$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/67C6935F7C38762C3BEE650617B03328B96FF014.cer File: 67C6935F7C38762C3BEE650617B03328B96FF014.cer (raw, json) Hash identifier: pONdt8HQR2/PqEvS5GMgxw2I2T8oUYUeZy6T8ICWuQw= Subject key identifier: 67:C6:93:5F:7C:38:76:2C:3B:EE:65:06:17:B0:33:28:B9:6F:F0:14 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 48E99B868437800D72CA3D3C22415D845E8ECD25 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/1244569586B78FBA22BD188209EE71ED9A1EBB587A0C94B828A92E7223D62984/0/67C6935F7C38762C3BEE650617B03328B96FF014.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/1244569586B78FBA22BD188209EE71ED9A1EBB587A0C94B828A92E7223D62984/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 02:57:00 +0000 Certificate not after: Wed 27 Jan 2027 03:02:00 +0000 Subordinate resources: AS: 263195 IP: 179.42.172.0/22 IP: 2803:ac80::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 05 Mar 2026 11:41:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:e9:9b:86:84:37:80:0d:72:ca:3d:3c:22:41:5d:84:5e:8e:cd:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 02:57:00 2026 GMT Not After : Jan 27 03:02:00 2027 GMT Subject: CN=67C6935F7C38762C3BEE650617B03328B96FF014 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:eb:31:ad:ea:ff:35:4e:05:e3:30:43:b9:85: 97:fe:f8:ac:b4:b0:99:dc:35:37:1b:8a:92:80:b5: a5:4f:de:06:8a:ed:6a:5c:b1:73:d5:59:0e:49:4e: fa:ff:4b:27:2a:51:c5:ba:80:43:2c:b3:c1:ee:bf: 0d:ff:bb:80:e0:33:99:6a:78:58:e6:d2:ce:1b:8f: 03:da:c6:a1:6b:76:dd:92:08:54:3e:04:c6:c4:0a: 78:33:80:3b:88:f6:c9:e2:71:b5:93:7b:93:52:7c: 02:ff:d2:77:01:8c:bd:88:8c:8e:09:cd:48:0f:5f: b8:bd:17:c6:72:58:85:1e:d5:a9:7c:7e:03:66:54: b3:39:d2:ff:03:96:99:b1:e4:5f:d4:0d:26:68:64: 5b:a8:d3:8a:f5:f7:d5:f2:ef:fa:b0:8b:30:5a:93: 8f:f1:df:36:8a:c9:cc:0d:d8:8e:5d:3d:df:09:b5: 92:6e:1e:64:d7:ab:93:0d:b0:29:6c:26:dc:21:3a: 85:46:68:c5:97:7f:0b:1d:f7:dd:4d:35:fa:bc:75: 99:56:44:42:01:58:9f:8f:2b:29:85:74:b6:6d:4a: cf:bc:22:a9:df:74:65:b2:29:1e:38:9d:60:04:4e: 8c:9a:e8:ab:d2:19:50:8b:70:90:f0:88:e1:9c:a2: f4:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 67:C6:93:5F:7C:38:76:2C:3B:EE:65:06:17:B0:33:28:B9:6F:F0:14 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1244569586B78FBA22BD188209EE71ED9A1EBB587A0C94B828A92E7223D62984/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1244569586B78FBA22BD188209EE71ED9A1EBB587A0C94B828A92E7223D62984/0/67C6935F7C38762C3BEE650617B03328B96FF014.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 179.42.172.0/22 IPv6: 2803:ac80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263195 Signature Algorithm: sha256WithRSAEncryption 86:bf:c6:9f:e6:d5:ca:58:75:dd:90:de:84:9f:6d:85:57:cf: 8c:6f:29:7f:1b:68:cb:17:eb:82:ec:9c:86:27:8d:f8:3a:a3: fe:2e:68:6e:62:2a:f6:a9:96:59:2c:d6:19:6b:db:6a:a6:81: de:04:58:77:73:d8:6b:e7:7c:3c:f9:9d:32:16:ee:2f:e1:ee: 94:02:2c:43:c8:6f:b0:21:be:52:2b:02:1a:53:ff:5c:7b:69: a3:7a:b3:f6:a8:c8:50:12:3e:c2:c9:08:4f:3e:e9:14:e1:6d: aa:62:d2:12:ad:de:7f:67:c4:6c:2f:e8:2e:cd:75:48:7d:1f: f3:9b:19:76:f8:bb:5e:82:42:c8:a4:1c:52:1d:2e:fe:45:0a: 65:44:f0:f8:16:60:4e:ab:e2:5c:b3:c5:ae:d9:d6:21:cf:c6: 72:1a:bf:68:b1:b1:4c:66:8c:2e:e3:fd:9b:59:67:d1:e0:0d: 68:af:49:e9:d5:3b:0a:d6:2b:a4:ca:bb:cc:de:0f:ec:2c:57: 0d:a2:b2:38:9e:0f:c4:ff:3f:68:4c:23:eb:50:d4:78:1a:09: 2d:a9:d4:e6:d8:e7:60:7e:d4:0e:65:89:10:bd:a1:d3:a0:3c: 71:48:17:1a:68:f0:18:5b:53:02:5d:5a:a0:0d:c0:a3:1c:73: b1:bc:42:19 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUSOmbhoQ3gA1yyj08IkFdhF6OzSUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgwMjU3MDBaFw0yNzAxMjcwMzAyMDBaMDMxMTAvBgNV BAMTKDY3QzY5MzVGN0MzODc2MkMzQkVFNjUwNjE3QjAzMzI4Qjk2RkYwMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy6zGt6v81TgXjMEO5hZf++Ky0 sJncNTcbipKAtaVP3gaK7WpcsXPVWQ5JTvr/SycqUcW6gEMss8Huvw3/u4DgM5lq eFjm0s4bjwPaxqFrdt2SCFQ+BMbECngzgDuI9snicbWTe5NSfAL/0ncBjL2IjI4J zUgPX7i9F8ZyWIUe1al8fgNmVLM50v8Dlpmx5F/UDSZoZFuo04r199Xy7/qwizBa k4/x3zaKycwN2I5dPd8JtZJuHmTXq5MNsClsJtwhOoVGaMWXfwsd991NNfq8dZlW REIBWJ+PKymFdLZtSs+8IqnfdGWyKR44nWAEToya6KvSGVCLcJDwiOGcovSlAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRnxpNffDh2LDvu ZQYXsDMouW/wFDAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMTI0NDU2OTU4NkI3OEZCQTIyQkQxODgy MDlFRTcxRUQ5QTFFQkI1ODdBMEM5NEI4MjhBOTJFNzIyM0Q2Mjk4NC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8xMjQ0NTY5NTg2Qjc4RkJBMjJCRDE4ODIwOUVFNzFFRDlBMUVCQjU4N0Ew Qzk0QjgyOEE5MkU3MjIzRDYyOTg0LzAvNjdDNjkzNUY3QzM4NzYyQzNCRUU2NTA2 MTdCMDMzMjhCOTZGRjAxNC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCsyqsMA0EAgAC MAcDBQAoA6yAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQEGzANBgkqhkiG9w0B AQsFAAOCAQEAhr/Gn+bVylh13ZDehJ9thVfPjG8pfxtoyxfrguychieN+Dqj/i5o bmIq9qmWWSzWGWvbaqaB3gRYd3PYa+d8PPmdMhbuL+HulAIsQ8hvsCG+UisCGlP/ XHtpo3qz9qjIUBI+wskITz7pFOFtqmLSEq3ef2fEbC/oLs11SH0f85sZdvi7XoJC yKQcUh0u/kUKZUTw+BZgTqviXLPFrtnWIc/Gchq/aLGxTGaMLuP9m1ln0eANaK9J 6dU7CtYrpMq7zN4P7CxXDaKyOJ4PxP8/aEwj61DUeBoJLanU5tjnYH7UDmWJEL2h 06A8cUgXGmjwGFtTAl1aoA3AoxxzsbxCGQ== -----END CERTIFICATE-----Generated at Mon Mar 2 11:24:52 2026 by rpki-client