$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/680773B2A8DBC05A0245D6CD9E175BD7B10995DB.cer File: 680773B2A8DBC05A0245D6CD9E175BD7B10995DB.cer (raw, json) Hash identifier: kS+XgE7IDqFvGxn5CNekEqJSSOMjqu1eWkfOPDzIK50= Subject key identifier: 68:07:73:B2:A8:DB:C0:5A:02:45:D6:CD:9E:17:5B:D7:B1:09:95:DB Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 5CE1A0D4C95683E301140D32495995DC7A6481F1 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/DABB7A66D5FB0753317C4DF292AAF290C337C3463BFB2AC9D6A7BD391A89BD4C/0/680773B2A8DBC05A0245D6CD9E175BD7B10995DB.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/DABB7A66D5FB0753317C4DF292AAF290C337C3463BFB2AC9D6A7BD391A89BD4C/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 20:58:59 +0000 Certificate not after: Wed 27 Jan 2027 21:03:59 +0000 Subordinate resources: AS: 269895 IP: 45.191.232.0/22 IP: 2803:d4e0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:e1:a0:d4:c9:56:83:e3:01:14:0d:32:49:59:95:dc:7a:64:81:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 20:58:59 2026 GMT Not After : Jan 27 21:03:59 2027 GMT Subject: CN=680773B2A8DBC05A0245D6CD9E175BD7B10995DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c7:83:b4:a8:56:1f:31:c0:b6:f7:e7:02:6f: 72:35:30:a9:a9:c8:07:0e:a4:cc:4b:73:17:93:2b: 4e:da:62:ba:ad:6d:ad:02:bb:1b:a6:59:66:3b:b5: ab:cd:85:a3:fb:68:65:3d:af:34:cc:43:76:97:8f: 99:de:d7:19:c5:86:75:4b:20:b8:b1:a3:14:33:ff: 5a:e3:03:b0:e9:05:c1:97:3a:87:32:31:5b:5b:1e: 27:a4:6c:88:00:b9:0c:b6:6f:f0:56:81:24:cd:b0: ba:7b:c3:c8:05:2e:75:fd:7d:6a:e6:50:5d:c5:cf: 65:d6:c5:51:0d:df:c2:9b:81:ad:ad:c7:fa:8a:db: f3:db:0e:f0:35:f3:15:f9:50:ba:9e:0c:88:93:9a: 44:a9:36:75:0b:c5:43:99:4e:77:53:66:3c:8c:a3: 50:6c:97:f0:b7:1c:97:2d:06:fb:fe:2b:7f:de:9d: 0b:a3:1e:2f:33:76:b8:a0:24:f1:7e:f7:de:d0:9b: 8d:2d:f5:24:2b:44:3d:46:a7:e9:04:f5:30:db:c3: 84:54:44:e9:ce:cc:93:cf:77:85:64:96:66:39:1d: 29:d5:f7:b9:4f:3f:6a:a3:df:1d:71:07:58:b2:e3: 85:fc:6e:a6:49:d4:7b:96:57:bc:5a:7d:4c:5c:44: 2b:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 68:07:73:B2:A8:DB:C0:5A:02:45:D6:CD:9E:17:5B:D7:B1:09:95:DB X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/DABB7A66D5FB0753317C4DF292AAF290C337C3463BFB2AC9D6A7BD391A89BD4C/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/DABB7A66D5FB0753317C4DF292AAF290C337C3463BFB2AC9D6A7BD391A89BD4C/0/680773B2A8DBC05A0245D6CD9E175BD7B10995DB.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.191.232.0/22 IPv6: 2803:d4e0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 269895 Signature Algorithm: sha256WithRSAEncryption 84:85:00:55:84:01:4a:90:3d:1b:e1:8d:96:91:c8:37:66:c0: b2:ba:c6:8f:fa:f5:80:69:df:e1:fc:55:6d:7e:18:e5:b3:c1: 26:46:76:0c:7f:fe:9d:4a:32:0d:ad:f4:4d:b5:55:47:75:ce: f5:64:77:e2:38:79:68:54:1e:94:6a:bc:d6:fe:21:e6:85:a4: 8d:e5:45:62:45:ef:9a:5c:81:85:58:43:bc:2c:06:eb:90:7f: 87:20:91:f2:01:56:38:3e:82:d4:f7:82:fb:62:37:64:83:51: 7f:92:e2:27:2e:75:ff:ce:07:64:3f:b8:e2:08:0f:2a:f0:c3: 84:41:40:f9:0a:d3:15:ff:6a:f4:36:ba:3b:33:6a:cc:47:7f: 6c:ad:bb:4e:bc:ac:fc:f2:b6:7e:2d:d6:af:c9:b0:8d:be:91: 84:35:1e:63:5a:86:f1:d9:1b:a6:e2:d1:9b:a0:c9:9f:b3:e5: f4:35:15:7f:29:53:d3:ac:2f:f6:eb:3c:b1:63:22:6f:30:db: d7:b1:54:95:b3:cb:19:e1:80:15:f5:8d:e1:a0:fd:02:27:66: f0:6f:89:a0:e3:90:68:c8:8c:ad:c7:5c:c9:f5:c1:78:12:16: 0b:eb:09:33:fb:b4:b6:5b:46:43:91:b4:00:62:0e:90:d7:cb: d1:97:c3:d7 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUXOGg1MlWg+MBFA0ySVmV3HpkgfEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgyMDU4NTlaFw0yNzAxMjcyMTAzNTlaMDMxMTAvBgNV BAMTKDY4MDc3M0IyQThEQkMwNUEwMjQ1RDZDRDlFMTc1QkQ3QjEwOTk1REIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAx4O0qFYfMcC29+cCb3I1MKmp yAcOpMxLcxeTK07aYrqtba0CuxumWWY7tavNhaP7aGU9rzTMQ3aXj5ne1xnFhnVL ILixoxQz/1rjA7DpBcGXOocyMVtbHiekbIgAuQy2b/BWgSTNsLp7w8gFLnX9fWrm UF3Fz2XWxVEN38Kbga2tx/qK2/PbDvA18xX5ULqeDIiTmkSpNnULxUOZTndTZjyM o1Bsl/C3HJctBvv+K3/enQujHi8zdrigJPF+997Qm40t9SQrRD1Gp+kE9TDbw4RU ROnOzJPPd4VklmY5HSnV97lPP2qj3x1xB1iy44X8bqZJ1HuWV7xafUxcRCttAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRoB3OyqNvAWgJF 1s2eF1vXsQmV2zAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvREFCQjdBNjZENUZCMDc1MzMxN0M0REYy OTJBQUYyOTBDMzM3QzM0NjNCRkIyQUM5RDZBN0JEMzkxQTg5QkQ0Qy8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9EQUJCN0E2NkQ1RkIwNzUzMzE3QzRERjI5MkFBRjI5MEMzMzdDMzQ2M0JG QjJBQzlENkE3QkQzOTFBODlCRDRDLzAvNjgwNzczQjJBOERCQzA1QTAyNDVENkNE OUUxNzVCRDdCMTA5OTVEQi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLb/oMA0EAgAC MAcDBQAoA9TgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQeRzANBgkqhkiG9w0B AQsFAAOCAQEAhIUAVYQBSpA9G+GNlpHIN2bAsrrGj/r1gGnf4fxVbX4Y5bPBJkZ2 DH/+nUoyDa30TbVVR3XO9WR34jh5aFQelGq81v4h5oWkjeVFYkXvmlyBhVhDvCwG 65B/hyCR8gFWOD6C1PeC+2I3ZINRf5LiJy51/84HZD+44ggPKvDDhEFA+QrTFf9q 9Da6OzNqzEd/bK27Trys/PK2fi3Wr8mwjb6RhDUeY1qG8dkbpuLRm6DJn7Pl9DUV fylT06wv9us8sWMibzDb17FUlbPLGeGAFfWN4aD9Aidm8G+JoOOQaMiMrcdcyfXB eBIWC+sJM/u0tltGQ5G0AGIOkNfL0ZfD1w== -----END CERTIFICATE-----Generated at Mon Mar 2 14:34:00 2026 by rpki-client