$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/70AA6E04C5764B26B4887EF1675B2E9C4EF84863.cer File: 70AA6E04C5764B26B4887EF1675B2E9C4EF84863.cer (raw, json) Hash identifier: oWv2UOV3KtPEG0YwohA6ZrXVPYbSFyQdV5966TSpUCU= Subject key identifier: 70:AA:6E:04:C5:76:4B:26:B4:88:7E:F1:67:5B:2E:9C:4E:F8:48:63 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 6FD5D0F5F70BF2275A96CB6D57569A2ADDCF5CB5 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/91F567FEDE79E51A1AC53027E7D2AFF210379EB44F0F42B253ED4465152E33FD/0/70AA6E04C5764B26B4887EF1675B2E9C4EF84863.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/91F567FEDE79E51A1AC53027E7D2AFF210379EB44F0F42B253ED4465152E33FD/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 22:26:35 +0000 Certificate not after: Wed 27 Jan 2027 22:31:35 +0000 Subordinate resources: AS: 272937 IP: 45.172.179.0/24 IP: 2803:3190::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:d5:d0:f5:f7:0b:f2:27:5a:96:cb:6d:57:56:9a:2a:dd:cf:5c:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 22:26:35 2026 GMT Not After : Jan 27 22:31:35 2027 GMT Subject: CN=70AA6E04C5764B26B4887EF1675B2E9C4EF84863 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:23:59:83:db:a6:ee:cb:8e:7b:f8:08:1b:d9: 14:ed:36:27:5d:19:ae:d8:9d:27:8b:43:4d:a4:6a: 27:c1:e1:fe:eb:8c:bf:a9:5b:09:45:bd:a3:29:8b: 31:52:26:37:66:ad:83:43:96:2b:73:fb:8b:07:47: df:4f:57:b5:e6:3c:88:9d:6c:f4:71:f9:e5:0f:ab: ce:7f:36:77:86:64:67:7b:b9:4b:d2:9d:e6:c0:0a: 6b:a7:5d:55:2a:6c:7a:99:16:9c:cf:72:7c:c1:87: 40:b8:45:39:1f:d7:7e:1f:5c:a7:80:d8:8e:4f:8f: 28:92:0a:69:2f:cf:f0:4c:66:4c:74:29:ed:c3:10: a7:c4:d7:48:04:61:fb:02:cd:02:e8:2e:a2:11:4a: b6:f6:6d:76:e6:27:c4:dd:74:84:49:54:dc:4c:d9: 8c:d5:15:b3:5d:68:36:4c:6a:89:5c:67:c3:56:63: e6:f9:e8:60:71:c9:61:fb:ce:69:28:fc:2b:40:56: 8f:a0:df:91:65:c0:31:ac:22:7b:7e:8c:aa:64:2d: d8:b5:26:a0:a2:bd:b0:68:d4:0d:02:42:95:35:f7: 78:cb:9d:f7:f4:42:93:a9:a6:a8:3c:e1:a2:c8:2e: 63:2c:7a:50:45:72:15:1e:a8:77:23:4c:70:1c:f3: dd:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 70:AA:6E:04:C5:76:4B:26:B4:88:7E:F1:67:5B:2E:9C:4E:F8:48:63 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/91F567FEDE79E51A1AC53027E7D2AFF210379EB44F0F42B253ED4465152E33FD/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/91F567FEDE79E51A1AC53027E7D2AFF210379EB44F0F42B253ED4465152E33FD/0/70AA6E04C5764B26B4887EF1675B2E9C4EF84863.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.172.179.0/24 IPv6: 2803:3190::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 272937 Signature Algorithm: sha256WithRSAEncryption 32:d9:f7:64:d6:6d:9b:96:90:3f:05:0c:c2:0c:0e:48:d7:53: 9c:d5:6d:f2:82:ab:7b:45:df:71:66:39:67:dd:f6:50:b7:34: ba:9e:76:b6:0f:75:a3:dc:23:47:0c:66:64:ea:8a:fe:28:95: ae:72:35:69:5a:31:db:a0:97:f9:04:fd:92:5a:bb:6b:96:00: 1c:f9:ab:b9:49:58:31:1b:fe:1e:e9:d7:75:87:5a:f0:23:c8: 4d:ec:21:32:b7:49:24:26:e4:6d:46:ec:cc:68:0b:97:d0:8a: 1f:b4:85:78:f4:5a:32:e3:74:dc:00:26:cc:8a:1d:2c:a2:88: 8c:ad:96:9d:31:e5:f0:32:3e:59:76:bc:4e:85:f5:48:33:ce: 7a:05:3e:0c:36:c2:37:c3:77:26:f6:33:89:08:ed:4d:17:d1: 2f:08:0c:db:39:50:30:b5:9b:09:cd:7a:77:b4:90:6a:f9:57: 05:a2:26:4f:81:b2:75:fc:42:61:18:db:b0:41:8d:af:f2:fc: ff:7f:94:72:a2:08:26:54:7b:26:97:9f:36:fe:67:42:42:8d: 83:43:03:67:8a:ee:76:47:e8:67:6d:f4:64:37:ae:ea:0a:14: 6e:fa:60:4e:13:1f:ae:a8:b6:a3:68:30:65:77:f9:65:b7:b5: 30:66:ce:fe -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUb9XQ9fcL8idalsttV1aaKt3PXLUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgyMjI2MzVaFw0yNzAxMjcyMjMxMzVaMDMxMTAvBgNV BAMTKDcwQUE2RTA0QzU3NjRCMjZCNDg4N0VGMTY3NUIyRTlDNEVGODQ4NjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLI1mD26buy457+Agb2RTtNidd Ga7YnSeLQ02kaifB4f7rjL+pWwlFvaMpizFSJjdmrYNDlitz+4sHR99PV7XmPIid bPRx+eUPq85/NneGZGd7uUvSnebACmunXVUqbHqZFpzPcnzBh0C4RTkf134fXKeA 2I5PjyiSCmkvz/BMZkx0Ke3DEKfE10gEYfsCzQLoLqIRSrb2bXbmJ8TddIRJVNxM 2YzVFbNdaDZMaolcZ8NWY+b56GBxyWH7zmko/CtAVo+g35FlwDGsInt+jKpkLdi1 JqCivbBo1A0CQpU193jLnff0QpOppqg84aLILmMselBFchUeqHcjTHAc893TAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRwqm4ExXZLJrSI fvFnWy6cTvhIYzAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvOTFGNTY3RkVERTc5RTUxQTFBQzUzMDI3 RTdEMkFGRjIxMDM3OUVCNDRGMEY0MkIyNTNFRDQ0NjUxNTJFMzNGRC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy85MUY1NjdGRURFNzlFNTFBMUFDNTMwMjdFN0QyQUZGMjEwMzc5RUI0NEYw RjQyQjI1M0VENDQ2NTE1MkUzM0ZELzAvNzBBQTZFMDRDNTc2NEIyNkI0ODg3RUYx Njc1QjJFOUM0RUY4NDg2My5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQALayzMA0EAgAC MAcDBQAoAzGQMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQqKTANBgkqhkiG9w0B AQsFAAOCAQEAMtn3ZNZtm5aQPwUMwgwOSNdTnNVt8oKre0XfcWY5Z932ULc0up52 tg91o9wjRwxmZOqK/iiVrnI1aVox26CX+QT9klq7a5YAHPmruUlYMRv+HunXdYda 8CPITewhMrdJJCbkbUbszGgLl9CKH7SFePRaMuN03AAmzIodLKKIjK2WnTHl8DI+ WXa8ToX1SDPOegU+DDbCN8N3JvYziQjtTRfRLwgM2zlQMLWbCc16d7SQavlXBaIm T4GydfxCYRjbsEGNr/L8/3+UcqIIJlR7JpefNv5nQkKNg0MDZ4rudkfoZ230ZDeu 6goUbvpgThMfrqi2o2gwZXf5Zbe1MGbO/g== -----END CERTIFICATE-----Generated at Tue Mar 3 03:49:30 2026 by rpki-client