$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CC2F3DAC2B04AE1FD97CA013DE5E8C75855B271.cer File: 6CC2F3DAC2B04AE1FD97CA013DE5E8C75855B271.cer (raw, json) Hash identifier: S9WEKAAU/carOP7a2L7dLYgL8AIi4X8opb5q6m7qOwY= Subject key identifier: 6C:C2:F3:DA:C2:B0:4A:E1:FD:97:CA:01:3D:E5:E8:C7:58:55:B2:71 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 169851636574C40D5D0DB985C7EDE256D064AA42 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/27D8C8490034D3FB51CF2396267B18A2138D1C66075122D4190AB5ED4C01D7EC/0/6CC2F3DAC2B04AE1FD97CA013DE5E8C75855B271.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/27D8C8490034D3FB51CF2396267B18A2138D1C66075122D4190AB5ED4C01D7EC/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Thu 26 Feb 2026 17:15:01 +0000 Certificate not after: Thu 25 Feb 2027 17:20:01 +0000 Subordinate resources: AS: 265559 IP: 45.164.236.0/22 IP: 2806:30d::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 05 Mar 2026 11:41:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:98:51:63:65:74:c4:0d:5d:0d:b9:85:c7:ed:e2:56:d0:64:aa:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Feb 26 17:15:01 2026 GMT Not After : Feb 25 17:20:01 2027 GMT Subject: CN=6CC2F3DAC2B04AE1FD97CA013DE5E8C75855B271 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:c9:35:bf:f6:51:7f:b6:bb:ff:78:53:14:de: 33:3a:2f:6f:c4:4f:63:32:67:26:ad:4f:28:bc:d2: 66:be:06:61:e9:0e:a1:04:11:b9:b1:8e:1f:cc:af: b2:40:21:75:38:67:58:90:28:2f:a3:c8:af:9e:12: f7:5a:fa:c2:36:da:06:06:cb:12:7a:66:85:1b:b7: 14:16:34:14:1e:cc:81:52:d7:b4:94:68:5d:3b:fc: fc:c7:f1:eb:45:8f:1f:17:26:fe:39:62:c3:7f:1e: 71:6a:89:70:a2:09:fd:09:38:b4:3e:55:dc:f3:56: dc:47:c3:b0:bb:53:2f:a4:61:03:9c:33:ee:b0:f0: 17:50:79:0a:2c:18:31:0d:99:ec:6e:2e:df:cf:f5: 3d:88:1f:3a:36:b7:97:ab:3d:31:61:64:32:11:52: 23:6d:85:1a:d0:7b:84:50:df:36:e2:ed:b4:c4:7f: 57:81:a1:a4:05:11:42:62:3b:66:93:b4:b8:a0:ba: 50:04:75:cc:e9:e7:e8:3e:3c:6c:64:4f:cb:2a:5d: c8:cb:9e:aa:a2:8f:e1:12:ea:ca:d2:4f:fb:67:86: e2:98:9e:20:16:8c:d8:34:b5:a8:3a:18:97:88:54: ca:04:ff:a8:46:26:bc:d4:8c:c5:54:73:cd:eb:c9: 73:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 6C:C2:F3:DA:C2:B0:4A:E1:FD:97:CA:01:3D:E5:E8:C7:58:55:B2:71 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/27D8C8490034D3FB51CF2396267B18A2138D1C66075122D4190AB5ED4C01D7EC/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/27D8C8490034D3FB51CF2396267B18A2138D1C66075122D4190AB5ED4C01D7EC/0/6CC2F3DAC2B04AE1FD97CA013DE5E8C75855B271.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.164.236.0/22 IPv6: 2806:30d::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265559 Signature Algorithm: sha256WithRSAEncryption 3e:43:f0:87:bb:e9:12:c5:2f:fb:91:68:11:8d:d2:e8:b4:ac: db:f4:58:37:44:25:76:ae:3b:ad:ab:09:11:2f:30:2a:0c:24: bf:81:66:53:75:fb:22:a6:4e:c0:3e:24:33:5f:cb:90:74:2a: 13:b0:18:91:31:4c:00:7c:24:39:d3:a8:34:c0:e7:30:55:6b: 32:54:49:5d:34:9f:ef:6e:98:20:f9:ba:ba:59:be:26:a2:f3: 92:8e:f8:d6:36:0a:aa:5b:9c:b4:6a:0c:46:c2:2d:80:a7:ec: ad:5c:cc:1a:d6:74:79:99:71:91:1d:fb:29:fd:d4:ec:0d:07: 71:78:d4:fc:04:2e:49:4b:4b:6f:be:fd:02:dd:aa:a5:e3:fb: 4d:58:9e:60:b6:e3:65:78:d9:4f:f4:b2:45:fe:1d:55:f6:3d: df:ca:8a:6c:9e:75:0d:d0:06:0a:bf:c5:09:e0:9f:b0:9d:8e: 1c:43:16:9c:21:f1:a6:f0:e4:45:6a:d8:d5:28:7c:a4:80:1a: 21:3c:0d:86:cc:59:53:67:94:88:9c:52:5a:37:a3:37:73:1e: 3c:ea:5d:ae:0b:d9:fd:d2:e6:7e:0a:47:50:da:e5:92:98:41: fc:c3:69:3e:5a:c3:33:bf:68:73:95:8c:f4:f2:f5:3c:41:78: 0e:c4:ac:64 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUFphRY2V0xA1dDbmFx+3iVtBkqkIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAyMjYxNzE1MDFaFw0yNzAyMjUxNzIwMDFaMDMxMTAvBgNV BAMTKDZDQzJGM0RBQzJCMDRBRTFGRDk3Q0EwMTNERTVFOEM3NTg1NUIyNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRyTW/9lF/trv/eFMU3jM6L2/E T2MyZyatTyi80ma+BmHpDqEEEbmxjh/Mr7JAIXU4Z1iQKC+jyK+eEvda+sI22gYG yxJ6ZoUbtxQWNBQezIFS17SUaF07/PzH8etFjx8XJv45YsN/HnFqiXCiCf0JOLQ+ VdzzVtxHw7C7Uy+kYQOcM+6w8BdQeQosGDENmexuLt/P9T2IHzo2t5erPTFhZDIR UiNthRrQe4RQ3zbi7bTEf1eBoaQFEUJiO2aTtLigulAEdczp5+g+PGxkT8sqXcjL nqqij+ES6srST/tnhuKYniAWjNg0tag6GJeIVMoE/6hGJrzUjMVUc83ryXMPAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRswvPawrBK4f2X ygE95ejHWFWycTAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMjdEOEM4NDkwMDM0RDNGQjUxQ0YyMzk2 MjY3QjE4QTIxMzhEMUM2NjA3NTEyMkQ0MTkwQUI1RUQ0QzAxRDdFQy8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8yN0Q4Qzg0OTAwMzREM0ZCNTFDRjIzOTYyNjdCMThBMjEzOEQxQzY2MDc1 MTIyRDQxOTBBQjVFRDRDMDFEN0VDLzAvNkNDMkYzREFDMkIwNEFFMUZEOTdDQTAx M0RFNUU4Qzc1ODU1QjI3MS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLaTsMA0EAgAC MAcDBQAoBgMNMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQNVzANBgkqhkiG9w0B AQsFAAOCAQEAPkPwh7vpEsUv+5FoEY3S6LSs2/RYN0Qldq47rasJES8wKgwkv4Fm U3X7IqZOwD4kM1/LkHQqE7AYkTFMAHwkOdOoNMDnMFVrMlRJXTSf726YIPm6ulm+ JqLzko741jYKqluctGoMRsItgKfsrVzMGtZ0eZlxkR37Kf3U7A0HcXjU/AQuSUtL b779At2qpeP7TVieYLbjZXjZT/SyRf4dVfY938qKbJ51DdAGCr/FCeCfsJ2OHEMW nCHxpvDkRWrY1Sh8pIAaITwNhsxZU2eUiJxSWjejN3MePOpdrgvZ/dLmfgpHUNrl kphB/MNpPlrDM79oc5WM9PL1PEF4DsSsZA== -----END CERTIFICATE-----Generated at Mon Mar 2 09:58:52 2026 by rpki-client