$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8315FC764BE8B3A46CBE3B829CAC268BE1CB3313.cer File: 8315FC764BE8B3A46CBE3B829CAC268BE1CB3313.cer (raw, json) Hash identifier: a/22DkNeT7pcE9fZUe0jcJaysoECzNlOyEEeZeSO4nc= Subject key identifier: 83:15:FC:76:4B:E8:B3:A4:6C:BE:3B:82:9C:AC:26:8B:E1:CB:33:13 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 21950D3281351CA6EE5C662F6FC0A3330DEA6720 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/AC7F12AFE54DA2BE1076F2EE44F612EF6CE5297E5102438AC78BBF6BAC30EE55/0/8315FC764BE8B3A46CBE3B829CAC268BE1CB3313.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/AC7F12AFE54DA2BE1076F2EE44F612EF6CE5297E5102438AC78BBF6BAC30EE55/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 04:40:36 +0000 Certificate not after: Wed 27 Jan 2027 04:45:36 +0000 Subordinate resources: AS: 267681 IP: 45.162.168.0/22 IP: 2803:9ea0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:95:0d:32:81:35:1c:a6:ee:5c:66:2f:6f:c0:a3:33:0d:ea:67:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 04:40:36 2026 GMT Not After : Jan 27 04:45:36 2027 GMT Subject: CN=8315FC764BE8B3A46CBE3B829CAC268BE1CB3313 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:af:fd:75:ce:26:bc:7b:d0:c2:bc:4c:e9:ac: b3:96:46:6f:30:f3:63:29:17:f7:93:27:2d:b2:e9: 3b:2f:3c:ce:c3:d9:16:fb:1b:12:92:91:68:c5:c1: df:ed:02:7a:b1:d3:8a:e9:77:1c:a5:e0:7b:4e:eb: f8:6b:af:72:63:e2:60:b6:d8:0b:72:ad:b8:70:58: be:86:6c:05:0f:5a:a9:b6:42:bb:71:dd:b0:8c:e2: 23:88:d7:36:7b:49:6f:0c:73:23:86:21:f5:98:f4: be:d8:e9:84:4b:f7:7a:66:56:bb:03:42:84:48:51: d4:9b:78:bf:fe:8f:35:4a:ed:18:90:2d:0e:56:70: ae:ce:0a:97:78:c6:64:c3:eb:d9:40:97:bf:8e:be: 1c:fb:cd:65:8b:0e:48:3d:71:f3:f7:0d:8d:32:26: 65:80:8b:2b:9f:7a:3d:eb:c7:cd:7f:55:0b:1b:23: 40:61:92:b2:9d:34:21:d1:5b:50:1f:ac:e6:0f:f6: 1a:66:35:a7:ba:4e:f0:14:ac:37:d3:0b:cc:13:33: 8d:14:29:bb:ab:b2:29:8f:4d:58:d2:f8:49:4b:56: 05:02:4b:2e:94:9b:9b:19:b6:40:02:19:f2:cb:8e: c8:1b:d2:7a:e6:25:78:c4:e3:1e:6d:3f:87:75:b2: aa:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 83:15:FC:76:4B:E8:B3:A4:6C:BE:3B:82:9C:AC:26:8B:E1:CB:33:13 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/AC7F12AFE54DA2BE1076F2EE44F612EF6CE5297E5102438AC78BBF6BAC30EE55/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/AC7F12AFE54DA2BE1076F2EE44F612EF6CE5297E5102438AC78BBF6BAC30EE55/0/8315FC764BE8B3A46CBE3B829CAC268BE1CB3313.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.162.168.0/22 IPv6: 2803:9ea0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267681 Signature Algorithm: sha256WithRSAEncryption 76:5c:5a:3f:dd:3b:8e:ee:84:e7:bb:35:c7:d3:a8:5d:51:1c: 16:0f:ab:cd:a7:b8:a8:e7:48:bf:b6:cb:6a:23:54:e3:c8:e2: e6:da:b1:0f:9d:68:df:0a:06:df:46:f2:4e:64:4f:6f:74:29: 17:ca:1d:6a:06:c7:63:6e:ab:0b:70:c4:dd:fa:c8:8e:1e:44: 35:3c:77:d4:fb:fc:03:46:7d:f0:0e:96:a8:91:a6:4d:06:3c: d9:e5:51:2e:24:ee:77:d5:af:ab:11:72:82:fa:a3:21:6d:45: b2:5d:c9:60:83:fe:be:4c:37:bb:c5:02:49:fc:58:f7:76:33: c0:48:2d:30:e2:ee:07:9f:06:c0:a4:6a:58:e9:04:fd:94:e2: 8c:80:cf:6b:0d:69:00:eb:db:97:c3:81:f9:59:20:16:55:b0: 9e:33:7e:38:4e:bf:72:cd:e6:8f:88:be:7e:5b:9f:7c:07:3d: fe:52:d4:d3:cf:cf:e1:a4:b0:b4:9b:93:d2:91:ba:8b:70:c5: 71:62:39:f4:d5:12:7d:b7:a2:a9:29:d6:71:45:4d:37:55:4b: 5b:c9:35:ea:d4:dc:fd:c8:47:5f:88:c3:dc:6b:d3:5c:42:59: 4e:99:49:66:e6:71:eb:ba:7e:a2:8c:24:21:11:7e:b1:08:49: 81:cd:03:15 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUIZUNMoE1HKbuXGYvb8CjMw3qZyAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgwNDQwMzZaFw0yNzAxMjcwNDQ1MzZaMDMxMTAvBgNV BAMTKDgzMTVGQzc2NEJFOEIzQTQ2Q0JFM0I4MjlDQUMyNjhCRTFDQjMzMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChr/11zia8e9DCvEzprLOWRm8w 82MpF/eTJy2y6TsvPM7D2Rb7GxKSkWjFwd/tAnqx04rpdxyl4HtO6/hrr3Jj4mC2 2AtyrbhwWL6GbAUPWqm2Qrtx3bCM4iOI1zZ7SW8McyOGIfWY9L7Y6YRL93pmVrsD QoRIUdSbeL/+jzVK7RiQLQ5WcK7OCpd4xmTD69lAl7+Ovhz7zWWLDkg9cfP3DY0y JmWAiyufej3rx81/VQsbI0BhkrKdNCHRW1AfrOYP9hpmNae6TvAUrDfTC8wTM40U KbursimPTVjS+ElLVgUCSy6Um5sZtkACGfLLjsgb0nrmJXjE4x5tP4d1sqqNAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSDFfx2S+izpGy+ O4KcrCaL4cszEzAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQUM3RjEyQUZFNTREQTJCRTEwNzZGMkVF NDRGNjEyRUY2Q0U1Mjk3RTUxMDI0MzhBQzc4QkJGNkJBQzMwRUU1NS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9BQzdGMTJBRkU1NERBMkJFMTA3NkYyRUU0NEY2MTJFRjZDRTUyOTdFNTEw MjQzOEFDNzhCQkY2QkFDMzBFRTU1LzAvODMxNUZDNzY0QkU4QjNBNDZDQkUzQjgy OUNBQzI2OEJFMUNCMzMxMy5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLaKoMA0EAgAC MAcDBQAoA56gMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQVoTANBgkqhkiG9w0B AQsFAAOCAQEAdlxaP907ju6E57s1x9OoXVEcFg+rzae4qOdIv7bLaiNU48ji5tqx D51o3woG30byTmRPb3QpF8odagbHY26rC3DE3frIjh5ENTx31Pv8A0Z98A6WqJGm TQY82eVRLiTud9WvqxFygvqjIW1Fsl3JYIP+vkw3u8UCSfxY93YzwEgtMOLuB58G wKRqWOkE/ZTijIDPaw1pAOvbl8OB+VkgFlWwnjN+OE6/cs3mj4i+fluffAc9/lLU 08/P4aSwtJuT0pG6i3DFcWI59NUSfbeiqSnWcUVNN1VLW8k16tTc/chHX4jD3GvT XEJZTplJZuZx67p+oowkIRF+sQhJgc0DFQ== -----END CERTIFICATE-----Generated at Mon Mar 2 14:31:46 2026 by rpki-client