$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6853E15E3106DDBC2E82BF3D8768DF539AE3FCD1.cer File: 6853E15E3106DDBC2E82BF3D8768DF539AE3FCD1.cer (raw, json) Hash identifier: lVZ+6Wf2JPXHo+7SUtXrk5Hp/MuCVFz2qkbSFHZN0ng= Subject key identifier: 68:53:E1:5E:31:06:DD:BC:2E:82:BF:3D:87:68:DF:53:9A:E3:FC:D1 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 42BE21F84AF0AC62CFE5FF6B7C363DA379709D7E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/AB685B5F3E0E50B92C73F3A290CFE52647E17C750B00C9D2B511CB17928A9F3E/0/6853E15E3106DDBC2E82BF3D8768DF539AE3FCD1.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/AB685B5F3E0E50B92C73F3A290CFE52647E17C750B00C9D2B511CB17928A9F3E/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 11 Feb 2026 16:40:03 +0000 Certificate not after: Wed 10 Feb 2027 16:45:03 +0000 Subordinate resources: AS: 265687 IP: 45.5.0.0/22 IP: 2803:31c0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 05 Mar 2026 11:41:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:be:21:f8:4a:f0:ac:62:cf:e5:ff:6b:7c:36:3d:a3:79:70:9d:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Feb 11 16:40:03 2026 GMT Not After : Feb 10 16:45:03 2027 GMT Subject: CN=6853E15E3106DDBC2E82BF3D8768DF539AE3FCD1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:42:32:32:32:85:78:2e:1c:01:0a:3b:39:60: 1f:f7:52:6c:a3:18:64:d5:86:59:9c:f4:de:d0:cf: c9:85:6f:80:1d:62:c5:ad:e5:60:0b:3d:59:09:41: 2c:91:76:08:9d:44:e2:91:10:f3:62:ad:e2:c9:81: 4b:9a:1d:5a:b5:35:fd:ee:c6:4c:28:48:b9:94:9c: 46:f9:04:5e:c6:93:99:48:49:9e:b4:52:78:28:5d: e7:44:40:be:09:88:66:e1:89:2c:b0:28:3b:ab:9e: e0:11:9a:f8:2d:03:b9:75:6d:c0:92:ef:f7:e7:a3: c4:9b:96:a7:a4:81:1a:5c:ad:d5:4d:4a:a1:66:3a: 2e:a8:57:08:8d:4c:99:3a:f1:43:6c:64:53:5a:d7: 69:0b:e6:75:df:03:02:95:ad:fc:89:15:a1:6e:76: 69:fb:c1:7f:80:71:59:b4:37:e7:d2:b1:af:9d:c8: 04:4b:64:03:87:f8:b4:97:51:b8:57:79:14:cd:59: 2f:2a:1e:c1:07:da:68:97:37:42:a3:82:b1:24:f3: 99:21:5b:fc:d4:77:f7:4a:b3:08:c6:af:dd:67:b9: 1e:96:f6:77:55:52:47:d6:48:3e:d5:6f:52:53:ce: 17:13:5f:2b:6a:71:54:73:c1:f8:24:c7:64:8b:9e: 42:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 68:53:E1:5E:31:06:DD:BC:2E:82:BF:3D:87:68:DF:53:9A:E3:FC:D1 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/AB685B5F3E0E50B92C73F3A290CFE52647E17C750B00C9D2B511CB17928A9F3E/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/AB685B5F3E0E50B92C73F3A290CFE52647E17C750B00C9D2B511CB17928A9F3E/0/6853E15E3106DDBC2E82BF3D8768DF539AE3FCD1.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.5.0.0/22 IPv6: 2803:31c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265687 Signature Algorithm: sha256WithRSAEncryption 17:c0:e8:5c:56:57:30:d9:f9:12:ef:a3:df:cd:d4:fd:13:6a: 81:5b:66:8f:8d:36:4f:c6:db:e2:7d:d5:1f:b7:15:ca:8d:33: a2:d5:ee:0c:1f:a8:24:89:a4:df:2d:5b:65:d4:3b:d8:fe:1d: 07:d6:81:f9:49:75:b0:f5:d2:1d:eb:77:f1:5c:1c:68:6f:9e: 4b:08:2a:d6:96:bf:13:52:5e:4b:03:6e:3d:80:09:e0:cc:3f: ea:58:ee:c2:71:4c:90:b6:4f:5b:b4:74:c4:59:17:46:30:ac: 93:46:cd:59:12:ee:3a:a2:36:5d:69:77:3b:05:ba:f5:6b:d6: 7c:6a:45:8f:b6:05:84:6f:74:ea:94:85:1e:92:93:9f:9e:d9: 83:7d:5a:58:60:ae:2a:7e:93:fb:9e:09:ed:5c:02:38:3d:17: 7c:51:e1:18:db:16:23:a8:67:94:25:ef:e1:d0:99:1e:87:e4: fe:8e:d6:76:b7:d6:b8:9f:3e:4d:40:23:5e:d2:e6:97:c0:20: 72:82:d2:f1:f9:5f:d2:02:b9:8a:84:78:1a:ba:db:98:d0:9a: a3:ad:61:bd:32:6d:ab:bf:0c:5b:3f:8d:62:f3:6d:08:72:60: 08:28:ee:96:b8:85:b3:5e:3c:e3:e7:d0:8b:35:10:68:f6:4b: 5e:e6:22:31 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUQr4h+ErwrGLP5f9rfDY9o3lwnX4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAyMTExNjQwMDNaFw0yNzAyMTAxNjQ1MDNaMDMxMTAvBgNV BAMTKDY4NTNFMTVFMzEwNkREQkMyRTgyQkYzRDg3NjhERjUzOUFFM0ZDRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUQjIyMoV4LhwBCjs5YB/3Umyj GGTVhlmc9N7Qz8mFb4AdYsWt5WALPVkJQSyRdgidROKREPNireLJgUuaHVq1Nf3u xkwoSLmUnEb5BF7Gk5lISZ60UngoXedEQL4JiGbhiSywKDurnuARmvgtA7l1bcCS 7/fno8SblqekgRpcrdVNSqFmOi6oVwiNTJk68UNsZFNa12kL5nXfAwKVrfyJFaFu dmn7wX+AcVm0N+fSsa+dyARLZAOH+LSXUbhXeRTNWS8qHsEH2miXN0KjgrEk85kh W/zUd/dKswjGr91nuR6W9ndVUkfWSD7Vb1JTzhcTXytqcVRzwfgkx2SLnkKlAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRoU+FeMQbdvC6C vz2HaN9TmuP80TAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQUI2ODVCNUYzRTBFNTBCOTJDNzNGM0Ey OTBDRkU1MjY0N0UxN0M3NTBCMDBDOUQyQjUxMUNCMTc5MjhBOUYzRS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9BQjY4NUI1RjNFMEU1MEI5MkM3M0YzQTI5MENGRTUyNjQ3RTE3Qzc1MEIw MEM5RDJCNTExQ0IxNzkyOEE5RjNFLzAvNjg1M0UxNUUzMTA2RERCQzJFODJCRjNE ODc2OERGNTM5QUUzRkNEMS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLQUAMA0EAgAC MAcDBQAoAzHAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQN1zANBgkqhkiG9w0B AQsFAAOCAQEAF8DoXFZXMNn5Eu+j383U/RNqgVtmj402T8bb4n3VH7cVyo0zotXu DB+oJImk3y1bZdQ72P4dB9aB+Ul1sPXSHet38VwcaG+eSwgq1pa/E1JeSwNuPYAJ 4Mw/6ljuwnFMkLZPW7R0xFkXRjCsk0bNWRLuOqI2XWl3OwW69WvWfGpFj7YFhG90 6pSFHpKTn57Zg31aWGCuKn6T+54J7VwCOD0XfFHhGNsWI6hnlCXv4dCZHofk/o7W drfWuJ8+TUAjXtLml8AgcoLS8flf0gK5ioR4GrrbmNCao61hvTJtq78MWz+NYvNt CHJgCCjulriFs1484+fQizUQaPZLXuYiMQ== -----END CERTIFICATE-----Generated at Mon Mar 2 11:05:36 2026 by rpki-client