$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/958BFD0A30D71BEC6B629726F338043C2F68CF2B.cer File: 958BFD0A30D71BEC6B629726F338043C2F68CF2B.cer (raw, json) Hash identifier: 0O4irElsz+EQa1mbHrlULe5rGFLnP/DglEdxN3Bb/Gs= Subject key identifier: 95:8B:FD:0A:30:D7:1B:EC:6B:62:97:26:F3:38:04:3C:2F:68:CF:2B Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 4F328103C1BE77FDD175F4691720F8112654E44D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/57319DF39F0B46AFA007E48BBA0E97F3CB928FF776CF660CF0B6A5697E937122/0/958BFD0A30D71BEC6B629726F338043C2F68CF2B.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/57319DF39F0B46AFA007E48BBA0E97F3CB928FF776CF660CF0B6A5697E937122/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Mon 06 Apr 2026 12:40:01 +0000 Certificate not after: Mon 05 Apr 2027 12:45:01 +0000 Subordinate resources: AS: 269835 IP: 45.185.188.0/22 IP: 2803:ef60::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Apr 2026 12:20:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:32:81:03:c1:be:77:fd:d1:75:f4:69:17:20:f8:11:26:54:e4:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Apr 6 12:40:01 2026 GMT Not After : Apr 5 12:45:01 2027 GMT Subject: CN=958BFD0A30D71BEC6B629726F338043C2F68CF2B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:2e:6d:9d:d5:99:fb:b2:c0:82:e8:0b:e9:a7: 84:3a:d9:f5:7a:7f:ea:95:d2:51:9a:1b:f1:91:8a: 6f:0d:5a:ca:56:3f:cf:6a:c2:ec:8c:34:a1:bc:41: da:6c:53:9c:62:33:45:8c:6c:7a:cd:a6:38:f8:08: d8:7c:28:2a:58:99:0b:c9:73:98:ae:30:a1:40:c4: 24:f4:2a:2c:f8:d6:ae:bc:29:a1:0c:a4:f2:81:f1: 62:6e:f3:04:4e:26:52:71:70:e7:40:c3:57:24:2b: e1:0f:b2:d4:57:d2:27:e5:ff:33:48:46:74:6f:8e: 0c:ef:c1:33:e0:dc:46:6d:1d:11:a2:ea:d6:78:04: e5:e5:1b:85:dc:f2:7a:7a:a8:dd:82:10:ac:77:d0: 21:6f:cf:94:a9:cf:8f:5b:25:3b:23:62:a4:71:96: 93:40:f0:1d:87:c6:ab:9b:9d:20:2b:73:47:65:82: c1:72:f0:05:29:9c:56:94:e2:67:90:58:db:db:02: 0f:63:56:b6:a8:bd:7c:6e:c9:07:bc:95:f1:fa:f2: d1:cf:ff:10:eb:49:55:d9:46:c3:0f:96:16:e2:75: 8f:6e:fc:04:5b:57:e8:d9:c1:46:08:83:3b:f3:d8: ba:46:bf:8b:50:0b:c1:4c:de:25:8a:b6:1e:0b:42: 88:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 95:8B:FD:0A:30:D7:1B:EC:6B:62:97:26:F3:38:04:3C:2F:68:CF:2B X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/57319DF39F0B46AFA007E48BBA0E97F3CB928FF776CF660CF0B6A5697E937122/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/57319DF39F0B46AFA007E48BBA0E97F3CB928FF776CF660CF0B6A5697E937122/0/958BFD0A30D71BEC6B629726F338043C2F68CF2B.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.185.188.0/22 IPv6: 2803:ef60::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 269835 Signature Algorithm: sha256WithRSAEncryption 87:1f:4a:06:62:48:16:4a:ba:5d:a0:2c:82:bf:6e:b3:2b:e5: af:83:81:d2:61:6a:ee:3c:3c:66:7f:c2:9f:67:34:eb:a3:db: 03:cf:a5:62:ff:d8:fd:d4:d0:9e:de:c3:4a:c4:c5:22:9f:e5: 35:55:3f:a1:af:48:cf:b1:3d:c7:50:5b:2f:de:ff:6a:1c:5d: 7c:64:11:e2:20:80:34:7d:01:c2:38:24:be:55:ab:d3:4e:be: 31:6a:56:a4:7a:f6:f2:e4:c6:a5:09:b2:e4:3b:22:0b:2e:b4: 21:36:4e:0f:3b:40:97:70:cf:73:37:a6:f6:ef:f0:a8:05:81: 14:da:75:6f:9d:71:58:04:45:f6:b1:1f:d0:04:1d:75:2a:f5: 7c:a9:df:37:a2:c6:f6:05:5b:60:c5:88:4b:55:de:e3:91:12: d8:d3:1a:d7:ff:d3:b8:cb:cf:02:a4:00:c0:15:94:19:87:86: dd:c4:a8:27:97:ab:ce:67:b0:fa:b4:c0:8f:9e:dc:8d:8c:e0: c5:4c:37:51:be:b1:0a:0e:4f:9b:55:97:0d:07:68:3c:2c:8e: 9c:0e:fa:37:45:f4:c8:5c:3a:ec:22:1f:22:7b:f7:d8:dd:0d: 9b:cb:3a:4e:36:fb:02:c0:a0:cf:54:87:f7:ae:36:93:95:ff: b7:21:17:1d -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUTzKBA8G+d/3RdfRpFyD4ESZU5E0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjA0MDYxMjQwMDFaFw0yNzA0MDUxMjQ1MDFaMDMxMTAvBgNV BAMTKDk1OEJGRDBBMzBENzFCRUM2QjYyOTcyNkYzMzgwNDNDMkY2OENGMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9Lm2d1Zn7ssCC6Avpp4Q62fV6 f+qV0lGaG/GRim8NWspWP89qwuyMNKG8QdpsU5xiM0WMbHrNpjj4CNh8KCpYmQvJ c5iuMKFAxCT0Kiz41q68KaEMpPKB8WJu8wROJlJxcOdAw1ckK+EPstRX0ifl/zNI RnRvjgzvwTPg3EZtHRGi6tZ4BOXlG4Xc8np6qN2CEKx30CFvz5Spz49bJTsjYqRx lpNA8B2HxqubnSArc0dlgsFy8AUpnFaU4meQWNvbAg9jVraovXxuyQe8lfH68tHP /xDrSVXZRsMPlhbidY9u/ARbV+jZwUYIgzvz2LpGv4tQC8FM3iWKth4LQohzAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSVi/0KMNcb7Gti lybzOAQ8L2jPKzAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNTczMTlERjM5RjBCNDZBRkEwMDdFNDhC QkEwRTk3RjNDQjkyOEZGNzc2Q0Y2NjBDRjBCNkE1Njk3RTkzNzEyMi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy81NzMxOURGMzlGMEI0NkFGQTAwN0U0OEJCQTBFOTdGM0NCOTI4RkY3NzZD RjY2MENGMEI2QTU2OTdFOTM3MTIyLzAvOTU4QkZEMEEzMEQ3MUJFQzZCNjI5NzI2 RjMzODA0M0MyRjY4Q0YyQi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLbm8MA0EAgAC MAcDBQAoA+9gMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQeCzANBgkqhkiG9w0B AQsFAAOCAQEAhx9KBmJIFkq6XaAsgr9usyvlr4OB0mFq7jw8Zn/Cn2c066PbA8+l Yv/Y/dTQnt7DSsTFIp/lNVU/oa9Iz7E9x1BbL97/ahxdfGQR4iCANH0BwjgkvlWr 006+MWpWpHr28uTGpQmy5DsiCy60ITZODztAl3DPczem9u/wqAWBFNp1b51xWARF 9rEf0AQddSr1fKnfN6LG9gVbYMWIS1Xe45ES2NMa1//TuMvPAqQAwBWUGYeG3cSo J5erzmew+rTAj57cjYzgxUw3Ub6xCg5Pm1WXDQdoPCyOnA76N0X0yFw67CIfInv3 2N0Nm8s6Tjb7AsCgz1SH9642k5X/tyEXHQ== -----END CERTIFICATE-----Generated at Fri Apr 17 11:25:14 2026 by rpki-client