$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/66F23ED5577522E4A0E713E9342675BADFEF19F5.cer File: 66F23ED5577522E4A0E713E9342675BADFEF19F5.cer (raw, json) Hash identifier: jw4b/NQgabkgtq6kzWEEORaDi7Be7lCTp8LUdFurX2g= Subject key identifier: 66:F2:3E:D5:57:75:22:E4:A0:E7:13:E9:34:26:75:BA:DF:EF:19:F5 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 15D87AA601CC721FDCC9A81484963A9EF1CEBD75 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/8F598647DD0DD4F67EBAD9EE7DBAA52F1B75700077976725355D353DDEAB6B68/0/66F23ED5577522E4A0E713E9342675BADFEF19F5.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/8F598647DD0DD4F67EBAD9EE7DBAA52F1B75700077976725355D353DDEAB6B68/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 27 Jan 2026 17:50:43 +0000 Certificate not after: Tue 26 Jan 2027 17:55:43 +0000 Subordinate resources: AS: 264714 IP: 2801:178::/35 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:d8:7a:a6:01:cc:72:1f:dc:c9:a8:14:84:96:3a:9e:f1:ce:bd:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 27 17:50:43 2026 GMT Not After : Jan 26 17:55:43 2027 GMT Subject: CN=66F23ED5577522E4A0E713E9342675BADFEF19F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f9:fe:0a:c1:68:db:0d:99:1c:7c:01:aa:7c: d9:c2:1b:c3:1e:b3:87:ea:2a:06:9f:8f:c5:79:95: 14:28:62:09:85:f3:1a:6b:87:a9:2b:0f:c4:6f:da: a8:2b:79:4a:41:7a:99:6c:f1:5e:ee:46:2f:17:c6: 5d:e5:42:ec:0b:68:7b:6f:f6:b3:8d:30:24:44:0e: cd:85:bd:e3:20:ab:a3:24:21:c6:48:cd:24:7b:2e: c0:6c:1f:62:c2:e8:50:04:fd:75:e9:82:c3:87:08: 59:bf:9f:30:b6:d8:e1:e2:2f:48:8e:ef:a9:66:e6: e1:83:f2:91:1a:91:d2:05:3e:93:5f:a6:98:39:a8: 67:27:d5:5d:3b:e0:b9:5a:37:88:4e:f8:04:0d:f8: ef:9c:5e:d6:a2:4b:4a:32:77:29:88:8b:23:f1:52: b5:ce:1e:76:9f:ef:fc:c4:ce:2a:76:8b:d9:cf:05: 3a:8b:25:63:04:d2:53:69:66:ff:dd:c8:e4:4b:5f: 4f:6c:be:db:a0:17:81:e7:f9:c8:ac:1f:be:02:63: bc:0d:bd:c6:32:b1:16:d3:ae:47:bd:38:f0:f4:48: 7d:86:b1:dc:48:a8:d3:f4:b0:ec:b2:b5:90:aa:b5: 59:c1:85:36:f1:eb:25:fc:92:92:81:d8:c1:d8:b0: 8b:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 66:F2:3E:D5:57:75:22:E4:A0:E7:13:E9:34:26:75:BA:DF:EF:19:F5 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/8F598647DD0DD4F67EBAD9EE7DBAA52F1B75700077976725355D353DDEAB6B68/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/8F598647DD0DD4F67EBAD9EE7DBAA52F1B75700077976725355D353DDEAB6B68/0/66F23ED5577522E4A0E713E9342675BADFEF19F5.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2801:178::/35 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264714 Signature Algorithm: sha256WithRSAEncryption 1d:f7:7c:0e:37:cf:ee:87:a3:c0:1e:ea:e5:b9:75:cb:dd:11: b6:69:67:d3:56:6b:a8:ea:e4:08:68:c9:ac:5e:56:01:c3:5f: 12:b6:28:1a:18:5d:c8:dc:df:d9:97:0d:c9:29:3b:22:33:df: 0e:6b:d9:0e:72:bd:dd:a9:ee:57:cb:61:b8:27:57:72:f4:0d: 88:80:bb:52:e6:d0:67:9d:6e:9c:cf:f5:1a:97:08:e5:33:73: 34:c7:69:75:d1:d8:f1:fe:22:c0:df:69:66:c8:fb:44:44:10: e6:aa:6f:0e:da:24:54:33:fe:b4:33:c6:ca:2e:d7:d9:b4:9f: 94:8a:26:b4:de:36:84:72:6e:78:9b:e3:b7:9d:da:1c:fb:40: d8:d5:5d:56:05:c4:c3:85:d6:bf:43:d1:fa:0f:e0:ba:a2:e7: 7b:f0:5a:8c:e6:56:b0:36:9e:4a:4c:0a:38:08:4a:32:f1:af: 19:ed:95:b1:fa:64:e8:75:3a:2f:d7:ca:b6:21:dc:95:60:35: 68:f9:81:d2:68:44:c5:be:1e:ba:8e:a3:91:aa:4f:aa:88:07: 77:b8:ff:f1:8d:39:09:19:59:34:17:61:0b:ed:77:21:4d:d6: c2:e7:39:22:09:63:09:23:61:2d:f7:cf:25:69:77:96:5f:cd: 93:52:80:5b -----BEGIN CERTIFICATE----- MIIGmDCCBYCgAwIBAgIUFdh6pgHMch/cyagUhJY6nvHOvXUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjcxNzUwNDNaFw0yNzAxMjYxNzU1NDNaMDMxMTAvBgNV BAMTKDY2RjIzRUQ1NTc3NTIyRTRBMEU3MTNFOTM0MjY3NUJBREZFRjE5RjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs+f4KwWjbDZkcfAGqfNnCG8Me s4fqKgafj8V5lRQoYgmF8xprh6krD8Rv2qgreUpBepls8V7uRi8Xxl3lQuwLaHtv 9rONMCREDs2FveMgq6MkIcZIzSR7LsBsH2LC6FAE/XXpgsOHCFm/nzC22OHiL0iO 76lm5uGD8pEakdIFPpNfppg5qGcn1V074LlaN4hO+AQN+O+cXtaiS0oydymIiyPx UrXOHnaf7/zEzip2i9nPBTqLJWME0lNpZv/dyORLX09svtugF4Hn+cisH74CY7wN vcYysRbTrke9OPD0SH2GsdxIqNP0sOyytZCqtVnBhTbx6yX8kpKB2MHYsIvxAgMB AAGjggOiMIIDnjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRm8j7VV3Ui5KDn E+k0JnW63+8Z9TAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvOEY1OTg2NDdERDBERDRGNjdFQkFEOUVF N0RCQUE1MkYxQjc1NzAwMDc3OTc2NzI1MzU1RDM1M0RERUFCNkI2OC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy84RjU5ODY0N0REMERENEY2N0VCQUQ5RUU3REJBQTUyRjFCNzU3MDAwNzc5 NzY3MjUzNTVEMzUzRERFQUI2QjY4LzAvNjZGMjNFRDU1Nzc1MjJFNEEwRTcxM0U5 MzQyNjc1QkFERkVGMTlGNS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYFKAEBeAAwGgYI KwYBBQUHAQgBAf8ECzAJoAcwBQIDBAoKMA0GCSqGSIb3DQEBCwUAA4IBAQAd93wO N8/uh6PAHurluXXL3RG2aWfTVmuo6uQIaMmsXlYBw18StigaGF3I3N/Zlw3JKTsi M98Oa9kOcr3dqe5Xy2G4J1dy9A2IgLtS5tBnnW6cz/UalwjlM3M0x2l10djx/iLA 32lmyPtERBDmqm8O2iRUM/60M8bKLtfZtJ+Uiia03jaEcm54m+O3ndoc+0DY1V1W BcTDhda/Q9H6D+C6oud78FqM5lawNp5KTAo4CEoy8a8Z7ZWx+mTodTov18q2IdyV YDVo+YHSaETFvh66jqORqk+qiAd3uP/xjTkJGVk0F2EL7XchTdbC5zkiCWMJI2Et 988laXeWX82TUoBb -----END CERTIFICATE-----Generated at Mon Mar 2 15:43:09 2026 by rpki-client