$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/66D7CB6044C192E36153B39F7AF75BC83FF1DCB6.cer File: 66D7CB6044C192E36153B39F7AF75BC83FF1DCB6.cer (raw, json) Hash identifier: 43B8QzoCWnH/G0NVirmeQIGmnyA7/ZtyrgbWzlHdOQA= Subject key identifier: 66:D7:CB:60:44:C1:92:E3:61:53:B3:9F:7A:F7:5B:C8:3F:F1:DC:B6 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 1D361AA5089692B3446DF3BCEC8425D155771F5A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/7974DF2B4FA6EB74EEC85173F0BA46BD3C1FFD6F1C6F593B41350EA7A5565E78/0/66D7CB6044C192E36153B39F7AF75BC83FF1DCB6.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/7974DF2B4FA6EB74EEC85173F0BA46BD3C1FFD6F1C6F593B41350EA7A5565E78/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 10:04:54 +0000 Certificate not after: Wed 27 Jan 2027 10:09:54 +0000 Subordinate resources: AS: 265689 IP: 160.238.204.0/22 IP: 2803:35c0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 05 Mar 2026 11:41:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:36:1a:a5:08:96:92:b3:44:6d:f3:bc:ec:84:25:d1:55:77:1f:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 10:04:54 2026 GMT Not After : Jan 27 10:09:54 2027 GMT Subject: CN=66D7CB6044C192E36153B39F7AF75BC83FF1DCB6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:13:fc:66:8d:39:0a:df:c0:14:f9:d7:e9:c2: 21:04:98:73:c4:a0:f7:ff:2d:39:08:8d:dc:04:00: 37:4e:36:a2:10:ba:a1:94:fb:27:3f:48:21:0c:9f: 71:7c:db:01:07:dd:86:3a:63:02:62:2d:f4:20:67: aa:fa:20:82:14:65:4a:ac:28:df:d7:fe:10:84:a0: 18:4b:1d:11:5d:9a:ef:ff:c2:6d:60:bd:f6:da:3f: 05:f3:18:98:1f:72:1c:a3:31:1b:b3:de:83:16:f8: fd:10:60:77:5d:a7:d7:dd:f6:7a:27:c1:a1:ee:68: dd:da:97:31:05:b2:95:16:d1:0d:73:d1:83:f8:c1: d4:58:4d:60:97:84:c3:a8:25:66:cc:4d:ba:67:74: b4:ad:6b:65:48:45:16:de:68:ef:3c:86:bd:a9:56: 2d:5a:cb:f4:46:ed:06:7c:04:db:6a:e9:7c:3b:52: b9:63:0c:ed:60:3f:04:9c:e2:a7:f9:27:92:19:36: 23:8f:bf:b2:fe:a4:95:df:0e:ec:6c:99:8e:af:28: a0:b0:17:5a:0d:60:9b:1b:af:fb:10:5f:0d:2b:cc: 81:28:fb:3a:6c:98:5d:c8:12:a1:15:99:4e:75:14: 04:16:56:a2:e5:de:b2:56:d8:a3:87:a3:d5:f9:5d: a2:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 66:D7:CB:60:44:C1:92:E3:61:53:B3:9F:7A:F7:5B:C8:3F:F1:DC:B6 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/7974DF2B4FA6EB74EEC85173F0BA46BD3C1FFD6F1C6F593B41350EA7A5565E78/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/7974DF2B4FA6EB74EEC85173F0BA46BD3C1FFD6F1C6F593B41350EA7A5565E78/0/66D7CB6044C192E36153B39F7AF75BC83FF1DCB6.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.238.204.0/22 IPv6: 2803:35c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265689 Signature Algorithm: sha256WithRSAEncryption 06:7f:0d:af:9f:8e:93:8e:1c:b1:cb:f8:58:84:6a:55:78:b4: 43:be:3a:e0:6c:31:ef:20:33:19:6b:11:4f:b5:c7:bc:0a:6e: e5:19:fd:e6:75:ed:d3:3e:d2:b1:5d:80:4f:84:65:cb:7c:00: 0b:5c:b4:e5:3e:88:52:dd:81:80:71:50:ff:a8:af:9e:09:47: 37:c6:66:00:95:71:33:91:cb:d7:39:97:a7:97:2c:98:f1:94: c6:2a:28:61:62:d0:cc:59:10:06:92:b5:e3:0f:8e:98:69:1b: 1d:a6:43:09:36:6c:42:82:45:5b:e7:16:f1:a4:53:db:6e:1f: 63:70:ec:b1:26:50:47:98:02:1a:7b:8b:ee:31:24:69:8e:ef: 15:2d:3a:d2:bb:50:0b:3d:78:59:b7:03:0b:69:4d:94:ac:79: dc:a1:7d:7e:d8:b0:13:80:22:d3:f7:4e:0e:38:b5:05:f3:f0: f7:cc:f1:ca:2d:85:0d:a8:a0:33:77:74:2f:08:77:a4:05:80: 0f:18:55:8e:75:fc:85:87:01:67:98:86:2c:8c:1d:17:4d:60: ab:73:67:50:6b:84:a6:62:b6:56:33:22:77:24:70:da:8d:6f: 6b:ec:a8:6c:cb:bf:02:d1:1e:00:e3:a0:9e:18:e1:9a:c6:fd: f4:86:c8:32 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUHTYapQiWkrNEbfO87IQl0VV3H1owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgxMDA0NTRaFw0yNzAxMjcxMDA5NTRaMDMxMTAvBgNV BAMTKDY2RDdDQjYwNDRDMTkyRTM2MTUzQjM5RjdBRjc1QkM4M0ZGMURDQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvE/xmjTkK38AU+dfpwiEEmHPE oPf/LTkIjdwEADdONqIQuqGU+yc/SCEMn3F82wEH3YY6YwJiLfQgZ6r6IIIUZUqs KN/X/hCEoBhLHRFdmu//wm1gvfbaPwXzGJgfchyjMRuz3oMW+P0QYHddp9fd9non waHuaN3alzEFspUW0Q1z0YP4wdRYTWCXhMOoJWbMTbpndLSta2VIRRbeaO88hr2p Vi1ay/RG7QZ8BNtq6Xw7UrljDO1gPwSc4qf5J5IZNiOPv7L+pJXfDuxsmY6vKKCw F1oNYJsbr/sQXw0rzIEo+zpsmF3IEqEVmU51FAQWVqLl3rJW2KOHo9X5XaJpAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRm18tgRMGS42FT s59691vIP/HctjAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNzk3NERGMkI0RkE2RUI3NEVFQzg1MTcz RjBCQTQ2QkQzQzFGRkQ2RjFDNkY1OTNCNDEzNTBFQTdBNTU2NUU3OC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy83OTc0REYyQjRGQTZFQjc0RUVDODUxNzNGMEJBNDZCRDNDMUZGRDZGMUM2 RjU5M0I0MTM1MEVBN0E1NTY1RTc4LzAvNjZEN0NCNjA0NEMxOTJFMzYxNTNCMzlG N0FGNzVCQzgzRkYxRENCNi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCoO7MMA0EAgAC MAcDBQAoAzXAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQN2TANBgkqhkiG9w0B AQsFAAOCAQEABn8Nr5+Ok44cscv4WIRqVXi0Q7464Gwx7yAzGWsRT7XHvApu5Rn9 5nXt0z7SsV2AT4Rly3wAC1y05T6IUt2BgHFQ/6ivnglHN8ZmAJVxM5HL1zmXp5cs mPGUxiooYWLQzFkQBpK14w+OmGkbHaZDCTZsQoJFW+cW8aRT224fY3DssSZQR5gC GnuL7jEkaY7vFS060rtQCz14WbcDC2lNlKx53KF9ftiwE4Ai0/dODji1BfPw98zx yi2FDaigM3d0Lwh3pAWADxhVjnX8hYcBZ5iGLIwdF01gq3NnUGuEpmK2VjMidyRw 2o1va+yobMu/AtEeAOOgnhjhmsb99IbIMg== -----END CERTIFICATE-----Generated at Mon Mar 2 12:28:18 2026 by rpki-client