$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C836840BDCD6AB6E82EDE5BA99AC306F51FB415.cer File: 9C836840BDCD6AB6E82EDE5BA99AC306F51FB415.cer (raw, json) Hash identifier: cm6Ow0/HbiuPqUfz/x0u6ei93esTP4Dq9PCL4aDRK8w= Subject key identifier: 9C:83:68:40:BD:CD:6A:B6:E8:2E:DE:5B:A9:9A:C3:06:F5:1F:B4:15 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 23E1D98E6556EF17DB84C71DB74B34BDA8D98BE5 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/8D54681FFF997F8040EFA8E1D35BCDC4E674F0823FBACCF06DB89AD7ADECB062/0/9C836840BDCD6AB6E82EDE5BA99AC306F51FB415.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/8D54681FFF997F8040EFA8E1D35BCDC4E674F0823FBACCF06DB89AD7ADECB062/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Thu 29 Jan 2026 03:09:20 +0000 Certificate not after: Thu 28 Jan 2027 03:14:20 +0000 Subordinate resources: AS: 266836 IP: 45.238.16.0/22 IP: 2803:2ca0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:e1:d9:8e:65:56:ef:17:db:84:c7:1d:b7:4b:34:bd:a8:d9:8b:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 29 03:09:20 2026 GMT Not After : Jan 28 03:14:20 2027 GMT Subject: CN=9C836840BDCD6AB6E82EDE5BA99AC306F51FB415 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b8:c3:a2:51:cf:50:79:ca:8b:d5:4f:b8:f1: aa:b5:e9:a7:a8:24:03:db:6e:31:dd:6a:b6:32:85: 53:89:8f:75:98:83:ba:dd:6e:92:89:37:b4:f9:13: ee:ba:ba:35:cb:99:d0:44:77:2b:8d:a9:fa:79:0c: f7:d7:b3:5e:53:15:18:34:d6:89:c0:c3:60:d0:2e: 3e:ce:2b:03:a0:77:17:cf:6c:a0:6a:a9:c3:a3:b9: e8:23:85:74:79:58:a6:4c:69:a4:41:dc:4c:67:d6: 89:39:65:24:d6:27:81:b0:b8:25:fc:d7:3e:ed:2e: 92:b3:b5:87:cb:76:e9:2c:86:78:1b:f9:04:94:51: c6:34:56:9e:e5:7a:c5:79:70:aa:9a:b7:8b:46:35: 9d:5a:11:10:ed:80:9a:bd:25:d1:b8:67:a5:4f:cd: dc:82:d3:65:ae:a4:8e:77:55:ac:28:3e:52:ca:40: 9e:82:c5:d3:7b:2a:da:c8:9c:77:6a:29:9d:9d:23: 83:12:e0:31:a0:47:e1:7b:c8:6e:e0:2a:97:91:e2: 79:db:5d:95:d2:06:b9:18:60:9f:c2:aa:71:0a:bb: d7:04:11:9f:d7:db:71:96:24:8d:f3:7b:c8:c1:d2: c4:0d:f4:50:3f:7c:4d:82:fa:f1:99:76:0d:41:5d: c6:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9C:83:68:40:BD:CD:6A:B6:E8:2E:DE:5B:A9:9A:C3:06:F5:1F:B4:15 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/8D54681FFF997F8040EFA8E1D35BCDC4E674F0823FBACCF06DB89AD7ADECB062/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/8D54681FFF997F8040EFA8E1D35BCDC4E674F0823FBACCF06DB89AD7ADECB062/0/9C836840BDCD6AB6E82EDE5BA99AC306F51FB415.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.238.16.0/22 IPv6: 2803:2ca0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266836 Signature Algorithm: sha256WithRSAEncryption 82:9a:a6:52:8d:80:08:3f:c7:58:d7:88:70:9e:21:2b:52:12: a2:74:44:ec:d7:ff:c1:2c:1b:b1:10:f2:64:14:de:46:11:47: 58:ab:48:09:7c:95:1a:45:fe:be:23:6b:74:55:89:01:4c:ed: 26:1f:20:d0:44:87:77:68:ae:e0:1e:2c:ad:fb:0f:6f:4f:60: 1d:0f:3b:b5:fc:ef:d4:68:34:73:42:a7:89:65:db:73:3f:23: 68:aa:af:1d:a6:ed:35:d3:f7:cb:d3:1d:76:d9:64:89:0f:94: a8:1f:82:bd:6e:89:55:92:25:85:25:d7:a1:77:ef:92:fd:99: f1:6e:41:0b:a1:ac:c1:e4:9a:f2:e3:03:cc:ce:01:4f:97:71: 61:b9:0c:5c:ad:68:cf:ba:ec:57:37:d5:42:c0:3f:b9:a1:45: 16:2f:1f:6f:04:60:8d:c4:44:8f:e6:2c:0a:a0:ac:47:7f:26: 94:6d:89:61:dc:d9:1e:7c:80:2c:e2:db:dd:c9:0c:26:66:b7: c3:8e:15:ad:9d:69:7a:f7:06:41:9f:36:5a:96:8e:a2:ef:9d: ee:53:ee:29:42:3b:d9:c7:7f:9b:f1:7b:84:eb:5b:94:93:ac: f1:e0:a3:50:cc:64:73:10:14:fe:a9:42:49:87:61:28:8a:21: 9a:eb:88:6f -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUI+HZjmVW7xfbhMcdt0s0vajZi+UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjkwMzA5MjBaFw0yNzAxMjgwMzE0MjBaMDMxMTAvBgNV BAMTKDlDODM2ODQwQkRDRDZBQjZFODJFREU1QkE5OUFDMzA2RjUxRkI0MTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+uMOiUc9QecqL1U+48aq16aeo JAPbbjHdarYyhVOJj3WYg7rdbpKJN7T5E+66ujXLmdBEdyuNqfp5DPfXs15TFRg0 1onAw2DQLj7OKwOgdxfPbKBqqcOjuegjhXR5WKZMaaRB3Exn1ok5ZSTWJ4GwuCX8 1z7tLpKztYfLdukshngb+QSUUcY0Vp7lesV5cKqat4tGNZ1aERDtgJq9JdG4Z6VP zdyC02WupI53VawoPlLKQJ6CxdN7KtrInHdqKZ2dI4MS4DGgR+F7yG7gKpeR4nnb XZXSBrkYYJ/CqnEKu9cEEZ/X23GWJI3ze8jB0sQN9FA/fE2C+vGZdg1BXcbdAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBScg2hAvc1qtugu 3lupmsMG9R+0FTAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvOEQ1NDY4MUZGRjk5N0Y4MDQwRUZBOEUx RDM1QkNEQzRFNjc0RjA4MjNGQkFDQ0YwNkRCODlBRDdBREVDQjA2Mi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy84RDU0NjgxRkZGOTk3RjgwNDBFRkE4RTFEMzVCQ0RDNEU2NzRGMDgyM0ZC QUNDRjA2REI4OUFEN0FERUNCMDYyLzAvOUM4MzY4NDBCRENENkFCNkU4MkVERTVC QTk5QUMzMDZGNTFGQjQxNS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLe4QMA0EAgAC MAcDBQAoAyygMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQSVDANBgkqhkiG9w0B AQsFAAOCAQEAgpqmUo2ACD/HWNeIcJ4hK1ISonRE7Nf/wSwbsRDyZBTeRhFHWKtI CXyVGkX+viNrdFWJAUztJh8g0ESHd2iu4B4srfsPb09gHQ87tfzv1Gg0c0KniWXb cz8jaKqvHabtNdP3y9MddtlkiQ+UqB+CvW6JVZIlhSXXoXfvkv2Z8W5BC6GsweSa 8uMDzM4BT5dxYbkMXK1oz7rsVzfVQsA/uaFFFi8fbwRgjcREj+YsCqCsR38mlG2J YdzZHnyALOLb3ckMJma3w44VrZ1pevcGQZ82WpaOou+d7lPuKUI72cd/m/F7hOtb lJOs8eCjUMxkcxAU/qlCSYdhKIohmuuIbw== -----END CERTIFICATE-----Generated at Mon Mar 2 16:34:23 2026 by rpki-client