$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/74AA4308C5C1EFC7C5C006F2CC6F5C7BE6021483.cer File: 74AA4308C5C1EFC7C5C006F2CC6F5C7BE6021483.cer (raw, json) Hash identifier: j2XS06oH23+Uhi5bwtNfYYkxjQD7nN/EGsmqKgAkDb0= Subject key identifier: 74:AA:43:08:C5:C1:EF:C7:C5:C0:06:F2:CC:6F:5C:7B:E6:02:14:83 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 65217D6BC408AD289E576D5E2C5477C1ACD97794 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/6E732833F41857046EBB8A6ED12B3D4652A7292DCF8898F1C2CD76DE48B54B04/0/74AA4308C5C1EFC7C5C006F2CC6F5C7BE6021483.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/6E732833F41857046EBB8A6ED12B3D4652A7292DCF8898F1C2CD76DE48B54B04/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Thu 29 Jan 2026 01:52:25 +0000 Certificate not after: Thu 28 Jan 2027 01:57:25 +0000 Subordinate resources: AS: 266781 IP: 45.233.140.0 -- 45.233.142.255 IP: 2803:df20::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 05 Mar 2026 11:41:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:21:7d:6b:c4:08:ad:28:9e:57:6d:5e:2c:54:77:c1:ac:d9:77:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 29 01:52:25 2026 GMT Not After : Jan 28 01:57:25 2027 GMT Subject: CN=74AA4308C5C1EFC7C5C006F2CC6F5C7BE6021483 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:54:d6:4c:20:79:e6:50:7f:5c:de:7d:8d:ef: a4:91:90:25:94:16:8a:ea:bc:35:6e:68:93:01:65: db:5a:c9:d3:a2:39:56:fe:d5:a3:d7:51:a1:9b:09: bc:c5:7c:0e:5f:f6:c3:67:29:67:41:20:ba:81:27: 38:6e:a1:9c:91:ef:87:a1:d6:49:d2:fe:c6:8f:97: 4f:74:03:79:e2:da:93:bb:c2:38:4d:92:a4:ea:35: e2:1c:ab:f5:52:4f:8c:38:80:60:e8:1e:65:6c:44: 58:96:e7:b6:16:eb:b5:c3:6d:28:97:c8:cf:62:9c: 41:a4:22:44:e3:1f:72:b3:48:df:a1:5e:06:39:94: 4a:7b:bd:d8:37:a8:af:91:93:b8:6a:d4:90:a2:bc: d0:be:10:bf:0e:1f:e9:e3:5b:8a:21:03:30:6a:63: ee:75:7c:da:64:7d:88:7b:3d:42:ba:5d:b5:00:d1: 16:a9:c6:3a:87:84:81:e2:39:85:79:02:99:96:0e: cd:ad:6f:4a:c0:56:8e:f5:75:0d:96:56:b3:ee:99: 7e:04:ed:0a:4a:c9:2f:83:24:e0:81:6a:3a:6b:37: eb:95:d0:f7:f7:04:b9:5b:6f:74:9b:c1:9f:68:8a: b3:25:95:0e:b7:94:ec:de:bf:7a:35:55:99:18:7b: 63:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 74:AA:43:08:C5:C1:EF:C7:C5:C0:06:F2:CC:6F:5C:7B:E6:02:14:83 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6E732833F41857046EBB8A6ED12B3D4652A7292DCF8898F1C2CD76DE48B54B04/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6E732833F41857046EBB8A6ED12B3D4652A7292DCF8898F1C2CD76DE48B54B04/0/74AA4308C5C1EFC7C5C006F2CC6F5C7BE6021483.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.233.140.0-45.233.142.255 IPv6: 2803:df20::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266781 Signature Algorithm: sha256WithRSAEncryption 7b:13:bb:43:9b:67:8f:66:d3:9f:8f:94:ed:a7:49:91:74:0a: 4f:62:19:2b:f9:38:7a:cd:e7:ed:fd:e9:71:2b:57:a6:df:c7: 93:9e:06:20:cc:36:b0:68:df:89:33:60:f6:a8:a7:1b:51:19: 0c:6d:18:bf:7f:a4:34:30:0b:f0:a2:6f:37:a4:df:39:a5:21: 61:e8:21:3f:f3:fa:af:b8:88:5a:b6:fe:cd:d7:13:0c:b0:74: 39:55:a1:c9:60:02:4c:79:d3:7f:c6:03:5b:72:91:f1:06:18: 77:86:d0:56:c3:82:5b:06:7c:b8:3f:12:2b:ba:14:08:99:51: 41:b4:91:3b:b8:0a:0b:57:63:00:b9:93:c4:6b:b4:e4:f3:6f: 54:47:3d:a0:eb:2a:81:1e:1c:40:c5:96:fa:7d:ef:89:b7:4f: a0:01:10:b4:83:0a:05:24:bc:c3:99:3f:aa:40:54:dc:93:32: 77:3c:cf:cb:bb:0a:c4:e2:b1:55:26:94:20:ab:20:8c:e6:0f: ff:fb:37:2c:9e:67:bd:14:e7:4f:82:2d:77:1b:21:70:be:c7: 57:ef:84:03:ba:a6:68:8a:f9:30:c0:23:a7:d1:ac:62:36:98: 95:c3:64:18:99:4d:66:da:61:ff:76:77:b5:5b:7a:b0:47:ab: f4:3b:e6:a4 -----BEGIN CERTIFICATE----- MIIGrTCCBZWgAwIBAgIUZSF9a8QIrSieV21eLFR3wazZd5QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjkwMTUyMjVaFw0yNzAxMjgwMTU3MjVaMDMxMTAvBgNV BAMTKDc0QUE0MzA4QzVDMUVGQzdDNUMwMDZGMkNDNkY1QzdCRTYwMjE0ODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhVNZMIHnmUH9c3n2N76SRkCWU ForqvDVuaJMBZdtaydOiOVb+1aPXUaGbCbzFfA5f9sNnKWdBILqBJzhuoZyR74eh 1knS/saPl090A3ni2pO7wjhNkqTqNeIcq/VST4w4gGDoHmVsRFiW57YW67XDbSiX yM9inEGkIkTjH3KzSN+hXgY5lEp7vdg3qK+Rk7hq1JCivNC+EL8OH+njW4ohAzBq Y+51fNpkfYh7PUK6XbUA0RapxjqHhIHiOYV5ApmWDs2tb0rAVo71dQ2WVrPumX4E 7QpKyS+DJOCBajprN+uV0Pf3BLlbb3SbwZ9oirMllQ63lOzev3o1VZkYe2MnAgMB AAGjggO3MIIDszAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR0qkMIxcHvx8XA BvLMb1x75gIUgzAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNkU3MzI4MzNGNDE4NTcwNDZFQkI4QTZF RDEyQjNENDY1MkE3MjkyRENGODg5OEYxQzJDRDc2REU0OEI1NEIwNC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy82RTczMjgzM0Y0MTg1NzA0NkVCQjhBNkVEMTJCM0Q0NjUyQTcyOTJEQ0Y4 ODk4RjFDMkNENzZERTQ4QjU0QjA0LzAvNzRBQTQzMDhDNUMxRUZDN0M1QzAwNkYy Q0M2RjVDN0JFNjAyMTQ4My5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTAUBAIAATAOMAwDBAIt6YwDBAAt 6Y4wDQQCAAIwBwMFACgD3yAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBIdMA0G CSqGSIb3DQEBCwUAA4IBAQB7E7tDm2ePZtOfj5Ttp0mRdApPYhkr+Th6zeft/elx K1em38eTngYgzDawaN+JM2D2qKcbURkMbRi/f6Q0MAvwom83pN85pSFh6CE/8/qv uIhatv7N1xMMsHQ5VaHJYAJMedN/xgNbcpHxBhh3htBWw4JbBny4PxIruhQImVFB tJE7uAoLV2MAuZPEa7Tk829URz2g6yqBHhxAxZb6fe+Jt0+gARC0gwoFJLzDmT+q QFTckzJ3PM/LuwrE4rFVJpQgqyCM5g//+zcsnme9FOdPgi13GyFwvsdX74QDuqZo ivkwwCOn0axiNpiVw2QYmU1m2mH/dne1W3qwR6v0O+ak -----END CERTIFICATE-----Generated at Mon Mar 2 10:24:50 2026 by rpki-client