:5f:f1:ab:61:f5:f5:e0:a5:2e:9c:dd:d1:01: 08:04:c8:dd:d1:ed:19:ad:5f:20:8e:2a:e2:dd:d3: ef:fe:e5:17:dc:b9:82:95:d7:2f:8b:c1:fe:93:df: 20:96:dc:48:46:f1:dd:1a:06:8c:1b:52:72:ce:53: 28:a8:de:90:50:29:86:7f:11:c4:c5:b2:ef:c6:d6: 01:46:61:7e:2b:56:f0:7f:9e:23:72:c7:21:9a:b5: 13:4f:4a:4b:88:3d:5a:6e:76:35:54:7e:29:0f:13: b6:eb:58:ca:a3:bf:e3:f1:0d:1c:57:ea:ac:8a:27: aa:e7:3e:b6:ab:5d:37:b1:b6:6b:b2:e6:86:17:c5: 43:44:78:1e:f6:6d:bb:fa:e4:9c:75:ce:5d:e9:d0: 9a:f7:6c:6d:cf:95:a1:98:be:06:43:f3:50:72:a6: 03:1b:f7:25:48:45:82:49:65:f3:df:cd:91:5a:4e: 94:31:29:19:f7:ad:51:ad:bf:51:32:9a:41:c9:bb: e9:ce:97:f8:77:84:3e:55:8a:b7:1a:6f:f8:03:f7: 58:02:81:f8:86:cc:e5:5e:01:35:1e:fd:b8:c8:0f: 35:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 66:BA:51:E5:AD:3A:5C:C2:55:E6:00:19:32:11:E3:B4:20:DA:CC:CB X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/01B9FFB08E5EBB01D7F54A4F3D203CA08AEA4FD2A200E9168C68E53F60DECC47/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/01B9FFB08E5EBB01D7F54A4F3D203CA08AEA4FD2A200E9168C68E53F60DECC47/0/66BA51E5AD3A5CC255E600193211E3B420DACCCB.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 24.152.59.0/24 189.50.210.0/24 IPv6: 2803:b1e0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 270003 Signature Algorithm: sha256WithRSAEncryption 57:2e:04:9c:b3:78:d2:7b:c1:45:80:4a:ec:cc:94:22:cd:17: 12:a6:90:20:f3:70:f7:9f:1f:cf:4c:8c:a5:f8:17:32:1b:13: a5:a4:95:2d:27:38:a7:0a:d2:1b:36:ed:20:25:45:19:1f:a2: 62:02:eb:8f:60:34:7b:e7:3e:d0:02:1d:de:38:1e:56:f5:28: d2:19:0c:03:ae:38:cd:53:07:d6:19:f2:4f:6f:ec:d6:ab:38: 35:13:a6:47:a0:9f:e0:e7:44:f3:e3:77:a5:4e:53:f6:e4:79: 44:db:71:1f:97:dc:10:da:58:ad:e6:76:70:65:69:11:a6:6c: 34:e8:12:1e:41:a5:c6:e5:50:12:d6:0a:c3:1c:dc:1c:ae:41: 97:ef:1f:12:1a:58:a8:7b:45:cd:4c:c4:14:14:0d:11:39:3c: 45:33:3a:40:61:92:5d:80:32:b4:38:cb:f4:e1:df:d8:f3:46: 75:3a:2e:62:47:ba:e4:1b:9e:74:98:6d:04:c5:0b:40:ba:a9: 35:e1:0f:10:c8:47:45:ec:68:a2:41:ea:13:3c:f3:1d:14:4b: ef:3a:33:12:64:c2:67:1a:f4:03:06:5b:89:99:12:b8:fd:80: 66:c7:1b:82:71:f2:b5:a6:82:6e:f9:3d:03:76:9e:da:c7:16: e2:41:a5:a6 -----BEGIN CERTIFICATE----- MIIGqzCCBZOgAwIBAgIURBNVLKvBQUj6hW1adpdsMwWuoO0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjcyMDA2MTRaFw0yNzAxMjYyMDExMTRaMDMxMTAvBgNV BAMTKDY2QkE1MUU1QUQzQTVDQzI1NUU2MDAxOTMyMTFFM0I0MjBEQUNDQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoCEkxb8kEqtNSzwEYFUUrl0Q2 WnLb/8qY2DTZy3xqX/GrYfX14KUunN3RAQgEyN3R7RmtXyCOKuLd0+/+5RfcuYKV 1y+Lwf6T3yCW3EhG8d0aBowbUnLOUyio3pBQKYZ/EcTFsu/G1gFGYX4rVvB/niNy xyGatRNPSkuIPVpudjVUfikPE7brWMqjv+PxDRxX6qyKJ6rnPrarXTextmuy5oYX xUNEeB72bbv65Jx1zl3p0Jr3bG3PlaGYvgZD81BypgMb9yVIRYJJZfPfzZFaTpQx KRn3rVGtv1EymkHJu+nOl/h3hD5Vircab/gD91gCgfiGzOVeATUe/bjIDzX1AgMB AAGjggO1MIIDsTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRmulHlrTpcwlXm ABkyEeO0INrMyzAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMDFCOUZGQjA4RTVFQkIwMUQ3RjU0QTRG M0QyMDNDQTA4QUVBNEZEMkEyMDBFOTE2OEM2OEU1M0Y2MERFQ0M0Ny8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8wMUI5RkZCMDhFNUVCQjAxRDdGNTRBNEYzRDIwM0NBMDhBRUE0RkQyQTIw MEU5MTY4QzY4RTUzRjYwREVDQzQ3LzAvNjZCQTUxRTVBRDNBNUNDMjU1RTYwMDE5 MzIxMUUzQjQyMERBQ0NDQi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAGJg7AwQAvTLS MA0EAgACMAcDBQAoA7HgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQeszANBgkq hkiG9w0BAQsFAAOCAQEAVy4EnLN40nvBRYBK7MyUIs0XEqaQIPNw958fz0yMpfgX MhsTpaSVLSc4pwrSGzbtICVFGR+iYgLrj2A0e+c+0AId3jgeVvUo0hkMA644zVMH 1hnyT2/s1qs4NROmR6Cf4OdE8+N3pU5T9uR5RNtxH5fcENpYreZ2cGVpEaZsNOgS HkGlxuVQEtYKwxzcHK5Bl+8fEhpYqHtFzUzEFBQNETk8RTM6QGGSXYAytDjL9OHf 2PNGdTouYke65BuedJhtBMULQLqpNeEPEMhHRexookHqEzzzHRRL7zozEmTCZxr0 AwZbiZkSuP2AZscbgnHytaaCbvk9A3ae2scW4kGlpg== -----END CERTIFICATE-----Generated at Mon Mar 2 15:03:42 2026 by rpki-client