$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68FDDBE1BF749D2FC48F59317C6389C8186C4613.cer File: 68FDDBE1BF749D2FC48F59317C6389C8186C4613.cer (raw, json) Hash identifier: Hx75b2Cg9aaEerjcssmmnAfSBB3vY6pk2f6J+sszj+M= Subject key identifier: 68:FD:DB:E1:BF:74:9D:2F:C4:8F:59:31:7C:63:89:C8:18:6C:46:13 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 03DBF4DDE46B7737490F2BA7CB3DFED1660E0522 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/9B4E3744F24E907740AFF85CE9457F3FA8E3BF32359D4255C9B5FE81ED74EC44/0/68FDDBE1BF749D2FC48F59317C6389C8186C4613.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/9B4E3744F24E907740AFF85CE9457F3FA8E3BF32359D4255C9B5FE81ED74EC44/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 27 Jan 2026 17:50:43 +0000 Certificate not after: Tue 26 Jan 2027 17:55:43 +0000 Subordinate resources: AS: 264681 IP: 138.186.120.0/22 IP: 170.79.100.0/22 IP: 2803:4a40::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:db:f4:dd:e4:6b:77:37:49:0f:2b:a7:cb:3d:fe:d1:66:0e:05:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 27 17:50:43 2026 GMT Not After : Jan 26 17:55:43 2027 GMT Subject: CN=68FDDBE1BF749D2FC48F59317C6389C8186C4613 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:73:85:bd:85:90:8c:30:23:0a:e2:e1:7c:74: 30:16:e2:7e:a4:09:b9:0d:91:d5:05:84:66:b9:e7: e5:8b:25:f8:77:3e:74:1a:58:42:b7:b1:08:b0:6d: a8:c2:44:2c:c7:4c:20:89:df:e3:eb:af:2c:b7:f5: 94:e8:bd:22:aa:84:7b:5f:2b:9d:59:b6:b0:e0:f7: 6b:4b:b5:a0:51:ee:1b:e8:7f:ac:2a:af:6a:ec:35: 82:a5:84:a5:f9:17:dd:03:89:a2:58:ed:5e:68:1d: 85:b7:ec:fe:7d:c4:65:0e:45:84:a0:d2:2e:d5:44: a1:bf:35:87:40:7a:bd:a8:ca:94:79:b0:38:d0:88: 62:36:b4:4f:aa:05:80:9b:91:09:96:c6:43:0f:61: 4a:ba:18:e5:31:c9:22:34:47:f2:98:bd:23:bf:e5: 46:97:65:24:d0:f4:d8:47:a8:43:f6:bc:7e:a3:8b: 99:7e:00:25:32:c5:20:54:41:57:3d:3f:a8:d2:df: 57:da:1e:97:e4:ce:12:a0:de:34:cf:64:34:2d:3b: 2d:1c:de:35:8c:64:6b:a7:d2:5f:2d:95:70:02:c1: 0a:cd:f9:cf:4a:b1:57:6c:0b:32:c7:40:cd:de:fe: 03:49:6d:d8:be:66:1b:45:4a:fc:27:a3:8a:65:26: 78:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 68:FD:DB:E1:BF:74:9D:2F:C4:8F:59:31:7C:63:89:C8:18:6C:46:13 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/9B4E3744F24E907740AFF85CE9457F3FA8E3BF32359D4255C9B5FE81ED74EC44/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/9B4E3744F24E907740AFF85CE9457F3FA8E3BF32359D4255C9B5FE81ED74EC44/0/68FDDBE1BF749D2FC48F59317C6389C8186C4613.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.186.120.0/22 170.79.100.0/22 IPv6: 2803:4a40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264681 Signature Algorithm: sha256WithRSAEncryption 40:fd:3d:b3:d2:7d:8d:96:81:93:a1:a2:aa:5c:b8:76:36:7d: 6c:7a:54:63:36:f7:ec:54:ef:42:96:db:ba:e6:ce:7b:63:56: d6:d3:e8:65:51:40:35:b2:7a:f9:3d:24:b1:c6:d9:78:20:ac: e0:98:8b:fe:6a:35:1a:ba:90:32:43:e6:aa:a1:99:9a:de:79: 73:b1:b4:0a:ff:28:f8:41:74:d1:29:96:91:6d:cf:a6:c9:30: 5d:2b:a9:6b:75:3c:f8:7b:fb:59:cf:00:b6:94:62:b7:4e:f1: 7d:b0:f0:87:1a:db:14:47:be:04:f1:a0:94:3f:63:da:b9:37: 3b:b4:d5:b0:dd:a4:8f:ee:75:7f:69:3b:29:f9:13:86:03:40: 86:84:6b:9c:cc:1b:09:78:ea:b5:18:b6:81:fd:73:9f:60:ab: 12:99:3d:8a:c2:4d:4c:46:03:38:63:2b:64:5a:0e:c9:0c:d8: 5a:cf:a3:8e:a4:fa:b7:97:4f:b7:b0:8f:ac:4d:eb:8a:b2:56: c3:b2:5f:fc:19:61:81:08:28:90:6b:a7:3a:3b:dc:da:64:d7: b0:65:ca:a4:d5:2e:99:24:b1:11:32:6e:7d:c1:97:ba:5b:67: b6:d1:49:7f:38:05:b4:72:3b:05:ff:79:0c:f5:60:e3:5d:6a: f4:b5:ff:1d -----BEGIN CERTIFICATE----- MIIGqzCCBZOgAwIBAgIUA9v03eRrdzdJDyunyz3+0WYOBSIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjcxNzUwNDNaFw0yNzAxMjYxNzU1NDNaMDMxMTAvBgNV BAMTKDY4RkREQkUxQkY3NDlEMkZDNDhGNTkzMTdDNjM4OUM4MTg2QzQ2MTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxc4W9hZCMMCMK4uF8dDAW4n6k CbkNkdUFhGa55+WLJfh3PnQaWEK3sQiwbajCRCzHTCCJ3+Prryy39ZTovSKqhHtf K51ZtrDg92tLtaBR7hvof6wqr2rsNYKlhKX5F90DiaJY7V5oHYW37P59xGUORYSg 0i7VRKG/NYdAer2oypR5sDjQiGI2tE+qBYCbkQmWxkMPYUq6GOUxySI0R/KYvSO/ 5UaXZSTQ9NhHqEP2vH6ji5l+ACUyxSBUQVc9P6jS31faHpfkzhKg3jTPZDQtOy0c 3jWMZGun0l8tlXACwQrN+c9KsVdsCzLHQM3e/gNJbdi+ZhtFSvwno4plJnhnAgMB AAGjggO1MIIDsTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRo/dvhv3SdL8SP WTF8Y4nIGGxGEzAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvOUI0RTM3NDRGMjRFOTA3NzQwQUZGODVD RTk0NTdGM0ZBOEUzQkYzMjM1OUQ0MjU1QzlCNUZFODFFRDc0RUM0NC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy85QjRFMzc0NEYyNEU5MDc3NDBBRkY4NUNFOTQ1N0YzRkE4RTNCRjMyMzU5 RDQyNTVDOUI1RkU4MUVENzRFQzQ0LzAvNjhGRERCRTFCRjc0OUQyRkM0OEY1OTMx N0M2Mzg5QzgxODZDNDYxMy5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCirp4AwQCqk9k MA0EAgACMAcDBQAoA0pAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQJ6TANBgkq hkiG9w0BAQsFAAOCAQEAQP09s9J9jZaBk6Giqly4djZ9bHpUYzb37FTvQpbbuubO e2NW1tPoZVFANbJ6+T0kscbZeCCs4JiL/mo1GrqQMkPmqqGZmt55c7G0Cv8o+EF0 0SmWkW3PpskwXSupa3U8+Hv7Wc8AtpRit07xfbDwhxrbFEe+BPGglD9j2rk3O7TV sN2kj+51f2k7KfkThgNAhoRrnMwbCXjqtRi2gf1zn2CrEpk9isJNTEYDOGMrZFoO yQzYWs+jjqT6t5dPt7CPrE3rirJWw7Jf/BlhgQgokGunOjvc2mTXsGXKpNUumSSx ETJufcGXultnttFJfzgFtHI7Bf95DPVg411q9LX/HQ== -----END CERTIFICATE-----Generated at Mon Mar 2 14:09:31 2026 by rpki-client